$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: taRWpjf0BcKoWPR6PTyEyo+RZn3O3o3GX2YWf7Gx/HI= Subject key identifier: F8:DB:C9:A4:F5:3C:9F:36:1C:30:27:1B:FC:00:F1:A7:E7:BE:78:27 Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 0802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 0802 Signing time: Fri 22 Nov 2024 20:35:32 +0000 Manifest this update: Fri 22 Nov 2024 20:35:31 +0000 Manifest next update: Fri 29 Nov 2024 20:35:31 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: UO5o0z23I7nnqjHIdgxHbpLW90pJA7z6cMv2Ak6aFzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Nov 22 20:35:31 2024 GMT Not After : Nov 29 20:35:31 2024 GMT Subject: CN=6740eb13-725e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:4b:73:2c:5f:e9:73:8e:66:6c:7d:8a:27: 21:e0:f3:68:bf:c0:e7:78:f5:99:aa:c8:d3:53:4f: 99:ec:70:21:5d:c7:69:f3:c1:08:46:89:08:3e:bf: 13:02:1a:4d:8d:c1:7e:51:fa:6a:0d:b2:74:29:64: 28:42:74:3b:b5:c7:fd:70:a8:40:ae:b1:cb:79:b0: db:64:e9:eb:32:a7:00:c1:0c:67:76:46:95:dc:2a: 4d:c7:71:ad:da:fc:9c:12:00:94:ca:43:a9:81:ae: 3c:7c:00:6d:96:44:3d:db:c8:fd:0c:9c:42:e1:9a: 6f:97:ae:49:b8:c1:dd:0b:dc:cc:7f:a7:4f:8c:1e: 04:8b:5e:8f:0e:74:03:31:d9:c7:55:49:75:15:87: dc:86:aa:52:aa:cf:d4:71:30:75:87:d5:71:1e:22: 7f:db:26:fe:69:48:52:a8:9c:bf:f2:d1:fc:d7:5e: 81:e8:46:b1:38:84:a3:00:09:aa:42:8d:0d:ac:3a: 35:8c:d7:88:75:a9:95:10:bc:90:8b:f0:5c:bb:89: f8:3a:ec:33:1a:2c:8d:30:80:66:7b:27:9f:87:54: e7:83:f3:cb:66:07:72:04:0c:d4:01:b2:07:a3:93: 49:36:98:af:20:d1:3f:44:a8:ce:df:5b:be:5c:56: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DB:C9:A4:F5:3C:9F:36:1C:30:27:1B:FC:00:F1:A7:E7:BE:78:27 X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:fb:2e:17:35:f9:09:ef:a6:5b:a0:9a:bb:b7:ef:8b:94:ef: 67:fb:ed:ad:71:76:67:66:f5:6d:e3:14:57:cf:2d:f0:40:51: 01:e2:2e:29:16:89:d6:55:04:7f:fe:c8:cb:f2:c0:c4:e3:d3: dc:62:a7:a1:42:2b:d1:a2:43:e6:8d:f7:cc:64:38:0b:9c:6c: ed:a9:f3:4b:2c:30:4a:69:a3:bb:ed:d6:8e:61:f5:83:a3:2c: 14:4d:7f:da:a4:14:ed:15:34:c8:13:1b:c3:59:de:d5:bc:7e: de:46:bc:e8:e9:e2:67:39:a3:dd:21:cd:bb:41:3b:27:d0:12: e7:ec:e7:50:b8:cb:16:96:84:94:be:75:99:15:89:d7:7c:ed: 0b:d6:23:3b:06:98:78:e6:0c:08:69:56:50:2a:a7:8b:68:81: 10:4b:0b:1a:6a:63:62:54:13:fd:c1:c9:e3:39:3e:ae:9f:76: 52:e6:ef:4d:4f:1d:bf:ad:39:c6:75:3f:c8:5c:73:16:1c:de: 7a:78:f2:78:38:0e:ff:f8:fc:4c:23:d8:15:e9:e0:7c:00:e6: d4:21:d2:3b:3e:67:2b:71:48:22:27:3a:3b:a0:d4:92:fc:18: f5:99:d4:8f:58:c2:74:af:14:cf:a4:a1:0f:72:e5:21:9c:22: 29:3b:63:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjQxMTIyMjAzNTMxWhcNMjQxMTI5MjAzNTMxWjAYMRYwFAYD VQQDEw02NzQwZWIxMy03MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMlLcyxf6XOOZmx9iich4PNov8DnePWZqsjTU0+Z7HAhXcdp88EIRokIPr8T AhpNjcF+UfpqDbJ0KWQoQnQ7tcf9cKhArrHLebDbZOnrMqcAwQxndkaV3CpNx3Gt 2vycEgCUykOpga48fABtlkQ928j9DJxC4Zpvl65JuMHdC9zMf6dPjB4Ei16PDnQD MdnHVUl1FYfchqpSqs/UcTB1h9VxHiJ/2yb+aUhSqJy/8tH8116B6EaxOISjAAmq Qo0NrDo1jNeIdamVELyQi/Bcu4n4OuwzGiyNMIBmeyefh1Tng/PLZgdyBAzUAbIH o5NJNpivINE/RKjO31u+XFYCAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjbyaT1 PJ82HDAnG/wA8afnvngnMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDi+y4XNfkJ76ZboJq7t++LlO9n++2tcXZnZvVt4xRXzy3wQFEB4i4p FonWVQR//sjL8sDE49PcYqehQivRokPmjffMZDgLnGztqfNLLDBKaaO77daOYfWD oywUTX/apBTtFTTIExvDWd7VvH7eRrzo6eJnOaPdIc27QTsn0BLn7OdQuMsWloSU vnWZFYnXfO0L1iM7Bph45gwIaVZQKqeLaIEQSwsaamNiVBP9wcnjOT6un3ZS5u9N Tx2/rTnGdT/IXHMWHN56ePJ4OA7/+PxMI9gV6eB8AObUIdI7PmcrcUgiJzo7oNSS /Bj1mdSPWMJ0rxTPpKEPcuUhnCIpO2Ny -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org