$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft File: D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json) Hash identifier: z9zARezQkNarFAzVsn16vgig4Fq+CeQDXpYMherJD3w= Subject key identifier: E4:A0:BA:6A:DF:35:A7:B6:0E:34:8C:3A:08:57:92:4F:CE:E7:8B:27 Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft Manifest number: E3 Signing time: Sun 19 May 2024 05:57:47 +0000 Manifest this update: Sun 19 May 2024 05:57:47 +0000 Manifest next update: Sun 26 May 2024 05:57:47 +0000 Files and hashes: 1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: HBxJq3OCn4CoQwf3BkVIO6XNfWSIkpVDKI0//sWSZeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Validity Not Before: May 19 05:57:47 2024 GMT Not After : May 26 05:57:47 2024 GMT Subject: CN=664994db-e997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:23:8c:bc:f5:f0:72:3e:10:bf:d8:cd:49: 25:b1:35:69:6c:9e:37:e2:aa:1d:63:41:cf:c6:22: 08:61:f6:21:ea:29:c6:e1:76:49:ea:55:3e:8c:0c: 38:ed:06:6f:b5:7e:75:23:4a:41:58:e9:23:b0:69: 2c:59:9c:ff:2a:44:46:2e:cc:50:0b:42:3e:53:00: 5d:73:31:dc:a0:dc:e3:47:89:72:77:e8:6b:55:84: ca:ed:ce:31:d3:08:c4:f3:54:db:77:7a:4d:59:ca: d8:4a:2f:24:f3:ed:2b:06:fe:fc:7d:16:89:e9:e4: 74:fb:9e:8f:4e:84:c2:57:94:c5:89:7c:ba:ed:a4: 20:77:4e:df:5e:19:19:f3:35:7d:09:59:1a:b8:02: a6:33:99:8f:e7:ee:9d:f5:fb:53:41:74:09:2b:59: 3b:77:b5:ec:da:c2:81:57:91:6f:86:15:71:81:9a: 4c:69:1e:8c:ff:59:f8:58:cf:1d:b3:a1:ea:b7:b8: 06:c6:8d:ea:87:4e:bf:b2:9f:18:8f:6a:a6:f7:a8: bf:08:a9:75:54:0b:b7:fb:08:16:71:a1:e9:1d:97: c6:58:2d:da:b9:00:5f:28:81:ec:51:c1:f0:54:fe: 10:08:76:85:8c:a4:d8:bb:b5:c9:17:36:fe:7c:6a: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A0:BA:6A:DF:35:A7:B6:0E:34:8C:3A:08:57:92:4F:CE:E7:8B:27 X509v3 Authority Key Identifier: keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:19:6a:f0:c7:66:17:6b:45:67:aa:b2:52:ee:00:cd:5c: b3:8c:9f:73:65:ae:98:e2:07:98:3c:07:f8:c8:cf:11:46:88: 22:7e:00:30:05:57:53:42:52:92:f2:62:8b:13:88:35:da:6c: b3:06:4b:a0:0f:94:fa:76:50:5a:cd:e0:7d:14:8e:36:76:9e: cb:06:45:f7:0b:7f:6a:4d:44:35:0f:e1:39:46:f6:92:9f:be: 89:e1:cc:51:44:1b:13:63:11:e3:5d:8b:c8:46:f2:2d:f4:43: f5:f5:f2:9d:50:df:2f:f3:f7:b7:58:3f:31:f2:fc:ad:0b:09: f6:17:dc:b4:aa:3b:54:f1:ab:6a:da:4b:d2:40:42:aa:f4:c9: 28:04:9c:77:86:09:c2:38:82:03:6c:85:6e:45:61:b5:77:f0: eb:3f:d6:ae:f2:46:96:d0:1c:29:c9:0d:13:19:90:19:e4:61: b0:79:bc:ef:90:0a:32:71:a8:37:16:ff:ca:49:bc:9d:29:01: 99:94:3a:0b:56:e8:e0:f1:3f:b6:3f:95:32:2d:c2:5c:07:28: f4:7c:3d:83:48:9b:81:33:36:25:ba:d3:7b:c6:5b:0d:19:51: a2:ca:14:e9:46:f9:d4:66:c6:61:62:cf:f2:d5:86:f2:d8:02: 20:6c:d0:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKDBGOTA2OTJBMUVFRkU3RjBBMUFDNjhCNUUxQUMwOUY3 MDI2OTcxQ0MwHhcNMjQwNTE5MDU1NzQ3WhcNMjQwNTI2MDU1NzQ3WjAYMRYwFAYD VQQDEw02NjQ5OTRkYi1lOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y4jjLz18HI+EL/YzUklsTVpbJ434qodY0HPxiIIYfYh6inG4XZJ6lU+jAw4 7QZvtX51I0pBWOkjsGksWZz/KkRGLsxQC0I+UwBdczHcoNzjR4lyd+hrVYTK7c4x 0wjE81Tbd3pNWcrYSi8k8+0rBv78fRaJ6eR0+56PToTCV5TFiXy67aQgd07fXhkZ 8zV9CVkauAKmM5mP5+6d9ftTQXQJK1k7d7Xs2sKBV5FvhhVxgZpMaR6M/1n4WM8d s6Hqt7gGxo3qh06/sp8Yj2qm96i/CKl1VAu3+wgWcaHpHZfGWC3auQBfKIHsUcHw VP4QCHaFjKTYu7XJFzb+fGphqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSgumrf Nae2DjSMOghXkk/O54snMB8GA1UdIwQYMBaAFA+QaSoe7+fwoaxoteGsCfcCaXHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9DRkEzNDA5QUJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVfQ2hyR2kxNGF3Sjl3SnBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1QnBLaDd2NV9DaHJHaTE0YXdKOXdKcGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9DRkEzNDA5QUJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVf Q2hyR2kxNGF3Sjl3SnBjY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBRhlq8MdmF2tFZ6qyUu4AzVyzjJ9zZa6Y4geYPAf4yM8RRogifgAw BVdTQlKS8mKLE4g12myzBkugD5T6dlBazeB9FI42dp7LBkX3C39qTUQ1D+E5RvaS n76J4cxRRBsTYxHjXYvIRvIt9EP19fKdUN8v8/e3WD8x8vytCwn2F9y0qjtU8atq 2kvSQEKq9MkoBJx3hgnCOIIDbIVuRWG1d/DrP9au8kaW0BwpyQ0TGZAZ5GGwebzv kAoycag3Fv/KSbydKQGZlDoLVujg8T+2P5UyLcJcByj0fD2DSJuBMzYlutN7xlsN GVGiyhTpRvnUZsZhYs/y1Yby2AIgbNAT -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org