$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: kDm2cuetkfD+QhvkcXUV+Sv1m5PnI2ZswxibV7BWbSg= Subject key identifier: 33:FC:5D:A1:AF:B2:9C:7B:FE:05:CC:FD:B5:A5:D3:7E:7A:0B:87:AE Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 045E Signing time: Fri 22 Nov 2024 23:43:08 +0000 Manifest this update: Fri 22 Nov 2024 23:43:08 +0000 Manifest next update: Fri 29 Nov 2024 23:43:08 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: OG18XF+fBCi/07iqFGgB+r3D2EMdvYUMldsGjoC7UkY=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: YIo4X33adLD8RwsAshCvfy7lRfDuoG21ebfjFnUBZ1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: Nov 22 23:43:08 2024 GMT Not After : Nov 29 23:43:08 2024 GMT Subject: CN=6741170c-8b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:e1:6a:01:5c:79:1a:a9:9f:9b:bb:7d:8a: 55:63:27:99:84:d2:8e:39:8e:cc:9b:36:0f:b1:fb: a7:b1:d4:17:13:2b:c8:1a:b6:98:f5:f9:68:6f:c7: ac:47:3e:b4:15:05:64:85:9f:f3:f4:a0:81:ae:37: 5c:2e:d4:fa:ee:aa:dd:58:54:2b:f6:86:5c:de:dd: b4:ae:12:06:80:f1:f2:19:8b:98:14:d6:71:75:67: 63:d3:d2:84:c9:9e:0c:57:7a:89:81:42:27:89:25: 39:26:af:1a:ad:3e:15:f9:24:bc:c7:ca:04:7f:19: 5c:98:39:b0:10:c7:21:64:e9:bf:37:bd:9e:a7:ce: 11:d9:e6:8a:9d:d4:2f:3f:6e:09:43:f7:81:d0:5c: b8:5e:8d:2c:22:95:8c:c9:b7:0e:b7:09:12:7d:f9: 9e:12:5a:6e:4a:99:91:d0:6f:84:42:98:67:f7:7c: 55:af:c1:49:41:56:56:c0:6f:79:70:40:cd:aa:3b: 98:98:c3:05:9e:ae:ed:56:ff:de:bb:85:25:51:3d: 55:0c:50:c5:e3:93:51:54:52:f4:b9:e9:be:33:93: b6:28:fc:69:d1:46:b3:ff:7a:c7:89:2e:c3:66:24: 67:8d:72:20:4f:e4:54:eb:7f:0b:b1:3a:ab:a4:ee: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FC:5D:A1:AF:B2:9C:7B:FE:05:CC:FD:B5:A5:D3:7E:7A:0B:87:AE X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c4:70:2a:02:dd:dc:8f:83:3a:be:5f:07:50:57:ab:df:bf: 66:e7:65:3d:8a:c5:55:5e:7c:d2:6b:1e:4d:25:00:bc:6f:d5: e7:1b:07:4f:f6:af:f9:1d:6f:f8:f4:84:a3:29:68:a9:21:f8: f9:ee:3c:96:94:01:c1:52:e4:14:2f:bc:76:ea:33:2d:6b:1f: dc:e8:4a:d8:76:d0:f9:85:f3:20:45:c0:8c:ec:45:56:46:62: 21:19:78:ba:97:29:c1:f8:e2:cc:47:92:6e:30:ea:1f:9b:c1: d1:e2:38:2f:f8:22:d2:eb:3d:a7:4b:56:45:0d:af:38:1b:07: fe:44:54:0d:d3:ab:55:fe:c3:1e:01:ca:9b:0f:83:f1:1c:2a: b0:17:6c:02:38:61:5c:3f:fd:0c:49:8b:ac:b8:5d:ff:71:c8: ac:5d:8a:38:1b:58:0a:df:1e:53:d5:3b:da:10:34:c4:0b:3f: ae:9c:01:13:4b:84:fb:a0:2e:bf:e4:0e:18:11:a7:18:aa:e5: 64:ab:15:4d:be:38:a8:47:62:52:f5:f4:8a:3c:d9:a6:c3:c1: 31:4e:93:58:0a:15:c3:e3:54:f3:8e:14:00:c3:db:8a:cd:c0: 8b:fe:2f:c5:e1:48:99:99:47:0b:5f:53:68:2d:2c:84:96:ad: 35:17:3e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjQxMTIyMjM0MzA4WhcNMjQxMTI5MjM0MzA4WjAYMRYwFAYD VQQDEw02NzQxMTcwYy04YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqffhagFceRqpn5u7fYpVYyeZhNKOOY7MmzYPsfunsdQXEyvIGraY9flob8es Rz60FQVkhZ/z9KCBrjdcLtT67qrdWFQr9oZc3t20rhIGgPHyGYuYFNZxdWdj09KE yZ4MV3qJgUIniSU5Jq8arT4V+SS8x8oEfxlcmDmwEMchZOm/N72ep84R2eaKndQv P24JQ/eB0Fy4Xo0sIpWMybcOtwkSffmeElpuSpmR0G+EQphn93xVr8FJQVZWwG95 cEDNqjuYmMMFnq7tVv/eu4UlUT1VDFDF45NRVFL0uem+M5O2KPxp0Uaz/3rHiS7D ZiRnjXIgT+RU638LsTqrpO5kBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP8XaGv spx7/gXM/bWl0356C4euMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJxHAqAt3cj4M6vl8HUFer379m52U9isVVXnzSax5NJQC8b9XnGwdP 9q/5HW/49ISjKWipIfj57jyWlAHBUuQUL7x26jMtax/c6ErYdtD5hfMgRcCM7EVW RmIhGXi6lynB+OLMR5JuMOofm8HR4jgv+CLS6z2nS1ZFDa84Gwf+RFQN06tV/sMe AcqbD4PxHCqwF2wCOGFcP/0MSYusuF3/ccisXYo4G1gK3x5T1TvaEDTECz+unAET S4T7oC6/5A4YEacYquVkqxVNvjioR2JS9fSKPNmmw8ExTpNYChXD41TzjhQAw9uK zcCL/i/F4UiZmUcLX1NoLSyElq01Fz5y -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org