$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: /hyEJJg2WkgxZOaDxT6jZ1u0LNh4ATye9RsFDaf7+oE= Subject key identifier: 4B:98:C9:7B:AC:49:A3:0D:2C:21:84:55:2D:F2:D8:6F:1E:4C:10:79 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 093B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 11A9 Signing time: Sun 24 Nov 2024 19:49:37 +0000 Manifest this update: Sun 24 Nov 2024 19:49:37 +0000 Manifest next update: Sun 01 Dec 2024 19:49:37 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: ufkpWyjgJAq3jBekm3SGGsurtBpffpbRTU1NtEKVNUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2363 (0x93b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Nov 24 19:49:37 2024 GMT Not After : Dec 1 19:49:37 2024 GMT Subject: CN=67438351-0b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:01:58:a2:4f:86:9c:47:3f:31:b8:8e:e0: 6f:ae:2d:74:7c:cc:df:2e:db:46:07:33:d4:20:2b: 2b:13:fa:98:da:da:e0:f7:9f:4f:07:0c:c9:4c:5c: 3c:3d:34:3f:24:eb:f9:67:35:9c:5b:a0:25:4a:43: 16:c9:8d:f8:9d:68:23:41:c4:f2:07:1a:f0:35:71: d6:d8:86:0c:ab:58:c2:4c:ba:ad:36:b0:1a:d9:7c: ed:10:bc:2f:eb:c7:4f:36:ec:43:2d:34:d6:cf:19: 4f:91:95:51:2f:9a:6a:e6:d9:15:3c:29:80:7d:62: 20:a8:c1:7b:77:ee:b5:9a:80:22:c3:e1:b9:52:7b: c2:5d:b2:55:7c:d3:e9:c7:a6:90:69:0f:19:68:af: 7e:9a:0f:84:35:52:ce:73:9e:8f:75:1b:2d:99:52: 5c:97:de:1b:0f:83:98:6a:8e:c7:ff:34:6f:0f:49: dc:a1:13:47:e6:2f:b6:dc:0c:69:21:74:06:10:bc: fb:d8:82:6d:b1:a1:c1:06:e3:6f:b0:fd:d6:79:68: 2b:c6:5c:fa:df:55:1c:34:db:63:2a:e3:ff:a4:3a: b4:ab:a4:8d:91:3b:db:7b:05:2f:16:ac:61:c6:2a: 20:57:63:ec:16:32:e6:42:86:12:98:4b:47:4c:07: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:98:C9:7B:AC:49:A3:0D:2C:21:84:55:2D:F2:D8:6F:1E:4C:10:79 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0d:ef:e5:c0:36:8a:7b:04:42:b5:68:8e:cf:a6:76:f9:ce: a5:c8:a4:a9:0d:ef:6c:cc:05:4c:48:35:af:1b:13:c7:d9:84: 6c:df:84:20:6b:54:eb:14:d0:18:fb:16:b0:71:5b:3f:c3:56: f3:a2:72:17:69:e3:df:74:6a:00:97:da:7e:71:c4:5d:d4:10: fd:4c:94:49:70:79:5e:4a:0a:de:e0:a1:d2:61:1b:a5:7c:9b: 4d:f0:e7:98:f9:83:bc:75:b9:a9:7f:e0:2a:35:b4:cc:af:d6: 57:57:46:b9:aa:6d:cb:72:d0:2e:ab:5f:aa:d5:26:67:e0:65: 84:01:1e:d6:58:90:e9:f8:b0:73:65:5a:14:a9:05:44:72:3d: 8f:bf:e2:e8:79:26:3a:5d:54:04:68:2a:f8:b7:12:9d:d0:29: 7f:96:24:18:6f:a3:6d:2c:65:88:5a:d8:20:bd:31:3e:4a:ea: 33:89:6f:85:8b:a3:f5:3a:5a:d0:f7:08:ba:f7:d5:b4:3b:d9: c5:7a:f6:d4:68:e0:2f:34:2d:21:b2:52:6f:bc:ed:0d:36:4e: ce:b7:39:07:f3:55:37:ff:2e:77:c3:7c:44:b5:bd:5a:9e:dd: 56:90:8c:20:5d:ae:56:19:c8:9c:97:37:29:97:6c:c6:ec:9e: 76:3d:1c:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjQxMTI0MTk0OTM3WhcNMjQxMjAxMTk0OTM3WjAYMRYwFAYD VQQDEw02NzQzODM1MS0wYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqUBWKJPhpxHPzG4juBvri10fMzfLttGBzPUICsrE/qY2trg959PBwzJTFw8 PTQ/JOv5ZzWcW6AlSkMWyY34nWgjQcTyBxrwNXHW2IYMq1jCTLqtNrAa2XztELwv 68dPNuxDLTTWzxlPkZVRL5pq5tkVPCmAfWIgqMF7d+61moAiw+G5UnvCXbJVfNPp x6aQaQ8ZaK9+mg+ENVLOc56PdRstmVJcl94bD4OYao7H/zRvD0ncoRNH5i+23Axp IXQGELz72IJtsaHBBuNvsP3WeWgrxlz631UcNNtjKuP/pDq0q6SNkTvbewUvFqxh xiogV2PsFjLmQoYSmEtHTAeH/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuYyXus SaMNLCGEVS3y2G8eTBB5MB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnDe/lwDaKewRCtWiOz6Z2+c6lyKSpDe9szAVMSDWvGxPH2YRs34Qg a1TrFNAY+xawcVs/w1bzonIXaePfdGoAl9p+ccRd1BD9TJRJcHleSgre4KHSYRul fJtN8OeY+YO8dbmpf+AqNbTMr9ZXV0a5qm3LctAuq1+q1SZn4GWEAR7WWJDp+LBz ZVoUqQVEcj2Pv+LoeSY6XVQEaCr4txKd0Cl/liQYb6NtLGWIWtggvTE+SuoziW+F i6P1OlrQ9wi699W0O9nFevbUaOAvNC0hslJvvO0NNk7OtzkH81U3/y53w3xEtb1a nt1WkIwgXa5WGciclzcpl2zG7J52PRz5 -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:08 2024 by rpki-client on console-ams.rpki-client.org