$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json) Hash identifier: GtJ1zPXREn1hWPBx/EpcC7jAYK2tmkdQqezOj7ky2Qw= Subject key identifier: A7:7E:91:93:00:BD:CA:0D:0B:0C:5F:E2:AB:A1:01:B2:E3:69:43:4E Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft Manifest number: 2B Signing time: Sat 23 Nov 2024 05:39:58 +0000 Manifest this update: Sat 23 Nov 2024 05:39:57 +0000 Manifest next update: Sat 30 Nov 2024 05:39:57 +0000 Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: bs9KHTj8pTVeBytQILitNQVYReRJL/tmNJd4OSsBF3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Validity Not Before: Nov 23 05:39:57 2024 GMT Not After : Nov 30 05:39:57 2024 GMT Subject: CN=67416aad-23bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:93:69:f5:de:06:1d:da:1d:81:9c:5b:1b: d2:fa:56:94:a0:ae:4d:9c:3c:8f:85:78:4a:6e:b7: 3b:fc:b0:b6:c4:6b:ee:d0:80:fd:28:56:7c:69:a0: c5:df:9c:8f:ef:87:d4:17:8a:b8:23:b8:d2:15:9e: f0:3f:66:37:6b:10:83:77:d0:e4:c0:06:9e:55:3f: 00:16:14:cd:d7:0a:17:b3:15:47:93:36:08:3f:eb: e9:aa:f6:45:5d:f3:09:66:dd:0f:ce:cc:fc:e3:dc: 70:a2:b8:1c:5d:92:f0:c1:c0:9b:03:2f:b3:2c:88: ff:64:3f:fc:31:34:b7:20:d9:aa:15:e0:a3:ef:5e: 01:1e:77:1c:cd:fa:6d:5d:ef:82:29:7e:20:4e:f8: e1:2e:f7:87:1c:7d:64:21:71:f0:89:15:29:a6:75: d3:b9:77:6d:9a:32:24:ef:dc:20:67:7a:af:df:70: 00:1d:26:08:75:07:84:9a:30:8e:0a:73:4c:1e:3d: 49:6d:81:fd:87:f5:dd:3b:15:b2:24:37:df:66:da: eb:64:b2:52:d5:cc:a0:0a:45:d8:62:cb:d7:70:b3: c3:4e:06:ad:08:c3:99:64:1c:61:4c:8c:ac:62:f2: 0d:09:b7:6b:db:99:cb:0f:f3:05:e5:3a:fb:da:1c: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:91:93:00:BD:CA:0D:0B:0C:5F:E2:AB:A1:01:B2:E3:69:43:4E X509v3 Authority Key Identifier: keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:94:ac:9d:ba:80:2d:fc:15:e4:ec:35:67:f5:e8:a9:27:29: 3f:7a:b0:ca:58:bf:e1:24:c3:40:ef:2e:20:22:92:a1:d7:91: 63:7b:37:4c:92:6a:76:62:20:33:9b:82:6a:a9:8d:b8:bb:d6: 50:bc:62:54:12:96:2a:3b:e6:a7:b3:ff:12:93:95:dc:a9:a2: 15:ef:6f:34:de:89:53:6a:89:fc:eb:f4:44:27:c3:b0:6e:73: 40:6d:8f:fd:59:3c:07:53:6d:15:8b:1f:8c:54:59:82:a0:f3: 6d:ce:ad:64:52:c0:3e:4b:b3:12:ec:22:02:5a:64:2d:a7:df: 73:c6:6c:6c:ce:d4:c0:96:f9:d7:7f:a3:da:ae:c5:98:9f:82: f1:e7:8f:3e:0b:57:77:c7:66:8d:40:f9:a3:f7:63:7b:3e:a8: ee:f2:3f:ed:32:d2:3b:ad:35:4b:d1:a4:76:c6:f9:cc:cf:81: 1f:8b:54:2c:6b:b6:79:15:3e:9d:b2:ed:6e:27:78:4b:f2:1b: 80:8b:12:1d:e5:10:86:88:06:61:45:38:d1:56:94:1d:78:da: 75:fa:0f:58:13:6a:1b:1d:e8:25:14:d6:1f:61:21:44:4e:08: 2e:ec:0d:0f:b9:75:61:ca:36:17:5e:d4:da:82:e4:07:57:59: 56:be:3b:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MERFMDExMC8GA1UEBRMoQTFEMjVERTNBNTU5RkRBRjMwNDQ5RDk0NzdEMTc2RUEz Nzg5NzFGODAeFw0yNDExMjMwNTM5NTdaFw0yNDExMzAwNTM5NTdaMBgxFjAUBgNV BAMTDTY3NDE2YWFkLTIzYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnR5Np9d4GHdodgZxbG9L6VpSgrk2cPI+FeEputzv8sLbEa+7QgP0oVnxpoMXf nI/vh9QXirgjuNIVnvA/ZjdrEIN30OTABp5VPwAWFM3XChezFUeTNgg/6+mq9kVd 8wlm3Q/OzPzj3HCiuBxdkvDBwJsDL7MsiP9kP/wxNLcg2aoV4KPvXgEedxzN+m1d 74IpfiBO+OEu94ccfWQhcfCJFSmmddO5d22aMiTv3CBneq/fcAAdJgh1B4SaMI4K c0wePUltgf2H9d07FbIkN99m2utkslLVzKAKRdhiy9dws8NOBq0Iw5lkHGFMjKxi 8g0Jt2vbmcsP8wXlOvvaHLnbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp36RkwC9 yg0LDF/iq6EBsuNpQ04wHwYDVR0jBBgwFoAUodJd46VZ/a8wRJ2Ud9F26jeJcfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwREUwLzdBNjVFOTNDNkE4 NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2RKZDQ2VlpfYTh3UkoyVWQ5RjI2amVKY2ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw REUwLzdBNjVFOTNDNkE4NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4 d1JKMlVkOUYyNmplSmNmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHCUrJ26gC38FeTsNWf16KknKT96sMpYv+Ekw0DvLiAikqHXkWN7N0yS anZiIDObgmqpjbi71lC8YlQSlio75qez/xKTldypohXvbzTeiVNqifzr9EQnw7Bu c0Btj/1ZPAdTbRWLH4xUWYKg823OrWRSwD5LsxLsIgJaZC2n33PGbGzO1MCW+dd/ o9quxZifgvHnjz4LV3fHZo1A+aP3Y3s+qO7yP+0y0jutNUvRpHbG+czPgR+LVCxr tnkVPp2y7W4neEvyG4CLEh3lEIaIBmFFONFWlB142nX6D1gTahsd6CUU1h9hIURO CC7sDQ+5dWHKNhde1NqC5AdXWVa+OyA= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org