$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: sSbTfoCOw9kb4yvyZuMr62ci8ac0Kr5CN0F//6iwAks= Subject key identifier: BC:0C:41:9D:44:94:5C:C2:CF:5D:A2:AA:43:BB:DC:FC:DF:4F:5F:68 Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 081A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 089E Signing time: Fri 22 Nov 2024 20:35:23 +0000 Manifest this update: Fri 22 Nov 2024 20:35:22 +0000 Manifest next update: Fri 29 Nov 2024 20:35:22 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: WhsVzm6UrxSJqX/WendCqAoiTd2i4SIdS1/NSR793Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Nov 22 20:35:22 2024 GMT Not After : Nov 29 20:35:22 2024 GMT Subject: CN=6740eb0a-85c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:6a:40:4a:31:db:6c:3b:40:15:5c:28:13: db:1f:bd:38:4b:03:47:cd:bb:d5:24:ba:c1:d4:00: 77:28:3f:3e:24:f9:24:ac:98:f2:43:81:1c:32:f2: ed:02:76:88:98:75:57:df:7b:e4:f5:ec:c5:04:fc: e6:cc:2f:86:31:6f:db:63:bf:7c:77:40:2e:53:66: d2:ca:b5:1c:49:c4:d3:8e:3f:e1:3e:8c:ba:ba:10: e6:1e:b1:80:66:a1:13:7d:67:ec:b6:5f:13:c9:0c: f9:e9:8b:69:b7:7b:af:71:67:bb:b8:0b:fa:9b:cd: 4a:5c:d1:d3:fb:d3:18:c3:a6:f0:7c:45:e5:2c:dd: 19:7d:8c:4d:6d:e5:4d:47:e0:6f:96:3c:38:d6:a8: 2c:e3:0e:50:d1:b1:c9:53:ad:0a:c5:1b:c2:7e:b8: 68:91:b4:02:50:2b:31:a8:c2:44:de:cd:fc:7b:78: 14:f2:b7:07:80:d5:5e:14:1f:28:a0:35:d5:16:0a: 51:ea:3f:54:3a:47:91:86:7f:65:00:ff:f9:f7:50: 83:9e:51:c9:51:55:61:b7:1a:b6:f8:9c:eb:22:58: 5a:f7:5b:2f:ab:fc:64:bb:44:8f:cf:88:61:b8:cd: 3a:ca:cc:87:ae:3b:61:2b:c9:b8:df:bf:fa:c4:09: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0C:41:9D:44:94:5C:C2:CF:5D:A2:AA:43:BB:DC:FC:DF:4F:5F:68 X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:e3:4e:ca:de:f4:af:cd:be:d1:f9:96:2b:f3:3b:c8:7e:14: 79:44:26:49:a0:63:c2:8f:ae:57:8b:4a:50:db:fc:74:9c:ac: 7f:09:2f:8d:f0:44:59:e2:8d:eb:15:20:f0:90:8d:ca:62:db: 69:8d:b5:65:e6:57:be:63:ab:1e:73:23:73:73:8f:a9:22:d3: 0b:5d:2e:e4:1f:5f:66:a7:a2:65:4e:40:1b:65:20:73:3b:73: 07:6d:2d:60:c7:a3:84:86:10:a5:fd:40:a7:94:6b:30:78:c0: 46:6e:c8:3e:c0:05:ce:2b:5f:fe:c6:75:17:46:e0:37:cd:9e: 61:fb:5f:36:5b:9f:7b:0e:79:e3:d9:0d:cc:dd:f9:7a:c6:d0: d7:8a:b6:d8:ee:54:a9:b2:ff:52:ce:75:7a:9c:58:43:d3:02: 5a:18:2d:97:28:63:60:d9:cc:95:bd:16:fe:aa:b8:99:5a:c7: 50:2f:4f:4b:a5:42:a1:50:9f:e6:ba:b7:d9:dd:f0:9b:f7:2f: 08:55:98:7c:95:c9:3f:24:91:54:b7:34:c2:8d:93:c6:5e:2b: 66:0a:04:36:2d:a3:1b:9a:0c:58:dd:1c:c8:f6:fd:93:a0:96: 17:ec:9b:76:e2:4c:99:8c:50:6b:4e:29:84:b5:65:33:bc:1c: d1:8d:5b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjQxMTIyMjAzNTIyWhcNMjQxMTI5MjAzNTIyWjAYMRYwFAYD VQQDEw02NzQwZWIwYS04NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWBqQEox22w7QBVcKBPbH704SwNHzbvVJLrB1AB3KD8+JPkkrJjyQ4EcMvLt AnaImHVX33vk9ezFBPzmzC+GMW/bY798d0AuU2bSyrUcScTTjj/hPoy6uhDmHrGA ZqETfWfstl8TyQz56Ytpt3uvcWe7uAv6m81KXNHT+9MYw6bwfEXlLN0ZfYxNbeVN R+Bvljw41qgs4w5Q0bHJU60KxRvCfrhokbQCUCsxqMJE3s38e3gU8rcHgNVeFB8o oDXVFgpR6j9UOkeRhn9lAP/591CDnlHJUVVhtxq2+JzrIlha91svq/xku0SPz4hh uM06ysyHrjthK8m437/6xAmSVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwMQZ1E lFzCz12iqkO73PzfT19oMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ407K3vSvzb7R+ZYr8zvIfhR5RCZJoGPCj65Xi0pQ2/x0nKx/CS+N 8ERZ4o3rFSDwkI3KYttpjbVl5le+Y6secyNzc4+pItMLXS7kH19mp6JlTkAbZSBz O3MHbS1gx6OEhhCl/UCnlGsweMBGbsg+wAXOK1/+xnUXRuA3zZ5h+182W597Dnnj 2Q3M3fl6xtDXirbY7lSpsv9SznV6nFhD0wJaGC2XKGNg2cyVvRb+qriZWsdQL09L pUKhUJ/murfZ3fCb9y8IVZh8lck/JJFUtzTCjZPGXitmCgQ2LaMbmgxY3RzI9v2T oJYX7Jt24kyZjFBrTimEtWUzvBzRjVug -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:40 2024 by rpki-client on console-ams.rpki-client.org