$ rpki-client -vvf rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft File: kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft (raw, json) Hash identifier: ILLDabvRoFtNWxDQe1BCaQ7EWnE5tvHxQpBHS62RNCE= Subject key identifier: 49:C2:90:C1:DA:2E:16:D0:2F:CC:C7:5D:98:D9:28:7C:95:AB:01:CD Authority key identifier: 92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B Certificate issuer: /CN=A91E06B4/serialNumber=923D507F9C269BA2245D5BE547EFB1BFE9B4918B Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft Manifest number: 04 Signing time: Sat 23 Nov 2024 06:09:47 +0000 Manifest this update: Sat 23 Nov 2024 06:09:46 +0000 Manifest next update: Sat 30 Nov 2024 06:09:46 +0000 Files and hashes: 1: kj1Qf5wmm6IkXVvlR--xv-m0kYs.crl (hash: FYEdOIuz+canSzMwOXBFvDD415Jfa5LOnm8T9PZf0Zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.crl rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E06B4/serialNumber=923D507F9C269BA2245D5BE547EFB1BFE9B4918B Validity Not Before: Nov 23 06:09:46 2024 GMT Not After : Nov 30 06:09:46 2024 GMT Subject: CN=674171ab-5dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:57:6f:f5:b9:12:8e:7a:4e:25:e5:fe:6f: 9f:be:c6:96:f5:c0:fe:ad:c3:c4:5a:0d:34:c2:ec: 34:fd:2c:1e:0b:89:5a:27:f6:75:b9:83:c4:05:d9: 1a:86:7f:a2:c4:2e:a3:7b:d6:ac:c6:49:55:91:96: c1:d0:aa:95:57:ed:e3:84:cc:0c:e5:12:1c:3b:09: 7b:3e:a9:0a:7b:ea:f3:79:16:65:ad:60:6a:55:88: e5:a0:e9:43:23:a3:e5:fa:7b:ad:6f:85:66:1c:0a: 6b:54:f2:07:35:00:e0:78:fa:c6:f6:dd:77:ee:69: 34:0b:64:69:f5:15:48:61:e3:29:b7:ec:47:c0:fa: 46:18:2e:c8:99:97:ea:25:bc:0c:40:41:48:67:00: 1b:24:1e:e8:81:24:7d:48:80:e3:a6:ce:02:53:23: 11:a2:d7:19:7c:84:1c:fa:6b:72:8a:4d:83:2d:27: 4b:b5:06:76:dc:0e:8c:ec:01:b4:6e:06:ea:53:a9: a7:16:fe:8c:26:fe:01:9d:66:6c:32:1e:43:6b:95: ba:a8:1c:3d:30:f0:25:1b:c6:22:87:40:7c:d7:e8: d1:49:d6:b9:98:d4:18:54:c8:fc:d3:89:89:6a:30: b1:e9:ed:f8:37:6d:ab:57:b5:f6:a5:27:d5:45:e1: c6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C2:90:C1:DA:2E:16:D0:2F:CC:C7:5D:98:D9:28:7C:95:AB:01:CD X509v3 Authority Key Identifier: keyid:92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:3c:46:5f:b7:33:1b:3f:15:fd:2c:c2:ae:36:1d:31:8e:d6: b2:82:40:32:f0:f3:a1:ed:bc:b8:81:ca:0b:c0:03:2b:8e:85: fb:5a:c0:c3:05:c0:1f:f6:8a:8d:2a:94:69:97:ac:09:c8:b4: 31:a7:72:d9:a6:a3:18:79:25:17:57:e6:bf:c3:31:0f:cf:1f: 54:c7:92:51:39:08:d0:ec:3a:0d:2a:16:95:1f:c6:bd:14:b7: 4d:c7:01:75:5a:d5:14:86:fb:16:b8:19:86:05:64:3b:5a:87: 0b:d1:c6:ac:33:54:31:94:57:bc:da:d4:68:46:65:c3:7e:fe: 98:c6:2e:86:5c:f0:9e:f0:ab:d1:2f:8d:16:66:0d:7b:60:54: ac:25:8d:9c:12:34:6f:ab:05:34:da:8c:47:c9:b8:9d:ce:e2: b2:9f:f9:fa:7f:ab:97:a1:88:61:3c:77:47:fd:79:cb:84:24: 9b:fd:79:88:06:b6:94:16:c7:84:11:52:a2:18:ef:54:6f:9c: e8:ff:f5:cb:69:10:25:7a:54:d2:48:f3:52:11:c3:3e:66:38: cc:b0:16:aa:d9:d5:c0:e8:33:5c:f1:99:48:ff:97:ca:87:32: 29:37:62:5e:bf:e5:b9:bb:f9:1c:b5:db:cc:54:17:73:41:72: e5:72:9f:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDZCNDExMC8GA1UEBRMoOTIzRDUwN0Y5QzI2OUJBMjI0NUQ1QkU1NDdFRkIxQkZF OUI0OTE4QjAeFw0yNDExMjMwNjA5NDZaFw0yNDExMzAwNjA5NDZaMBgxFjAUBgNV BAMTDTY3NDE3MWFiLTVkZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVT1dv9bkSjnpOJeX+b5++xpb1wP6tw8RaDTTC7DT9LB4LiVon9nW5g8QF2RqG f6LELqN71qzGSVWRlsHQqpVX7eOEzAzlEhw7CXs+qQp76vN5FmWtYGpViOWg6UMj o+X6e61vhWYcCmtU8gc1AOB4+sb23XfuaTQLZGn1FUhh4ym37EfA+kYYLsiZl+ol vAxAQUhnABskHuiBJH1IgOOmzgJTIxGi1xl8hBz6a3KKTYMtJ0u1BnbcDozsAbRu BupTqacW/owm/gGdZmwyHkNrlbqoHD0w8CUbxiKHQHzX6NFJ1rmY1BhUyPzTiYlq MLHp7fg3batXtfalJ9VF4canAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUScKQwdou FtAvzMddmNkofJWrAc0wHwYDVR0jBBgwFoAUkj1Qf5wmm6IkXVvlR++xv+m0kYsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNkI0LzVGRThEQTA0QTcx MzExRUZBNEUwNjQzMUM0RjlBRTAyL2tqMVFmNXdtbTZJa1hWdmxSLS14di1tMGtZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2oxUWY1d21tNklrWFZ2bFItLXh2LW0wa1lzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NkI0LzVGRThEQTA0QTcxMzExRUZBNEUwNjQzMUM0RjlBRTAyL2tqMVFmNXdtbTZJ a1hWdmxSLS14di1tMGtZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMY8Rl+3Mxs/Ff0swq42HTGO1rKCQDLw86HtvLiBygvAAyuOhftawMMF wB/2io0qlGmXrAnItDGnctmmoxh5JRdX5r/DMQ/PH1THklE5CNDsOg0qFpUfxr0U t03HAXVa1RSG+xa4GYYFZDtahwvRxqwzVDGUV7za1GhGZcN+/pjGLoZc8J7wq9Ev jRZmDXtgVKwljZwSNG+rBTTajEfJuJ3O4rKf+fp/q5ehiGE8d0f9ecuEJJv9eYgG tpQWx4QRUqIY71RvnOj/9ctpECV6VNJI81IRwz5mOMywFqrZ1cDoM1zxmUj/l8qH Mik3Yl6/5bm7+Ry128xUF3NBcuVyn10= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org