$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: S6jrUKgoBS24TjDsdEZiThOV0jpbQMMPOuou5U8Obls= Subject key identifier: FC:38:BE:94:1F:5F:9B:DC:12:91:AF:7F:6C:99:8E:E0:4B:6E:CF:F8 Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: 15 Signing time: Thu 21 Nov 2024 06:02:56 +0000 Manifest this update: Thu 21 Nov 2024 06:02:55 +0000 Manifest next update: Thu 28 Nov 2024 06:02:55 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: FIt/ZLCNPwPv3zVzIjnFBKiI19XNgfeUY34Pm/AlPv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: Nov 21 06:02:55 2024 GMT Not After : Nov 28 06:02:55 2024 GMT Subject: CN=673ecd0f-af4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:0c:e7:fa:a7:a9:cb:58:6f:12:c3:38:51: 88:3f:58:d6:f4:1b:6e:d7:68:1a:8f:76:df:25:7b: d8:54:27:ee:ac:52:26:f1:97:40:a6:4d:db:2b:2c: 6e:de:ff:c9:b1:72:3d:d7:bb:50:40:8e:74:b4:4a: b1:0c:c2:2d:4a:de:be:73:70:5d:fc:8f:1a:ca:c5: 36:cd:2c:9a:05:c6:02:5f:f3:db:8a:d5:d1:cb:36: 90:61:f0:e6:8f:8f:da:fb:48:98:37:63:0b:07:62: e3:c3:9d:27:6d:ae:05:00:ca:82:f1:4c:bc:09:e6: 49:3d:ae:05:e7:27:ec:48:d3:fe:5b:a9:57:8d:0f: ea:f3:b1:a3:da:45:06:b7:23:3d:92:72:2a:1e:a4: be:83:f9:f7:8c:cd:12:f0:a0:ef:c9:e9:cb:68:ce: a4:a9:a4:7f:81:26:14:4a:f7:9f:4c:2c:47:55:db: f0:85:6c:fc:8c:ed:ff:09:0d:b9:17:c3:3d:89:bd: 6d:70:20:68:fb:4b:76:b2:9a:5f:9b:71:35:12:02: a0:01:d5:20:d6:e9:4c:b9:7a:c0:7d:87:2f:03:56: ad:fe:42:78:c4:12:2f:e0:50:e9:7b:e3:51:3c:b4: 8a:bc:6c:66:99:b5:52:6b:03:33:e8:96:12:34:bf: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:38:BE:94:1F:5F:9B:DC:12:91:AF:7F:6C:99:8E:E0:4B:6E:CF:F8 X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f3:93:95:71:86:31:c2:62:fd:60:ec:8e:5d:c4:2f:20:e9: 2c:9e:10:ec:90:8a:64:c8:df:c4:9b:aa:7c:ad:d2:6f:2d:e2: 52:c4:93:99:ea:86:7a:1d:61:c2:ce:c2:0b:64:4a:13:af:96: 43:bc:70:cc:d8:9b:bd:ba:b8:78:0f:0b:95:70:51:01:54:03: a0:a1:6a:7d:7d:4b:42:bd:23:77:79:51:96:da:bd:80:d1:c2: 58:fb:23:21:a1:f8:67:e7:51:3e:0f:45:4b:80:00:01:e5:8a: 69:1e:07:8b:3c:1b:53:84:11:9e:e2:1c:4a:c2:2a:36:92:50: bf:38:eb:f7:a0:d8:4c:03:88:e2:29:85:d2:3d:a3:6f:30:f3: 1d:ee:2f:1a:72:9c:79:08:40:78:29:81:4c:91:c1:fd:cc:19: 3c:a4:25:71:22:b9:a3:02:15:65:4f:3d:7b:10:93:06:85:21: 52:09:d2:aa:41:0f:75:c9:1b:93:bb:a8:16:ad:25:4c:ac:33: 93:a4:69:0d:c4:31:3c:da:e8:be:2a:f1:d5:23:4f:c7:90:8f: 94:e0:01:fd:4a:b4:0e:5a:35:1e:b0:1e:49:24:2f:04:7c:90: d2:a3:7e:8b:ec:c4:a6:ac:ab:e8:2a:ac:47:df:53:96:7b:e9: b3:de:cf:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjdDNTExMC8GA1UEBRMoQTM5ODcxNDYyNkY4N0FDRUJFNUY2RkQwMUU1MDcwMTkx NUFBN0QxNTAeFw0yNDExMjEwNjAyNTVaFw0yNDExMjgwNjAyNTVaMBgxFjAUBgNV BAMTDTY3M2VjZDBmLWFmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3AAzn+qepy1hvEsM4UYg/WNb0G27XaBqPdt8le9hUJ+6sUibxl0CmTdsrLG7e /8mxcj3Xu1BAjnS0SrEMwi1K3r5zcF38jxrKxTbNLJoFxgJf89uK1dHLNpBh8OaP j9r7SJg3YwsHYuPDnSdtrgUAyoLxTLwJ5kk9rgXnJ+xI0/5bqVeND+rzsaPaRQa3 Iz2ScioepL6D+feMzRLwoO/J6ctozqSppH+BJhRK959MLEdV2/CFbPyM7f8JDbkX wz2JvW1wIGj7S3ayml+bcTUSAqAB1SDW6Uy5esB9hy8DVq3+QnjEEi/gUOl741E8 tIq8bGaZtVJrAzPolhI0v4y9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Di+lB9f m9wSka9/bJmO4Etuz/gwHwYDVR0jBBgwFoAUo5hxRib4es6+X2/QHlBwGRWqfRUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyN0M1L0Q5QUFCODJDOEFE OTExRUY5ODFDODI4M0M0RjlBRTAyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZS VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVoeFJpYjRlczYtWDJfUUhsQndHUldxZlJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy N0M1L0Q5QUFCODJDOEFEOTExRUY5ODFDODI4M0M0RjlBRTAyL281aHhSaWI0ZXM2 LVgyX1FIbEJ3R1JXcWZSVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3zk5VxhjHCYv1g7I5dxC8g6SyeEOyQimTI38Sbqnyt0m8t4lLEk5nq hnodYcLOwgtkShOvlkO8cMzYm726uHgPC5VwUQFUA6Chan19S0K9I3d5UZbavYDR wlj7IyGh+GfnUT4PRUuAAAHlimkeB4s8G1OEEZ7iHErCKjaSUL846/eg2EwDiOIp hdI9o28w8x3uLxpynHkIQHgpgUyRwf3MGTykJXEiuaMCFWVPPXsQkwaFIVIJ0qpB D3XJG5O7qBatJUysM5OkaQ3EMTza6L4q8dUjT8eQj5TgAf1KtA5aNR6wHkkkLwR8 kNKjfovsxKasq+gqrEffU5Z76bPez2c= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:07 2024 by rpki-client on console-ams.rpki-client.org