$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: 9xDvWVeTsa/oLNfFHxTW60AvE1Cs1ZbC6Jv/t0N3lew= Subject key identifier: C5:E7:FE:4F:5D:47:DD:A8:8B:EC:DB:0B:57:10:51:E8:28:8F:AD:A9 Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: 42 Signing time: Sat 23 Nov 2024 05:22:07 +0000 Manifest this update: Sat 23 Nov 2024 05:22:07 +0000 Manifest next update: Sat 30 Nov 2024 05:22:07 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: XpQaspnnLGexdTjjZxFIdyv3Guauke6rD65X7bL3hOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: Nov 23 05:22:07 2024 GMT Not After : Nov 30 05:22:07 2024 GMT Subject: CN=6741667f-4cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:54:7a:7d:0b:22:0a:b0:0c:ce:18:36:e8: 98:c6:58:35:bd:39:db:cd:7e:7a:0f:fb:51:62:f9: 06:e1:3e:77:1e:43:d4:b6:90:1b:71:99:fc:c6:90: 8b:c3:f4:89:74:b7:f1:8a:93:0b:38:ba:41:b8:75: c1:ec:39:96:91:6a:56:77:78:fc:6d:9e:72:35:d0: 18:f3:56:c0:86:8c:38:c5:7a:01:27:16:52:60:9a: e0:3a:ae:40:82:6a:be:0e:6a:31:7b:c1:b1:d1:01: 93:91:40:18:8c:28:fa:af:92:9a:ff:72:6a:54:b3: f1:6d:d2:6d:e3:cf:f3:e6:ec:a1:de:77:e6:18:55: 0e:fe:cd:f1:4c:d1:08:e6:62:9c:40:0e:09:40:2f: 64:ae:e0:cc:86:f2:43:7a:29:6a:09:d3:aa:38:76: b7:5f:ef:ae:1d:2f:35:23:8d:0d:81:13:99:2d:13: 44:0c:b5:4d:2f:16:cf:35:95:61:be:bb:16:d3:64: f9:1b:98:0b:00:21:7e:27:25:98:d6:1b:0b:0b:3d: 0d:d9:8b:fd:b3:bb:00:67:81:db:09:6f:8d:cb:77: 7a:55:92:87:7d:06:b2:df:da:04:b5:53:21:5e:73: b6:21:60:1d:c0:ed:04:2e:d9:bc:cc:f4:e4:18:7e: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E7:FE:4F:5D:47:DD:A8:8B:EC:DB:0B:57:10:51:E8:28:8F:AD:A9 X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:63:02:0a:3f:25:ff:80:c4:00:d6:40:2e:1a:03:70:70:8e: fd:e4:a0:5c:d9:cd:66:1a:08:5d:59:1c:5e:c4:e6:70:59:0e: 59:99:87:33:2a:f6:26:23:aa:5b:80:8a:46:9d:08:6b:00:bf: df:88:df:e1:c4:f0:b6:49:68:64:e7:b7:4a:94:92:81:4d:09: 97:30:31:3f:dc:4e:c0:51:d3:23:91:15:a6:37:a1:1f:b2:3f: 66:a8:e9:2c:4d:f7:b0:4f:73:78:04:bc:cc:84:bd:3f:6e:9b: 6a:fd:3c:1e:75:db:51:75:80:a8:5e:f1:c9:a7:3b:9d:ae:78: 71:a4:28:7a:3e:39:1d:36:1e:d4:eb:fe:b4:a8:1c:ab:3f:13: e2:ce:63:8f:53:43:89:4c:94:cb:e4:66:00:0b:ef:32:a3:27: a6:37:e5:4d:c0:13:84:a7:c3:04:50:15:92:55:3d:a9:48:b9: 24:e5:d4:c8:fb:7d:e5:77:2f:3d:b3:bb:e5:bc:e2:39:f2:b9: e8:22:b5:d1:29:36:6b:36:d7:8b:56:bd:a1:29:70:0d:ef:d4: a3:6b:21:3e:61:a3:8e:15:de:d6:db:1c:ca:08:3b:49:73:fd: b7:ad:6f:12:df:1e:09:b9:4a:98:72:30:fc:06:24:d1:4a:1f: a9:fc:b2:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjYyOTExMC8GA1UEBRMoRDY2MTFBMzQyRTA1RTZEQ0RDMTkyNDNCRDUyRjg4RDAy QjA3ODdEMjAeFw0yNDExMjMwNTIyMDdaFw0yNDExMzAwNTIyMDdaMBgxFjAUBgNV BAMTDTY3NDE2NjdmLTRjZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb3FR6fQsiCrAMzhg26JjGWDW9OdvNfnoP+1Fi+QbhPnceQ9S2kBtxmfzGkIvD 9Il0t/GKkws4ukG4dcHsOZaRalZ3ePxtnnI10BjzVsCGjDjFegEnFlJgmuA6rkCC ar4OajF7wbHRAZORQBiMKPqvkpr/cmpUs/Ft0m3jz/Pm7KHed+YYVQ7+zfFM0Qjm YpxADglAL2Su4MyG8kN6KWoJ06o4drdf764dLzUjjQ2BE5ktE0QMtU0vFs81lWG+ uxbTZPkbmAsAIX4nJZjWGwsLPQ3Zi/2zuwBngdsJb43Ld3pVkod9BrLf2gS1UyFe c7YhYB3A7QQu2bzM9OQYfvsHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxef+T11H 3aiL7NsLVxBR6CiPrakwHwYDVR0jBBgwFoAU1mEaNC4F5tzcGSQ71S+I0CsHh9Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNjI5L0VBRkJCNTUwNDVC NDExRUY4RkRCNzQxREM0RjlBRTAyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMW1FYU5DNEY1dHpjR1NRNzFTLUkwQ3NIaDlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC NjI5L0VBRkJCNTUwNDVCNDExRUY4RkRCNzQxREM0RjlBRTAyLzFtRWFOQzRGNXR6 Y0dTUTcxUy1JMENzSGg5SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGBjAgo/Jf+AxADWQC4aA3Bwjv3koFzZzWYaCF1ZHF7E5nBZDlmZhzMq 9iYjqluAikadCGsAv9+I3+HE8LZJaGTnt0qUkoFNCZcwMT/cTsBR0yORFaY3oR+y P2ao6SxN97BPc3gEvMyEvT9um2r9PB5121F1gKhe8cmnO52ueHGkKHo+OR02HtTr /rSoHKs/E+LOY49TQ4lMlMvkZgAL7zKjJ6Y35U3AE4SnwwRQFZJVPalIuSTl1Mj7 feV3Lz2zu+W84jnyuegitdEpNms214tWvaEpcA3v1KNrIT5ho44V3tbbHMoIO0lz /betbxLfHgm5SphyMPwGJNFKH6n8sjU= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org