$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json) Hash identifier: DMD8OSdM2xIY0k9WFl9Aw6zpKJ4BDCUWHK2aZ1YMi1c= Subject key identifier: 67:10:1C:8F:A0:CB:DF:0D:7A:FC:92:00:2F:F3:C5:FB:A8:51:93:7E Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft Manifest number: 0463 Signing time: Sun 19 May 2024 01:47:45 +0000 Manifest this update: Sun 19 May 2024 01:47:45 +0000 Manifest next update: Sun 26 May 2024 01:47:45 +0000 Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: 19qCxp8zf1Q00p6F9ICku8xdEcciA+ns7r1JJpHT2+c=) 2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: bQFmQGHXUQ7x87MmTGs+0s+NObqkgDsk8Nc02TDmNdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Validity Not Before: May 19 01:47:45 2024 GMT Not After : May 26 01:47:45 2024 GMT Subject: CN=66495a41-b516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:65:f3:92:89:f7:48:8e:00:ff:ac:5b:fe:e7: 1a:37:e2:a9:e7:d8:b0:c0:f4:a7:f7:a2:fc:dc:6a: 2c:9f:1c:58:cb:9b:18:c2:98:47:5d:b4:d9:7e:4a: d8:ab:bf:41:9e:ad:0b:09:59:23:7f:04:d0:66:70: 21:b9:c4:e8:43:84:95:9b:84:d9:c8:3c:36:be:8d: 51:53:fe:fa:ef:9b:7f:05:b5:0f:54:5e:3a:04:85: 69:ec:99:14:bf:a5:fc:e3:a5:01:01:88:d0:42:54: da:02:28:ba:df:24:af:5c:5c:cb:fe:9d:d6:62:e8: 80:d8:f3:a4:e8:72:5f:d9:f9:da:3b:1a:75:72:ba: 82:9d:09:99:c3:14:6f:74:9c:b5:1f:d7:06:5c:63: e7:ef:13:94:19:8d:7f:d1:12:61:d6:9e:eb:b2:57: 5d:68:3b:82:f4:e7:1c:10:5f:4b:ba:03:68:c3:f1: 66:84:6a:38:da:ed:c9:0d:2d:1c:be:ba:ea:7d:05: 6d:19:65:97:0a:fd:23:ac:ae:91:c7:fd:ec:6b:2a: 5f:d3:48:00:46:53:06:71:60:eb:fe:5b:cd:a9:7b: 57:aa:46:05:0d:eb:13:39:73:ee:69:45:a8:8c:5a: 95:c4:29:f1:15:7c:f3:d7:81:83:be:89:67:b5:52: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:1C:8F:A0:CB:DF:0D:7A:FC:92:00:2F:F3:C5:FB:A8:51:93:7E X509v3 Authority Key Identifier: keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ec:12:63:48:7a:3b:b2:d5:e2:61:99:48:e1:73:e8:15:d1: f7:ce:c1:4a:67:f2:81:cc:d4:96:e5:ae:22:da:fb:b5:f8:76: f6:89:07:98:3b:17:59:19:ac:2b:b6:f2:cf:e5:76:21:25:62: 47:04:4a:b0:d3:e0:39:3a:a4:9a:45:81:93:98:a5:e4:03:b9: d4:58:6a:b6:83:68:10:ea:b6:c4:10:cf:ec:36:a6:5e:31:c2: 5f:e5:55:e5:a1:07:bb:79:9f:ba:06:69:1b:9c:9e:d7:20:b4: cc:4f:61:59:4a:77:1e:f7:8a:e0:d9:e9:81:0f:3c:c3:49:3d: 57:06:4d:23:c5:f3:d6:9c:8b:fc:51:4c:29:e7:59:b5:30:54: 11:5d:1f:bd:7d:cc:88:8b:3e:6d:58:38:a8:af:2f:ac:3f:d0: ff:ba:01:dd:8b:77:a1:c1:0e:6e:d7:b5:d0:39:8b:04:fb:29: 8f:3a:81:2d:3e:bf:2b:c1:91:b7:41:0b:01:33:4f:16:fa:be: 89:d3:1c:80:d3:8b:bd:74:93:fe:34:fa:b6:2f:e8:56:4f:d5: f9:d8:ad:c5:29:e0:23:0d:2e:47:b5:76:ff:96:44:f3:ad:09: 5d:93:10:bf:26:cc:2c:d0:01:df:f1:95:2a:aa:1b:10:6f:d2: 60:e0:a9:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF NDdDNkI4RkUwHhcNMjQwNTE5MDE0NzQ1WhcNMjQwNTI2MDE0NzQ1WjAYMRYwFAYD VQQDEw02NjQ5NWE0MS1iNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WXzkon3SI4A/6xb/ucaN+Kp59iwwPSn96L83GosnxxYy5sYwphHXbTZfkrY q79Bnq0LCVkjfwTQZnAhucToQ4SVm4TZyDw2vo1RU/7675t/BbUPVF46BIVp7JkU v6X846UBAYjQQlTaAii63ySvXFzL/p3WYuiA2POk6HJf2fnaOxp1crqCnQmZwxRv dJy1H9cGXGPn7xOUGY1/0RJh1p7rslddaDuC9OccEF9LugNow/FmhGo42u3JDS0c vrrqfQVtGWWXCv0jrK6Rx/3saypf00gARlMGcWDr/lvNqXtXqkYFDesTOXPuaUWo jFqVxCnxFXzz14GDvolntVLuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcQHI+g y98NevySAC/zxfuoUZN+MB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM OHZaamwzaHFiQWprZkd1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu7BJjSHo7stXiYZlI4XPoFdH3zsFKZ/KBzNSW5a4i2vu1+Hb2iQeY OxdZGawrtvLP5XYhJWJHBEqw0+A5OqSaRYGTmKXkA7nUWGq2g2gQ6rbEEM/sNqZe McJf5VXloQe7eZ+6BmkbnJ7XILTMT2FZSnce94rg2emBDzzDST1XBk0jxfPWnIv8 UUwp51m1MFQRXR+9fcyIiz5tWDiory+sP9D/ugHdi3ehwQ5u17XQOYsE+ymPOoEt Pr8rwZG3QQsBM08W+r6J0xyA04u9dJP+NPq2L+hWT9X52K3FKeAjDS5HtXb/lkTz rQldkxC/Jsws0AHf8ZUqqhsQb9Jg4Klr -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org