$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: +It03EQuNSl5+j3FeS4gNVa1b5xfcyWYQJVb2O1/zw8= Subject key identifier: A1:0A:0F:F2:86:26:04:28:EE:E3:D3:34:B8:8B:7C:0D:8D:96:D8:64 Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0C3F Signing time: Fri 31 May 2024 19:29:56 +0000 Manifest this update: Fri 31 May 2024 19:29:56 +0000 Manifest next update: Fri 07 Jun 2024 19:29:56 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: FwPkvT/9tc2TEjSpY8yadA/MI6l+R8fsg2uTcayKUEE=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: jNDzde8g/AzGS0ahQqBUYpm+iNXbvhKgRob4o3gUZbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: May 31 19:29:56 2024 GMT Not After : Jun 7 19:29:56 2024 GMT Subject: CN=665a2534-8a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0b:f1:81:51:43:b8:10:91:cf:e2:ae:a7:e7: 9c:89:8c:a9:af:a0:69:9e:10:9b:69:6c:84:94:0d: a4:75:b7:ff:2b:de:17:2d:11:7f:62:29:36:fa:ad: db:74:bc:26:5b:62:2b:09:5f:5b:62:64:fc:05:a2: 2f:1e:f2:c2:7c:3a:3a:b3:26:b3:98:da:94:41:57: 14:1a:cf:cd:2c:6d:de:51:3e:9c:38:4b:04:2a:f9: 07:08:a8:be:96:f2:fa:04:c5:04:c7:a7:c5:eb:c1: eb:99:2e:25:6d:44:52:81:ba:5d:97:fc:f1:50:1d: b3:fb:c1:46:3c:18:bc:34:ad:24:7f:d7:51:7b:5f: a4:58:07:74:13:d4:0f:3c:40:8b:63:69:3a:83:ac: 63:65:97:da:42:d2:50:ed:e2:20:27:b3:6a:7b:9f: d1:43:9b:21:e5:63:42:ca:3a:6f:57:86:db:26:f7: 56:7d:9f:76:74:15:d4:13:b9:fa:95:45:c3:dd:90: c3:2e:93:d5:3e:11:6a:4e:49:f8:d2:48:f7:37:fb: 17:20:05:c2:7f:33:f0:01:86:23:ea:11:e2:60:c4: ea:b5:ab:b8:2e:21:44:6d:6d:a8:a7:8e:74:75:dd: 03:a6:ab:47:28:d2:23:ac:e4:0a:41:d2:74:93:b5: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0A:0F:F2:86:26:04:28:EE:E3:D3:34:B8:8B:7C:0D:8D:96:D8:64 X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:01:60:4a:e6:bc:d3:68:b0:97:8c:d6:5c:89:a1:34:f7:0d: a1:69:fc:cd:fb:7d:7d:18:a4:c1:5c:2f:82:91:ea:5b:9c:49: b4:57:f4:8d:28:5f:76:25:62:8c:48:3d:97:61:18:c3:1b:cc: b2:7e:91:f3:b3:1f:9a:40:5f:3d:a8:8b:ac:c7:23:e1:b2:2c: 24:42:cd:79:e7:05:34:f5:a5:ef:cc:f5:44:8a:c1:ca:f0:2c: 39:8b:5e:3f:a1:37:12:b7:70:ac:ab:65:ea:81:3f:51:d9:e1: c6:29:9a:45:04:33:a1:58:7a:3f:5b:7c:3f:97:77:b2:e9:c5: ce:a5:57:0d:d1:bd:5d:86:d8:5c:8b:a1:b8:31:89:1a:40:83: 2f:78:7e:40:73:51:59:4a:c0:f2:e3:5b:b2:86:d2:5b:a6:ba: 87:3e:b5:a6:32:56:20:1c:6c:17:ba:fa:f9:48:20:6c:46:3b: 8c:df:31:1c:b1:2c:23:cd:75:12:68:04:2b:35:cb:1b:72:9e: 51:c0:c0:e4:56:10:fc:c9:9c:61:8a:a3:91:a9:64:3e:5a:af: 1e:6d:23:1d:a7:05:3c:c1:d2:fe:12:4a:3e:98:6a:ca:88:f0: 6d:68:56:c1:67:e7:47:64:fe:55:a9:7c:2a:c0:ce:ec:85:64: 75:e3:89:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjQwNTMxMTkyOTU2WhcNMjQwNjA3MTkyOTU2WjAYMRYwFAYD VQQDEw02NjVhMjUzNC04YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AvxgVFDuBCRz+Kup+eciYypr6BpnhCbaWyElA2kdbf/K94XLRF/Yik2+q3b dLwmW2IrCV9bYmT8BaIvHvLCfDo6syazmNqUQVcUGs/NLG3eUT6cOEsEKvkHCKi+ lvL6BMUEx6fF68HrmS4lbURSgbpdl/zxUB2z+8FGPBi8NK0kf9dRe1+kWAd0E9QP PECLY2k6g6xjZZfaQtJQ7eIgJ7Nqe5/RQ5sh5WNCyjpvV4bbJvdWfZ92dBXUE7n6 lUXD3ZDDLpPVPhFqTkn40kj3N/sXIAXCfzPwAYYj6hHiYMTqtau4LiFEbW2op450 dd0DpqtHKNIjrOQKQdJ0k7W8dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEKD/KG JgQo7uPTNLiLfA2NlthkMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUAWBK5rzTaLCXjNZciaE09w2hafzN+319GKTBXC+CkepbnEm0V/SN KF92JWKMSD2XYRjDG8yyfpHzsx+aQF89qIusxyPhsiwkQs155wU09aXvzPVEisHK 8Cw5i14/oTcSt3Csq2XqgT9R2eHGKZpFBDOhWHo/W3w/l3ey6cXOpVcN0b1dhthc i6G4MYkaQIMveH5Ac1FZSsDy41uyhtJbprqHPrWmMlYgHGwXuvr5SCBsRjuM3zEc sSwjzXUSaAQrNcsbcp5RwMDkVhD8yZxhiqORqWQ+Wq8ebSMdpwU8wdL+Eko+mGrK iPBtaFbBZ+dHZP5VqXwqwM7shWR144n6 -----END CERTIFICATE-----Generated at Fri May 31 22:13:01 2024 by rpki-client on console-fra.rpki-client.org