$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: bjQEC/4dMdrrtHyIFByQs1c3RA0Oa6U/4KgdwDps95E= Subject key identifier: F4:B6:69:78:B5:74:EA:84:36:EF:A0:38:10:5A:22:BC:82:D6:AE:AB Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: 28 Signing time: Sat 23 Nov 2024 05:44:51 +0000 Manifest this update: Sat 23 Nov 2024 05:44:50 +0000 Manifest next update: Sat 30 Nov 2024 05:44:50 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: rGW72S0raP581ckgF1Z0Xr/si8O8kF5CDL/LOayJ2s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Nov 23 05:44:50 2024 GMT Not After : Nov 30 05:44:50 2024 GMT Subject: CN=67416bd2-d112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:2a:37:de:74:50:66:a4:98:9a:28:d4:7d: 85:6d:da:61:85:53:d5:ae:45:54:95:00:a0:ad:9a: 64:27:c2:e9:40:1a:5c:2a:04:62:2f:b1:85:61:aa: 8a:9f:1e:1e:6f:18:0f:e4:71:c0:25:fa:34:54:1b: 9d:f4:b4:ea:1e:62:6f:f6:74:40:94:93:6c:40:8d: 65:e2:9b:06:df:6e:2c:96:cb:ac:5e:0b:42:a6:70: 64:45:1f:93:4a:62:07:81:b1:94:1d:c1:07:97:4d: 9a:59:da:a3:e3:e1:f8:e0:d2:25:ce:87:64:8e:94: 8f:4d:c0:8d:82:a4:8c:fc:c4:f9:0e:24:15:db:e2: 38:a2:8f:ae:9b:a3:6b:9d:51:82:7e:85:13:80:c0: dc:4c:76:74:88:6b:04:04:69:51:01:7d:c8:df:d3: cb:25:70:80:22:88:19:64:db:8f:f7:16:6f:22:87: c1:09:e0:f9:2e:68:dd:c7:b0:24:7b:90:72:93:c8: 65:7f:2b:cb:b5:c7:75:04:d9:c8:e5:a8:73:43:91: 1e:a3:cf:8a:32:69:a1:4c:85:15:6b:b2:89:1c:04: e3:e2:45:ee:ed:fb:fd:8e:af:99:cc:37:08:40:0d: 3b:71:3a:34:6d:62:73:e1:33:4a:1a:73:54:72:82: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B6:69:78:B5:74:EA:84:36:EF:A0:38:10:5A:22:BC:82:D6:AE:AB X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:17:c4:c1:14:8c:81:ab:40:66:1f:7c:0c:70:97:a5:28:5b: 49:46:2f:18:be:fa:34:ac:0d:9a:83:3f:0e:5e:43:bc:2f:ad: ae:00:6b:62:cc:ba:71:21:b3:06:fa:cd:00:5d:cd:71:a2:8a: bd:93:10:ca:17:71:1a:57:d3:a8:fe:cc:58:a4:e6:85:ec:e5: 3b:f5:9a:e9:5b:54:d3:7a:1d:c3:90:77:52:6a:0b:f2:0e:05: 72:b1:44:ba:7c:f7:62:f4:29:6c:a5:fd:8c:ee:69:74:71:49: 9b:8e:fe:2d:bb:20:1e:ac:fc:90:54:4a:3f:cd:1b:0c:39:99: 81:12:ff:2d:da:c8:66:1c:68:05:0f:ae:30:f0:32:b5:d0:de: cf:57:5e:00:30:e6:6c:56:ee:87:ab:50:bd:ce:bb:1d:b1:7a: d6:1b:18:98:9c:fa:ce:3e:cb:36:11:29:ff:f0:25:1f:81:cf: 04:3e:86:a1:73:20:45:ec:c0:73:6e:c9:0f:bc:c0:01:1d:96: f9:d8:fb:86:9e:41:2c:09:3b:71:6e:41:8b:41:ae:83:b0:8f: 6a:cf:77:cb:7d:5f:4b:74:3d:2d:1d:29:7f:58:63:25:e6:13: 26:19:d9:35:86:6a:9c:7c:cd:ec:fa:da:da:2f:80:63:34:27: 5b:36:c7:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEFDRDExMC8GA1UEBRMoRTE0QTU5M0IzMTJBOTg4NTczRDdBNURERkFFMDdGOTEy NjkzQzg4MjAeFw0yNDExMjMwNTQ0NTBaFw0yNDExMzAwNTQ0NTBaMBgxFjAUBgNV BAMTDTY3NDE2YmQyLWQxMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBQyo33nRQZqSYmijUfYVt2mGFU9WuRVSVAKCtmmQnwulAGlwqBGIvsYVhqoqf Hh5vGA/kccAl+jRUG530tOoeYm/2dECUk2xAjWXimwbfbiyWy6xeC0KmcGRFH5NK YgeBsZQdwQeXTZpZ2qPj4fjg0iXOh2SOlI9NwI2CpIz8xPkOJBXb4jiij66bo2ud UYJ+hROAwNxMdnSIawQEaVEBfcjf08slcIAiiBlk24/3Fm8ih8EJ4PkuaN3HsCR7 kHKTyGV/K8u1x3UE2cjlqHNDkR6jz4oyaaFMhRVrsokcBOPiRe7t+/2Or5nMNwhA DTtxOjRtYnPhM0oac1Rygt9tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9LZpeLV0 6oQ276A4EFoivILWrqswHwYDVR0jBBgwFoAU4UpZOzEqmIVz16Xd+uB/kSaTyIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0QUNELzI5MDMxQTNBNzU2 RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFVwWk96RXFtSVZ6MTZYZC11Ql9rU2FUeUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 QUNELzI5MDMxQTNBNzU2RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlW ejE2WGQtdUJfa1NhVHlJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABEXxMEUjIGrQGYffAxwl6UoW0lGLxi++jSsDZqDPw5eQ7wvra4Aa2LM unEhswb6zQBdzXGiir2TEMoXcRpX06j+zFik5oXs5Tv1mulbVNN6HcOQd1JqC/IO BXKxRLp892L0KWyl/YzuaXRxSZuO/i27IB6s/JBUSj/NGww5mYES/y3ayGYcaAUP rjDwMrXQ3s9XXgAw5mxW7oerUL3Oux2xetYbGJic+s4+yzYRKf/wJR+BzwQ+hqFz IEXswHNuyQ+8wAEdlvnY+4aeQSwJO3FuQYtBroOwj2rPd8t9X0t0PS0dKX9YYyXm EyYZ2TWGapx8zez62tovgGM0J1s2xxQ= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org