$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json) Hash identifier: 0M7IH/0nsnyTJpQ4YRyf3kkAKMtQz7f0JovXR3LzXX0= Subject key identifier: 06:B6:3E:14:BD:AC:8E:D9:E3:FE:42:CD:55:01:80:08:52:3F:26:A6 Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft Manifest number: 5B Signing time: Thu 17 Oct 2024 05:33:47 +0000 Manifest this update: Thu 17 Oct 2024 05:33:46 +0000 Manifest next update: Thu 24 Oct 2024 05:33:46 +0000 Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: eLqcEpXSk74QEnjCRqUDoV0xwm+Y5JVpWcm55xJxnqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 05:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Validity Not Before: Oct 17 05:33:46 2024 GMT Not After : Oct 24 05:33:46 2024 GMT Subject: CN=6710a1bb-bd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:2f:c8:81:44:b6:ce:6f:f6:22:b4:9a:21: 8d:92:16:fc:53:49:92:51:dc:1a:f2:ac:ec:47:ba: 99:aa:70:65:8a:53:15:e1:b5:67:91:71:41:e4:46: 1a:74:98:cb:96:e3:6a:7d:29:cd:4e:49:02:9b:15: 3b:3f:8b:6a:95:28:c7:70:27:3d:95:b4:48:cd:5e: 09:9a:68:d1:ed:d7:26:6f:90:1d:91:ca:0a:d6:09: 64:b7:97:b0:df:e8:bc:8c:18:31:a6:83:ea:17:53: 0f:67:e5:c7:91:fb:45:77:84:76:a0:c4:b0:45:41: f6:22:4c:0b:56:4c:17:be:c5:36:3f:f7:91:c1:df: 69:dd:49:9e:c5:ef:ad:18:48:f3:41:1e:d9:50:ad: 47:67:13:5b:74:23:53:c4:f8:22:9b:43:47:54:e9: a7:d0:2a:a7:ef:b9:6d:17:86:26:30:95:9f:ec:ba: a2:a9:c2:36:10:71:ed:2a:9d:69:8a:f2:4c:a9:37: 30:91:20:dd:4a:ee:c2:5a:d3:bf:f8:d6:da:d3:b0: 8d:d2:a7:14:7c:ec:27:e2:03:54:2e:49:2c:51:61: f8:7d:6c:b0:20:22:e2:1b:f3:86:c0:c3:35:bf:6a: b6:15:7d:9c:1e:31:1b:8c:25:27:4f:3b:ce:0a:12: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B6:3E:14:BD:AC:8E:D9:E3:FE:42:CD:55:01:80:08:52:3F:26:A6 X509v3 Authority Key Identifier: keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d7:66:6b:fa:a4:cc:d3:d6:e5:9a:7e:31:e1:3a:83:20:af: ce:fc:f2:61:3f:b4:b9:0f:88:39:6b:02:c2:30:e9:7d:63:a0: ac:ca:eb:29:be:64:72:46:13:f6:cb:26:2e:2f:84:61:f7:5f: 58:6d:75:e7:2e:b5:62:14:39:17:bb:e7:61:c1:36:ab:5a:4f: 37:6d:ec:df:1c:93:7d:40:11:06:22:a6:21:d6:23:56:63:22: 45:16:d2:e1:24:11:0a:e4:1d:b3:d9:66:64:1c:49:38:bf:de: ff:07:f0:fe:22:6a:11:38:f2:e2:55:a4:49:32:aa:fc:d7:6a: 30:e5:0e:9e:04:2b:a3:17:d4:fc:c9:ce:e9:db:8a:ed:e8:75: 63:e4:30:18:9b:c5:2a:94:88:8c:14:e3:91:79:62:96:7d:b9: 47:98:4a:27:6a:a1:8c:d5:aa:ec:a1:54:8c:ce:c7:65:c2:f3: 62:81:a1:3e:ec:6b:ac:e7:df:50:22:ad:05:21:f2:88:3b:2b: e3:21:7b:e7:a0:f0:a7:9f:d0:56:22:71:07:32:31:60:85:9e: da:42:1d:42:38:0b:75:ce:c4:9e:23:c7:a9:bf:59:c9:16:b1: b8:87:41:d4:27:9c:44:f5:4b:ab:ba:db:cd:7c:16:76:eb:ce: a7:16:77:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTQ0OTExMC8GA1UEBRMoNkY2NUEwQzkyMjYwQjFBREEyMzE4N0IyOUJBQzNCRUFE QUMwNTY2MTAeFw0yNDEwMTcwNTMzNDZaFw0yNDEwMjQwNTMzNDZaMBgxFjAUBgNV BAMTDTY3MTBhMWJiLWJkOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2ly/IgUS2zm/2IrSaIY2SFvxTSZJR3BryrOxHupmqcGWKUxXhtWeRcUHkRhp0 mMuW42p9Kc1OSQKbFTs/i2qVKMdwJz2VtEjNXgmaaNHt1yZvkB2RygrWCWS3l7Df 6LyMGDGmg+oXUw9n5ceR+0V3hHagxLBFQfYiTAtWTBe+xTY/95HB32ndSZ7F760Y SPNBHtlQrUdnE1t0I1PE+CKbQ0dU6afQKqfvuW0XhiYwlZ/suqKpwjYQce0qnWmK 8kypNzCRIN1K7sJa07/41trTsI3SpxR87CfiA1QuSSxRYfh9bLAgIuIb84bAwzW/ arYVfZweMRuMJSdPO84KEl4ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBrY+FL2s jtnj/kLNVQGACFI/JqYwHwYDVR0jBBgwFoAUb2WgySJgsa2iMYeym6w76trAVmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNDQ5LzQwMTc5MEZDMDcz QzExRUY4RDFEQjA1NkM0RjlBRTAyL2IyV2d5U0pnc2EyaU1ZZXltNnc3NnRyQVZt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjJXZ3lTSmdzYTJpTVlleW02dzc2dHJBVm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NDQ5LzQwMTc5MEZDMDczQzExRUY4RDFEQjA1NkM0RjlBRTAyL2IyV2d5U0pnc2Ey aU1ZZXltNnc3NnRyQVZtRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfXZmv6pMzT1uWafjHhOoMgr8788mE/tLkPiDlrAsIw6X1joKzK6ym+ ZHJGE/bLJi4vhGH3X1htdecutWIUORe752HBNqtaTzdt7N8ck31AEQYipiHWI1Zj IkUW0uEkEQrkHbPZZmQcSTi/3v8H8P4iahE48uJVpEkyqvzXajDlDp4EK6MX1PzJ zunbiu3odWPkMBibxSqUiIwU45F5YpZ9uUeYSidqoYzVquyhVIzOx2XC82KBoT7s a6zn31AirQUh8og7K+Mhe+eg8Kef0FYicQcyMWCFntpCHUI4C3XOxJ4jx6m/WckW sbiHQdQnnET1S6u62818FnbrzqcWd/A= -----END CERTIFICATE-----Generated at Thu Oct 17 08:06:30 2024 by rpki-client on console-ams.rpki-client.org