$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft File: mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json) Hash identifier: kQMvwGX+gZmex3RVZPcYy9pqFoV08glY/eqayBbJDa4= Subject key identifier: 30:FE:B8:A8:5A:EC:E5:97:AB:C2:E2:DA:BB:C8:BD:EB:DE:BF:03:35 Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3 Certificate issuer: /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft Manifest number: 02 Signing time: Thu 21 Nov 2024 12:16:10 +0000 Manifest this update: Thu 21 Nov 2024 12:16:09 +0000 Manifest next update: Thu 28 Nov 2024 12:16:09 +0000 Files and hashes: 1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: /EMTh31DHcH85XgZSVf1pJSmY9EChxqJD50O6VG5Hmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3 Validity Not Before: Nov 21 12:16:09 2024 GMT Not After : Nov 28 12:16:09 2024 GMT Subject: CN=673f2489-fd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:54:e1:ab:1a:ee:3e:f4:05:cd:33:97:ec: 79:95:cf:c1:db:cd:6a:4a:36:18:4e:61:e4:42:90: 2f:50:d2:5f:43:89:00:66:cd:55:5e:a1:0b:ae:b1: 22:c3:b8:11:b8:f6:8c:f4:c1:d5:70:f4:4c:fa:39: 7a:36:2b:f2:82:a6:f8:32:18:dc:f7:5b:37:b1:cb: 11:5f:3f:85:38:8b:7e:8a:60:ec:22:dd:55:91:86: 89:aa:38:d9:9a:00:ff:cc:64:72:ed:6c:64:97:8f: 8d:81:69:4e:08:09:d0:a6:8e:34:a8:f4:d7:e4:28: cf:52:10:c9:cc:05:15:69:c2:cf:39:59:a7:0f:85: 8a:3b:cd:4e:c1:88:36:7c:3d:8d:4a:29:fa:51:5b: f0:5e:1c:40:99:24:c9:16:02:ab:6d:ae:1d:d2:49: 97:24:f1:63:f1:26:50:94:60:d1:11:ac:64:0f:af: 87:6e:07:52:5e:13:20:ff:e5:e7:f8:7f:96:78:46: 7d:4a:80:4e:c1:d3:3b:00:42:ed:3c:3d:bb:b1:53: f0:d4:d7:c8:02:b4:39:68:77:2f:d0:6d:1c:6b:f6: 7d:01:2f:b6:35:b0:5c:98:73:d0:81:e5:6b:37:b4: c6:41:4a:76:a4:be:ec:88:ec:c5:aa:6a:93:ac:9d: ea:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FE:B8:A8:5A:EC:E5:97:AB:C2:E2:DA:BB:C8:BD:EB:DE:BF:03:35 X509v3 Authority Key Identifier: keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c2:89:1a:2e:a7:9d:50:99:b1:9c:39:91:f2:79:1e:4e:76: 42:0b:1e:fb:02:b3:ef:61:53:33:4f:7c:6e:80:17:d4:30:10: 06:7e:91:dc:02:b5:f8:b4:18:12:f6:af:39:8a:fd:dc:0e:77: 6b:c6:e3:45:ac:12:10:ff:d0:a6:93:a0:c6:fb:b2:36:18:5c: 6a:19:3e:96:b2:1b:3f:c3:37:fa:62:1a:12:cd:6a:55:12:cc: e2:ec:17:51:6f:01:0a:6f:85:7e:93:6f:70:68:f9:7e:00:c8: da:58:79:50:4a:d4:7d:a9:ab:43:00:cf:50:cb:8f:da:75:ae: 0f:06:df:2a:5c:31:f8:70:74:cf:ea:dd:ab:90:8a:1f:bb:dc: 8e:c1:96:e1:10:b4:ea:52:22:43:a1:dd:99:74:ba:d3:31:ac: 6a:3c:76:f1:9a:be:ca:92:94:25:30:29:5f:d3:b5:64:72:d9: 6a:98:96:0f:bf:e0:d6:38:68:98:90:1e:34:c4:73:f4:bf:2a: d0:f3:28:7c:23:b8:0d:69:ae:45:91:a5:4e:7b:f1:fa:6c:db: 0b:b3:93:ea:ee:bb:5a:bb:c8:24:04:54:c5:02:aa:ab:c5:75: d4:0f:f8:e1:d2:c6:a0:58:32:34:b0:b1:c2:a7:34:35:b0:13: 9d:5c:cd:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzlBQzExMC8GA1UEBRMoOThDQTQ5NERGNjlERURGNjE2RTQxRDA1OUExNEU3RjY4 NzlDREZCMzAeFw0yNDExMjExMjE2MDlaFw0yNDExMjgxMjE2MDlaMBgxFjAUBgNV BAMTDTY3M2YyNDg5LWZkNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjP1ThqxruPvQFzTOX7HmVz8HbzWpKNhhOYeRCkC9Q0l9DiQBmzVVeoQuusSLD uBG49oz0wdVw9Ez6OXo2K/KCpvgyGNz3WzexyxFfP4U4i36KYOwi3VWRhomqONma AP/MZHLtbGSXj42BaU4ICdCmjjSo9NfkKM9SEMnMBRVpws85WacPhYo7zU7BiDZ8 PY1KKfpRW/BeHECZJMkWAqttrh3SSZck8WPxJlCUYNERrGQPr4duB1JeEyD/5ef4 f5Z4Rn1KgE7B0zsAQu08PbuxU/DU18gCtDlody/QbRxr9n0BL7Y1sFyYc9CB5Ws3 tMZBSnakvuyI7MWqapOsneozAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMP64qFrs 5ZerwuLau8i9696/AzUwHwYDVR0jBBgwFoAUmMpJTfad7fYW5B0FmhTn9oec37Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OUFDLzYwOTQ2Q0Q2QTgw MTExRUZBNDA2NzUzQkM0RjlBRTAyL21NcEpUZmFkN2ZZVzVCMEZtaFRuOW9lYzM3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbU1wSlRmYWQ3ZllXNUIwRm1oVG45b2VjMzdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OUFDLzYwOTQ2Q0Q2QTgwMTExRUZBNDA2NzUzQkM0RjlBRTAyL21NcEpUZmFkN2ZZ VzVCMEZtaFRuOW9lYzM3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMHCiRoup51QmbGcOZHyeR5OdkILHvsCs+9hUzNPfG6AF9QwEAZ+kdwC tfi0GBL2rzmK/dwOd2vG40WsEhD/0KaToMb7sjYYXGoZPpayGz/DN/piGhLNalUS zOLsF1FvAQpvhX6Tb3Bo+X4AyNpYeVBK1H2pq0MAz1DLj9p1rg8G3ypcMfhwdM/q 3auQih+73I7BluEQtOpSIkOh3Zl0utMxrGo8dvGavsqSlCUwKV/TtWRy2WqYlg+/ 4NY4aJiQHjTEc/S/KtDzKHwjuA1prkWRpU578fps2wuzk+ruu1q7yCQEVMUCqqvF ddQP+OHSxqBYMjSwscKnNDWwE51czaU= -----END CERTIFICATE-----Generated at Thu Nov 21 13:39:45 2024 by rpki-client on console-ams.rpki-client.org