$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: A3SSPALu8kK2fg73nlW2ExehX8ncbqN7hNHHO0GeNeM= Subject key identifier: 2D:DD:8F:AA:8D:B6:82:49:45:43:6D:DA:89:F7:07:C1:02:01:28:52 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 342B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 342B Signing time: Fri 22 Nov 2024 14:40:53 +0000 Manifest this update: Fri 22 Nov 2024 14:40:52 +0000 Manifest next update: Fri 29 Nov 2024 14:40:52 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: De8zZX4066OpSmeXZmnVYzv0i2yDZQhfwDoCginHegs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13355 (0x342b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Nov 22 14:40:52 2024 GMT Not After : Nov 29 14:40:52 2024 GMT Subject: CN=674097f5-fb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:1c:df:13:15:79:30:58:b4:39:6c:61:f0: 2e:a1:58:53:11:0c:26:66:34:83:80:01:21:5f:05: 6d:ca:02:7a:78:d2:34:e9:77:26:94:01:b2:68:82: fb:62:22:71:69:e6:e3:49:bd:4a:3f:1a:15:c3:52: b4:0b:85:19:fa:f8:21:1b:8b:4f:19:08:08:1a:07: c4:90:db:e2:ab:0c:24:1e:c4:8e:11:a2:1a:bf:9b: cb:b4:c3:63:c9:0d:f2:92:e7:7a:31:46:d8:cd:71: f7:65:ad:20:18:32:1a:33:9e:6a:28:85:1f:f2:4c: 3c:4b:b8:34:c7:00:48:50:40:8d:e7:8f:54:ac:fc: d0:b8:1e:6e:ba:6f:97:28:9a:cc:2f:6c:bb:d4:4e: 34:f3:53:4a:b3:71:2f:82:80:5c:4b:16:0e:a9:83: f5:71:a6:66:bb:18:75:9a:3a:f7:98:bd:86:f5:b1: a0:e9:b8:6f:37:58:ac:26:bb:68:2f:5c:46:e8:f0: 8d:9d:3f:f1:e5:e8:87:ef:ff:bd:c4:78:68:c1:b9: 4b:db:3d:8a:bd:c6:d9:d1:96:ec:19:47:2b:05:49: 26:2c:3b:f0:05:46:bb:35:6d:a1:c5:a8:68:6f:43: 01:c0:da:a2:1b:09:52:90:2c:a3:08:1a:4e:06:75: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DD:8F:AA:8D:B6:82:49:45:43:6D:DA:89:F7:07:C1:02:01:28:52 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:81:3e:7e:3c:22:06:cf:92:79:ec:50:7f:cf:30:60:98:95: be:64:c4:5c:4c:6f:7d:bb:0f:d4:1d:c3:66:3b:d7:d8:50:50: ef:24:28:c1:1a:c5:5c:ed:e1:bd:62:66:d1:ba:5a:1d:1d:ca: 52:88:b3:2f:17:93:15:0b:2a:ed:ff:fa:b1:0f:56:34:26:66: 69:68:bd:0b:02:1b:a7:9f:7b:d8:bc:25:eb:4b:a6:2d:39:ea: 69:cf:eb:2d:86:d5:b5:e0:9e:3b:c3:28:3f:42:00:f4:f5:39: 55:d6:b0:36:64:dd:75:90:af:80:32:97:e6:b4:fd:0e:de:8c: ad:c9:60:b9:8a:a9:ac:3e:46:8c:84:43:30:6d:a7:65:30:a2: ad:33:7b:24:75:8b:32:a8:2b:2f:18:51:c5:d9:89:31:87:40: b6:ba:43:6a:bd:91:00:a0:8b:7f:81:de:c0:2a:f5:67:59:35: 02:8f:1d:8e:91:01:c2:50:48:1a:b9:10:b3:f9:33:a6:13:f8: ec:59:7f:fe:49:d7:de:17:d2:64:e8:51:87:5c:ee:d9:c9:de: ce:3f:66:47:90:c8:35:b7:b6:9a:a7:08:7d:fe:75:c9:a0:59: ed:56:6e:62:cc:ea:b7:62:5c:fc:3f:55:da:bc:3d:98:2e:e8: ad:c5:52:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjQxMTIyMTQ0MDUyWhcNMjQxMTI5MTQ0MDUyWjAYMRYwFAYD VQQDEw02NzQwOTdmNS1mYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7Mc3xMVeTBYtDlsYfAuoVhTEQwmZjSDgAEhXwVtygJ6eNI06XcmlAGyaIL7 YiJxaebjSb1KPxoVw1K0C4UZ+vghG4tPGQgIGgfEkNviqwwkHsSOEaIav5vLtMNj yQ3ykud6MUbYzXH3Za0gGDIaM55qKIUf8kw8S7g0xwBIUECN549UrPzQuB5uum+X KJrML2y71E4081NKs3EvgoBcSxYOqYP1caZmuxh1mjr3mL2G9bGg6bhvN1isJrto L1xG6PCNnT/x5eiH7/+9xHhowblL2z2KvcbZ0ZbsGUcrBUkmLDvwBUa7NW2hxaho b0MBwNqiGwlSkCyjCBpOBnX8IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3dj6qN toJJRUNt2on3B8ECAShSMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNgT5+PCIGz5J57FB/zzBgmJW+ZMRcTG99uw/UHcNmO9fYUFDvJCjB GsVc7eG9YmbRulodHcpSiLMvF5MVCyrt//qxD1Y0JmZpaL0LAhunn3vYvCXrS6Yt Oeppz+sthtW14J47wyg/QgD09TlV1rA2ZN11kK+AMpfmtP0O3oytyWC5iqmsPkaM hEMwbadlMKKtM3skdYsyqCsvGFHF2Ykxh0C2ukNqvZEAoIt/gd7AKvVnWTUCjx2O kQHCUEgauRCz+TOmE/jsWX/+SdfeF9Jk6FGHXO7Zyd7OP2ZHkMg1t7aapwh9/nXJ oFntVm5izOq3Ylz8P1XavD2YLuitxVIz -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:36 2024 by rpki-client on console-fra.rpki-client.org