$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft File: cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json) Hash identifier: da6+TkgyXH99xr8uhjBC6dAWKSMMOqzhZJD4tkphWPY= Subject key identifier: 1F:C0:E3:60:13:D0:BE:D4:75:BD:DC:B2:AE:30:6A:E5:40:A7:2C:33 Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 Certificate issuer: /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft Manifest number: 14 Signing time: Thu 21 Nov 2024 06:04:41 +0000 Manifest this update: Thu 21 Nov 2024 06:04:41 +0000 Manifest next update: Thu 28 Nov 2024 06:04:41 +0000 Files and hashes: 1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: 6HAVhU9y2JzGLQ8zzfdHXm2Al4ITb26W92WZckj7Ikw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Validity Not Before: Nov 21 06:04:41 2024 GMT Not After : Nov 28 06:04:41 2024 GMT Subject: CN=673ecd79-9e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:08:26:f3:0b:64:27:08:69:35:17:06:7c: 27:2d:16:fb:10:a7:cb:cb:08:c3:38:e1:60:4d:47: e6:dc:92:85:2d:de:e2:e6:36:25:b8:f9:52:0d:27: ec:6c:96:f9:f2:23:cf:e2:72:b1:97:fe:fa:ee:4d: 96:5d:43:11:85:1d:e8:49:5f:d5:3a:07:aa:62:8a: 23:b5:b5:0d:84:5b:2a:03:94:b3:40:e0:60:e4:24: 9a:48:7a:27:17:08:48:34:0e:8a:db:23:b8:b9:dc: f1:3a:80:49:a0:ed:1d:05:b6:d3:fa:ce:c7:ae:7e: 87:e7:39:54:4d:68:75:e0:f7:76:43:28:c4:ac:4d: b1:ab:54:6d:a2:f4:57:9e:8f:bd:b1:46:b7:bc:7b: 4c:e4:23:1a:56:d6:4b:c0:c8:3b:a4:a2:6c:32:e5: df:49:63:f7:b5:d6:ed:6b:0b:b6:e6:bd:2a:82:42: 06:1d:f0:47:dd:3d:b2:38:e7:e1:17:57:c6:a7:ec: 69:84:d3:7a:b4:b8:31:71:83:ec:34:b7:e5:5c:33: 93:93:27:ce:cf:c5:f6:14:5b:ec:d6:8d:81:da:1b: 5e:5e:04:7b:2c:66:68:96:1b:64:e0:0c:f4:00:00: 03:86:30:fa:10:51:05:2b:c4:1e:7c:cd:44:59:59: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C0:E3:60:13:D0:BE:D4:75:BD:DC:B2:AE:30:6A:E5:40:A7:2C:33 X509v3 Authority Key Identifier: keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5d:51:58:e2:0e:be:57:4a:0e:8d:6a:fc:0b:93:a4:8f:6c: 05:c2:99:c5:ec:50:4e:20:89:d1:82:48:03:61:da:d2:26:4c: 9c:9b:40:f5:b4:4d:eb:d1:7b:f2:b0:c7:64:21:fc:e6:1c:3f: c8:19:51:05:e7:d4:17:fb:8b:5d:d7:e4:71:6b:3a:4d:d5:45: b7:b1:e5:b4:65:54:20:36:2d:a1:56:27:b2:15:ad:bb:d6:77: 6f:2b:a2:9e:8a:a6:86:ab:b6:1d:7d:9e:13:c6:20:8d:66:fe: 17:e9:6b:2a:f8:20:c3:3e:ac:82:65:46:b0:e8:52:76:25:1c: b5:2b:4f:a3:7b:74:c8:c5:6d:57:fc:3e:7e:04:d3:34:91:1f: e6:73:ae:2c:34:e1:fb:10:45:dc:af:cd:13:3b:cc:44:dc:78: 98:d6:c6:20:4c:c4:a8:18:c9:90:e9:41:c6:c9:b9:7c:ac:7c: 96:1c:ee:de:50:43:18:57:54:53:5b:77:cc:1c:95:87:b4:e5: 3b:6d:f9:bb:11:d3:b0:0e:f1:a8:7c:c2:74:66:b0:72:65:69: 06:1e:18:ac:f7:5e:3d:43:37:29:4c:00:fb:35:eb:48:c0:b0: 64:82:45:aa:bc:5a:01:96:88:3f:af:b0:80:ff:20:8b:ee:c6: ef:8a:f7:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QUMzMDExMC8GA1UEBRMoNzJFODg2MEIyQjQ3MzM2NUJGMjYxNDIwRDA2QjU4QTgw NEMyOTZCMjAeFw0yNDExMjEwNjA0NDFaFw0yNDExMjgwNjA0NDFaMBgxFjAUBgNV BAMTDTY3M2VjZDc5LTllMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeKwgm8wtkJwhpNRcGfCctFvsQp8vLCMM44WBNR+bckoUt3uLmNiW4+VINJ+xs lvnyI8/icrGX/vruTZZdQxGFHehJX9U6B6piiiO1tQ2EWyoDlLNA4GDkJJpIeicX CEg0DorbI7i53PE6gEmg7R0FttP6zseufofnOVRNaHXg93ZDKMSsTbGrVG2i9Fee j72xRre8e0zkIxpW1kvAyDukomwy5d9JY/e11u1rC7bmvSqCQgYd8EfdPbI45+EX V8an7GmE03q0uDFxg+w0t+VcM5OTJ87PxfYUW+zWjYHaG15eBHssZmiWG2TgDPQA AAOGMPoQUQUrxB58zURZWULVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH8DjYBPQ vtR1vdyyrjBq5UCnLDMwHwYDVR0jBBgwFoAUcuiGCytHM2W/JhQg0GtYqATClrIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBQzMwLzc2MEQ2QTY0OEM2 MjExRUY5OTQ2NDA4NUM0RjlBRTAyL2N1aUdDeXRITTJXX0poUWcwR3RZcUFUQ2xy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3VpR0N5dEhNMldfSmhRZzBHdFlxQVRDbHJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB QzMwLzc2MEQ2QTY0OEM2MjExRUY5OTQ2NDA4NUM0RjlBRTAyL2N1aUdDeXRITTJX X0poUWcwR3RZcUFUQ2xySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHpdUVjiDr5XSg6NavwLk6SPbAXCmcXsUE4gidGCSANh2tImTJybQPW0 TevRe/Kwx2Qh/OYcP8gZUQXn1Bf7i13X5HFrOk3VRbex5bRlVCA2LaFWJ7IVrbvW d28rop6Kpoarth19nhPGII1m/hfpayr4IMM+rIJlRrDoUnYlHLUrT6N7dMjFbVf8 Pn4E0zSRH+Zzriw04fsQRdyvzRM7zETceJjWxiBMxKgYyZDpQcbJuXysfJYc7t5Q QxhXVFNbd8wclYe05Ttt+bsR07AO8ah8wnRmsHJlaQYeGKz3Xj1DNylMAPs160jA sGSCRaq8WgGWiD+vsID/IIvuxu+K9/c= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org