$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft File: C99de_bArcNvIwEoNtjC3CQnkzw.mft (raw, json) Hash identifier: +tMe0dzTv/ADwMvRy/NIxXAvl8TwShljaCN7SsqlZgY= Subject key identifier: F4:8A:9E:C8:C9:DC:CC:C7:C9:14:E5:6C:49:A0:F9:7B:97:74:2A:C8 Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C Certificate issuer: /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft Manifest number: 061E Signing time: Sun 24 Nov 2024 21:58:34 +0000 Manifest this update: Sun 24 Nov 2024 21:58:34 +0000 Manifest next update: Sun 01 Dec 2024 21:58:34 +0000 Files and hashes: 1: C99de_bArcNvIwEoNtjC3CQnkzw.crl (hash: q5J1Asz0VHBwbmXpMjDugyXbO4YG7JA2uyHIYWtLixQ=) 2: FAEF1526DE9E11ECBEA8AB0EC4F9AE02.roa (hash: 3D0F61i4bYzZFK1RP5xCz8C+pmRRrnbu/OVCc11V77A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Validity Not Before: Nov 24 21:58:34 2024 GMT Not After : Dec 1 21:58:34 2024 GMT Subject: CN=6743a18a-1437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8e:d3:d9:29:ac:17:1e:8b:89:b8:ac:1d:f4: e0:14:f5:64:cf:08:dc:c9:29:97:74:e9:05:2e:49: 05:66:21:75:65:57:14:04:ec:dc:02:95:d0:d0:2c: 89:49:e2:4f:7e:17:7a:ee:b8:ad:aa:4d:30:d6:df: eb:10:25:75:0a:8b:a6:db:fb:03:05:f5:e2:c7:5c: a3:38:05:06:ec:8d:ac:ee:a3:43:17:ad:ff:0e:b5: 91:7a:3d:4a:6a:64:88:c9:7c:d5:30:a8:58:7d:41: 84:ed:b9:74:fc:07:00:ef:90:86:0d:7d:58:a0:e7: 7c:32:d2:55:bf:18:d1:bb:98:c7:e4:d7:b8:cf:e6: f1:1b:de:25:da:19:05:07:37:fd:42:ab:e8:2f:8b: 5e:80:b5:50:d1:9a:f6:6f:d7:83:b0:3d:9a:07:0c: ca:60:e9:c4:4f:47:24:53:f3:68:1c:a8:1a:49:34: 09:65:09:4b:ae:f9:54:17:03:32:49:90:6a:05:32: d6:2b:bb:12:c7:8c:74:b0:b3:58:58:4e:a6:9f:28: 75:82:3b:28:84:77:54:1c:5b:f6:ab:2e:64:b0:ee: 12:ca:10:2d:99:32:56:3a:98:56:0b:99:6e:89:57: c4:d3:5a:2a:c2:8b:11:3d:97:08:1e:68:a1:2e:31: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:9E:C8:C9:DC:CC:C7:C9:14:E5:6C:49:A0:F9:7B:97:74:2A:C8 X509v3 Authority Key Identifier: keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:80:85:a0:cb:a6:94:39:82:18:4d:33:e8:8b:36:0e:15:64: c2:f3:07:47:08:a9:74:42:c2:c8:7d:72:06:95:56:03:31:4e: 79:61:09:1a:29:c0:c5:6d:c5:5c:27:ea:0d:b1:91:82:15:d8: 7f:88:5a:49:00:ee:c6:8f:5f:c5:6e:f1:56:b6:6d:f5:23:c3: cc:14:28:4b:5a:91:11:de:3a:e6:3a:c4:80:4f:50:85:76:82: 28:90:f1:ed:18:e6:24:b4:f5:33:9f:2c:0e:1f:65:0d:1e:b8: 86:64:a6:05:ff:b4:8c:93:0a:fd:14:e3:ea:68:3c:67:ec:d9: 71:56:94:a8:04:4d:ae:f3:48:6e:14:b3:78:f3:38:33:92:be: 9a:c0:d3:de:bc:e4:8b:fd:0b:6e:80:6b:cc:ed:da:24:15:ea: 08:98:ab:62:42:3a:2e:d9:d7:ed:5e:31:3b:33:0d:1a:0a:74: d5:d5:81:71:2d:35:59:28:3c:be:84:98:21:56:df:69:8c:a1: 5f:22:ea:29:91:95:d8:54:8a:92:4e:7c:d5:6a:a2:cd:20:6a: 2f:26:99:74:b8:20:8e:cd:d5:4b:9b:23:c7:9e:92:be:db:ab: 75:72:0a:46:a0:b0:76:c8:b4:85:7d:5a:3f:b9:36:02:63:35: 17:c4:32:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0OTkxMTAvBgNVBAUTKDBCREY1RDdCRjZDMEFEQzM2RjIzMDEyODM2RDhDMkRD MjQyNzkzM0MwHhcNMjQxMTI0MjE1ODM0WhcNMjQxMjAxMjE1ODM0WjAYMRYwFAYD VQQDEw02NzQzYTE4YS0xNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6I7T2SmsFx6LibisHfTgFPVkzwjcySmXdOkFLkkFZiF1ZVcUBOzcApXQ0CyJ SeJPfhd67ritqk0w1t/rECV1Coum2/sDBfXix1yjOAUG7I2s7qNDF63/DrWRej1K amSIyXzVMKhYfUGE7bl0/AcA75CGDX1YoOd8MtJVvxjRu5jH5Ne4z+bxG94l2hkF Bzf9QqvoL4tegLVQ0Zr2b9eDsD2aBwzKYOnET0ckU/NoHKgaSTQJZQlLrvlUFwMy SZBqBTLWK7sSx4x0sLNYWE6mnyh1gjsohHdUHFv2qy5ksO4SyhAtmTJWOphWC5lu iVfE01oqwosRPZcIHmihLjGKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSKnsjJ 3MzHyRTlbEmg+XuXdCrIMB8GA1UdIwQYMBaAFAvfXXv2wK3DbyMBKDbYwtwkJ5M8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ5OS85RjgzNkM1Mjc4 MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJjTnZJd0VvTnRqQzNDUW5r encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5OWRlX2JBcmNOdkl3RW9OdGpDM0NRbmt6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ5OS85RjgzNkM1Mjc4MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJj TnZJd0VvTnRqQzNDUW5rencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvgIWgy6aUOYIYTTPoizYOFWTC8wdHCKl0QsLIfXIGlVYDMU55YQka KcDFbcVcJ+oNsZGCFdh/iFpJAO7Gj1/FbvFWtm31I8PMFChLWpER3jrmOsSAT1CF doIokPHtGOYktPUznywOH2UNHriGZKYF/7SMkwr9FOPqaDxn7NlxVpSoBE2u80hu FLN48zgzkr6awNPevOSL/QtugGvM7dokFeoImKtiQjou2dftXjE7Mw0aCnTV1YFx LTVZKDy+hJghVt9pjKFfIuopkZXYVIqSTnzVaqLNIGovJpl0uCCOzdVLmyPHnpK+ 26t1cgpGoLB2yLSFfVo/uTYCYzUXxDLC -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:59 2024 by rpki-client on console-ams.rpki-client.org