$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json) Hash identifier: 9MEy7/afUG+ASJZxsw+S4NXAoIwysTj7B1qUJE746g0= Subject key identifier: CA:4A:1B:B3:07:92:FE:EF:48:FB:1E:2D:E1:6B:9E:42:88:8D:77:0C Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft Manifest number: 05ED Signing time: Fri 22 Nov 2024 14:40:30 +0000 Manifest this update: Fri 22 Nov 2024 14:40:29 +0000 Manifest next update: Fri 29 Nov 2024 14:40:29 +0000 Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: kcDG0Yi0X3dmCW7xOkQcru5fQEiratss/ZF1iWu8xW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Validity Not Before: Nov 22 14:40:29 2024 GMT Not After : Nov 29 14:40:29 2024 GMT Subject: CN=674097dd-139c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:18:cb:77:1a:66:72:39:22:43:6f:d8:ca: b9:2f:74:bc:3b:d5:5d:f2:b2:14:04:c6:03:ed:3a: c7:9a:90:5b:9c:0e:0d:7c:d2:a0:21:09:90:d2:85: 3e:f2:c4:e3:7f:26:cf:85:24:9a:d2:b2:c5:67:bf: 0c:44:1d:6c:cf:d2:02:44:7a:4b:9f:5b:6b:75:e3: 8e:91:77:de:02:ce:8a:d7:ae:46:e6:ba:3a:eb:20: bf:37:b9:57:48:b5:e0:cb:14:f1:f7:8d:60:5e:cc: a0:92:44:06:c3:29:58:0b:52:31:ec:bf:ee:bd:3e: 9c:9e:79:21:2c:e1:66:05:f0:bf:85:66:97:b5:91: 94:34:98:9f:5f:a3:8c:49:ca:81:8e:7d:f3:63:2a: b6:79:8d:d7:60:04:03:04:ea:e0:e6:89:59:f0:44: 4e:32:80:b9:46:61:2b:d1:26:0b:56:eb:85:ec:24: 87:4f:ed:1b:66:ed:ad:49:af:2d:0b:3c:c1:5c:3b: e6:2c:51:bd:f3:96:8c:a6:51:a3:42:20:9b:17:0a: 13:15:b5:9a:38:0e:21:04:bd:4c:e9:f2:d8:e7:c2: 92:2b:40:76:6d:be:30:92:ad:aa:47:5b:e8:3d:4c: 23:c2:17:ce:ba:fd:b4:80:22:d3:2b:c6:1d:3c:b3: f1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4A:1B:B3:07:92:FE:EF:48:FB:1E:2D:E1:6B:9E:42:88:8D:77:0C X509v3 Authority Key Identifier: keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ce:ea:8a:da:84:3a:4a:60:ec:70:28:f7:61:a0:d1:25:7d: d5:0e:cd:56:9e:d3:d7:1b:f2:26:d9:36:a6:ef:6d:af:e2:89: c7:c8:ac:e6:31:bc:44:44:f9:e4:ba:36:70:48:38:5f:c9:65: 5c:d2:9f:f1:8d:cf:81:38:bd:0f:a8:da:95:47:0b:26:8a:9d: d8:7b:70:63:f5:68:f4:7a:66:85:0f:1c:2b:f0:b6:03:56:df: e4:7e:76:07:ca:7b:37:08:52:89:cc:d1:0e:dd:c5:2d:40:6f: 84:9a:2a:62:1c:f7:6b:9d:88:6d:2d:6f:18:b4:0c:e7:e4:93: 90:c3:43:f4:b2:09:20:ff:1e:95:ee:33:b4:27:c0:37:d4:08: 4a:35:7c:fa:bd:de:ee:78:0e:ce:ce:88:51:d9:90:76:94:18: 59:7e:a5:c2:c2:f5:7d:7d:15:82:a7:eb:97:1f:e9:dd:97:0f: 34:06:d4:a2:e6:37:91:05:aa:cd:cf:4b:1f:87:90:e1:a8:a3: a6:e0:06:fc:7a:02:0d:87:30:6d:1c:4b:f9:75:96:17:2b:9f: 65:ab:51:82:4f:5e:05:b1:1e:89:d9:6b:b8:3a:c7:74:8c:e9: e6:25:bc:f9:71:e2:93:3b:c9:77:82:fa:2e:06:78:94:e9:de: 7a:a0:78:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5QTExMTAvBgNVBAUTKENFNUYyQjQzOUJBRDVCRUJFMjcyQTcyMUVBQUNDMzhG QUFERDQ5QjQwHhcNMjQxMTIyMTQ0MDI5WhcNMjQxMTI5MTQ0MDI5WjAYMRYwFAYD VQQDEw02NzQwOTdkZC0xMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWMYy3caZnI5IkNv2Mq5L3S8O9Vd8rIUBMYD7TrHmpBbnA4NfNKgIQmQ0oU+ 8sTjfybPhSSa0rLFZ78MRB1sz9ICRHpLn1trdeOOkXfeAs6K165G5ro66yC/N7lX SLXgyxTx941gXsygkkQGwylYC1Ix7L/uvT6cnnkhLOFmBfC/hWaXtZGUNJifX6OM ScqBjn3zYyq2eY3XYAQDBOrg5olZ8EROMoC5RmEr0SYLVuuF7CSHT+0bZu2tSa8t CzzBXDvmLFG985aMplGjQiCbFwoTFbWaOA4hBL1M6fLY58KSK0B2bb4wkq2qR1vo PUwjwhfOuv20gCLTK8YdPLPxPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpKG7MH kv7vSPseLeFrnkKIjXcMMB8GA1UdIwQYMBaAFM5fK0ObrVvr4nKnIeqsw4+q3Um0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjlBMS81NzMzN0FDQThE NzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFctdmljcWNoNnF6RGo2cmRT YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psOHJRNXV0Vy12aWNxY2g2cXpEajZyZFNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjlBMS81NzMzN0FDQThENzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFct dmljcWNoNnF6RGo2cmRTYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATzuqK2oQ6SmDscCj3YaDRJX3VDs1WntPXG/Im2Tam722v4onHyKzm MbxERPnkujZwSDhfyWVc0p/xjc+BOL0PqNqVRwsmip3Ye3Bj9Wj0emaFDxwr8LYD Vt/kfnYHyns3CFKJzNEO3cUtQG+EmipiHPdrnYhtLW8YtAzn5JOQw0P0sgkg/x6V 7jO0J8A31AhKNXz6vd7ueA7OzohR2ZB2lBhZfqXCwvV9fRWCp+uXH+ndlw80BtSi 5jeRBarNz0sfh5DhqKOm4Ab8egINhzBtHEv5dZYXK59lq1GCT14FsR6J2Wu4Osd0 jOnmJbz5ceKTO8l3gvouBniU6d56oHiZ -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org