$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: zZrNeNnwMGLTwW2yK9YTM8Cm34LQdzusa1BGSiIyt1w= Subject key identifier: 97:93:3C:9D:79:02:9F:FE:11:71:F7:DE:CB:62:5D:D3:21:BD:E3:5C Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 33C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 33C6 Signing time: Sat 18 May 2024 14:16:42 +0000 Manifest this update: Sat 18 May 2024 14:16:42 +0000 Manifest next update: Sat 25 May 2024 14:16:42 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: uTnW2zjLLI5t8xlccRzY5jWbrvHzP+HsHZVSEZRIk8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13254 (0x33c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: May 18 14:16:42 2024 GMT Not After : May 25 14:16:42 2024 GMT Subject: CN=6648b84a-3668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:12:97:0b:20:a4:2e:ce:c9:4e:06:75:b0: 18:50:7d:f7:c1:55:5e:2c:80:b8:3d:d4:82:b9:2e: c3:9d:f6:70:51:24:82:d6:7e:ec:ba:b2:1b:33:7c: 9c:be:68:7f:6b:40:3b:d4:33:f8:e2:01:5d:62:db: 02:10:7a:b6:76:04:be:2f:ac:96:6b:35:bf:6d:c5: 53:bb:4a:b8:18:be:90:a9:62:1a:46:67:81:44:1a: a9:d0:23:f4:c4:d0:79:5a:73:bc:ea:9f:07:73:39: 0c:99:6e:1e:6e:40:0e:f4:d8:62:8d:82:1a:06:eb: 13:d4:9f:51:13:e3:2e:32:39:d5:6c:f5:03:5c:1e: d7:92:ab:94:77:de:50:4c:35:10:42:4c:b9:32:ce: 4f:27:49:99:77:39:f0:39:5a:27:b6:a8:40:72:9b: b8:03:3a:95:b3:4b:22:08:83:c2:ae:2e:8c:92:0b: 67:cf:1d:f4:43:71:6d:81:76:65:67:c5:a4:38:01: b3:08:3b:fb:f3:1e:d6:46:e7:df:61:4d:69:77:79: fc:d9:7a:9a:54:d1:0f:4b:3a:f7:e7:c0:18:be:8f: ff:00:83:0f:da:e5:7e:45:c3:72:da:2a:39:f6:39: 20:29:9b:13:2c:38:6f:ba:2d:79:1a:45:d6:4f:43: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:3C:9D:79:02:9F:FE:11:71:F7:DE:CB:62:5D:D3:21:BD:E3:5C X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b6:f9:9b:ca:67:b9:10:81:3a:d4:2d:92:21:24:93:27:5f: 92:1d:83:c6:eb:86:b5:e5:db:7a:ad:2a:e8:3a:33:e3:77:ab: 66:27:17:9a:6f:d5:28:40:a0:87:6a:f6:24:36:24:73:ce:af: da:eb:12:2d:c2:d7:f5:36:e6:66:74:6a:55:e4:ee:60:62:41: 90:bf:c3:26:64:1d:8f:78:30:c5:96:15:98:ee:b4:54:30:41: 7f:9c:74:af:41:bf:b4:11:22:85:dc:a7:4f:88:f4:24:f0:f6: 4e:a6:ce:15:2a:70:65:ee:df:f2:58:d6:7c:d6:02:89:67:9b: 82:ee:3b:4e:bf:22:4f:0c:38:ec:ae:bb:31:e2:c5:3e:1e:13: 56:c5:6a:1c:bd:c4:60:f5:65:da:a3:ab:d0:81:79:48:05:02: 57:2f:4c:55:c9:fa:04:0b:fb:de:10:a4:94:86:0e:0f:2f:c6: f2:c3:91:a5:2c:c6:ea:75:ba:c2:bf:18:06:05:9a:d0:32:a7: 1b:bf:96:5b:9b:86:36:7f:f8:d2:4c:ed:8a:60:62:a2:04:4d: 38:0d:85:d8:a3:59:5f:b3:97:45:39:4f:ce:d6:ac:e3:88:b5: c4:6b:05:49:b9:87:e3:34:2a:61:e7:d8:9a:c6:b6:2f:72:4a: 2a:76:b7:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjQwNTE4MTQxNjQyWhcNMjQwNTI1MTQxNjQyWjAYMRYwFAYD VQQDEw02NjQ4Yjg0YS0zNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvkSlwsgpC7OyU4GdbAYUH33wVVeLIC4PdSCuS7DnfZwUSSC1n7surIbM3yc vmh/a0A71DP44gFdYtsCEHq2dgS+L6yWazW/bcVTu0q4GL6QqWIaRmeBRBqp0CP0 xNB5WnO86p8HczkMmW4ebkAO9NhijYIaBusT1J9RE+MuMjnVbPUDXB7XkquUd95Q TDUQQky5Ms5PJ0mZdznwOVontqhAcpu4AzqVs0siCIPCri6Mkgtnzx30Q3FtgXZl Z8WkOAGzCDv78x7WRuffYU1pd3n82XqaVNEPSzr358AYvo//AIMP2uV+RcNy2io5 9jkgKZsTLDhvui15GkXWT0NXGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeTPJ15 Ap/+EXH33stiXdMhveNcMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBotvmbyme5EIE61C2SISSTJ1+SHYPG64a15dt6rSroOjPjd6tmJxea b9UoQKCHavYkNiRzzq/a6xItwtf1NuZmdGpV5O5gYkGQv8MmZB2PeDDFlhWY7rRU MEF/nHSvQb+0ESKF3KdPiPQk8PZOps4VKnBl7t/yWNZ81gKJZ5uC7jtOvyJPDDjs rrsx4sU+HhNWxWocvcRg9WXao6vQgXlIBQJXL0xVyfoEC/veEKSUhg4PL8byw5Gl LMbqdbrCvxgGBZrQMqcbv5Zbm4Y2f/jSTO2KYGKiBE04DYXYo1lfs5dFOU/O1qzj iLXEawVJuYfjNCph59iaxrYvckoqdrft -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org