$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: 9QmIPwMav5MrEHhT9vnuWXQbSg/0dYqVD18LZBNPwJE= Subject key identifier: DE:42:1C:AF:A6:C1:1D:1A:7C:65:2F:7C:16:63:8E:B8:B8:F6:01:97 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 94 Signing time: Sat 23 Nov 2024 04:27:59 +0000 Manifest this update: Sat 23 Nov 2024 04:27:58 +0000 Manifest next update: Sat 30 Nov 2024 04:27:58 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: YjLKRxp4B95/q1QCH0xfc1OHcK4J0/2YQB6cdXGN4DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Nov 23 04:27:58 2024 GMT Not After : Nov 30 04:27:58 2024 GMT Subject: CN=674159cf-d17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:1c:a5:11:f6:e9:07:56:b5:6c:3e:13:36: 22:2d:01:79:48:57:a2:0a:a4:91:4a:92:27:6c:49: 6b:f0:e4:c9:a3:f9:cd:cb:82:f8:75:22:63:2c:a2: cf:bd:51:b9:a6:75:a6:d0:bb:b7:1b:75:43:98:44: 44:e4:7c:a6:0a:a7:fc:c6:0d:21:c1:37:81:31:ca: cd:51:f3:10:d8:87:c1:72:f8:14:cd:68:7c:21:d3: b1:43:13:fa:81:af:91:5f:63:57:06:51:dd:26:c2: b7:84:fe:62:48:d4:99:d9:53:8a:94:9e:e6:ce:ae: 0c:64:19:40:7e:20:1b:42:d1:51:e1:53:48:f5:eb: 78:21:1f:53:4e:b2:37:1a:fa:91:a0:7e:01:03:1e: ef:5a:44:54:1a:ff:08:be:3c:3d:91:92:7b:d6:01: 97:1e:10:dc:66:21:74:58:00:b9:59:25:31:20:5f: 74:d5:b5:49:9b:89:c5:44:43:46:e7:1b:8f:19:c3: 23:2e:e6:db:76:dc:90:36:d9:ba:9d:9e:7d:15:87: fd:00:f5:3e:d2:91:1a:a9:76:0f:d8:f8:37:0e:94: 96:56:e2:78:4f:1d:43:84:77:72:ef:07:79:a2:60: 0b:7c:37:8f:90:67:18:c7:21:de:c6:41:33:06:d8: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:1C:AF:A6:C1:1D:1A:7C:65:2F:7C:16:63:8E:B8:B8:F6:01:97 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:c2:82:19:81:ce:4a:b3:07:33:7f:27:8e:04:55:a9:00:4c: 4f:c2:1c:f4:c0:3c:a6:90:8e:a4:61:8c:05:d2:20:f1:c4:db: 22:e3:6a:97:74:b1:08:91:26:36:0a:0d:5b:a9:20:aa:75:47: 45:89:4d:54:bf:80:f1:d7:17:4f:6e:cf:83:04:a3:f5:dd:69: 17:b9:e8:21:ba:56:71:d7:9c:e9:b9:df:cd:bf:c0:ea:a1:85: 9c:87:d1:17:04:96:e9:07:1f:8b:91:fb:95:26:f5:60:e2:b4: 2d:1c:94:b2:3f:dc:22:19:5f:b0:c3:6a:a2:a7:a7:fb:8b:12: 7d:4b:28:82:64:63:b3:af:1a:42:fe:22:2c:34:90:1c:18:10: 42:71:96:ea:66:78:36:8a:c0:6c:37:0b:3c:0d:03:cb:38:e6: 09:80:47:fa:c4:a1:76:13:b9:5f:37:e3:04:56:08:c5:aa:cc: 92:97:01:bc:7c:34:d3:1c:f9:f1:a8:1a:ae:fc:77:99:7b:44: 4b:04:88:62:b8:b5:0b:98:a1:bd:81:36:1a:e6:e0:3e:81:a1: f0:af:c7:42:67:46:e4:fa:73:33:10:9e:f0:61:73:60:af:62: df:4f:16:07:df:fb:a9:9f:4a:a1:d2:fe:6b:08:a8:7b:26:0b: 80:cd:88:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjQxMTIzMDQyNzU4WhcNMjQxMTMwMDQyNzU4WjAYMRYwFAYD VQQDEw02NzQxNTljZi1kMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlAcpRH26QdWtWw+EzYiLQF5SFeiCqSRSpInbElr8OTJo/nNy4L4dSJjLKLP vVG5pnWm0Lu3G3VDmERE5HymCqf8xg0hwTeBMcrNUfMQ2IfBcvgUzWh8IdOxQxP6 ga+RX2NXBlHdJsK3hP5iSNSZ2VOKlJ7mzq4MZBlAfiAbQtFR4VNI9et4IR9TTrI3 GvqRoH4BAx7vWkRUGv8Ivjw9kZJ71gGXHhDcZiF0WAC5WSUxIF901bVJm4nFRENG 5xuPGcMjLubbdtyQNtm6nZ59FYf9APU+0pEaqXYP2Pg3DpSWVuJ4Tx1DhHdy7wd5 omALfDePkGcYxyHexkEzBtg60wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5CHK+m wR0afGUvfBZjjri49gGXMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLwoIZgc5KswczfyeOBFWpAExPwhz0wDymkI6kYYwF0iDxxNsi42qX dLEIkSY2Cg1bqSCqdUdFiU1Uv4Dx1xdPbs+DBKP13WkXueghulZx15zpud/Nv8Dq oYWch9EXBJbpBx+LkfuVJvVg4rQtHJSyP9wiGV+ww2qip6f7ixJ9SyiCZGOzrxpC /iIsNJAcGBBCcZbqZng2isBsNws8DQPLOOYJgEf6xKF2E7lfN+MEVgjFqsySlwG8 fDTTHPnxqBqu/HeZe0RLBIhiuLULmKG9gTYa5uA+gaHwr8dCZ0bk+nMzEJ7wYXNg r2LfTxYH3/upn0qh0v5rCKh7JguAzYiv -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org