$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft File: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft (raw, json) Hash identifier: um/idEBNShDfsydEDDn0/XL/yKSFrgAeDrKql1UPTxc= Subject key identifier: 5F:57:48:1A:A8:B2:32:B9:34:9E:CB:24:5B:06:FE:00:53:9C:BA:A6 Authority key identifier: 09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 Certificate issuer: /CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft Manifest number: 95 Signing time: Mon 25 Nov 2024 04:23:41 +0000 Manifest this update: Mon 25 Nov 2024 04:23:41 +0000 Manifest next update: Mon 02 Dec 2024 04:23:41 +0000 Files and hashes: 1: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl (hash: 5ge0cGMiccjkIOPLgwtfPJ7XHtjJC0tFEU6DOoofBYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Validity Not Before: Nov 25 04:23:41 2024 GMT Not After : Dec 2 04:23:41 2024 GMT Subject: CN=6743fbcd-0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:b3:2f:8f:29:60:1b:bb:2d:e4:95:61:c7: b8:4d:68:b9:85:dd:61:e7:21:5c:01:2b:f6:5d:2f: 0a:2c:5a:18:52:74:2a:64:0e:81:60:a5:1c:24:57: 5b:a0:4e:1e:02:ed:81:20:34:c5:eb:4e:15:bc:27: 79:d2:6b:6d:15:63:2a:15:e2:59:b9:88:36:b6:fe: 77:73:e6:b6:80:3f:45:60:79:51:df:93:32:d1:a3: 02:69:90:3b:38:8f:47:f8:af:6c:3a:b1:10:d4:5a: ab:41:f1:ae:f6:90:2a:16:32:bf:46:4d:fc:a5:b7: 4e:69:00:01:99:21:7d:ef:f6:a9:49:2f:f5:37:5e: fd:fc:e4:41:b2:08:6f:d1:38:62:fe:11:bd:ee:9a: 75:19:5e:af:bc:cb:21:54:a2:d6:92:ef:b8:70:9e: e0:4b:42:f1:4c:b4:3e:76:0c:0d:db:15:01:b2:44: bd:cd:e9:79:4a:14:d7:01:1b:89:c4:6a:29:7d:15: 57:c0:96:54:ea:34:9a:80:4d:0a:0d:35:52:b7:c3: d7:60:c4:d8:e5:0e:41:d9:65:1b:9d:05:9c:e3:b1: 9c:11:b3:95:b4:0c:58:56:93:ce:7c:68:65:b9:e5: 84:3b:8f:8c:cc:bb:9c:14:44:41:6d:e1:00:0d:82: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:57:48:1A:A8:B2:32:B9:34:9E:CB:24:5B:06:FE:00:53:9C:BA:A6 X509v3 Authority Key Identifier: keyid:09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:9a:69:b7:2f:b6:0a:1c:63:0f:0a:e8:c1:7d:e0:7a:a7:78: 22:e3:ec:84:8d:e0:b0:67:ef:20:85:5c:cf:43:50:4a:40:d0: 57:bc:d4:0b:f7:32:35:3e:d3:11:b6:87:90:d2:ed:ec:8a:b1: 04:2c:04:08:d6:81:92:89:36:a4:fc:6b:ba:18:a0:fb:f7:58: e2:3c:94:38:a3:6b:de:0a:64:6f:dc:6a:f7:68:b0:18:a1:a1: 41:e6:25:18:4d:4c:85:78:bd:51:23:2f:6b:ee:a5:b4:64:df: 41:b8:71:13:14:06:05:a5:2e:27:d8:85:99:1a:0c:5b:b7:16: 13:d9:f2:c4:55:d9:11:53:4d:67:b7:0d:8f:7f:34:c6:e3:c7: 91:b0:54:e8:61:9a:ba:0b:0a:8a:cf:e0:88:bf:85:f2:ce:85: 2e:67:26:ee:60:bf:43:0a:13:9e:b6:6c:4c:f7:1e:11:31:55: 95:7b:ac:f6:76:b6:a4:aa:bc:c7:31:c3:b9:42:67:8b:e1:88: f2:20:2f:0d:e4:a7:92:c8:c9:11:1c:7e:43:ac:ea:71:f7:f1: f9:66:c1:2f:a6:18:23:c0:19:96:e0:05:4a:92:7f:90:a1:58: 5c:8b:7f:2d:f5:55:b8:69:28:c8:4e:42:c0:b4:79:86:9d:ff: 21:03:cc:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMDMxMTAvBgNVBAUTKDA5RTJDNzU4MTQxQzAxNDRGNDYyQjlGMEY4RkJFNzQ4 QUEwNUNCMjEwHhcNMjQxMTI1MDQyMzQxWhcNMjQxMjAyMDQyMzQxWjAYMRYwFAYD VQQDEw02NzQzZmJjZC0wZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXKzL48pYBu7LeSVYce4TWi5hd1h5yFcASv2XS8KLFoYUnQqZA6BYKUcJFdb oE4eAu2BIDTF604VvCd50mttFWMqFeJZuYg2tv53c+a2gD9FYHlR35My0aMCaZA7 OI9H+K9sOrEQ1FqrQfGu9pAqFjK/Rk38pbdOaQABmSF97/apSS/1N179/ORBsghv 0Thi/hG97pp1GV6vvMshVKLWku+4cJ7gS0LxTLQ+dgwN2xUBskS9zel5ShTXARuJ xGopfRVXwJZU6jSagE0KDTVSt8PXYMTY5Q5B2WUbnQWc47GcEbOVtAxYVpPOfGhl ueWEO4+MzLucFERBbeEADYKmNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9XSBqo sjK5NJ7LJFsG/gBTnLqmMB8GA1UdIwQYMBaAFAnix1gUHAFE9GK58Pj750iqBcsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIwMy9DRUMxMjJDQUM1 ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FVVDBZcm53LVB2blNLb0Z5 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NlTEhXQlFjQVVUMFlybnctUHZuU0tvRnl5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIwMy9DRUMxMjJDQUM1ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FV VDBZcm53LVB2blNLb0Z5eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGmmm3L7YKHGMPCujBfeB6p3gi4+yEjeCwZ+8ghVzPQ1BKQNBXvNQL 9zI1PtMRtoeQ0u3sirEELAQI1oGSiTak/Gu6GKD791jiPJQ4o2veCmRv3Gr3aLAY oaFB5iUYTUyFeL1RIy9r7qW0ZN9BuHETFAYFpS4n2IWZGgxbtxYT2fLEVdkRU01n tw2PfzTG48eRsFToYZq6CwqKz+CIv4XyzoUuZybuYL9DChOetmxM9x4RMVWVe6z2 drakqrzHMcO5QmeL4YjyIC8N5KeSyMkRHH5DrOpx9/H5ZsEvphgjwBmW4AVKkn+Q oVhci38t9VW4aSjITkLAtHmGnf8hA8yN -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:08 2024 by rpki-client on console-fra.rpki-client.org