$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: ufLdEFvVABUPObk+pDbXQFkY6E6HGPUwO+xcKqgIinc= Subject key identifier: 19:D8:62:BD:7E:19:EE:CA:89:1C:2E:E5:2B:F8:50:7E:43:0B:45:53 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 341E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 341E Signing time: Fri 22 Nov 2024 15:09:43 +0000 Manifest this update: Fri 22 Nov 2024 15:09:42 +0000 Manifest next update: Fri 29 Nov 2024 15:09:42 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: UKs34I8D9KniUXjNcC5CupKHEEuz8pq44VzZugaLOkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13342 (0x341e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Nov 22 15:09:42 2024 GMT Not After : Nov 29 15:09:42 2024 GMT Subject: CN=67409eb6-3b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:4e:49:52:eb:38:2f:5a:d2:d8:8c:65:b1: 44:c5:15:80:be:a8:42:7c:7f:6a:18:cd:03:b0:b2: 24:dc:c8:2d:f2:34:86:8a:9f:2a:8e:59:65:ca:66: f7:1d:ec:34:d0:16:97:ba:c7:f8:10:4e:39:36:af: 74:19:66:4c:6c:53:16:70:54:82:ab:cd:77:fc:ad: d4:02:3f:9c:f6:4b:46:83:df:46:e2:10:69:37:e7: af:11:cc:3d:4d:61:54:e9:50:35:a0:7e:57:e8:59: f3:73:f6:3b:15:82:9b:36:dc:3d:a3:a6:b1:dd:b5: 10:ea:e8:8c:da:55:d2:1b:b9:81:61:46:5d:3c:0a: fa:70:99:73:10:9e:6a:c4:44:a7:73:bd:f0:27:1c: e5:9b:3d:25:11:24:2a:f4:ef:93:02:0a:bf:3f:6b: 75:a2:d5:1f:4a:48:28:c1:94:6c:1c:52:4c:9a:6d: ba:60:28:fc:22:c3:d9:6a:83:f3:02:d9:eb:2e:c1: 33:c5:c1:5a:93:98:49:52:bd:79:a5:d9:66:96:9a: e1:ec:5a:89:12:40:3e:76:33:ed:5a:9f:b5:54:dd: 59:4c:d0:47:de:59:03:81:03:dd:94:80:3b:7e:c0: 93:4b:d2:29:e6:34:4e:69:00:a3:f9:e5:fb:96:5c: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D8:62:BD:7E:19:EE:CA:89:1C:2E:E5:2B:F8:50:7E:43:0B:45:53 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:40:17:6b:70:da:00:2d:87:41:a5:44:33:5e:c4:16:7c:be: 40:13:9d:8b:b4:57:25:2e:48:5b:cf:70:90:04:05:53:dd:25: 60:68:da:bf:06:f9:ba:5b:55:67:e1:b3:d6:35:43:f3:82:40: b1:00:49:c7:88:68:ce:ab:f1:3c:76:63:6c:e2:a0:1d:a5:4b: 11:7e:a0:14:5e:c1:4d:0a:08:2c:a7:ac:d0:22:a0:58:05:8d: e0:5d:e0:5c:4f:d4:60:b8:db:87:6e:98:cf:64:e0:85:e5:59: 1c:7d:d1:aa:83:e0:6b:be:ca:bb:38:12:15:ea:db:47:68:3d: d2:17:60:28:70:fa:cd:8b:59:7f:75:9a:d3:d0:3f:63:ae:d9: f1:59:7f:93:5f:b5:fa:e0:81:f4:a1:2f:b0:a6:3b:c4:2c:22: 4b:75:0a:5d:89:b5:51:b7:99:c2:d2:5c:90:52:79:60:81:8d: 7b:1e:7b:02:3b:f8:5c:26:79:f4:a0:2d:34:ed:cb:c1:fe:19: 75:3b:08:41:4e:c0:f4:84:47:7e:2b:43:a5:86:d4:35:2e:51: b5:5f:8f:8e:a0:f4:6b:ad:3f:82:0d:00:67:94:f8:1e:67:ec: d5:b2:e9:ad:f5:b7:f6:88:4a:bf:87:af:1f:41:54:4f:01:98: c9:11:90:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjQxMTIyMTUwOTQyWhcNMjQxMTI5MTUwOTQyWjAYMRYwFAYD VQQDEw02NzQwOWViNi0zYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2JOSVLrOC9a0tiMZbFExRWAvqhCfH9qGM0DsLIk3Mgt8jSGip8qjlllymb3 Hew00BaXusf4EE45Nq90GWZMbFMWcFSCq813/K3UAj+c9ktGg99G4hBpN+evEcw9 TWFU6VA1oH5X6Fnzc/Y7FYKbNtw9o6ax3bUQ6uiM2lXSG7mBYUZdPAr6cJlzEJ5q xESnc73wJxzlmz0lESQq9O+TAgq/P2t1otUfSkgowZRsHFJMmm26YCj8IsPZaoPz AtnrLsEzxcFak5hJUr15pdlmlprh7FqJEkA+djPtWp+1VN1ZTNBH3lkDgQPdlIA7 fsCTS9Ip5jROaQCj+eX7llxhQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnYYr1+ Ge7KiRwu5Sv4UH5DC0VTMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTQBdrcNoALYdBpUQzXsQWfL5AE52LtFclLkhbz3CQBAVT3SVgaNq/ Bvm6W1Vn4bPWNUPzgkCxAEnHiGjOq/E8dmNs4qAdpUsRfqAUXsFNCggsp6zQIqBY BY3gXeBcT9RguNuHbpjPZOCF5VkcfdGqg+Brvsq7OBIV6ttHaD3SF2AocPrNi1l/ dZrT0D9jrtnxWX+TX7X64IH0oS+wpjvELCJLdQpdibVRt5nC0lyQUnlggY17HnsC O/hcJnn0oC007cvB/hl1OwhBTsD0hEd+K0OlhtQ1LlG1X4+OoPRrrT+CDQBnlPge Z+zVsumt9bf2iEq/h68fQVRPAZjJEZAe -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org