$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json) Hash identifier: kOmIhxpl/fGSlzBEgft9GdQBAhS6abWS+bR9lfcIewc= Subject key identifier: 6D:D2:DD:92:50:14:A3:05:9C:9C:DF:3F:26:96:44:CD:C2:96:A1:31 Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft Manifest number: 0D Signing time: Wed 25 Dec 2024 06:09:43 +0000 Manifest this update: Wed 25 Dec 2024 06:09:42 +0000 Manifest next update: Wed 01 Jan 2025 06:09:42 +0000 Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: k67bQuHM3ptL5E/mhN529BW3DgMuvjTlQXcCMdl7CKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Validity Not Before: Dec 25 06:09:42 2024 GMT Not After : Jan 1 06:09:42 2025 GMT Subject: CN=676ba1a7-697b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:f2:f1:a6:39:19:f1:1d:6a:cb:89:95:46: ea:34:8f:fb:c0:5b:3e:9a:da:00:03:26:63:01:49: 80:30:f4:06:74:71:67:3d:59:25:f9:aa:c6:a8:27: aa:e5:52:46:3d:d5:d6:57:23:c6:d0:07:32:2c:d0: 5f:73:83:9c:5a:a8:31:97:6c:6b:32:e9:29:3f:52: 4c:d1:94:98:82:fa:1a:28:34:c7:27:3b:a9:7a:a5: b0:51:88:ec:f4:e5:6f:16:ce:b8:1b:36:78:22:7e: 9c:18:6c:20:af:a5:ed:64:3a:d5:78:db:e8:42:9a: ff:64:8c:c4:9d:ae:94:b0:f9:f6:3c:fd:03:51:37: 6c:7b:b6:ea:31:f3:e2:8a:bf:b0:66:8d:cc:da:ef: a8:a9:45:c2:ec:bd:76:f5:6b:c8:13:13:1b:a7:62: ae:5d:93:d7:e3:3e:76:73:fe:f0:d7:1c:05:58:a9: dd:49:e7:95:12:af:41:a4:8a:6d:dc:84:17:24:9e: 55:4c:ab:b2:57:61:ff:a4:9d:3c:5b:0d:48:67:16: 0c:f9:8d:eb:ec:82:ee:09:c1:1d:35:82:87:c4:38: 8b:e3:f2:6a:80:92:56:2e:a7:86:33:86:40:21:49: 06:49:7b:81:8a:39:f8:7d:60:c8:f6:b5:f1:0d:ca: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D2:DD:92:50:14:A3:05:9C:9C:DF:3F:26:96:44:CD:C2:96:A1:31 X509v3 Authority Key Identifier: keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:13:ba:2b:4b:14:d5:1f:bf:72:da:88:7c:87:55:47:68:3e: 1f:03:cb:72:d2:d3:fd:a4:99:49:6c:6d:39:17:6b:2f:0c:28: 90:ad:99:f6:f8:00:2c:96:89:37:f8:40:28:0b:a8:dc:6d:82: 67:21:98:d1:a0:8b:70:7e:75:83:95:b0:cd:06:ff:e3:5e:15: 13:e7:72:6c:b8:6a:0e:6a:99:85:56:a0:97:f2:95:5b:89:59: 2e:bb:5a:29:3f:a0:6b:a0:17:67:c2:80:35:7d:53:31:bd:d9: a3:22:4b:73:1a:dd:38:13:28:45:30:0c:ef:4b:a1:ae:4b:84: 95:26:44:f4:0f:c6:14:0c:11:6c:69:20:9b:b8:dd:51:46:af: 8e:ae:82:6b:e2:bb:7b:b7:18:9f:f8:04:fa:b5:68:9a:88:9a: 00:50:40:14:8d:1f:0f:b0:75:dd:ff:bf:8b:0e:56:a7:14:b5: 8b:ea:0b:a8:fa:d0:7e:e0:9d:89:9c:e5:73:ef:94:99:30:44: 26:2d:d0:a9:7f:58:04:19:48:41:47:d3:cf:df:b9:10:c0:32: 6d:75:b7:7d:b4:cd:c2:7b:98:3b:a0:2d:5d:b5:72:8c:ff:fc: db:b6:a0:83:f0:74:5c:b1:7d:e2:04:0b:42:4a:2c:45:0c:6c: d4:00:c8:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDg5QjExMC8GA1UEBRMoM0M3NjhGMEMyMzIzRDQ2RDMyMUU4QUM5OTNFNzVCMEIx QjgyMUU1NDAeFw0yNDEyMjUwNjA5NDJaFw0yNTAxMDEwNjA5NDJaMBgxFjAUBgNV BAMTDTY3NmJhMWE3LTY5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XPLxpjkZ8R1qy4mVRuo0j/vAWz6a2gADJmMBSYAw9AZ0cWc9WSX5qsaoJ6rl UkY91dZXI8bQBzIs0F9zg5xaqDGXbGsy6Sk/UkzRlJiC+hooNMcnO6l6pbBRiOz0 5W8WzrgbNngifpwYbCCvpe1kOtV42+hCmv9kjMSdrpSw+fY8/QNRN2x7tuox8+KK v7Bmjcza76ipRcLsvXb1a8gTExunYq5dk9fjPnZz/vDXHAVYqd1J55USr0Gkim3c hBcknlVMq7JXYf+knTxbDUhnFgz5jevsgu4JwR01gofEOIvj8mqAklYup4YzhkAh SQZJe4GKOfh9YMj2tfENygIHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbdLdklAU owWcnN8/JpZEzcKWoTEwHwYDVR0jBBgwFoAUPHaPDCMj1G0yHorJk+dbCxuCHlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODlCLzFCQ0Q0M0I2QjEx MTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEhhUERDTWoxRzB5SG9ySmstZGJDeHVDSGxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODlCLzFCQ0Q0M0I2QjExMTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcw eUhvckprLWRiQ3h1Q0hsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGkTuitLFNUfv3LaiHyHVUdoPh8Dy3LS0/2kmUlsbTkXay8MKJCtmfb4 ACyWiTf4QCgLqNxtgmchmNGgi3B+dYOVsM0G/+NeFRPncmy4ag5qmYVWoJfylVuJ WS67Wik/oGugF2fCgDV9UzG92aMiS3Ma3TgTKEUwDO9Loa5LhJUmRPQPxhQMEWxp IJu43VFGr46ugmviu3u3GJ/4BPq1aJqImgBQQBSNHw+wdd3/v4sOVqcUtYvqC6j6 0H7gnYmc5XPvlJkwRCYt0Kl/WAQZSEFH08/fuRDAMm11t320zcJ7mDugLV21coz/ /Nu2oIPwdFyxfeIEC0JKLEUMbNQAyJA= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:03 2024 by rpki-client on console-ams.rpki-client.org