$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft File: i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json) Hash identifier: IoFNRJaBil+XlJcbYNocVTymI4GDak8htrHnw+y7n/w= Subject key identifier: 44:6E:42:6E:59:A1:ED:4A:16:F3:87:18:B1:91:AA:D6:0A:BC:22:3E Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 Certificate issuer: /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft Manifest number: 13D2 Signing time: Fri 22 Nov 2024 18:39:00 +0000 Manifest this update: Fri 22 Nov 2024 18:38:59 +0000 Manifest next update: Fri 29 Nov 2024 18:38:59 +0000 Files and hashes: 1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: oberbNvcm+VEKa84vdBrbSaUuqis0UHRHLwpv+u0Orw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Validity Not Before: Nov 22 18:38:59 2024 GMT Not After : Nov 29 18:38:59 2024 GMT Subject: CN=6740cfc3-ee74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:02:92:34:bc:e6:55:0b:38:05:c9:d1:71: e6:0c:e3:ff:36:98:c5:0f:4c:d5:9e:e3:ec:e3:6a: dc:93:db:cf:60:8d:7d:4e:97:36:23:4e:6c:82:27: 5c:fa:0b:22:a1:30:90:f1:bc:62:81:94:73:a3:1d: d0:56:db:d3:79:44:45:a0:cc:13:d8:82:bb:d2:08: d5:bf:65:6a:6b:32:f4:7e:0a:b4:7a:45:14:f4:d7: 9a:f2:86:a1:07:ac:22:9c:fc:54:4c:7c:c7:59:e0: ea:a8:6b:2b:48:d8:07:18:d0:f8:0b:9e:14:5f:6e: 93:66:8a:8f:e2:c4:79:0f:86:08:93:58:17:1c:5a: 7e:51:45:5a:fb:e2:1f:16:62:fa:84:db:f9:de:16: 23:cd:b7:fa:64:0c:92:2e:0b:77:e9:82:a2:0a:ef: 79:dd:04:f6:7e:21:2f:a4:ec:53:08:d2:8c:0b:ee: db:a5:4b:aa:35:65:90:5c:d1:95:c7:ff:ed:2a:de: a5:e4:33:fa:bb:51:3b:6a:5d:5d:87:05:26:3e:e9: a9:ea:61:d0:05:d0:bb:6f:71:39:16:8a:66:e4:0e: cf:e5:b4:cc:0e:a6:37:e8:5a:e4:e9:2b:6c:19:ec: f4:a1:64:f7:36:00:83:ce:69:29:cf:c5:a2:c5:bd: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:42:6E:59:A1:ED:4A:16:F3:87:18:B1:91:AA:D6:0A:BC:22:3E X509v3 Authority Key Identifier: keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:aa:ad:8f:76:0a:33:06:a2:78:47:b7:84:6f:ed:7e:6f:d8: cd:79:fa:e0:8e:0f:8d:30:b8:2b:72:83:a0:a8:99:f3:f7:d2: bd:c9:21:07:a5:a1:4a:7f:3a:3a:73:c7:9a:49:e4:8c:1c:d0: 1b:5d:3d:35:ae:4e:43:15:78:2d:47:84:36:3a:72:3a:1a:50: f1:a9:7a:94:78:08:84:89:a7:eb:eb:e9:a7:b6:1b:7f:1e:f6: 54:0a:d4:5f:04:f3:dc:b7:63:94:30:59:9c:f8:ff:eb:ac:61: ea:b4:29:3b:d6:b6:fc:1f:67:e5:76:71:de:fb:d9:04:d1:5e: 2f:e5:23:8c:7c:50:aa:c1:6b:8e:6b:73:08:3e:fa:54:e1:45: 36:1f:f6:41:f3:b6:b5:1e:e6:fa:96:2d:53:33:80:58:a1:cd: d8:39:37:72:04:0e:95:c2:1b:f4:02:66:12:c6:3a:2f:b4:0a: 71:b7:b9:d2:fa:d2:9c:e4:09:df:3a:4f:de:da:61:87:55:60: 5b:0d:e3:7b:29:1b:cc:75:b4:ad:fb:2d:75:ba:c6:f6:54:3d: 9d:27:12:df:91:39:b5:98:11:48:77:e2:78:d1:76:79:77:31: a7:e9:09:65:83:ac:9e:56:ee:ea:ff:a4:17:00:b3:74:32:08: e7:2a:94:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKDhCRTlEOTJFM0IzMUQ0MENBMzNCM0JCNjI5NDc0MzJF ODQ1NkQyOTAwHhcNMjQxMTIyMTgzODU5WhcNMjQxMTI5MTgzODU5WjAYMRYwFAYD VQQDEw02NzQwY2ZjMy1lZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIkCkjS85lULOAXJ0XHmDOP/NpjFD0zVnuPs42rck9vPYI19Tpc2I05sgidc +gsioTCQ8bxigZRzox3QVtvTeURFoMwT2IK70gjVv2VqazL0fgq0ekUU9Nea8oah B6winPxUTHzHWeDqqGsrSNgHGND4C54UX26TZoqP4sR5D4YIk1gXHFp+UUVa++If FmL6hNv53hYjzbf6ZAySLgt36YKiCu953QT2fiEvpOxTCNKMC+7bpUuqNWWQXNGV x//tKt6l5DP6u1E7al1dhwUmPump6mHQBdC7b3E5Fopm5A7P5bTMDqY36Frk6Sts Gez0oWT3NgCDzmkpz8Wixb0juwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERuQm5Z oe1KFvOHGLGRqtYKvCI+MB8GA1UdIwQYMBaAFIvp2S47MdQMozs7tilHQy6EVtKQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFBeWpPenUyS1VkRExvUlcw cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktblpManN4MUF5ak96dTJLVWRETG9SVzBwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFB eWpPenUyS1VkRExvUlcwcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiqq2PdgozBqJ4R7eEb+1+b9jNefrgjg+NMLgrcoOgqJnz99K9ySEH paFKfzo6c8eaSeSMHNAbXT01rk5DFXgtR4Q2OnI6GlDxqXqUeAiEiafr6+mntht/ HvZUCtRfBPPct2OUMFmc+P/rrGHqtCk71rb8H2fldnHe+9kE0V4v5SOMfFCqwWuO a3MIPvpU4UU2H/ZB87a1Hub6li1TM4BYoc3YOTdyBA6Vwhv0AmYSxjovtApxt7nS +tKc5AnfOk/e2mGHVWBbDeN7KRvMdbSt+y11usb2VD2dJxLfkTm1mBFId+J40XZ5 dzGn6Qllg6yeVu7q/6QXALN0MgjnKpS1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org