$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: 0a+fJLoQONaeaeEj2TTzIl3fCCriKq7NE8aePwgtY3o= Subject key identifier: 13:BB:17:50:B0:E6:06:32:5A:92:80:D5:EF:96:25:01:06:61:B2:58 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 42 Signing time: Sat 23 Nov 2024 05:23:14 +0000 Manifest this update: Sat 23 Nov 2024 05:23:14 +0000 Manifest next update: Sat 30 Nov 2024 05:23:13 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: 6j9y7Y9UA96yMnivXm1zM6B5YqFSPa7kw4sDP2pDxzA=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: fBkj6NofFyoEUMOvmhd4OBJ51jCgJadVoM56dV8qP3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Nov 23 05:23:14 2024 GMT Not After : Nov 30 05:23:13 2024 GMT Subject: CN=674166c2-039e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:57:6f:07:53:27:6a:14:6e:46:69:3f:83: 43:ae:76:95:89:65:69:60:29:d6:9c:16:22:39:49: 5d:66:a0:fb:bb:5e:b4:5c:b1:d4:f4:80:d3:26:7f: c6:c5:94:2f:27:a2:a3:c5:1e:8f:38:d1:0b:03:48: a4:9d:f2:13:b3:4b:56:4e:6e:e7:da:2d:4d:c2:74: 50:87:57:e8:4c:88:05:ee:5f:db:8f:f6:ef:0f:1f: d7:c5:1c:1a:fb:1b:c8:05:eb:1f:04:2b:c5:65:b8: 17:ca:af:9a:1e:80:52:85:ae:a1:a6:16:5c:f8:ab: 86:99:71:5e:ed:6c:15:30:f2:c6:eb:43:32:59:42: 3e:b4:e5:5d:ef:ff:62:9d:34:f6:76:87:76:84:c1: ab:04:a4:96:d2:15:81:a4:49:ec:8a:07:b1:ce:6a: 83:96:37:96:be:84:3a:74:6a:f8:3d:f2:6c:47:47: 14:40:17:96:44:c6:0e:60:ad:6b:72:2d:d0:30:88: 82:68:85:b3:00:c4:07:db:d3:80:42:00:6b:5e:5d: 93:9a:54:ec:29:fe:b4:e5:67:ff:f4:a4:a7:bf:47: 1f:32:73:f1:29:0e:cd:de:a6:c1:78:ec:5c:5a:0a: 03:33:86:7e:53:a3:ce:4b:7d:e4:5d:b9:ab:03:96: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BB:17:50:B0:E6:06:32:5A:92:80:D5:EF:96:25:01:06:61:B2:58 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:6c:71:92:ac:f4:5f:6f:a1:28:b0:20:9e:57:5a:89:e7: a1:d7:14:93:2b:bf:8e:08:f3:9a:ce:1a:44:1b:ff:42:40:a2: fb:7f:84:ed:14:83:f7:c4:55:65:f9:5b:25:92:b6:1e:f6:6a: 9e:ab:97:0d:60:eb:73:7c:bd:ff:6e:a2:c6:18:53:18:e1:a6: 9d:8c:66:9e:25:db:68:48:05:4c:f8:1f:b9:c7:5b:58:4a:1f: 4f:12:6b:91:3a:91:06:65:c6:ac:9a:b2:ca:67:fc:55:a4:67: 95:1f:80:cd:9d:2a:b2:ee:10:0f:de:75:1a:9f:17:b7:9c:d9: 5c:a4:75:9f:91:16:99:e1:b6:3c:ce:a4:a4:42:ab:be:52:ec: c4:34:8b:e0:72:71:4e:48:9f:9d:4c:da:29:35:a7:54:45:64: 7e:a9:ee:dc:3f:09:d7:d0:29:17:d3:fe:b1:5f:f7:9e:14:69: 3f:fd:0c:6f:d8:bd:02:95:04:1b:44:de:ce:90:ec:8c:69:ef: fc:bf:f8:68:ed:a2:19:26:42:c6:6e:f9:a1:89:87:76:63:c4: 03:ed:fb:71:96:f4:48:b5:f0:5b:72:c5:52:ac:a3:3b:dd:b0: f8:f5:f7:1e:97:93:d8:42:57:75:8d:8e:f5:e5:93:5f:96:f2: 62:c3:6d:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODhGRjExMC8GA1UEBRMoMDFGMUVEMDhDREUyNzEzNkYzOTdEMDczNEFGMkEzNUU1 RDUyN0RENDAeFw0yNDExMjMwNTIzMTRaFw0yNDExMzAwNTIzMTNaMBgxFjAUBgNV BAMTDTY3NDE2NmMyLTAzOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmVVdvB1MnahRuRmk/g0OudpWJZWlgKdacFiI5SV1moPu7XrRcsdT0gNMmf8bF lC8noqPFHo840QsDSKSd8hOzS1ZObufaLU3CdFCHV+hMiAXuX9uP9u8PH9fFHBr7 G8gF6x8EK8VluBfKr5oegFKFrqGmFlz4q4aZcV7tbBUw8sbrQzJZQj605V3v/2Kd NPZ2h3aEwasEpJbSFYGkSeyKB7HOaoOWN5a+hDp0avg98mxHRxRAF5ZExg5grWty LdAwiIJohbMAxAfb04BCAGteXZOaVOwp/rTlZ//0pKe/Rx8yc/EpDs3epsF47Fxa CgMzhn5To85LfeRduasDltPdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE7sXULDm BjJakoDV75YlAQZhslgwHwYDVR0jBBgwFoAUAfHtCM3icTbzl9BzSvKjXl1SfdQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4OEZGL0JERUIyOTc0NDVD RDExRUY4RTgyNjQ0RUM0RjlBRTAyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2Zk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWZIdENNM2ljVGJ6bDlCelN2S2pYbDFTZmRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 OEZGL0JERUIyOTc0NDVDRDExRUY4RTgyNjQ0RUM0RjlBRTAyL0FmSHRDTTNpY1Ri emw5QnpTdktqWGwxU2ZkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADO/bHGSrPRfb6EosCCeV1qJ56HXFJMrv44I85rOGkQb/0JAovt/hO0U g/fEVWX5WyWSth72ap6rlw1g63N8vf9uosYYUxjhpp2MZp4l22hIBUz4H7nHW1hK H08Sa5E6kQZlxqyasspn/FWkZ5UfgM2dKrLuEA/edRqfF7ec2VykdZ+RFpnhtjzO pKRCq75S7MQ0i+BycU5In51M2ik1p1RFZH6p7tw/CdfQKRfT/rFf954UaT/9DG/Y vQKVBBtE3s6Q7Ixp7/y/+GjtohkmQsZu+aGJh3ZjxAPt+3GW9Ei18FtyxVKsozvd sPj19x6Xk9hCV3WNjvXlk1+W8mLDbRA= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org