$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: 1EVqnogIARYYPUlAgH/6cDYiCjU1lbTCnCSutasbbtA= Subject key identifier: A8:82:86:EE:18:A3:7D:50:7A:8A:85:21:13:F4:58:02:A1:1D:A9:09 Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: 30 Signing time: Mon 25 Nov 2024 05:35:21 +0000 Manifest this update: Mon 25 Nov 2024 05:35:20 +0000 Manifest next update: Mon 02 Dec 2024 05:35:20 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: ZhVOqEfLUpQX/nm0aU1Z2cSHIlpTX7F1EyzkcADFMW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Nov 25 05:35:20 2024 GMT Not After : Dec 2 05:35:20 2024 GMT Subject: CN=67440c98-0dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:78:be:50:4b:f4:3b:91:b6:2b:61:77:26: 02:f8:22:8f:aa:88:e0:b6:0e:35:e3:73:66:67:16: 19:02:e4:94:72:3f:46:34:e2:0c:3f:a7:14:dc:7b: f6:6e:b3:03:c0:6b:3b:7f:c7:21:08:52:8e:c9:6b: 07:75:7f:31:35:ca:64:5b:96:c4:bc:99:1e:c1:2a: 54:66:d3:d7:13:16:f9:ee:46:43:21:c4:6f:9b:45: 60:4c:df:0f:21:4b:4a:87:6a:d5:35:60:04:07:e6: 15:7c:f4:8f:b1:c7:0e:07:c0:5a:cd:dc:3c:45:ae: d3:dd:42:38:bd:ce:6f:f5:68:c6:63:3f:5c:2c:46: 8d:ef:13:4d:69:3d:de:54:a9:f3:77:fb:3f:52:a7: 5e:43:bf:0b:7e:25:6a:d2:97:5f:95:99:35:09:48: 5d:8d:e4:6a:f2:81:88:03:e8:64:5d:42:5c:ee:d1: 1d:2e:52:8d:b4:4b:02:77:23:6d:bf:cb:2c:e3:02: 19:41:60:8d:d2:0a:a4:94:1d:eb:cc:c4:fc:31:94: be:17:f4:16:3a:33:93:78:7f:bf:f5:d1:46:58:07: 27:7c:cd:65:5e:cc:75:63:b5:b7:c4:27:c1:88:e5: fc:41:31:63:66:f1:fe:9b:37:e0:3b:4d:cb:dc:50: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:86:EE:18:A3:7D:50:7A:8A:85:21:13:F4:58:02:A1:1D:A9:09 X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a2:9d:0e:25:2c:ad:ea:ea:20:51:22:e9:55:53:7f:7f:d6: 78:a0:fa:ad:ff:a9:de:50:81:a0:c5:ae:ae:d8:7b:d5:d3:01: cc:95:7a:28:85:09:5d:76:76:a1:06:08:c3:0a:9b:bb:e3:b1: f2:de:1a:47:b3:91:21:83:28:18:1f:07:98:87:6e:1f:75:e0: a5:ba:eb:66:57:65:66:20:4f:17:36:b6:98:39:89:c8:79:3d: b4:50:80:e2:10:87:96:76:79:95:1b:7d:51:d9:c6:76:13:92: 0d:d0:01:1b:9a:23:72:8c:e8:46:60:f1:9a:88:a8:c2:ef:0e: 64:86:c5:bb:9f:c0:c1:e2:74:07:c0:1d:d4:a6:1f:ff:c9:c3: 88:99:da:a4:4d:8e:d2:67:54:10:4f:fd:44:73:4d:b6:51:55: 96:fd:1a:76:e4:df:40:15:1d:b6:fa:60:f9:30:b9:1d:86:5a: 83:b2:95:59:c3:3d:d0:df:78:9a:e1:d9:5b:b4:df:fe:23:05: a0:23:f2:08:f7:f5:61:43:55:27:53:0b:e8:15:af:3c:1f:8b: 0e:8a:46:60:18:e7:a4:6d:a8:32:e9:7a:8e:da:d3:a4:7b:c2: 71:76:b3:be:5c:76:ca:46:03:c4:cf:24:b3:4a:b7:e3:27:27: fc:d2:8d:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEMxQjExMC8GA1UEBRMoOEU4QjM0NjM5RUE1NERGODEwQjkyQkNCQTc0MjcwNEU0 Qzg4NDJDMjAeFw0yNDExMjUwNTM1MjBaFw0yNDEyMDIwNTM1MjBaMBgxFjAUBgNV BAMTDTY3NDQwYzk4LTBkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi1Xi+UEv0O5G2K2F3JgL4Io+qiOC2DjXjc2ZnFhkC5JRyP0Y04gw/pxTce/Zu swPAazt/xyEIUo7Jawd1fzE1ymRblsS8mR7BKlRm09cTFvnuRkMhxG+bRWBM3w8h S0qHatU1YAQH5hV89I+xxw4HwFrN3DxFrtPdQji9zm/1aMZjP1wsRo3vE01pPd5U qfN3+z9Sp15Dvwt+JWrSl1+VmTUJSF2N5GrygYgD6GRdQlzu0R0uUo20SwJ3I22/ yyzjAhlBYI3SCqSUHevMxPwxlL4X9BY6M5N4f7/10UZYByd8zWVezHVjtbfEJ8GI 5fxBMWNm8f6bN+A7TcvcUG91AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqIKG7hij fVB6ioUhE/RYAqEdqQkwHwYDVR0jBBgwFoAUjos0Y56lTfgQuSvLp0JwTkyIQsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QzFCL0Q5NjVCQTQwNjQx QjExRUY5ODkxNTQ3RkM0RjlBRTAyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvam9zMFk1NmxUZmdRdVN2THAwSndUa3lJUXNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 QzFCL0Q5NjVCQTQwNjQxQjExRUY5ODkxNTQ3RkM0RjlBRTAyL2pvczBZNTZsVGZn UXVTdkxwMEp3VGt5SVFzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABainQ4lLK3q6iBRIulVU39/1nig+q3/qd5QgaDFrq7Ye9XTAcyVeiiF CV12dqEGCMMKm7vjsfLeGkezkSGDKBgfB5iHbh914KW662ZXZWYgTxc2tpg5ich5 PbRQgOIQh5Z2eZUbfVHZxnYTkg3QARuaI3KM6EZg8ZqIqMLvDmSGxbufwMHidAfA HdSmH//Jw4iZ2qRNjtJnVBBP/URzTbZRVZb9Gnbk30AVHbb6YPkwuR2GWoOylVnD PdDfeJrh2Vu03/4jBaAj8gj39WFDVSdTC+gVrzwfiw6KRmAY56RtqDLpeo7a06R7 wnF2s75cdspGA8TPJLNKt+MnJ/zSjSc= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:51 2024 by rpki-client on console-ams.rpki-client.org