$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft File: iSLa1s2vuw1ZctFjcXErJPkxe-U.mft (raw, json) Hash identifier: x0/tcDGE4sMvNom2rsezW4EGLpIwIl9NVdIWK0v9k4w= Subject key identifier: 87:6C:A7:5B:2C:C6:16:36:B8:8B:E4:A5:C6:4E:7C:EE:2D:B2:2D:75 Authority key identifier: 89:22:DA:D6:CD:AF:BB:0D:59:72:D1:63:71:71:2B:24:F9:31:7B:E5 Certificate issuer: /CN=A91475BA/serialNumber=8922DAD6CDAFBB0D5972D16371712B24F9317BE5 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iSLa1s2vuw1ZctFjcXErJPkxe-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft Manifest number: 18 Signing time: Tue 22 Oct 2024 20:59:36 +0000 Manifest this update: Tue 22 Oct 2024 20:59:35 +0000 Manifest next update: Tue 29 Oct 2024 20:59:35 +0000 Files and hashes: 1: iSLa1s2vuw1ZctFjcXErJPkxe-U.crl (hash: BO0bUa+Xp6A7MPhCZpXDAYFDuZljUV3SK49aJyfBYUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.crl rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iSLa1s2vuw1ZctFjcXErJPkxe-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 20:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA/serialNumber=8922DAD6CDAFBB0D5972D16371712B24F9317BE5 Validity Not Before: Oct 22 20:59:35 2024 GMT Not After : Oct 29 20:59:35 2024 GMT Subject: CN=67181237-677e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:34:29:72:c3:a2:a6:f9:7e:43:de:ea:04: d2:25:e2:0d:4f:6c:57:f2:8d:90:c7:d6:8b:2a:eb: 87:06:04:e5:fe:5c:32:a4:1e:ff:c4:94:83:9e:a3: 5b:05:0c:75:b6:18:ff:0c:69:a8:ab:5e:70:0d:cc: 9f:0e:71:94:84:89:86:c9:f5:f7:c3:9e:f0:a8:eb: 77:e3:4a:a0:4e:95:62:c9:c8:4c:51:85:87:3d:d2: 51:77:34:1e:51:12:bd:e2:6e:4b:d4:5b:47:25:38: 89:e6:0a:d7:b9:a6:4e:34:81:b5:43:0b:f0:94:ac: 85:d3:40:c2:25:a5:df:40:d3:93:b6:34:29:b1:09: 9d:86:ab:a5:48:67:05:ec:4c:78:70:ef:08:dd:c0: 91:e1:9c:28:39:1b:8d:80:13:44:15:5f:4e:93:92: 29:88:ef:4a:90:62:c8:57:ca:7e:e9:a5:87:00:84: 1a:78:73:9b:9b:33:3f:98:c2:63:15:af:75:25:55: bb:d6:2f:dc:83:2d:8e:cb:c3:ad:72:9e:9d:1f:48: 72:0d:5c:71:8b:de:3c:f5:8c:53:02:c1:65:e1:65: 7a:e0:a7:34:fe:87:76:2d:22:1a:e4:9f:d4:22:42: d2:f6:1e:95:81:7c:e5:c5:3c:3d:f2:7b:21:9a:4a: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6C:A7:5B:2C:C6:16:36:B8:8B:E4:A5:C6:4E:7C:EE:2D:B2:2D:75 X509v3 Authority Key Identifier: keyid:89:22:DA:D6:CD:AF:BB:0D:59:72:D1:63:71:71:2B:24:F9:31:7B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iSLa1s2vuw1ZctFjcXErJPkxe-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:28:7f:7e:c3:19:2b:08:63:16:ea:21:6c:2f:4a:8a:c5:1a: 06:69:e7:5c:c3:83:cf:e9:7a:e2:5a:22:00:59:c2:62:fb:c2: 30:de:ab:4c:69:55:31:e7:e9:af:75:5f:36:49:f4:c3:46:5f: 1f:df:81:6a:37:2e:86:22:f3:ab:8b:5a:1a:c2:ed:f6:86:b9: 7e:44:d8:80:59:e1:90:c8:4d:ff:31:35:7e:b8:58:94:d6:fc: c4:46:00:16:68:07:12:e7:e3:58:35:eb:10:d1:ec:41:75:37: 76:e0:20:3f:e8:a7:ad:9a:a4:b9:13:7b:36:0f:51:75:c6:a4: 27:58:3e:14:9f:21:13:69:60:5f:db:77:12:bd:5e:6d:45:e1: 43:e6:9f:39:b7:ab:bd:29:b0:f6:b6:44:17:b7:47:b9:a8:12: 12:33:69:e4:97:d2:2b:9b:00:c8:e9:cb:18:aa:a0:0c:9c:bd: bb:3e:d9:e3:a7:5b:a8:b1:1e:e9:1e:7f:1f:5a:f9:d6:e6:1d: bb:ca:63:a0:dd:4b:e7:d9:2a:78:3e:57:48:d4:55:ca:2b:fc: f5:be:f5:3f:0e:03:22:48:53:98:af:7d:0e:13:34:e8:eb:68: 42:b6:2d:b0:75:ea:0c:e6:45:b0:d5:2b:1c:00:c5:47:33:98: f1:15:49:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzVCQTExMC8GA1UEBRMoODkyMkRBRDZDREFGQkIwRDU5NzJEMTYzNzE3MTJCMjRG OTMxN0JFNTAeFw0yNDEwMjIyMDU5MzVaFw0yNDEwMjkyMDU5MzVaMBgxFjAUBgNV BAMTDTY3MTgxMjM3LTY3N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvZzQpcsOipvl+Q97qBNIl4g1PbFfyjZDH1osq64cGBOX+XDKkHv/ElIOeo1sF DHW2GP8MaairXnANzJ8OcZSEiYbJ9ffDnvCo63fjSqBOlWLJyExRhYc90lF3NB5R Er3ibkvUW0clOInmCte5pk40gbVDC/CUrIXTQMIlpd9A05O2NCmxCZ2Gq6VIZwXs THhw7wjdwJHhnCg5G42AE0QVX06TkimI70qQYshXyn7ppYcAhBp4c5ubMz+YwmMV r3UlVbvWL9yDLY7Lw61ynp0fSHINXHGL3jz1jFMCwWXhZXrgpzT+h3YtIhrkn9Qi QtL2HpWBfOXFPD3yeyGaSh2JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh2ynWyzG Fja4i+Slxk587i2yLXUwHwYDVR0jBBgwFoAUiSLa1s2vuw1ZctFjcXErJPkxe+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NUJBLzJBNjI5NDQyNkM5 OTExRUZCODAzOUY1MkM0RjlBRTAyL2lTTGExczJ2dXcxWmN0RmpjWEVySlBreGUt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVNMYTFzMnZ1dzFaY3RGamNYRXJKUGt4ZS1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NUJBLzJBNjI5NDQyNkM5OTExRUZCODAzOUY1MkM0RjlBRTAyL2lTTGExczJ2dXcx WmN0RmpjWEVySlBreGUtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALcof37DGSsIYxbqIWwvSorFGgZp51zDg8/peuJaIgBZwmL7wjDeq0xp VTHn6a91XzZJ9MNGXx/fgWo3LoYi86uLWhrC7faGuX5E2IBZ4ZDITf8xNX64WJTW /MRGABZoBxLn41g16xDR7EF1N3bgID/op62apLkTezYPUXXGpCdYPhSfIRNpYF/b dxK9Xm1F4UPmnzm3q70psPa2RBe3R7moEhIzaeSX0iubAMjpyxiqoAycvbs+2eOn W6ixHukefx9a+dbmHbvKY6DdS+fZKng+V0jUVcor/PW+9T8OAyJIU5ivfQ4TNOjr aEK2LbB16gzmRbDVKxwAxUczmPEVSZ0= -----END CERTIFICATE-----Generated at Tue Oct 22 22:58:36 2024 by rpki-client on console-fra.rpki-client.org