$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: vkP/9GvEI9kCanM6RFhDG/wEJYgp7e428qIn7RBMdFk= Subject key identifier: 7B:DE:65:FF:30:06:18:1B:AC:C1:F6:F5:93:D7:28:3D:B7:50:98:A9 Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: 58 Signing time: Thu 21 Nov 2024 05:12:16 +0000 Manifest this update: Thu 21 Nov 2024 05:12:16 +0000 Manifest next update: Thu 28 Nov 2024 05:12:16 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: U0T13u6hmR9UZagqEmJMV+qATqRB13gg7n95rCcZYd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Nov 21 05:12:16 2024 GMT Not After : Nov 28 05:12:16 2024 GMT Subject: CN=673ec130-0d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:96:d3:6f:67:06:d4:05:2f:3c:c2:fe:be:c3: f7:d0:8e:f6:77:41:75:7e:d4:94:a8:6c:6d:97:92: 1a:12:19:cb:75:00:10:00:c7:d4:05:fc:ef:b2:32: 0d:15:f3:5d:3c:ba:58:63:6e:c5:c6:9b:85:73:ef: 20:42:60:b9:a8:10:33:68:3e:b2:e8:ed:f3:f8:80: 4a:c9:82:e4:db:e8:20:88:65:9e:1f:a5:35:b6:a2: 22:6c:85:8a:1b:55:06:a3:4c:04:9f:3a:00:b6:de: ed:d8:f0:e1:f6:0a:3e:ff:b0:81:69:bb:08:87:97: d6:34:04:c4:24:4c:8b:57:d9:e2:be:99:ae:19:d0: 4d:49:03:14:9b:a2:cc:a9:ca:0c:72:e9:ce:0a:2d: af:c4:c8:82:58:b5:08:17:c7:8b:59:da:ae:a3:1f: 6d:58:cc:52:00:71:3a:2f:84:6d:1e:d6:10:ac:57: 03:65:b5:4a:0a:7b:0e:91:5f:77:6d:36:cf:3f:72: 73:62:05:7c:21:49:5e:f1:77:cb:9d:6c:03:a2:00: f2:de:18:22:85:4f:95:c9:28:ed:26:a2:f9:cd:9f: cc:b7:84:36:cf:3d:8e:e3:03:59:e3:19:e6:6f:61: d8:58:41:c6:67:a8:e2:7d:15:cd:dc:e9:f6:94:db: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DE:65:FF:30:06:18:1B:AC:C1:F6:F5:93:D7:28:3D:B7:50:98:A9 X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:ac:d8:0f:34:10:8b:5d:97:6d:1e:11:d9:06:e2:db:ce:66: 07:83:69:b1:00:b4:28:7c:2b:bb:73:71:cd:81:bd:c5:b4:0f: cf:90:aa:93:2d:c2:c2:c1:74:e0:2d:c6:66:1b:fb:38:c9:d2: 6b:06:81:03:08:ac:50:53:89:83:78:b7:f1:f8:85:b3:7e:b2: 00:b5:77:c3:0a:6e:b8:b6:c3:77:f7:6b:86:0e:2a:6f:51:e3: 41:29:90:52:21:37:bd:c0:5a:57:96:ab:33:8a:ed:a9:5e:5b: eb:15:81:94:6d:67:14:b8:4d:3c:33:3a:1e:3c:45:b9:09:bb: c6:1d:ca:7c:40:db:5d:2b:a3:a7:6d:0d:f1:98:4a:7e:06:a9: 3d:8f:58:01:2b:16:aa:7e:1d:ac:ea:f7:ad:3e:63:00:ec:56: c3:1c:70:9e:0c:d4:f3:8a:e9:5f:37:a3:23:35:f3:2d:6b:95: 3a:5f:62:15:ca:e3:3a:4f:ee:bf:47:17:80:ec:6c:a4:26:b4: 6f:2f:6f:7b:ab:7f:6c:c5:c0:5b:89:33:eb:09:73:29:25:c7: 69:74:b1:64:02:5d:e0:4b:15:67:d7:42:11:34:3e:96:47:fc: 54:31:9a:a7:0a:89:0b:51:b5:2f:3d:88:c6:d4:13:b9:02:19: 69:29:e9:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEIzMzExMC8GA1UEBRMoQkNFRTEyODA1Mzg5QjU3OEMzNUZEOEI0MjU1QTYwODFE MjY4M0Y3QzAeFw0yNDExMjEwNTEyMTZaFw0yNDExMjgwNTEyMTZaMBgxFjAUBgNV BAMTDTY3M2VjMTMwLTBkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYltNvZwbUBS88wv6+w/fQjvZ3QXV+1JSobG2XkhoSGct1ABAAx9QF/O+yMg0V 8108ulhjbsXGm4Vz7yBCYLmoEDNoPrLo7fP4gErJguTb6CCIZZ4fpTW2oiJshYob VQajTASfOgC23u3Y8OH2Cj7/sIFpuwiHl9Y0BMQkTItX2eK+ma4Z0E1JAxSbosyp ygxy6c4KLa/EyIJYtQgXx4tZ2q6jH21YzFIAcTovhG0e1hCsVwNltUoKew6RX3dt Ns8/cnNiBXwhSV7xd8udbAOiAPLeGCKFT5XJKO0movnNn8y3hDbPPY7jA1njGeZv YdhYQcZnqOJ9Fc3c6faU24brAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe95l/zAG GBuswfb1k9coPbdQmKkwHwYDVR0jBBgwFoAUvO4SgFOJtXjDX9i0JVpggdJoP3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QjMzLzI0NEY4NDlBMjIx RTExRUY5MzQ0QTMwOUM0RjlBRTAyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Az dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk80U2dGT0p0WGpEWDlpMEpWcGdnZEpvUDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 QjMzLzI0NEY4NDlBMjIxRTExRUY5MzQ0QTMwOUM0RjlBRTAyL3ZPNFNnRk9KdFhq RFg5aTBKVnBnZ2RKb1Azdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAO6s2A80EItdl20eEdkG4tvOZgeDabEAtCh8K7tzcc2BvcW0D8+QqpMt wsLBdOAtxmYb+zjJ0msGgQMIrFBTiYN4t/H4hbN+sgC1d8MKbri2w3f3a4YOKm9R 40EpkFIhN73AWleWqzOK7aleW+sVgZRtZxS4TTwzOh48RbkJu8YdynxA210ro6dt DfGYSn4GqT2PWAErFqp+Hazq960+YwDsVsMccJ4M1POK6V83oyM18y1rlTpfYhXK 4zpP7r9HF4DsbKQmtG8vb3urf2zFwFuJM+sJcyklx2l0sWQCXeBLFWfXQhE0PpZH /FQxmqcKiQtRtS89iMbUE7kCGWkp6Qs= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org