$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft File: S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json) Hash identifier: ez8rr/y798qI4Jhwb60HuQMSB9BF5kJXMnqrKYgKULo= Subject key identifier: D3:AE:0B:32:88:D8:A7:12:8D:68:94:5A:CB:1F:E0:75:4E:7D:50:61 Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Certificate serial: 160E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft Manifest number: 1607 Signing time: Fri 22 Nov 2024 16:44:43 +0000 Manifest this update: Fri 22 Nov 2024 16:44:43 +0000 Manifest next update: Fri 29 Nov 2024 16:44:43 +0000 Files and hashes: 1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: 2t0m7UPajc1A56k4lUCcrV7W8iYoeeaMzBVewBBb3Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5646 (0x160e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Validity Not Before: Nov 22 16:44:43 2024 GMT Not After : Nov 29 16:44:43 2024 GMT Subject: CN=6740b4fb-6f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:f6:f6:a2:93:50:75:b2:c0:fb:da:6b:c7: b0:88:a3:54:71:67:68:09:1e:6c:c4:fb:f4:bf:d0: c3:6f:cd:82:dd:0e:fa:4f:bb:f8:4d:b9:3a:a8:1b: 63:85:02:ce:3d:3e:a7:85:29:30:57:5f:72:ee:c6: 0e:9d:d3:91:3c:bc:39:e9:cd:d8:b0:64:d2:c3:9b: ed:a7:f7:1b:a1:3e:01:a6:d4:5a:7f:71:95:bd:d1: f5:01:eb:7d:55:f5:14:2a:68:82:74:12:3a:ee:89: f5:c9:d9:ac:95:d9:15:fe:66:8f:20:15:97:1f:5a: 97:e4:20:f8:d1:73:5f:a1:cb:5c:e8:14:c1:24:55: 4c:08:1b:5f:33:d8:e6:a6:0e:d6:1b:e3:2f:13:40: 5d:bf:a4:c0:81:86:bd:9f:23:8d:4a:05:5d:6e:b4: ed:43:4b:c2:ac:e6:3e:42:ed:2e:73:75:34:ef:93: 81:2e:9f:95:b8:75:45:84:df:b6:3b:4c:40:2b:38: 69:38:60:e2:31:9f:fc:4c:3e:d1:89:91:29:ee:86: 23:13:4c:68:dc:bd:10:19:66:d7:be:4b:f3:bc:17: dd:4a:51:87:48:35:7c:c7:53:df:aa:08:54:67:b1: 48:b3:55:8a:f3:43:fc:70:73:3b:e5:bb:28:b2:6e: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AE:0B:32:88:D8:A7:12:8D:68:94:5A:CB:1F:E0:75:4E:7D:50:61 X509v3 Authority Key Identifier: keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:16:26:7e:f2:bf:b3:bb:83:48:ee:49:a7:60:57:e6:65:f5: 44:44:77:a2:61:b9:bd:91:41:49:54:65:17:5c:35:92:d7:35: 79:5b:61:86:04:3d:e1:4b:7f:18:12:3b:2a:8f:dc:60:b1:68: 02:71:51:3e:82:a2:61:5c:3b:3b:61:d0:0e:3f:3d:ca:9b:c9: 03:b7:23:a6:43:a4:7a:ec:14:22:5d:cd:de:82:57:17:ad:dd: b8:59:3e:07:04:0e:96:b5:3a:0b:6f:b1:d2:2a:3c:40:61:3f: e3:bf:ec:f7:b6:15:60:17:ef:6a:5b:e2:f4:98:51:d6:32:9a: e3:f4:79:7a:c6:ce:7a:70:64:df:33:64:38:7d:2c:4c:76:83: e0:11:95:f0:24:a2:96:fd:6a:88:10:2f:31:c1:3d:e9:0a:b0: 09:3f:a4:1e:57:ca:a2:88:53:8b:59:c8:10:33:00:db:23:41: 94:af:78:83:f9:87:dd:68:1c:cc:f3:66:93:d7:08:47:28:76: 88:12:d9:58:9c:a5:fe:7e:3e:35:ea:56:c9:99:0b:d6:dc:53: c8:ef:bc:c6:ac:f1:8d:17:74:91:85:36:31:f5:66:00:63:cb: 1b:2d:6f:50:9d:db:a5:13:d7:d4:c5:39:92:86:5a:36:ea:57: c8:a8:da:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDRCNDM1REQ0OUFDMTExQzNERDdCQTBGNEYwODY4NUYy MTY1MTU4NTkwHhcNMjQxMTIyMTY0NDQzWhcNMjQxMTI5MTY0NDQzWjAYMRYwFAYD VQQDEw02NzQwYjRmYi02ZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4D29qKTUHWywPvaa8ewiKNUcWdoCR5sxPv0v9DDb82C3Q76T7v4Tbk6qBtj hQLOPT6nhSkwV19y7sYOndORPLw56c3YsGTSw5vtp/cboT4BptRaf3GVvdH1Aet9 VfUUKmiCdBI67on1ydmsldkV/maPIBWXH1qX5CD40XNfoctc6BTBJFVMCBtfM9jm pg7WG+MvE0Bdv6TAgYa9nyONSgVdbrTtQ0vCrOY+Qu0uc3U075OBLp+VuHVFhN+2 O0xAKzhpOGDiMZ/8TD7RiZEp7oYjE0xo3L0QGWbXvkvzvBfdSlGHSDV8x1PfqghU Z7FIs1WK80P8cHM75bsosm6W6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOuCzKI 2KcSjWiUWssf4HVOfVBhMB8GA1UdIwQYMBaAFEtDXdSawRHD3Xug9PCGhfIWUVhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVjUGRlNkQwOElhRjhoWlJX RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwTmQxSnJCRWNQZGU2RDA4SWFGOGhaUldGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVj UGRlNkQwOElhRjhoWlJXRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaFiZ+8r+zu4NI7kmnYFfmZfVERHeiYbm9kUFJVGUXXDWS1zV5W2GG BD3hS38YEjsqj9xgsWgCcVE+gqJhXDs7YdAOPz3Km8kDtyOmQ6R67BQiXc3eglcX rd24WT4HBA6WtToLb7HSKjxAYT/jv+z3thVgF+9qW+L0mFHWMprj9Hl6xs56cGTf M2Q4fSxMdoPgEZXwJKKW/WqIEC8xwT3pCrAJP6QeV8qiiFOLWcgQMwDbI0GUr3iD +YfdaBzM82aT1whHKHaIEtlYnKX+fj416lbJmQvW3FPI77zGrPGNF3SRhTYx9WYA Y8sbLW9QndulE9fUxTmShlo26lfIqNpd -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org