$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: hAVta6xtb+pNjM+q9lAK+5K5LfhfGwIFPwnqku+wYik= Subject key identifier: FD:DE:A7:ED:3D:79:6F:9A:3C:5E:25:08:49:39:6F:34:8F:67:C1:BF Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: 1C Signing time: Wed 23 Oct 2024 06:34:10 +0000 Manifest this update: Wed 23 Oct 2024 06:34:09 +0000 Manifest next update: Wed 30 Oct 2024 06:34:09 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: zW7FNwr1nOJK1mkhx82rVnyJON5B16k43bfAaOd7suU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: Oct 23 06:34:09 2024 GMT Not After : Oct 30 06:34:09 2024 GMT Subject: CN=671898e1-6291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:19:26:8b:fb:8e:4f:0f:85:2f:11:ba:cf: 53:53:d8:35:31:e1:1c:82:f2:8e:a0:45:1a:8e:f9: 24:48:80:43:41:98:e0:82:c3:90:53:f1:c4:12:0f: 6e:21:2b:c9:c1:84:76:43:f3:36:c3:b5:be:e4:93: cd:2a:83:2c:74:b8:3a:a2:89:7c:85:fd:d7:a7:ba: 76:37:d9:b0:3d:1c:bb:2f:47:0d:3f:62:38:ef:ed: 4b:21:b9:af:c7:59:e4:68:1d:a8:87:6b:53:cf:46: 3e:8d:20:22:f4:dc:48:22:bd:30:01:03:9a:cd:46: 8c:02:5d:97:f6:75:26:fb:09:ad:2f:09:62:be:75: 71:70:ab:f1:bf:07:06:82:0b:d3:93:39:51:2f:1e: b0:96:cd:bc:ca:58:26:44:ce:61:8c:91:64:78:58: a0:7b:f6:7c:7f:77:33:eb:6b:76:33:84:3c:8f:db: f8:34:bb:3a:7c:6c:e6:fb:3d:c3:86:ee:0b:04:90: 4b:ad:85:b2:69:3d:ed:61:f6:c2:fa:fb:33:32:c3: 92:4d:6a:41:75:fb:97:cf:e0:dd:03:8c:73:73:01: fe:75:f7:d1:9b:4f:5a:6e:ca:1f:a3:0f:c7:5e:c3: 7d:3c:b6:e4:17:ca:3b:82:60:c5:65:4a:5a:f3:b7: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DE:A7:ED:3D:79:6F:9A:3C:5E:25:08:49:39:6F:34:8F:67:C1:BF X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:af:c2:3f:04:f6:54:c5:13:ae:cc:9a:30:ea:b0:a4:a0:51: a4:e1:99:76:14:36:ab:8b:a1:44:e5:26:bb:b1:99:68:16:52: 4a:05:41:c2:2d:38:7a:42:a0:5b:fb:f9:0f:41:2b:53:44:3f: 2a:c9:a5:66:bc:bf:c1:c6:d0:d7:7b:d9:c7:f0:ed:1e:77:fb: 6f:e7:d1:00:c6:47:2f:55:78:b3:3e:24:b2:f7:07:21:70:16: 97:6f:6b:6f:8c:0b:0b:19:7e:b7:47:d0:56:a8:e8:75:87:46: e8:64:b8:75:3e:01:4a:67:3f:42:2f:ca:ed:6a:68:21:60:65: 28:d6:89:de:c3:99:19:bc:cf:55:15:21:db:0c:77:fd:96:a3: 1b:c0:f3:f1:c9:0d:60:ce:c8:24:cb:a6:03:2b:92:3d:6c:73: 6e:67:b0:81:7c:d5:e0:79:9a:08:f9:f5:16:f0:fd:2c:56:af: d1:1e:c8:59:9a:c2:5d:ee:04:2c:cd:c9:91:7a:f7:ae:f1:a5: e9:0d:82:ef:34:c4:8a:62:dc:e0:3c:7d:26:2d:20:2e:31:13: 0e:d0:de:0e:c9:e6:e7:40:25:93:f3:37:99:e8:a0:40:b3:fb: 14:ec:7c:fe:3a:3f:8f:ed:ce:88:72:fc:d8:48:20:7a:31:81: 19:ae:40:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzE3NTExMC8GA1UEBRMoODkyREUyMDIzM0ZEMEM2NDhFMkU3QjlGOTU5NTBGM0E5 NjgxN0NCRjAeFw0yNDEwMjMwNjM0MDlaFw0yNDEwMzAwNjM0MDlaMBgxFjAUBgNV BAMTDTY3MTg5OGUxLTYyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMexkmi/uOTw+FLxG6z1NT2DUx4RyC8o6gRRqO+SRIgENBmOCCw5BT8cQSD24h K8nBhHZD8zbDtb7kk80qgyx0uDqiiXyF/denunY32bA9HLsvRw0/Yjjv7Ushua/H WeRoHaiHa1PPRj6NICL03EgivTABA5rNRowCXZf2dSb7Ca0vCWK+dXFwq/G/BwaC C9OTOVEvHrCWzbzKWCZEzmGMkWR4WKB79nx/dzPra3YzhDyP2/g0uzp8bOb7PcOG 7gsEkEuthbJpPe1h9sL6+zMyw5JNakF1+5fP4N0DjHNzAf5199GbT1puyh+jD8de w308tuQXyjuCYMVlSlrzt2m/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/d6n7T15 b5o8XiUISTlvNI9nwb8wHwYDVR0jBBgwFoAUiS3iAjP9DGSOLnuflZUPOpaBfL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTc1L0YyMkI5Q0NBNjhG RDExRUZBOTUwMDE4N0M0RjlBRTAyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVMzaUFqUDlER1NPTG51ZmxaVVBPcGFCZkw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTc1L0YyMkI5Q0NBNjhGRDExRUZBOTUwMDE4N0M0RjlBRTAyL2lTM2lBalA5REdT T0xudWZsWlVQT3BhQmZMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKvwj8E9lTFE67MmjDqsKSgUaThmXYUNquLoUTlJruxmWgWUkoFQcIt OHpCoFv7+Q9BK1NEPyrJpWa8v8HG0Nd72cfw7R53+2/n0QDGRy9VeLM+JLL3ByFw Fpdva2+MCwsZfrdH0Fao6HWHRuhkuHU+AUpnP0Ivyu1qaCFgZSjWid7DmRm8z1UV IdsMd/2WoxvA8/HJDWDOyCTLpgMrkj1sc25nsIF81eB5mgj59Rbw/SxWr9EeyFma wl3uBCzNyZF6967xpekNgu80xIpi3OA8fSYtIC4xEw7Q3g7J5udAJZPzN5nooECz +xTsfP46P4/tzohy/NhIIHoxgRmuQPU= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org