$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: /e29S+xTwG49b6Or5msZ2z0vQiuOKVI1aImRUqXWUqg= Subject key identifier: 1B:10:FF:BB:E5:90:5F:CA:C3:24:2C:6C:2E:7A:93:DB:DD:8F:04:4F Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: 42 Signing time: Thu 21 Nov 2024 05:27:54 +0000 Manifest this update: Thu 21 Nov 2024 05:27:54 +0000 Manifest next update: Thu 28 Nov 2024 05:27:54 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: fWnEL/AH8N05OnpmEh49Z6okZ84zI2K44hK4eP+5110=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Nov 21 05:27:54 2024 GMT Not After : Nov 28 05:27:54 2024 GMT Subject: CN=673ec4da-e5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:eb:9c:43:2a:c0:97:25:e0:52:52:4e:92: 08:c0:1b:9d:1b:8d:e7:3b:4f:a4:82:78:6f:3b:40: 1e:af:97:8b:f3:6d:a6:fc:49:b3:7e:56:91:96:35: 29:ca:3c:1d:8b:ac:5d:c2:90:f3:86:cb:90:fb:24: 22:8e:69:dd:22:7b:ef:b1:ce:b7:c1:9e:ba:c1:5c: 6c:35:70:07:29:5a:83:d0:36:ea:29:07:a0:23:aa: ee:4c:16:2e:9d:a7:6b:0c:b0:2f:e8:e6:6a:6a:77: 26:d0:bd:00:b6:03:e9:34:ed:78:7d:7c:26:84:f5: ac:98:21:de:14:88:b6:26:a4:eb:d6:d9:6f:b3:00: 86:62:b2:46:f0:59:21:a9:51:e7:bb:b6:0a:36:3e: 3e:26:b8:4f:38:36:61:ae:4e:ad:f5:f4:19:6a:fd: 4e:5b:37:67:48:53:c9:9c:49:e8:56:0f:21:76:17: 55:c8:fa:44:ea:34:2e:ec:47:a9:20:d0:93:4f:2a: df:08:fb:1f:33:7c:dd:4f:79:db:06:b1:9e:92:3b: e1:19:5f:ae:a6:09:e4:4b:56:ea:e2:b3:c8:55:ce: b5:c6:0c:5e:41:18:e3:9b:62:55:ba:f6:5c:b8:56: c9:91:fb:70:c7:97:7f:6d:ce:ab:d3:5c:4f:ec:97: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:10:FF:BB:E5:90:5F:CA:C3:24:2C:6C:2E:7A:93:DB:DD:8F:04:4F X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:25:e3:ed:66:fb:0c:be:36:ed:4f:d2:ef:ba:f5:bb:61:3c: 3f:7f:fc:09:46:b5:9c:d5:35:c2:67:c6:e9:34:03:2c:44:4e: c4:ec:a2:9f:dd:77:8f:aa:4d:21:88:9d:a8:4c:12:8e:17:b3: de:0a:6b:18:4a:01:1e:29:18:6a:82:c3:05:33:0a:94:30:5e: f2:e7:cd:2d:d7:57:df:03:fa:21:9f:ce:d8:19:12:f5:1e:25: c9:53:79:73:61:a2:f7:4b:11:d3:21:66:a1:24:c1:d0:dd:f3: 89:d8:04:7a:02:93:fd:7c:95:bd:86:60:23:16:c8:16:ff:c5: 13:3b:1e:76:aa:59:41:12:99:43:e1:9a:57:3e:ef:0b:4d:ea: 2e:13:eb:bd:7f:8c:2b:38:56:15:e4:68:df:40:d2:3b:d4:81: 48:26:75:97:11:f8:5a:1e:26:22:30:09:31:6c:2d:97:ba:87: 23:16:2d:6e:44:85:06:aa:1a:c1:1f:07:3a:5e:8c:a6:0e:9c: fe:ce:07:7c:2b:34:ee:43:3a:22:27:88:1f:10:6c:52:9f:51: e0:80:66:22:05:d6:6e:86:29:17:fc:e1:de:d4:0c:a8:07:a5: 29:71:7e:25:b0:97:93:d0:73:05:31:3e:39:31:99:77:a4:12: b2:c0:8a:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjYwQTExMC8GA1UEBRMoRDRERjI1RTBFQ0QyRTM4MDhGNjg3MEVFNTZGNzBGMjU1 ODE4OTMzRTAeFw0yNDExMjEwNTI3NTRaFw0yNDExMjgwNTI3NTRaMBgxFjAUBgNV BAMTDTY3M2VjNGRhLWU1ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeh+ucQyrAlyXgUlJOkgjAG50bjec7T6SCeG87QB6vl4vzbab8SbN+VpGWNSnK PB2LrF3CkPOGy5D7JCKOad0ie++xzrfBnrrBXGw1cAcpWoPQNuopB6Ajqu5MFi6d p2sMsC/o5mpqdybQvQC2A+k07Xh9fCaE9ayYId4UiLYmpOvW2W+zAIZiskbwWSGp Uee7tgo2Pj4muE84NmGuTq319Blq/U5bN2dIU8mcSehWDyF2F1XI+kTqNC7sR6kg 0JNPKt8I+x8zfN1PedsGsZ6SO+EZX66mCeRLVuris8hVzrXGDF5BGOObYlW69ly4 VsmR+3DHl39tzqvTXE/sl63HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGxD/u+WQ X8rDJCxsLnqT292PBE8wHwYDVR0jBBgwFoAU1N8l4OzS44CPaHDuVvcPJVgYkz4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNjBBL0I2RENGMURDNDQ5 NTExRUZBNDU5MEMzREM0RjlBRTAyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMU44bDRPelM0NENQYUhEdVZ2Y1BKVmdZa3o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NjBBL0I2RENGMURDNDQ5NTExRUZBNDU5MEMzREM0RjlBRTAyLzFOOGw0T3pTNDRD UGFIRHVWdmNQSlZnWWt6NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEMl4+1m+wy+Nu1P0u+69bthPD9//AlGtZzVNcJnxuk0AyxETsTsop/d d4+qTSGInahMEo4Xs94KaxhKAR4pGGqCwwUzCpQwXvLnzS3XV98D+iGfztgZEvUe JclTeXNhovdLEdMhZqEkwdDd84nYBHoCk/18lb2GYCMWyBb/xRM7HnaqWUESmUPh mlc+7wtN6i4T671/jCs4VhXkaN9A0jvUgUgmdZcR+FoeJiIwCTFsLZe6hyMWLW5E hQaqGsEfBzpejKYOnP7OB3wrNO5DOiIniB8QbFKfUeCAZiIF1m6GKRf84d7UDKgH pSlxfiWwl5PQcwUxPjkxmXekErLAirM= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org