$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft File: mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json) Hash identifier: IVZoeO70iJKXFTBaizw1DqpebNmGR+5byRbxmKXdDQo= Subject key identifier: 15:A0:F3:0B:87:09:83:24:B1:69:D4:45:7B:13:77:85:87:45:13:44 Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07 Certificate issuer: /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807 Certificate serial: 16DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft Manifest number: 1ECF Signing time: Fri 22 Nov 2024 16:38:45 +0000 Manifest this update: Fri 22 Nov 2024 16:38:45 +0000 Manifest next update: Fri 29 Nov 2024 16:38:45 +0000 Files and hashes: 1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: njr78hTZJpdloKiEk4i7p0z0Avd7yX3C+J9CPG6f0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5850 (0x16da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807 Validity Not Before: Nov 22 16:38:45 2024 GMT Not After : Nov 29 16:38:45 2024 GMT Subject: CN=6740b395-4929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:1c:41:cd:b6:15:d6:6c:4c:11:ee:05:eb: 17:a0:5d:7e:dc:0a:3f:4e:91:67:f3:40:45:f7:21: ab:0b:b0:b4:5a:1c:8f:48:46:fc:08:2b:e2:70:49: 7a:24:f2:c2:7f:d6:b2:ff:96:26:43:be:4e:91:4b: 36:08:51:a1:f8:5f:3b:33:78:55:51:be:2f:6f:c7: 51:b5:49:da:71:c5:20:91:ea:da:a8:87:5d:3e:4d: 68:dd:87:9c:96:3a:84:c9:c5:9b:c0:50:d9:9d:f3: e9:c8:b1:2e:84:18:42:83:13:02:34:4b:c3:f7:ae: 21:cf:b4:44:ed:e1:f3:3c:71:46:76:cf:16:19:4f: 6a:06:09:17:0e:32:a7:17:0a:9d:91:38:a5:64:7b: 74:d8:08:be:83:36:01:43:3a:9f:5f:6b:f6:98:8e: 83:fb:76:a6:c5:67:01:e6:d7:ec:93:84:05:e6:75: 59:e0:b8:22:67:a7:c8:f8:00:83:98:66:ed:5a:81: 25:2f:d5:d2:e6:0e:7b:2d:06:19:9e:32:41:23:13: cc:6b:c1:c1:38:a8:ca:dc:af:22:e6:1d:55:b4:bf: 8a:52:0a:9b:10:9b:4d:a8:59:97:da:fd:b4:d7:01: 0b:5e:0b:7a:b9:d3:7a:67:5a:9b:65:f2:fa:9c:31: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A0:F3:0B:87:09:83:24:B1:69:D4:45:7B:13:77:85:87:45:13:44 X509v3 Authority Key Identifier: keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:64:57:77:7d:8a:40:53:2b:35:c0:5f:18:5d:de:90:05: e7:af:8c:88:7c:78:be:0e:30:98:3e:34:0e:b9:0d:fe:d6:7e: 1f:eb:38:2b:3a:54:60:85:77:2e:24:54:f9:fa:89:b6:54:25: ba:bc:1f:4e:bf:71:8b:a8:eb:56:5a:a1:6d:4f:3d:66:89:55: f9:2f:41:45:22:fd:dd:41:f6:e9:0b:a5:76:da:3e:da:75:47: 8e:6c:34:55:d6:75:ce:59:99:35:67:90:68:17:99:cb:36:d3: ad:8f:d7:0b:70:62:b2:1f:7d:ba:fb:c0:1c:74:8b:0a:75:e2: b5:68:8b:ac:a6:34:71:88:6a:da:86:5f:17:79:31:6d:aa:d5: 35:70:87:1e:f5:4b:89:51:73:ac:ee:ba:e0:e0:16:98:6c:47: bc:14:8a:1e:85:27:cd:51:29:1a:af:4d:63:e5:ee:4f:53:ff: 56:d9:61:66:5e:ce:a1:e3:c9:cf:f6:9a:7c:c9:7a:40:26:ab: 82:8c:72:3e:f5:ad:01:4e:aa:e2:59:f2:11:fc:f6:6c:56:a9: 24:ed:fe:99:4c:a7:cf:cb:85:16:70:a7:13:9e:5b:10:5d:97: 7a:68:8f:5a:52:49:7c:c6:a0:a3:7e:e5:74:f4:b6:ec:c2:c1: 3b:50:64:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDk5ODU5QjFFRjAyMTRCQjlGQ0U4RTVCRjE1MjZGM0JE MTFFQzI4MDcwHhcNMjQxMTIyMTYzODQ1WhcNMjQxMTI5MTYzODQ1WjAYMRYwFAYD VQQDEw02NzQwYjM5NS00OTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCEcQc22FdZsTBHuBesXoF1+3Ao/TpFn80BF9yGrC7C0WhyPSEb8CCvicEl6 JPLCf9ay/5YmQ75OkUs2CFGh+F87M3hVUb4vb8dRtUnaccUgkeraqIddPk1o3Yec ljqEycWbwFDZnfPpyLEuhBhCgxMCNEvD964hz7RE7eHzPHFGds8WGU9qBgkXDjKn FwqdkTilZHt02Ai+gzYBQzqfX2v2mI6D+3amxWcB5tfsk4QF5nVZ4LgiZ6fI+ACD mGbtWoElL9XS5g57LQYZnjJBIxPMa8HBOKjK3K8i5h1VtL+KUgqbEJtNqFmX2v20 1wELXgt6udN6Z1qbZfL6nDERGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWg8wuH CYMksWnURXsTd4WHRRNEMB8GA1UdIwQYMBaAFJmFmx7wIUu5/OjlvxUm870R7CgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3bjg2T1dfRlNienZSSHNL QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ZV2JIdkFoUzduODZPV19GU2J6dlJIc0tBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3 bjg2T1dfRlNienZSSHNLQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjt2RXd32KQFMrNcBfGF3ekAXnr4yIfHi+DjCYPjQOuQ3+1n4f6zgr OlRghXcuJFT5+om2VCW6vB9Ov3GLqOtWWqFtTz1miVX5L0FFIv3dQfbpC6V22j7a dUeObDRV1nXOWZk1Z5BoF5nLNtOtj9cLcGKyH326+8AcdIsKdeK1aIuspjRxiGra hl8XeTFtqtU1cIce9UuJUXOs7rrg4BaYbEe8FIoehSfNUSkar01j5e5PU/9W2WFm Xs6h48nP9pp8yXpAJquCjHI+9a0BTqriWfIR/PZsVqkk7f6ZTKfPy4UWcKcTnlsQ XZd6aI9aUkl8xqCjfuV09LbswsE7UGSV -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org