$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: ea7EZRL2Ubc7n3urZ5+BvbcNIRX/HhyR62+7R/J0LMI= Subject key identifier: 79:A0:6B:FD:1C:17:89:90:A6:4E:1C:3A:DA:BC:ED:2C:0F:DF:24:D8 Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:49:40 +0000 Manifest this update: Wed 23 Oct 2024 06:49:39 +0000 Manifest next update: Wed 30 Oct 2024 06:49:39 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: U8nC7+aHnHjav3poWIQ8VowBjcV/vMYCOORhOEq9Xe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Oct 23 06:49:39 2024 GMT Not After : Oct 30 06:49:39 2024 GMT Subject: CN=67189c84-8d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:1e:3a:46:ee:0a:fd:a0:f3:69:e3:f0:f4: 9b:75:ea:f5:a5:9a:37:53:30:5d:8b:7b:b3:ca:0f: 6b:ce:24:6d:20:c0:b3:14:6b:15:ce:e3:b6:e6:28: 4f:89:55:b5:79:f3:4b:b4:37:c7:52:7a:d2:19:cf: 26:1c:a4:46:46:18:32:c1:61:17:54:28:63:3e:66: b7:3c:35:d9:e7:a5:90:c5:db:28:00:85:60:14:1b: 8f:0c:12:c3:0a:15:8b:e1:34:8e:20:cf:83:55:99: d3:fe:2a:24:0f:8d:0e:9a:8b:47:71:a6:27:7c:13: 23:ea:94:65:00:73:61:16:f9:a6:88:f3:88:fa:0a: c8:ce:6c:b8:d5:78:81:5a:80:f2:24:5f:f3:61:dc: 78:c7:f9:84:1f:52:5a:c2:97:40:ac:d7:47:50:7d: 2f:83:07:c1:31:19:39:ed:7a:1e:9a:ca:15:16:e2: c0:f9:71:6f:da:b6:33:9d:91:50:18:aa:f2:89:60: 77:3f:89:cf:03:d5:3e:54:93:b9:10:d8:98:d2:f9: a0:d9:53:97:25:dd:8c:b1:b0:01:d0:7f:e1:84:0a: 15:d0:2a:c9:36:cf:e9:05:3e:9f:20:31:51:95:17: 63:17:01:e0:65:bb:22:e8:cb:7d:ad:c8:41:a1:3f: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A0:6B:FD:1C:17:89:90:A6:4E:1C:3A:DA:BC:ED:2C:0F:DF:24:D8 X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7c:ed:f9:26:00:36:d2:d0:16:1a:ec:55:26:1e:4a:4e:38: 27:25:96:e7:95:ce:49:1f:e1:d7:42:df:ca:23:dc:a1:65:c8: f3:3c:25:a9:f1:4f:23:62:f3:9e:16:2c:d0:ef:9a:24:6a:c4: 90:56:c6:e1:be:b0:36:d2:2d:f0:9f:3c:08:4d:ed:5b:2a:9f: f5:5e:85:bb:9d:75:9c:5e:19:c3:ab:ee:61:8a:c2:33:8c:59: 48:ba:2b:8d:0d:02:6c:f4:5e:da:de:19:6d:df:b6:74:86:09: e7:d0:ce:7f:7f:1b:95:15:f8:0d:c6:1a:2e:01:fc:f0:87:d3: 26:f0:b8:ca:33:85:20:45:12:2a:06:41:da:b8:61:6b:2b:82: bb:71:15:3b:0b:a9:29:4b:f9:06:a1:1c:f9:8f:54:00:a2:f4: 73:8b:d2:2d:59:e7:82:cc:0c:33:06:4f:9e:c0:15:b4:26:f8: 63:65:6c:f0:6f:07:65:59:e0:01:e0:40:d4:37:8a:7e:b8:a4: b5:7c:72:40:a1:84:9b:78:1c:17:0c:cd:72:87:73:3d:aa:5f: e9:e7:e0:10:02:b8:f7:4e:1b:0d:a5:6c:25:53:b8:0a:18:c3: 1f:c1:cc:db:f6:ed:e8:dc:8f:07:01:7a:a0:a9:c5:68:ab:88: 0e:c9:54:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODdGQzExMC8GA1UEBRMoRTBEQzZDQjcwOUVFQjExQkMyMDc1RjM1MkVCNkVENEU4 MThBRTcwNTAeFw0yNDEwMjMwNjQ5MzlaFw0yNDEwMzAwNjQ5MzlaMBgxFjAUBgNV BAMTDTY3MTg5Yzg0LThkMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIQB46Ru4K/aDzaePw9Jt16vWlmjdTMF2Le7PKD2vOJG0gwLMUaxXO47bmKE+J VbV580u0N8dSetIZzyYcpEZGGDLBYRdUKGM+Zrc8NdnnpZDF2ygAhWAUG48MEsMK FYvhNI4gz4NVmdP+KiQPjQ6ai0dxpid8EyPqlGUAc2EW+aaI84j6CsjObLjVeIFa gPIkX/Nh3HjH+YQfUlrCl0Cs10dQfS+DB8ExGTnteh6ayhUW4sD5cW/atjOdkVAY qvKJYHc/ic8D1T5Uk7kQ2JjS+aDZU5cl3YyxsAHQf+GEChXQKsk2z+kFPp8gMVGV F2MXAeBluyLoy32tyEGhPzl5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeaBr/RwX iZCmThw62rztLA/fJNgwHwYDVR0jBBgwFoAU4NxstwnusRvCB181LrbtToGK5wUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4N0ZDLzQyQTlCQjU0ODZF MTExRUY4Rjc3M0Y4MkM0RjlBRTAyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNE54c3R3bnVzUnZDQjE4MUxyYnRUb0dLNXdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 N0ZDLzQyQTlCQjU0ODZFMTExRUY4Rjc3M0Y4MkM0RjlBRTAyLzROeHN0d251c1J2 Q0IxODFMcmJ0VG9HSzV3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAF87fkmADbS0BYa7FUmHkpOOCcllueVzkkf4ddC38oj3KFlyPM8Janx TyNi854WLNDvmiRqxJBWxuG+sDbSLfCfPAhN7Vsqn/VehbuddZxeGcOr7mGKwjOM WUi6K40NAmz0XtreGW3ftnSGCefQzn9/G5UV+A3GGi4B/PCH0ybwuMozhSBFEioG Qdq4YWsrgrtxFTsLqSlL+QahHPmPVACi9HOL0i1Z54LMDDMGT57AFbQm+GNlbPBv B2VZ4AHgQNQ3in64pLV8ckChhJt4HBcMzXKHcz2qX+nn4BACuPdOGw2lbCVTuAoY wx/BzNv27ejcjwcBeqCpxWiriA7JVMg= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org