$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft File: 1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json) Hash identifier: /OB7r0HE0KqMJ3yKFSOmeZit6f9aW17pYe2aNp4l1bI= Subject key identifier: 9F:2F:EE:41:19:CA:DB:34:4C:E2:0E:15:C1:ED:F8:12:F8:F6:4D:4E Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 Certificate issuer: /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft Manifest number: 0172 Signing time: Thu 21 Nov 2024 02:10:17 +0000 Manifest this update: Thu 21 Nov 2024 02:10:17 +0000 Manifest next update: Thu 28 Nov 2024 02:10:16 +0000 Files and hashes: 1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: Cjjq5GTBSviThsQlkTf8oSfsvGm+pD0ZquNy22236o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Validity Not Before: Nov 21 02:10:17 2024 GMT Not After : Nov 28 02:10:16 2024 GMT Subject: CN=673e9689-4d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:65:92:2a:e2:04:ae:27:76:94:54:cb:66: bc:67:7d:8c:8e:43:6c:7f:46:e5:d7:5d:83:8c:f8: 5a:2f:98:3d:30:09:6d:6a:d5:fe:35:fc:9a:16:b0: 07:69:f5:88:8f:78:bf:be:61:62:3d:12:e5:aa:c3: 02:e4:28:1c:ab:be:0e:a9:c1:90:cf:21:27:51:e7: 3b:76:2b:9c:48:a1:f7:d8:95:cc:b1:8c:b8:a9:d9: 6f:92:3a:b7:ab:b0:fc:ea:5e:89:08:b3:98:a7:41: 66:5e:7e:bb:4e:fb:dd:19:17:10:38:ee:6a:10:73: ec:cd:74:db:d3:b2:0f:11:c1:4c:b0:d0:1e:8e:20: 91:6e:be:91:3e:f3:a1:3e:17:74:38:ce:89:25:32: d3:77:0b:53:74:64:84:58:76:b0:41:e5:b7:cc:89: 1e:84:3c:97:76:33:89:24:07:98:2f:bb:c8:3c:c2: 35:75:bb:71:90:a1:8a:a1:1c:a5:62:50:39:e7:f9: f9:fa:71:cb:03:54:1a:92:0d:37:cf:3f:ed:45:40: 7a:76:b0:1d:f2:dd:e9:6f:70:2f:c5:06:e1:a0:7e: 10:dd:c5:f0:aa:12:7d:63:9a:76:b5:d1:92:55:21: c9:74:52:28:22:6a:6c:31:e6:d3:d5:8f:99:ba:44: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:EE:41:19:CA:DB:34:4C:E2:0E:15:C1:ED:F8:12:F8:F6:4D:4E X509v3 Authority Key Identifier: keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9a:27:13:50:d2:c4:40:06:96:f8:93:ab:3b:7b:e3:6d:6f: 22:95:42:bb:c3:fb:3d:b6:e0:ed:d1:1a:15:f6:b3:d3:2d:ab: 83:72:2a:7b:bf:da:32:c6:11:13:b3:fe:a6:6f:38:4b:c6:c1: 6f:a3:cf:9b:af:c4:dc:04:0e:b7:d5:83:da:7c:47:d2:f9:82: 0f:71:84:49:83:ae:cb:18:8f:50:5e:fa:d7:b3:2a:e5:0d:27: d9:6e:f3:d0:8e:ed:1c:87:05:5b:20:ba:08:9c:7e:f6:b6:53: fd:05:8e:40:ca:5c:6f:37:a0:e8:56:9a:00:1c:d1:ff:3d:5f: 92:f8:57:9b:30:e6:a6:a7:59:de:58:f9:21:96:3b:b3:f2:86: 2e:0c:5f:ec:9d:e2:68:62:a2:ab:01:5f:7f:77:51:94:59:63: fb:73:66:fc:9c:dc:37:69:f0:25:0f:0c:83:db:30:04:d2:f2: ee:5f:5c:b0:b9:36:02:81:0c:73:86:95:ff:f9:4b:0b:63:a8: b5:0a:8c:94:b1:a8:10:2d:15:a2:e5:2e:2a:0e:09:0a:f7:14: 90:a8:ad:e8:4b:4d:76:08:08:99:57:21:61:d4:68:15:07:5a: 9a:db:9d:45:dc:e1:fb:87:b3:e3:1d:54:40:70:8f:90:07:f7: ea:5a:d8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEQ2RUQxNTA5REI4N0MzNEM0NjBBMjY0MUExOUI3RjQ4 NEU0REM0NDUwHhcNMjQxMTIxMDIxMDE3WhcNMjQxMTI4MDIxMDE2WjAYMRYwFAYD VQQDEw02NzNlOTY4OS00ZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5khlkiriBK4ndpRUy2a8Z32MjkNsf0bl112DjPhaL5g9MAltatX+NfyaFrAH afWIj3i/vmFiPRLlqsMC5Cgcq74OqcGQzyEnUec7diucSKH32JXMsYy4qdlvkjq3 q7D86l6JCLOYp0FmXn67TvvdGRcQOO5qEHPszXTb07IPEcFMsNAejiCRbr6RPvOh Phd0OM6JJTLTdwtTdGSEWHawQeW3zIkehDyXdjOJJAeYL7vIPMI1dbtxkKGKoRyl YlA55/n5+nHLA1Qakg03zz/tRUB6drAd8t3pb3AvxQbhoH4Q3cXwqhJ9Y5p2tdGS VSHJdFIoImpsMebT1Y+ZukR7nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8v7kEZ yts0TOIOFcHt+BL49k1OMB8GA1UdIwQYMBaAFNbtFQnbh8NMRgomQaGbf0hOTcRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi82NjQ1QUNBNjZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcweEdDaVpCb1p0X1NFNU54 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1MFZDZHVIdzB4R0NpWkJvWnRfU0U1TnhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi82NjQ1QUNBNjZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcw eEdDaVpCb1p0X1NFNU54RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBemicTUNLEQAaW+JOrO3vjbW8ilUK7w/s9tuDt0RoV9rPTLauDcip7 v9oyxhETs/6mbzhLxsFvo8+br8TcBA631YPafEfS+YIPcYRJg67LGI9QXvrXsyrl DSfZbvPQju0chwVbILoInH72tlP9BY5AylxvN6DoVpoAHNH/PV+S+FebMOamp1ne WPkhljuz8oYuDF/sneJoYqKrAV9/d1GUWWP7c2b8nNw3afAlDwyD2zAE0vLuX1yw uTYCgQxzhpX/+UsLY6i1CoyUsagQLRWi5S4qDgkK9xSQqK3oS012CAiZVyFh1GgV B1qa251F3OH7h7PjHVRAcI+QB/fqWtgb -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:08 2024 by rpki-client on console-fra.rpki-client.org