$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: Br86bIK8RlYqaUG2LRLLvB0DYx8EuFRJqGg88cZn5Ko= Subject key identifier: A5:CA:5A:81:2B:B0:FF:FA:59:F2:0E:D6:F5:87:FB:6A:AC:D5:97:09 Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 0450 Signing time: Fri 22 Nov 2024 23:44:49 +0000 Manifest this update: Fri 22 Nov 2024 23:44:48 +0000 Manifest next update: Fri 29 Nov 2024 23:44:48 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: 7ZELYsD1eHfUY029vj5bdxX1Z5UXubTc+mAawmWdbLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Nov 22 23:44:48 2024 GMT Not After : Nov 29 23:44:48 2024 GMT Subject: CN=67411771-293c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:a1:bf:ad:d0:57:79:b6:41:46:93:41:3d: 77:0f:41:52:c6:70:ab:9b:65:d6:a7:c4:40:a8:74: f5:53:a3:62:62:17:15:f4:93:30:70:65:3f:b9:e7: 15:ef:23:e2:b1:57:1b:f8:4a:66:8b:71:89:ed:f3: 8b:a7:35:b6:bb:ff:b7:b0:f9:41:59:3e:c5:bb:aa: c5:d1:3b:40:86:09:b4:a6:10:8c:a8:a3:13:e7:c4: a4:a1:d6:6a:8c:43:61:48:a1:84:30:86:e0:38:69: 7b:b6:5c:0b:b9:46:75:6e:6c:03:05:8f:8d:59:8f: bd:fb:2d:e3:08:ad:44:45:60:f2:90:84:af:34:8f: 1b:53:7e:7d:6c:b8:70:65:7e:48:3b:96:76:e2:8a: 82:4e:ff:e4:49:3c:84:80:01:67:cb:42:00:4a:a6: eb:24:5e:ad:e1:68:e3:70:68:c2:24:53:93:33:c9: bf:e8:f5:e4:8f:e9:62:98:9f:fc:a8:8b:ed:c1:37: 08:5f:87:48:16:40:31:ca:75:af:9e:65:77:aa:8f: 13:0b:10:a8:b6:38:e4:59:f5:61:86:59:b3:be:54: cb:bc:c4:4f:bd:69:fe:c9:7b:a7:ab:4b:2c:04:26: 67:6d:9a:08:07:b0:6a:93:6f:86:90:c1:ee:13:df: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:5A:81:2B:B0:FF:FA:59:F2:0E:D6:F5:87:FB:6A:AC:D5:97:09 X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b1:00:e5:40:00:ea:45:f6:12:d9:72:5b:56:ee:3f:04:b6: 0d:28:bf:f7:d5:f1:62:ef:35:3e:91:11:c8:6f:20:dd:17:fd: 43:e7:40:da:7b:43:d7:37:df:89:c3:8f:d0:48:0b:2f:94:bd: d0:0c:5b:1d:8c:a0:35:63:72:d5:fd:be:5a:81:9f:c8:14:b3: b5:05:48:09:56:c6:23:a2:44:20:12:0f:cc:90:ae:53:67:d5: 96:67:93:c4:9c:42:de:04:5e:28:1c:a7:4d:3d:71:5b:51:e3: d7:73:59:02:e4:67:fb:8b:97:55:57:4f:fe:ae:b3:0f:43:5b: 1d:aa:40:54:5f:35:02:8c:0c:41:dc:ee:d8:97:76:f1:c5:c8: 1e:e7:61:74:d9:2c:81:cd:f4:6d:8c:7f:67:a3:d6:a2:e2:65: a7:ac:97:93:9b:03:6f:17:d7:03:fb:e3:7f:db:27:49:0f:24: cd:c9:08:95:e7:37:5e:af:3d:38:f8:c7:76:4f:63:e8:3e:42: a6:14:56:87:df:e1:20:08:d8:60:69:01:8c:96:f3:27:23:40: 34:c2:9e:c2:9c:cb:82:71:82:7a:44:c7:9d:f9:c2:94:82:68: 9c:2f:36:a7:9f:37:03:00:aa:50:b5:6e:60:57:05:49:1e:65: 1d:55:43:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjQxMTIyMjM0NDQ4WhcNMjQxMTI5MjM0NDQ4WjAYMRYwFAYD VQQDEw02NzQxMTc3MS0yOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraWhv63QV3m2QUaTQT13D0FSxnCrm2XWp8RAqHT1U6NiYhcV9JMwcGU/uecV 7yPisVcb+Epmi3GJ7fOLpzW2u/+3sPlBWT7Fu6rF0TtAhgm0phCMqKMT58SkodZq jENhSKGEMIbgOGl7tlwLuUZ1bmwDBY+NWY+9+y3jCK1ERWDykISvNI8bU359bLhw ZX5IO5Z24oqCTv/kSTyEgAFny0IASqbrJF6t4WjjcGjCJFOTM8m/6PXkj+limJ/8 qIvtwTcIX4dIFkAxynWvnmV3qo8TCxCotjjkWfVhhlmzvlTLvMRPvWn+yXunq0ss BCZnbZoIB7Bqk2+GkMHuE9+EDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXKWoEr sP/6WfIO1vWH+2qs1ZcJMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvsQDlQADqRfYS2XJbVu4/BLYNKL/31fFi7zU+kRHIbyDdF/1D50Da e0PXN9+Jw4/QSAsvlL3QDFsdjKA1Y3LV/b5agZ/IFLO1BUgJVsYjokQgEg/MkK5T Z9WWZ5PEnELeBF4oHKdNPXFbUePXc1kC5Gf7i5dVV0/+rrMPQ1sdqkBUXzUCjAxB 3O7Yl3bxxcge52F02SyBzfRtjH9no9ai4mWnrJeTmwNvF9cD++N/2ydJDyTNyQiV 5zderz04+Md2T2PoPkKmFFaH3+EgCNhgaQGMlvMnI0A0wp7CnMuCcYJ6RMed+cKU gmicLzannzcDAKpQtW5gVwVJHmUdVUMM -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org