$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: 03gsAn20oCWsk0mVBlyokCCRnbjwGvC0ThL3dJ1QhYM= Subject key identifier: BF:56:83:9C:9B:CE:8A:09:95:BA:32:85:C7:8B:0C:FE:A0:27:CD:43 Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: 99 Signing time: Sat 23 Nov 2024 04:24:26 +0000 Manifest this update: Sat 23 Nov 2024 04:24:26 +0000 Manifest next update: Sat 30 Nov 2024 04:24:26 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: NaQ2x9IZd7gyUYATYC+voa95oJH0R6+zNIHNHzVQwhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: Nov 23 04:24:26 2024 GMT Not After : Nov 30 04:24:26 2024 GMT Subject: CN=674158fa-6645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:81:f9:0f:52:7a:38:8c:0c:05:b9:71:97: d6:43:5e:1d:7f:19:80:50:42:bb:d9:15:63:37:49: 7d:ad:87:23:ed:57:5c:09:db:8e:85:bd:08:44:47: 42:fa:dd:b4:44:b0:89:7f:ac:ef:37:3b:14:f0:23: 72:82:03:46:68:7a:69:8f:26:36:c1:74:13:0a:bf: c3:4f:d8:c8:cc:46:d1:84:3b:82:71:3d:9d:49:d5: 94:15:c7:2b:fb:5c:89:cd:ca:0d:ec:d2:c8:11:21: db:c8:f0:8a:3e:d7:b2:27:09:fe:af:59:75:68:13: 9f:b2:ea:e9:2e:b2:37:71:94:56:1c:f7:97:dd:91: 4d:b9:25:d4:36:3a:c1:8f:5c:55:46:ff:f7:7d:e4: 39:f0:42:4b:91:91:72:b7:52:eb:61:a6:85:2f:7d: a0:4b:18:dc:80:c9:6e:a4:f9:64:f2:db:24:23:eb: 77:8e:cd:18:6b:52:30:1c:ac:ea:fd:0e:0f:91:7f: df:a0:9e:de:81:b0:d3:1c:94:6e:e1:98:bc:fb:f9: 58:dd:73:e3:c9:5b:a4:1d:f6:f7:8f:bb:15:64:62: 40:e8:ae:59:64:d6:0a:04:8a:98:c2:f0:06:b9:8a: cc:5a:23:03:3d:1b:50:1a:5e:93:4e:b1:01:f0:71: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:83:9C:9B:CE:8A:09:95:BA:32:85:C7:8B:0C:FE:A0:27:CD:43 X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b0:0f:0c:29:87:dc:92:73:9f:e7:58:f5:ba:73:aa:73:14: 93:03:25:60:b0:ab:52:f0:b6:0f:bc:26:7e:03:aa:02:0b:66: 84:6f:dc:d1:27:1f:58:e0:db:08:98:8e:74:87:1b:f2:68:60: 22:93:01:01:1b:20:6c:36:3c:cf:53:0e:19:f6:48:40:f7:85: bd:47:b0:40:83:15:72:6d:68:65:d5:73:50:88:a2:3f:b9:e1: fd:8b:86:09:f6:eb:d5:a0:b5:c2:88:5d:5f:3c:98:e5:a3:bb: b4:ec:fb:54:d1:0c:44:9d:0f:28:ab:c7:92:d1:70:29:62:87: 86:84:55:a8:f9:8d:9b:2b:af:b9:95:09:fb:2f:25:63:3c:be: 2b:55:cc:dd:20:fb:78:43:08:7e:dc:2c:49:6f:e5:f0:2d:63: 66:96:f5:7e:d2:ae:40:a5:46:eb:97:82:98:39:1a:64:d3:52: de:4d:16:f9:e6:b2:f1:8b:9c:8a:a6:76:05:53:07:ec:b7:ed: 93:3b:12:ed:f9:ff:0e:14:15:e0:cb:95:3d:cb:80:2c:6b:97: 1c:ee:2d:ff:70:fa:87:ef:d3:e5:f9:4b:3d:2a:43:8d:c9:7a: f3:3b:45:27:40:94:80:6f:08:37:87:28:08:61:36:5f:07:5d: b1:c3:ad:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz ODE4NTNGOUQwHhcNMjQxMTIzMDQyNDI2WhcNMjQxMTMwMDQyNDI2WjAYMRYwFAYD VQQDEw02NzQxNThmYS02NjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OCB+Q9SejiMDAW5cZfWQ14dfxmAUEK72RVjN0l9rYcj7VdcCduOhb0IREdC +t20RLCJf6zvNzsU8CNyggNGaHppjyY2wXQTCr/DT9jIzEbRhDuCcT2dSdWUFccr +1yJzcoN7NLIESHbyPCKPteyJwn+r1l1aBOfsurpLrI3cZRWHPeX3ZFNuSXUNjrB j1xVRv/3feQ58EJLkZFyt1LrYaaFL32gSxjcgMlupPlk8tskI+t3js0Ya1IwHKzq /Q4PkX/foJ7egbDTHJRu4Zi8+/lY3XPjyVukHfb3j7sVZGJA6K5ZZNYKBIqYwvAG uYrMWiMDPRtQGl6TTrEB8HGH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9Wg5yb zooJlboyhceLDP6gJ81DMB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli bTlERng3ZzFLN0U0R0ZQNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVsA8MKYfcknOf51j1unOqcxSTAyVgsKtS8LYPvCZ+A6oCC2aEb9zR Jx9Y4NsImI50hxvyaGAikwEBGyBsNjzPUw4Z9khA94W9R7BAgxVybWhl1XNQiKI/ ueH9i4YJ9uvVoLXCiF1fPJjlo7u07PtU0QxEnQ8oq8eS0XApYoeGhFWo+Y2bK6+5 lQn7LyVjPL4rVczdIPt4Qwh+3CxJb+XwLWNmlvV+0q5ApUbrl4KYORpk01LeTRb5 5rLxi5yKpnYFUwfst+2TOxLt+f8OFBXgy5U9y4Asa5cc7i3/cPqH79Pl+Us9KkON yXrzO0UnQJSAbwg3hygIYTZfB12xw63S -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org