$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: c8kIiPWs3AL9vCfty/pMYm9NAZToixyPd6BgbS+B5io= Subject key identifier: FD:94:25:F8:17:42:E2:7B:C6:7E:11:58:A3:67:F1:C6:C9:D6:97:D8 Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 0124 Signing time: Thu 21 Nov 2024 04:34:32 +0000 Manifest this update: Thu 21 Nov 2024 04:34:32 +0000 Manifest next update: Thu 28 Nov 2024 04:34:32 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: XTuuud2SIZ5TbYMQOBHBM/2l307vMzuW1PkRV7TuFJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: Nov 21 04:34:32 2024 GMT Not After : Nov 28 04:34:32 2024 GMT Subject: CN=673eb858-e15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:db:cb:46:31:e6:60:5a:c0:51:70:7d:37: 23:02:0b:9d:37:5d:b1:49:2e:9e:ff:3b:a4:3f:d7: 47:9a:78:99:57:ba:0c:c8:61:c3:63:5f:04:44:b5: 55:54:5a:e0:a4:fd:34:b7:1d:8d:a5:4c:ed:4b:91: 70:f7:5b:16:fa:5e:34:2d:12:4b:95:fc:38:04:0a: f7:39:ca:08:fb:c9:0b:b1:82:49:42:77:f1:4b:c6: e5:bb:34:6b:f4:dd:86:48:fd:f6:16:11:e2:17:a1: ac:94:89:c9:d1:a7:60:ad:60:31:7f:30:8f:06:16: 1f:6a:94:7f:83:08:f1:d2:af:98:21:ec:61:08:cd: 4a:e9:57:f2:58:6f:84:c4:4f:86:3d:93:fb:6c:7d: d3:ae:a8:c5:4c:25:8e:fa:3c:84:11:73:02:ac:2b: 96:15:e7:27:42:7f:a0:f2:fa:d6:c8:0f:98:e4:c4: 2b:73:4f:6c:df:78:a4:61:68:87:bf:8c:88:67:60: 77:d7:7e:5b:6d:46:c7:0a:94:00:7a:4e:f4:24:c0: 1e:f8:b4:4a:fa:3c:0e:53:87:a3:e2:02:d2:c1:c7: 2c:e4:ab:15:fb:f4:9d:26:d9:db:56:a9:fb:6b:bf: 16:d1:ab:74:8d:ea:33:1f:0f:39:a2:23:ca:71:64: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:94:25:F8:17:42:E2:7B:C6:7E:11:58:A3:67:F1:C6:C9:D6:97:D8 X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:fe:30:f7:80:32:31:ac:7b:69:c4:d6:df:3b:32:34:e5:7c: 4c:1c:7b:d9:ae:3b:b1:19:0c:78:45:a3:ff:06:01:cf:3d:ab: f1:80:77:fe:3d:06:54:08:6e:ce:10:b8:06:1d:00:b4:03:16: 17:83:4c:c1:d5:c2:1b:98:9a:e1:8b:83:65:08:84:1a:8f:34: 15:8e:a8:d5:81:76:90:64:1b:98:86:84:7e:d2:1b:33:ef:54: cf:b3:86:6a:95:ff:a5:f0:eb:37:61:6a:da:9f:58:21:74:39: 01:f7:b3:e6:c4:a0:39:eb:87:4f:6d:6d:ba:ac:de:bf:72:29: d7:7a:80:6e:e0:c8:4e:f1:66:68:2f:4f:6e:84:76:c3:9e:99: 52:69:a8:a1:29:f1:8e:15:6f:d2:eb:01:4c:71:b0:e2:02:52: b2:b4:21:60:b5:c8:0f:c7:e3:8b:48:cb:59:3a:45:9d:54:cd: d7:43:09:5f:d9:53:dd:9b:f9:27:b5:58:6a:f0:98:83:0b:8d: 27:79:69:7a:5b:22:c3:4e:90:21:3b:b7:e8:86:09:6e:bc:80: af:07:3e:4e:46:f4:2c:45:3b:c4:15:d8:67:97:26:f3:6d:07: 8f:15:21:d6:16:08:87:fb:aa:4e:e0:1c:f1:be:52:95:e9:54: c8:95:0a:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDc0M0U3OEM0NTk4RUZDNzJEQTA4NDY0NjUwRUI4RjlD REExNkY5ODAwHhcNMjQxMTIxMDQzNDMyWhcNMjQxMTI4MDQzNDMyWjAYMRYwFAYD VQQDEw02NzNlYjg1OC1lMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdzby0Yx5mBawFFwfTcjAgudN12xSS6e/zukP9dHmniZV7oMyGHDY18ERLVV VFrgpP00tx2NpUztS5Fw91sW+l40LRJLlfw4BAr3OcoI+8kLsYJJQnfxS8bluzRr 9N2GSP32FhHiF6GslInJ0adgrWAxfzCPBhYfapR/gwjx0q+YIexhCM1K6VfyWG+E xE+GPZP7bH3TrqjFTCWO+jyEEXMCrCuWFecnQn+g8vrWyA+Y5MQrc09s33ikYWiH v4yIZ2B3135bbUbHCpQAek70JMAe+LRK+jwOU4ej4gLSwccs5KsV+/SdJtnbVqn7 a78W0at0jeozHw85oiPKcWR7IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2UJfgX QuJ7xn4RWKNn8cbJ1pfYMB8GA1UdIwQYMBaAFHQ+eMRZjvxy2ghGRlDrj5zaFvmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19ITGFDRVpHVU91UG5Ob1ct WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1ZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19I TGFDRVpHVU91UG5Ob1ctWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk/jD3gDIxrHtpxNbfOzI05XxMHHvZrjuxGQx4RaP/BgHPPavxgHf+ PQZUCG7OELgGHQC0AxYXg0zB1cIbmJrhi4NlCIQajzQVjqjVgXaQZBuYhoR+0hsz 71TPs4Zqlf+l8Os3YWran1ghdDkB97PmxKA564dPbW26rN6/cinXeoBu4MhO8WZo L09uhHbDnplSaaihKfGOFW/S6wFMcbDiAlKytCFgtcgPx+OLSMtZOkWdVM3XQwlf 2VPdm/kntVhq8JiDC40neWl6WyLDTpAhO7fohgluvICvBz5ORvQsRTvEFdhnlybz bQePFSHWFgiH+6pO4BzxvlKV6VTIlQox -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org