$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: 4IKhHLo9Ojbq7jXM7RVS4c61WZvFo7effFgdDDINnz4= Subject key identifier: 91:6F:AB:65:27:7D:67:50:B1:D0:11:03:AA:DC:D8:CB:04:2D:BC:F6 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: 20 Signing time: Sun 15 Sep 2024 10:18:46 +0000 Manifest this update: Sun 15 Sep 2024 10:18:46 +0000 Manifest next update: Sun 22 Sep 2024 10:18:46 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: dSoSYpBrePSMA9kj47/dJBey6aQwk3ir7RCDIbiha5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Sep 15 10:18:46 2024 GMT Not After : Sep 22 10:18:46 2024 GMT Subject: CN=66e6b486-07fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:c1:8a:8b:1a:11:2f:14:27:b6:a7:59:e5: 7b:4d:45:b9:01:8c:b4:0f:b0:46:65:4a:be:35:75: b7:af:d3:2d:45:8f:05:f7:0c:df:20:76:09:6b:35: ca:ec:1a:a6:1f:74:d1:8d:06:dc:5f:71:78:2e:66: b5:bf:f5:2a:10:b1:9f:ec:91:85:f6:46:fa:65:b4: 37:6d:27:91:78:bc:92:1f:cf:b4:af:0e:0c:f9:4e: ca:fe:7a:1f:fa:46:3d:50:25:d3:02:80:b5:55:5c: c6:25:31:70:65:91:8c:bf:d0:d6:fa:49:ef:28:74: af:a1:0c:86:77:c8:48:a0:5c:0c:89:e8:5a:e2:28: dd:9e:21:7c:14:43:26:50:cb:49:9f:d1:2c:ee:90: b3:8f:1a:6a:ac:f7:f3:f9:7a:c6:26:e1:b9:f8:32: 53:09:d4:8e:5b:d6:b7:2f:c7:3a:f3:d4:1c:93:d8: 03:d5:62:f0:65:b0:83:ed:3e:ca:bc:5c:43:6e:61: d5:9b:9e:53:40:1d:4d:ae:3f:75:5e:0b:20:93:bb: bc:3e:47:a2:a4:f7:c4:c9:ed:4c:57:0c:18:94:ac: dd:1c:5f:87:47:d3:e3:8a:fe:ff:47:b0:8c:06:42: e8:31:6a:5f:4a:94:53:09:c3:ee:5a:b2:8d:a8:dd: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:AB:65:27:7D:67:50:B1:D0:11:03:AA:DC:D8:CB:04:2D:BC:F6 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d6:f3:c6:73:c5:14:66:05:da:86:cd:87:a8:fc:77:5c:71: 60:8c:34:8a:43:23:50:e0:f8:94:2e:d9:99:ff:eb:8b:4c:66: e2:7e:f7:c1:4c:92:07:62:d4:e8:2a:a6:15:68:ca:3c:05:98: 0f:41:63:3d:dc:e9:8c:a3:68:c4:d9:75:b6:a4:94:22:5b:7e: 68:d2:2d:96:2f:d3:55:4b:92:74:1d:6c:ef:0e:05:18:cb:bd: 34:49:fb:bb:76:c5:49:bb:e8:26:57:a4:f2:1a:be:ba:5d:cf: 6a:d0:90:49:47:ca:ed:b7:25:cb:23:8d:c0:b9:01:9e:4f:bc: 26:46:3f:52:d0:98:d0:f1:5a:20:91:76:f4:3c:d6:b8:6f:92: d2:5c:ca:1a:d9:fc:4c:c1:d3:56:c4:e1:a8:e5:6b:47:24:ab: f4:40:76:93:6f:35:cb:3b:f0:20:23:78:e3:7d:31:3b:2e:e7: 31:33:3e:dd:2d:6a:cb:a2:47:e6:13:30:e8:89:b7:5f:ab:b7: 61:ec:11:33:64:81:94:6b:41:a5:0a:d3:72:f8:ed:77:54:de: 55:10:38:ec:4a:4f:c0:13:b3:59:54:12:aa:ad:53:63:86:24: 03:64:ad:e3:b0:04:ea:33:7b:7e:ed:ac:2b:5b:62:11:55:4e: 2f:99:14:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjcyRjExMC8GA1UEBRMoMTI0NDc4NUQ0MEM1RUM1OERGQzRBMzI4NTQwRjFCMzkz REVBMjM3NTAeFw0yNDA5MTUxMDE4NDZaFw0yNDA5MjIxMDE4NDZaMBgxFjAUBgNV BAMTDTY2ZTZiNDg2LTA3ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0zcGKixoRLxQntqdZ5XtNRbkBjLQPsEZlSr41dbev0y1FjwX3DN8gdglrNcrs GqYfdNGNBtxfcXguZrW/9SoQsZ/skYX2RvpltDdtJ5F4vJIfz7SvDgz5Tsr+eh/6 Rj1QJdMCgLVVXMYlMXBlkYy/0Nb6Se8odK+hDIZ3yEigXAyJ6FriKN2eIXwUQyZQ y0mf0SzukLOPGmqs9/P5esYm4bn4MlMJ1I5b1rcvxzrz1ByT2APVYvBlsIPtPsq8 XENuYdWbnlNAHU2uP3VeCyCTu7w+R6Kk98TJ7UxXDBiUrN0cX4dH0+OK/v9HsIwG Qugxal9KlFMJw+5aso2o3VtHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkW+rZSd9 Z1Cx0BEDqtzYywQtvPYwHwYDVR0jBBgwFoAUEkR4XUDF7FjfxKMoVA8bOT3qI3Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCNzJGLzJGQjQ5QjNFNDNE MTExRUY4QkU4RDg3QkM0RjlBRTAyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWtSNFhVREY3RmpmeEtNb1ZBOGJPVDNxSTNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC NzJGLzJGQjQ5QjNFNDNEMTExRUY4QkU4RDg3QkM0RjlBRTAyL0VrUjRYVURGN0Zq ZnhLTW9WQThiT1QzcUkzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbW88ZzxRRmBdqGzYeo/HdccWCMNIpDI1Dg+JQu2Zn/64tMZuJ+98FM kgdi1OgqphVoyjwFmA9BYz3c6YyjaMTZdbaklCJbfmjSLZYv01VLknQdbO8OBRjL vTRJ+7t2xUm76CZXpPIavrpdz2rQkElHyu23JcsjjcC5AZ5PvCZGP1LQmNDxWiCR dvQ81rhvktJcyhrZ/EzB01bE4ajla0ckq/RAdpNvNcs78CAjeON9MTsu5zEzPt0t asuiR+YTMOiJt1+rt2HsETNkgZRrQaUK03L47XdU3lUQOOxKT8ATs1lUEqqtU2OG JANkreOwBOoze37trCtbYhFVTi+ZFLs= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:36 2024 by rpki-client on console-ams.rpki-client.org