$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: fiYmi/XRCP85GaKF+VApeuTSVYt/9VSN4VQ8Un/YC6c= Subject key identifier: 74:C0:42:D5:41:0B:42:0D:71:91:A7:E9:C5:B6:93:55:11:FF:B2:4F Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 3441 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 466E Signing time: Sun 24 Nov 2024 14:20:56 +0000 Manifest this update: Sun 24 Nov 2024 14:20:55 +0000 Manifest next update: Sun 01 Dec 2024 14:20:55 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: XQEvTqxGsTHxKPvbH6mVJKj/EqHaDfUrHO8+M1QS2P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13377 (0x3441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Nov 24 14:20:55 2024 GMT Not After : Dec 1 14:20:55 2024 GMT Subject: CN=67433647-6fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:9d:e0:e5:73:aa:b5:a3:32:74:ac:7f:b6: 7e:82:bf:62:d0:5b:4a:20:5f:ec:8e:d5:2b:b1:c3: a8:31:f2:b6:85:1f:8f:5a:09:67:88:31:a1:45:7a: d2:db:19:f1:76:ed:ee:b8:9a:3e:b5:a7:6a:fe:19: 00:2d:2f:c1:3f:7b:54:94:be:d4:33:e9:29:5a:60: 51:c7:2e:c1:a8:61:05:b1:27:49:f5:25:a9:e1:39: 90:91:b6:cc:60:6e:12:97:5d:36:c0:81:15:49:b7: 4a:90:bf:e3:f1:2b:e0:6d:59:a1:dc:68:bc:24:2b: 6b:a8:16:47:e2:35:40:11:31:8c:cf:a2:e6:29:dc: bd:e9:e1:03:71:1f:b7:19:77:e9:6e:f8:11:8e:71: 17:45:31:8b:d0:da:c6:cf:bf:c8:c8:d8:68:89:0d: c4:e0:03:08:e5:24:c2:4a:5a:10:08:d5:24:f5:9e: b7:52:2f:37:43:15:2b:76:ba:b2:3f:3f:07:ee:f5: 4c:d7:a1:1f:ae:0b:6c:b8:db:7b:ff:f0:0e:ce:5e: 2b:1c:ae:6c:b0:f8:a7:86:69:8f:4e:6a:2d:44:1e: 9c:dd:b1:cf:9c:2b:8a:23:26:ac:34:89:f2:3c:dc: 2e:f1:9c:1e:b5:50:e1:74:9b:2b:cb:f4:52:a1:43: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C0:42:D5:41:0B:42:0D:71:91:A7:E9:C5:B6:93:55:11:FF:B2:4F X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c1:b0:2a:69:a5:41:55:0b:b4:07:c1:77:27:d6:10:4b:10: 01:f4:81:bd:0c:68:8b:9c:23:a6:13:9e:80:e3:00:04:62:fc: 82:ed:72:b2:01:bf:22:24:c2:6d:e1:3a:94:99:ea:09:bd:e6: 1a:7c:49:75:eb:77:59:d7:26:8c:fa:4a:f9:7c:57:81:e3:cd: 08:5f:05:f3:f9:14:af:4e:25:45:3d:81:08:97:73:66:81:8d: 3f:df:80:f7:7e:6c:cc:49:00:ca:e0:4e:7d:7c:5d:d5:22:72: e8:cc:5b:ff:f3:95:b7:eb:01:82:92:28:3b:54:d5:d5:e5:27: a4:08:16:16:47:73:a0:01:e3:09:fc:74:e5:a3:78:63:8b:27: d1:5b:66:12:d7:95:70:50:9a:dd:03:76:10:0c:10:ba:a8:c9: cc:2e:65:d0:c2:a6:c5:8d:2d:cc:5c:e9:64:0a:94:86:a4:c0: c9:82:95:79:58:91:a0:6c:8e:71:3c:66:e9:23:54:79:6f:95: 1a:81:0e:94:bd:2d:94:70:54:2b:8c:db:d0:ed:16:13:54:ba: 97:67:f6:39:93:d7:dd:19:8f:c5:55:1b:05:48:e9:2e:10:07: 26:e1:db:fc:1e:0f:36:07:ba:43:c8:4f:cf:83:22:66:4a:82: fc:40:91:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjQxMTI0MTQyMDU1WhcNMjQxMjAxMTQyMDU1WjAYMRYwFAYD VQQDEw02NzQzMzY0Ny02ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2md4OVzqrWjMnSsf7Z+gr9i0FtKIF/sjtUrscOoMfK2hR+PWglniDGhRXrS 2xnxdu3uuJo+tadq/hkALS/BP3tUlL7UM+kpWmBRxy7BqGEFsSdJ9SWp4TmQkbbM YG4Sl102wIEVSbdKkL/j8SvgbVmh3Gi8JCtrqBZH4jVAETGMz6LmKdy96eEDcR+3 GXfpbvgRjnEXRTGL0NrGz7/IyNhoiQ3E4AMI5STCSloQCNUk9Z63Ui83QxUrdrqy Pz8H7vVM16EfrgtsuNt7//AOzl4rHK5ssPinhmmPTmotRB6c3bHPnCuKIyasNIny PNwu8ZwetVDhdJsry/RSoUP5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTAQtVB C0INcZGn6cW2k1UR/7JPMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0wbAqaaVBVQu0B8F3J9YQSxAB9IG9DGiLnCOmE56A4wAEYvyC7XKy Ab8iJMJt4TqUmeoJveYafEl163dZ1yaM+kr5fFeB480IXwXz+RSvTiVFPYEIl3Nm gY0/34D3fmzMSQDK4E59fF3VInLozFv/85W36wGCkig7VNXV5SekCBYWR3OgAeMJ /HTlo3hjiyfRW2YS15VwUJrdA3YQDBC6qMnMLmXQwqbFjS3MXOlkCpSGpMDJgpV5 WJGgbI5xPGbpI1R5b5UagQ6UvS2UcFQrjNvQ7RYTVLqXZ/Y5k9fdGY/FVRsFSOku EAcm4dv8Hg82B7pDyE/PgyJmSoL8QJEF -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:21 2024 by rpki-client on console-ams.rpki-client.org