$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft File: lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft (raw, json) Hash identifier: HcO5Mw0Hp9HrYbHr/KWvJX/wd5eppX7RL9TZXy/vRsk= Subject key identifier: 11:B9:73:F9:CE:B7:BD:16:FC:40:4A:47:D4:90:D5:A2:04:DE:57:5A Authority key identifier: 94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3 Certificate issuer: /CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3 Certificate serial: 2658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft Manifest number: 3160 Signing time: Fri 22 Nov 2024 15:41:51 +0000 Manifest this update: Fri 22 Nov 2024 15:41:50 +0000 Manifest next update: Fri 29 Nov 2024 15:41:50 +0000 Files and hashes: 1: lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl (hash: LIMadch8Ar3+hRuBnkwyHZXmGC/OWWL8is4BlNgP/Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9816 (0x2658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3 Validity Not Before: Nov 22 15:41:50 2024 GMT Not After : Nov 29 15:41:50 2024 GMT Subject: CN=6740a63e-8353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:a6:20:14:5c:f1:a9:48:53:40:82:94:87: 1b:5f:4b:04:ec:e4:59:ac:e3:d6:ef:ae:35:9d:59: 84:d9:d7:3a:de:b0:be:a3:37:91:cb:97:87:82:29: f6:32:3e:da:23:c9:5a:86:05:b8:1d:af:6d:8b:49: d6:a3:9d:1a:82:37:c5:86:4b:b9:7f:fb:76:2b:d0: 57:35:75:97:64:72:6b:f3:d5:fd:8c:7f:aa:90:3b: f4:8d:ff:c4:c2:4b:77:4b:e8:92:82:1d:e3:94:c7: dc:99:77:03:f0:39:38:9f:98:18:a3:e9:87:fb:d8: 2d:81:15:ae:11:ff:32:5b:eb:b4:1d:07:46:f4:9e: ff:8d:19:5b:e4:97:6f:fc:64:12:8b:32:76:8b:d0: 49:45:5a:4a:7c:0b:62:5c:10:a3:cc:8a:25:c2:13: a6:c7:ae:d3:a3:fb:82:c2:ed:73:b2:06:9b:0c:33: 63:72:49:8f:2c:3f:63:dd:ac:b5:b1:8d:6f:50:ea: 5b:00:f5:46:c6:c1:a5:80:b7:82:ac:b1:bd:f2:5a: 26:3d:bd:1e:4a:2a:24:b9:9c:cf:1c:06:2e:62:14: c0:a4:44:e1:98:0e:34:02:77:d2:e7:6f:ef:69:60: 34:4a:1a:66:bf:a6:2a:27:c2:c0:6a:45:ce:a6:99: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:73:F9:CE:B7:BD:16:FC:40:4A:47:D4:90:D5:A2:04:DE:57:5A X509v3 Authority Key Identifier: keyid:94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:e1:29:cf:be:3c:83:33:f4:93:41:ae:16:38:5c:4d:06:63: 6f:5b:6d:ed:90:89:87:d0:31:22:9b:92:ea:09:28:ab:74:62: fe:13:5a:8d:0f:a0:01:8e:1f:20:a8:7f:97:5b:93:ee:a6:f9: 3d:1d:aa:1c:82:ae:cd:4e:d8:54:24:6e:59:c3:18:c7:f2:e1: b5:e3:18:73:2d:7f:fd:69:92:5a:a2:e3:14:3a:f3:d8:30:3c: 09:02:f3:9f:79:65:9e:b9:5a:59:95:f8:a9:6b:bc:dd:05:6f: 94:ed:15:6d:e5:a7:ad:0b:39:a3:e6:1d:2e:e1:fc:87:e3:e0: 29:43:d7:2f:be:5a:17:58:cc:57:01:d0:84:07:b9:e4:bd:cf: 9a:72:43:0e:4d:55:a2:66:78:00:d0:4b:01:af:c9:cb:f2:87: 3b:f9:b9:e6:49:d4:35:59:72:cc:77:c0:6b:c0:65:00:a3:c4: 71:88:da:66:31:1e:0b:cc:a2:34:e0:7f:51:70:4d:af:10:bc: be:87:66:b4:ec:33:8b:26:7f:bc:e7:05:8c:97:91:e1:83:ac: 55:d8:87:f8:d2:52:b2:3b:d2:bd:3e:ca:e6:06:81:4f:26:ea: 29:71:2b:f3:72:fc:1f:04:8a:a3:66:09:d5:58:41:8d:16:fa: c1:92:fe:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwQTMxMTAvBgNVBAUTKDk0QTE1QkM5OTE2QzVCMkNBMThFMzU5MDUxNTAxRTU0 NjQyQzA4RDMwHhcNMjQxMTIyMTU0MTUwWhcNMjQxMTI5MTU0MTUwWjAYMRYwFAYD VQQDEw02NzQwYTYzZS04MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaGmIBRc8alIU0CClIcbX0sE7ORZrOPW7641nVmE2dc63rC+ozeRy5eHgin2 Mj7aI8lahgW4Ha9ti0nWo50agjfFhku5f/t2K9BXNXWXZHJr89X9jH+qkDv0jf/E wkt3S+iSgh3jlMfcmXcD8Dk4n5gYo+mH+9gtgRWuEf8yW+u0HQdG9J7/jRlb5Jdv /GQSizJ2i9BJRVpKfAtiXBCjzIolwhOmx67To/uCwu1zsgabDDNjckmPLD9j3ay1 sY1vUOpbAPVGxsGlgLeCrLG98lomPb0eSiokuZzPHAYuYhTApEThmA40AnfS52/v aWA0Shpmv6YqJ8LAakXOppmDYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBG5c/nO t70W/EBKR9SQ1aIE3ldaMB8GA1UdIwQYMBaAFJShW8mRbFssoY41kFFQHlRkLAjT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBBMy83MUFERTFGRUQ4 MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5eWhqaldRVVZBZVZHUXND Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLRmJ5WkZzV3l5aGpqV1FVVkFlVkdRc0NOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBBMy83MUFERTFGRUQ4MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5 eWhqaldRVVZBZVZHUXNDTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDW4SnPvjyDM/STQa4WOFxNBmNvW23tkImH0DEim5LqCSirdGL+E1qN D6ABjh8gqH+XW5Pupvk9Haocgq7NTthUJG5ZwxjH8uG14xhzLX/9aZJaouMUOvPY MDwJAvOfeWWeuVpZlfipa7zdBW+U7RVt5aetCzmj5h0u4fyH4+ApQ9cvvloXWMxX AdCEB7nkvc+ackMOTVWiZngA0EsBr8nL8oc7+bnmSdQ1WXLMd8BrwGUAo8RxiNpm MR4LzKI04H9RcE2vELy+h2a07DOLJn+85wWMl5Hhg6xV2If40lKyO9K9PsrmBoFP JuopcSvzcvwfBIqjZgnVWEGNFvrBkv6H -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org