$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: TNUA4skLvL8MjFNmpdIi9nzMS3Hl1KzXsKs7eAMaGNg= Subject key identifier: 9C:9F:39:54:0E:3D:0F:6C:2A:07:94:7F:83:E0:6C:E1:35:48:85:44 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 05E1 Signing time: Wed 20 Nov 2024 22:16:09 +0000 Manifest this update: Wed 20 Nov 2024 22:16:09 +0000 Manifest next update: Wed 27 Nov 2024 22:16:09 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: 90kvzcUk/SfW7fCHIg6qC6kdp5Yp6wcLhyrDPGOVnes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Nov 20 22:16:09 2024 GMT Not After : Nov 27 22:16:09 2024 GMT Subject: CN=673e5fa9-ab87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b2:57:4a:f5:b4:51:50:81:20:e5:b5:b7:d0: 9c:f2:96:b9:f9:df:81:4f:2d:b6:81:6b:f8:41:46: 5e:2a:c8:7e:96:10:e0:6a:3d:60:67:0a:42:54:7f: 0f:b1:77:e5:ae:db:85:56:50:ee:14:f8:d2:c1:36: ab:1a:30:6e:e6:79:08:4d:0e:56:a7:5b:18:21:44: 40:3d:c1:98:0d:86:fd:4a:02:fc:62:bf:fa:a0:ae: e8:34:17:8e:95:fc:0f:ee:7c:6b:e0:2d:70:e4:94: 4d:ad:e9:57:de:b0:32:b0:dd:fa:30:e3:e8:a7:fc: b5:6f:af:79:e7:e8:60:ab:02:d1:49:a5:e2:58:80: 62:11:41:95:50:10:b4:f2:91:95:51:19:d1:4c:ca: e9:cd:3e:82:64:8b:1b:58:20:1f:26:bd:63:c4:02: 48:0e:f3:e9:d4:f2:27:21:f4:df:ed:c5:62:25:b3: 63:c0:96:89:51:fd:60:99:62:e2:0e:0f:03:25:f2: cf:b7:5a:4a:12:f0:72:3a:70:44:6a:b6:55:66:ce: 33:c1:09:8b:24:e5:f2:06:21:2a:64:e5:35:36:0e: 1c:aa:fd:4e:bf:62:a3:a5:51:00:bd:c8:99:21:47: ea:75:4f:75:b5:f0:e7:62:b8:0d:92:a0:96:c1:f3: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9F:39:54:0E:3D:0F:6C:2A:07:94:7F:83:E0:6C:E1:35:48:85:44 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a1:f7:65:f3:b2:23:3b:55:6a:63:70:c1:81:b1:24:32:f7: a7:2d:89:25:c7:31:32:f6:c4:8e:20:f3:85:dd:32:9c:b7:c6: 86:e4:a8:ee:08:6c:62:98:17:6b:5f:79:97:73:29:cc:07:d2: 35:18:6d:49:d7:f1:6c:67:47:59:07:82:6d:81:57:32:0f:41: 97:61:45:b8:b4:6d:85:a7:28:78:a5:4b:a4:29:70:46:76:70: 5d:9d:47:40:10:38:df:d3:3b:f6:63:8c:8d:ef:84:cf:3c:46: 33:f3:dc:dc:ef:7a:01:4c:ed:5a:69:bc:48:18:a6:0c:df:fd: 56:ce:b7:c2:1c:db:f3:da:3b:ad:66:6f:d7:ae:39:f5:5f:de: cb:b4:78:b6:05:3b:3d:9e:3d:58:ff:56:d4:70:32:95:00:86: 3a:db:73:01:2d:93:7d:81:f8:71:41:d1:bc:55:e1:18:22:20: 52:12:a9:a4:d2:a6:92:36:8a:c9:8a:a0:f6:56:87:16:c2:f3: b4:dc:50:e9:ed:33:80:59:5c:ae:dc:dc:ad:9e:7b:cb:cf:e9: 8a:e1:83:4d:ba:a6:b4:96:7e:d1:3c:96:94:44:ca:16:26:0a: eb:f8:a7:bd:a3:bb:5a:0c:b6:89:b0:06:ce:c3:8c:5b:b4:50: b3:74:a1:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjQxMTIwMjIxNjA5WhcNMjQxMTI3MjIxNjA5WjAYMRYwFAYD VQQDEw02NzNlNWZhOS1hYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+7JXSvW0UVCBIOW1t9Cc8pa5+d+BTy22gWv4QUZeKsh+lhDgaj1gZwpCVH8P sXflrtuFVlDuFPjSwTarGjBu5nkITQ5Wp1sYIURAPcGYDYb9SgL8Yr/6oK7oNBeO lfwP7nxr4C1w5JRNrelX3rAysN36MOPop/y1b6955+hgqwLRSaXiWIBiEUGVUBC0 8pGVURnRTMrpzT6CZIsbWCAfJr1jxAJIDvPp1PInIfTf7cViJbNjwJaJUf1gmWLi Dg8DJfLPt1pKEvByOnBEarZVZs4zwQmLJOXyBiEqZOU1Ng4cqv1Ov2KjpVEAvciZ IUfqdU91tfDnYrgNkqCWwfN/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyfOVQO PQ9sKgeUf4PgbOE1SIVEMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcofdl87IjO1VqY3DBgbEkMvenLYklxzEy9sSOIPOF3TKct8aG5Kju CGximBdrX3mXcynMB9I1GG1J1/FsZ0dZB4JtgVcyD0GXYUW4tG2Fpyh4pUukKXBG dnBdnUdAEDjf0zv2Y4yN74TPPEYz89zc73oBTO1aabxIGKYM3/1WzrfCHNvz2jut Zm/Xrjn1X97LtHi2BTs9nj1Y/1bUcDKVAIY623MBLZN9gfhxQdG8VeEYIiBSEqmk 0qaSNorJiqD2VocWwvO03FDp7TOAWVyu3NytnnvLz+mK4YNNuqa0ln7RPJaURMoW Jgrr+Ke9o7taDLaJsAbOw4xbtFCzdKFC -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:42 2024 by rpki-client on console-ams.rpki-client.org