$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: 4A0ejww3/m3u8mmEzqT/ihnblYaYFZR4/r2YdMYtW1k= Subject key identifier: 08:DA:CF:72:0D:1C:62:A6:6A:5F:12:6A:35:AA:B3:0E:57:73:8A:6F Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: 5D Signing time: Sat 23 Nov 2024 05:02:34 +0000 Manifest this update: Sat 23 Nov 2024 05:02:34 +0000 Manifest next update: Sat 30 Nov 2024 05:02:34 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: uqyddbmrQxO2rNZkAKmJbB4pFnVJmYDIttC2H36LbJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: Nov 23 05:02:34 2024 GMT Not After : Nov 30 05:02:34 2024 GMT Subject: CN=674161ea-7266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:2d:67:34:fc:64:03:6f:01:94:1d:f1:2c: 7b:77:da:50:4d:c1:75:01:e2:79:4a:62:03:e7:08: f5:e0:ab:06:e5:b3:97:9f:aa:d3:8d:a8:ad:23:bd: 75:df:3b:ef:cc:96:09:4e:92:df:1b:3b:99:3b:25: 6d:65:a3:7a:8a:38:78:7c:98:d8:06:a0:dc:71:f2: 24:52:54:da:ef:cc:ca:1a:49:d6:7c:ac:79:bb:7c: 25:ad:78:f5:f0:a2:fe:2a:c9:49:e3:c9:ce:18:32: 40:75:7f:42:c6:6d:a8:d1:2f:a3:e6:52:01:6c:c1: 2f:fa:95:f4:08:30:8f:41:3f:67:21:40:2b:3c:61: d3:e5:47:8b:7f:0a:29:25:02:a9:24:b4:51:3b:92: 2e:45:ad:7b:d6:03:8a:67:88:cd:f1:04:b0:22:88: 78:44:81:f5:7a:b4:27:56:a4:16:a2:3c:70:f0:1e: b3:18:72:7d:89:09:be:f2:54:83:5d:ef:54:d8:2a: 71:c1:76:e7:cc:c4:5f:64:53:b5:7d:31:a8:21:f5: 36:67:b8:13:37:2a:43:df:7e:c5:e2:d8:08:d1:38: ec:b0:48:73:00:eb:a8:47:81:83:fa:f4:84:77:97: 1a:90:b3:67:86:09:45:74:9a:51:d0:20:08:70:49: fc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:CF:72:0D:1C:62:A6:6A:5F:12:6A:35:AA:B3:0E:57:73:8A:6F X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ea:58:4e:4c:b7:44:28:70:82:25:66:48:6d:a7:43:25:05: ed:87:b9:30:41:a9:50:0a:39:41:79:ed:72:8f:c6:b4:8d:f4: a6:d6:05:7f:d8:d3:80:c0:d5:c7:2f:7c:06:9b:27:6e:82:01: 3a:0e:1d:fe:d3:8e:f2:18:87:cc:9b:7f:6b:7a:dc:a5:48:0a: aa:50:10:3e:eb:3d:93:c5:32:05:c7:ad:0b:38:6c:a1:fc:bc: 6b:7b:c4:5d:0c:54:87:ab:fd:a4:a7:18:0d:a2:5e:7a:52:f3: f1:f9:5b:59:db:e6:c7:1b:15:54:d3:b1:22:eb:a3:ae:d7:60: 45:68:f9:73:48:18:de:ed:61:c6:e0:7a:bd:66:f7:ff:d4:a7: 36:19:2c:51:5a:91:b5:a9:34:b3:19:09:e9:ee:68:e9:6a:c1: ab:1f:e5:c2:9b:84:ad:56:e4:f2:0a:95:80:bf:d4:84:58:80: 58:62:10:82:83:5a:da:c8:31:9f:f5:38:5d:5a:59:51:48:bb: ec:e7:6e:51:59:52:68:92:18:80:f0:57:af:02:05:ff:15:45: bd:99:15:db:16:16:73:6b:ae:e5:6e:55:dd:e0:5b:04:3d:e1: fe:13:b8:56:38:50:3a:53:ad:0c:4b:ad:56:db:cc:8d:45:ab: a1:67:6c:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTNEMzExMC8GA1UEBRMoQzBGRjFGMzI2N0Q4QUQ5ODEyOEIzRTM5N0NDRkY3OTcz Qjc1MDhDRDAeFw0yNDExMjMwNTAyMzRaFw0yNDExMzAwNTAyMzRaMBgxFjAUBgNV BAMTDTY3NDE2MWVhLTcyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtuy1nNPxkA28BlB3xLHt32lBNwXUB4nlKYgPnCPXgqwbls5efqtONqK0jvXXf O+/MlglOkt8bO5k7JW1lo3qKOHh8mNgGoNxx8iRSVNrvzMoaSdZ8rHm7fCWtePXw ov4qyUnjyc4YMkB1f0LGbajRL6PmUgFswS/6lfQIMI9BP2chQCs8YdPlR4t/Cikl AqkktFE7ki5FrXvWA4pniM3xBLAiiHhEgfV6tCdWpBaiPHDwHrMYcn2JCb7yVINd 71TYKnHBdufMxF9kU7V9Magh9TZnuBM3KkPffsXi2AjROOywSHMA66hHgYP69IR3 lxqQs2eGCUV0mlHQIAhwSfydAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCNrPcg0c YqZqXxJqNaqzDldzim8wHwYDVR0jBBgwFoAUwP8fMmfYrZgSiz45fM/3lzt1CM0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1M0QzLzQyNTI5RjlFMUQ4 ODExRUZBM0M2NEE1RUM0RjlBRTAyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNN MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1A4Zk1tZllyWmdTaXo0NWZNXzNsenQxQ00wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 M0QzLzQyNTI5RjlFMUQ4ODExRUZBM0M2NEE1RUM0RjlBRTAyL3dQOGZNbWZZclpn U2l6NDVmTV8zbHp0MUNNMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHqWE5Mt0QocIIlZkhtp0MlBe2HuTBBqVAKOUF57XKPxrSN9KbWBX/Y 04DA1ccvfAabJ26CAToOHf7TjvIYh8ybf2t63KVICqpQED7rPZPFMgXHrQs4bKH8 vGt7xF0MVIer/aSnGA2iXnpS8/H5W1nb5scbFVTTsSLro67XYEVo+XNIGN7tYcbg er1m9//UpzYZLFFakbWpNLMZCenuaOlqwasf5cKbhK1W5PIKlYC/1IRYgFhiEIKD WtrIMZ/1OF1aWVFIu+znblFZUmiSGIDwV68CBf8VRb2ZFdsWFnNrruVuVd3gWwQ9 4f4TuFY4UDpTrQxLrVbbzI1Fq6FnbF0= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org