$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json) Hash identifier: DcXy/HPRbc1ku5s4xkQTqYZzqZfuxuYPGnGkOuqFSLg= Subject key identifier: 03:63:2B:5C:51:84:E0:B0:5B:1D:AF:5E:9C:9C:E7:E0:EF:1E:55:03 Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Certificate serial: 342B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft Manifest number: 5F0F Signing time: Fri 22 Nov 2024 14:15:24 +0000 Manifest this update: Fri 22 Nov 2024 14:15:24 +0000 Manifest next update: Fri 29 Nov 2024 14:15:24 +0000 Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: d3/CTdJsCjCo8T85pOovodfDAOFpdBPRcDMW561SJHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13355 (0x342b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Validity Not Before: Nov 22 14:15:24 2024 GMT Not After : Nov 29 14:15:24 2024 GMT Subject: CN=674091fc-48be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:ea:5c:2e:da:02:9b:96:38:08:02:31:78: 85:18:a7:8b:2e:99:a6:78:57:a9:c8:f0:49:9f:56: 4e:85:03:60:42:0f:91:18:08:20:52:77:cf:ce:cb: 59:97:01:c3:1b:02:46:0b:a3:fd:30:4f:61:0f:a2: 5f:57:18:89:b0:b8:c7:ae:d9:60:7b:23:d5:1f:98: 74:4f:65:75:61:df:44:46:07:ba:a3:4a:92:f4:03: 1b:47:fc:a8:8c:25:2a:fa:19:68:b8:f3:8f:b7:6e: 39:84:09:1b:3e:01:a3:8a:77:a6:c6:42:6c:95:97: b1:9a:1c:98:aa:93:84:28:53:51:b3:66:1b:e9:45: 46:e8:54:f4:4a:e7:e7:09:ce:e8:45:cb:b0:74:d6: 9e:fb:50:1f:6e:ea:14:ab:61:32:76:8a:de:a9:2e: 9d:0a:7d:1b:4b:3b:3d:74:ba:37:b9:4f:1e:70:85: 69:17:1f:ae:45:d7:c5:c4:56:6d:f6:38:fe:8a:5b: 01:83:3e:af:2c:11:26:e7:45:8c:c5:3e:e3:ba:50: c8:28:f8:df:25:2e:75:c7:f9:e2:7e:0d:9d:53:01: 4b:f9:ce:09:62:83:a0:8e:cc:b9:16:10:a2:90:c2: 8c:3c:6b:95:67:42:66:cd:43:d8:25:99:90:9f:54: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:2B:5C:51:84:E0:B0:5B:1D:AF:5E:9C:9C:E7:E0:EF:1E:55:03 X509v3 Authority Key Identifier: keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:52:60:ba:ac:f1:b5:60:de:16:42:8b:ec:70:db:ca:e2:59: 69:64:0b:53:e3:6e:7a:4e:54:63:3e:5f:43:16:5d:3f:17:b1: 4a:6c:e8:b2:50:77:47:78:3d:e5:86:57:75:c7:ab:cc:43:dd: b7:b1:78:c2:b1:92:77:b2:fa:a2:2e:f5:4a:aa:e4:7e:0c:9d: 08:85:c8:a2:37:90:24:ef:b0:6e:d5:4f:b5:c0:1a:10:44:44: 27:4f:0f:08:b7:fe:47:31:25:fd:d8:bc:71:f0:3c:71:bb:3e: 2e:5f:1b:b8:3d:1a:fb:e2:4b:ad:be:5a:6b:eb:97:83:eb:1a: e4:9f:a1:3d:c0:6d:80:d8:b3:53:4c:29:51:e3:f9:04:de:93: 36:a1:65:00:c4:96:1c:a1:4e:26:c9:bb:40:73:1c:64:33:6f: b8:08:9e:f9:11:85:e0:c3:fb:d7:81:5a:4f:e5:da:7d:ac:17: 99:1a:d8:c5:e1:c2:b0:91:92:02:dd:65:cc:46:2e:2a:04:cb: dc:9d:aa:58:ae:1b:44:9d:40:17:b5:1b:5b:73:dc:22:13:c6: 0f:50:a3:0a:d9:62:2f:93:94:78:c5:8e:aa:f2:2b:0a:ec:2c: 47:a1:b0:4c:38:f5:b3:62:03:37:32:50:fc:2a:11:a0:ff:b9: b7:a2:b1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNGNDFFMDQ4RDIyQjJBMUFFQTRDRTBCODQ0OTUyQTRB MzlENkNCMzcwHhcNMjQxMTIyMTQxNTI0WhcNMjQxMTI5MTQxNTI0WjAYMRYwFAYD VQQDEw02NzQwOTFmYy00OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeDqXC7aApuWOAgCMXiFGKeLLpmmeFepyPBJn1ZOhQNgQg+RGAggUnfPzstZ lwHDGwJGC6P9ME9hD6JfVxiJsLjHrtlgeyPVH5h0T2V1Yd9ERge6o0qS9AMbR/yo jCUq+hlouPOPt245hAkbPgGjinemxkJslZexmhyYqpOEKFNRs2Yb6UVG6FT0Sufn Cc7oRcuwdNae+1AfbuoUq2EydoreqS6dCn0bSzs9dLo3uU8ecIVpFx+uRdfFxFZt 9jj+ilsBgz6vLBEm50WMxT7julDIKPjfJS51x/nifg2dUwFL+c4JYoOgjsy5FhCi kMKMPGuVZ0JmzUPYJZmQn1RMZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANjK1xR hOCwWx2vXpyc5+DvHlUDMB8GA1UdIwQYMBaAFD9B4EjSKyoa6kzguESVKko51ss3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05JcktocnFUT0M0UkpVcVNqbld5 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwSGdTTklyS2hycVRPQzRSSlVxU2puV3l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05Jckto cnFUT0M0UkpVcVNqbld5emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAUmC6rPG1YN4WQovscNvK4llpZAtT4256TlRjPl9DFl0/F7FKbOiy UHdHeD3lhld1x6vMQ923sXjCsZJ3svqiLvVKquR+DJ0IhciiN5Ak77Bu1U+1wBoQ REQnTw8It/5HMSX92Lxx8Dxxuz4uXxu4PRr74kutvlpr65eD6xrkn6E9wG2A2LNT TClR4/kE3pM2oWUAxJYcoU4mybtAcxxkM2+4CJ75EYXgw/vXgVpP5dp9rBeZGtjF 4cKwkZIC3WXMRi4qBMvcnapYrhtEnUAXtRtbc9wiE8YPUKMK2WIvk5R4xY6q8isK 7CxHobBMOPWzYgM3MlD8KhGg/7m3orH2 -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:58 2024 by rpki-client on console-ams.rpki-client.org