$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft File: ADiahleuCYgERy-OaNcF4u_b18A.mft (raw, json) Hash identifier: mdvm2+Ey9xMh/AIB0EsNbevGarCSCgO5AE202jm9oak= Subject key identifier: 2F:BD:D8:31:5D:E2:A6:3C:2E:32:49:35:B9:E9:5A:D6:99:8E:E4:18 Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 Certificate issuer: /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft Manifest number: 0CAF Signing time: Fri 22 Nov 2024 18:52:44 +0000 Manifest this update: Fri 22 Nov 2024 18:52:43 +0000 Manifest next update: Fri 29 Nov 2024 18:52:43 +0000 Files and hashes: 1: ADiahleuCYgERy-OaNcF4u_b18A.crl (hash: Ma1MJjSURMoOoBW0Kx1GtSSknc8YqgOuYs5XGAYS+BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Validity Not Before: Nov 22 18:52:43 2024 GMT Not After : Nov 29 18:52:43 2024 GMT Subject: CN=6740d2fc-8da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:9a:3b:53:a7:5d:ea:ca:f7:be:73:fc:82: e6:41:da:21:f0:bc:c5:4c:3c:31:1e:38:a6:f0:43: f1:d9:b0:96:54:af:ef:b7:08:48:93:b6:b4:7e:95: c8:40:97:8f:dd:1b:ec:95:2b:d1:0c:5c:5b:76:ba: 53:d0:ff:85:da:f1:25:cd:fd:c6:5f:97:29:54:4e: e9:39:c8:ff:d3:58:65:f5:2c:5b:85:ee:89:fa:e5: 21:43:1f:1a:3c:bd:1e:38:a8:70:56:8a:55:2b:20: 89:69:19:dd:0d:b0:17:75:e9:e4:e7:a2:cf:c8:a5: cb:85:a2:20:0a:08:ad:6f:d0:77:3e:ef:7a:43:47: b4:82:ca:e6:04:cc:ea:72:03:36:60:3b:9e:0a:e1: cd:73:22:39:3e:83:01:53:26:90:16:5b:12:1a:f0: 2e:3e:5a:43:07:b2:88:dd:cc:f6:d9:50:e7:08:6f: 75:dc:6b:e2:74:cc:5a:06:82:b9:1a:96:d4:93:5e: 58:ab:ec:d3:23:b0:b8:0f:f8:63:29:8b:57:65:3a: 89:32:5a:4d:6b:e4:7a:1b:27:3b:81:83:9f:10:de: 3f:45:57:c7:73:fd:f5:c6:cf:1e:b5:25:c9:c8:5f: 40:06:9f:fc:ae:c4:93:a2:f7:d2:d4:de:5f:c4:e1: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BD:D8:31:5D:E2:A6:3C:2E:32:49:35:B9:E9:5A:D6:99:8E:E4:18 X509v3 Authority Key Identifier: keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d4:7b:ff:d7:9e:53:ce:dc:86:3b:dd:96:80:c0:30:40:86: 8a:91:93:c9:10:ca:26:cf:98:76:f4:1a:f9:fc:98:c6:71:8e: fa:ea:d9:81:80:a0:da:db:5e:42:1e:67:f4:2d:c8:70:b2:6e: c7:2f:58:46:cd:9a:6e:f3:ad:56:f4:79:9a:ac:2b:c0:3e:52: 8b:1f:ea:3e:c7:90:70:43:6f:71:d3:cf:3f:84:f2:f2:45:9d: 7c:ff:79:3b:c4:44:99:65:77:b6:f5:66:dc:c1:75:59:9f:6b: 31:20:e9:3c:c4:87:4c:a0:6d:cf:96:0d:f4:2f:ab:33:51:7c: e1:1e:35:39:cf:2b:b1:04:b7:49:6b:1b:0b:58:2b:3c:77:d8: 9e:aa:a1:0e:43:02:44:02:3d:87:86:31:00:af:fa:f1:d1:ee: 2b:53:4e:84:b8:c3:f4:36:de:28:8f:4c:1c:53:ff:db:29:15: de:79:4a:77:74:aa:a4:da:fc:8a:86:b5:ef:7f:d2:62:6b:88: a2:97:45:57:4e:26:0a:68:ee:ba:2d:55:c9:8b:23:2d:f0:ff: 5f:52:e9:0f:16:60:57:d6:cf:e1:a5:5e:af:1a:01:c7:7a:b5: df:e2:eb:6b:a8:66:38:10:00:54:ec:ea:a7:ce:41:19:57:3d: 08:1c:fb:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDAwMzg5QTg2NTdBRTA5ODgwNDQ3MkY4RTY4RDcwNUUy RUZEQkQ3QzAwHhcNMjQxMTIyMTg1MjQzWhcNMjQxMTI5MTg1MjQzWjAYMRYwFAYD VQQDEw02NzQwZDJmYy04ZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWyaO1OnXerK975z/ILmQdoh8LzFTDwxHjim8EPx2bCWVK/vtwhIk7a0fpXI QJeP3RvslSvRDFxbdrpT0P+F2vElzf3GX5cpVE7pOcj/01hl9Sxbhe6J+uUhQx8a PL0eOKhwVopVKyCJaRndDbAXdenk56LPyKXLhaIgCgitb9B3Pu96Q0e0gsrmBMzq cgM2YDueCuHNcyI5PoMBUyaQFlsSGvAuPlpDB7KI3cz22VDnCG913GvidMxaBoK5 GpbUk15Yq+zTI7C4D/hjKYtXZTqJMlpNa+R6Gyc7gYOfEN4/RVfHc/31xs8etSXJ yF9ABp/8rsSTovfS1N5fxOHceQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+92DFd 4qY8LjJJNbnpWtaZjuQYMB8GA1UdIwQYMBaAFAA4moZXrgmIBEcvjmjXBeLv29fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZZ0VSeS1PYU5jRjR1X2Ix OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FEaWFobGV1Q1lnRVJ5LU9hTmNGNHVfYjE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZ Z0VSeS1PYU5jRjR1X2IxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz1Hv/155TztyGO92WgMAwQIaKkZPJEMomz5h29Br5/JjGcY766tmB gKDa215CHmf0Lchwsm7HL1hGzZpu861W9HmarCvAPlKLH+o+x5BwQ29x088/hPLy RZ18/3k7xESZZXe29WbcwXVZn2sxIOk8xIdMoG3Plg30L6szUXzhHjU5zyuxBLdJ axsLWCs8d9ieqqEOQwJEAj2HhjEAr/rx0e4rU06EuMP0Nt4oj0wcU//bKRXeeUp3 dKqk2vyKhrXvf9Jia4iil0VXTiYKaO66LVXJiyMt8P9fUukPFmBX1s/hpV6vGgHH erXf4utrqGY4EABU7OqnzkEZVz0IHPvE -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org