$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft File: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json) Hash identifier: TT+DkW/+cyhHSVskK6c7LnvbdmdY2eTguFVsX3jAZIo= Subject key identifier: 6A:90:40:93:91:B7:F5:05:E7:6D:15:DF:04:09:A1:99:11:30:59:C7 Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F Certificate issuer: /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft Manifest number: 1E Signing time: Sun 19 May 2024 08:37:24 +0000 Manifest this update: Sun 19 May 2024 08:37:24 +0000 Manifest next update: Sun 26 May 2024 08:37:24 +0000 Files and hashes: 1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: dQ1UzzVFj/g95CvO+Ch9m8nTX24rT9QK5b4DnVZAJ2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Validity Not Before: May 19 08:37:24 2024 GMT Not After : May 26 08:37:24 2024 GMT Subject: CN=6649ba44-db97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:51:6e:ea:34:5c:72:eb:c0:c9:9e:d3:6c:94: 82:4e:3f:b1:23:77:74:51:1d:39:40:74:70:00:64: 99:4e:08:70:7a:aa:47:c8:b1:df:c0:f1:14:45:53: 4c:d8:2e:2c:3a:e7:71:e6:45:84:03:68:6d:27:8c: e6:eb:02:30:79:97:2a:be:08:dc:5c:2d:c4:8f:da: b3:10:1a:2c:1e:91:64:30:3f:79:3d:0d:d6:91:79: f9:33:76:c4:af:96:06:de:76:47:5f:e7:b8:4c:79: ea:4b:ec:ce:55:2d:cc:8a:bc:70:43:91:bf:58:8e: 24:a2:30:a5:f0:51:16:f2:2e:5d:22:5e:63:22:e8: 29:4e:44:67:eb:8e:36:1e:a9:f3:e8:b4:00:6f:b8: ce:f6:0d:28:b6:35:ea:c7:fc:ee:e5:0c:20:50:21: aa:32:fc:57:b4:bd:97:ec:1e:44:82:3d:9f:e3:18: 24:2d:02:fd:1a:69:f7:3a:a9:8d:28:ce:87:1a:e0: 28:f8:f8:8a:e2:b9:3a:ac:26:24:1b:b3:88:88:22: 02:0a:5d:e0:f3:1c:0c:d7:51:4e:4e:be:d3:c4:0d: a8:14:b5:39:41:69:24:e9:e6:58:98:b2:6c:9b:46: e6:eb:50:95:f0:f5:0b:8d:0f:97:80:7a:87:d1:c6: 76:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:90:40:93:91:B7:F5:05:E7:6D:15:DF:04:09:A1:99:11:30:59:C7 X509v3 Authority Key Identifier: keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:fc:8a:a4:1c:e1:84:b9:e8:b5:c0:dc:fb:6f:0a:c6:3c:35: 58:11:4c:70:c8:04:d6:a4:da:02:2e:00:a1:d2:be:95:66:bb: 34:16:3d:aa:a4:53:bd:c7:ad:7d:aa:ae:e0:73:9c:e1:74:23: 35:54:3e:5d:87:f3:6b:12:dd:2a:b8:41:f4:32:e3:b7:34:bb: b9:f8:99:16:5e:b6:42:31:bb:50:57:41:45:fc:77:90:5e:c7: 4d:c6:50:0f:70:52:fe:80:67:65:43:9b:d1:d8:b4:ca:63:39: ac:ef:a6:b2:bd:72:be:8b:33:32:8b:a5:a4:f2:63:2f:ab:62: 33:17:4f:51:a9:a3:03:32:1d:72:75:49:a6:e4:61:65:4e:e8: 5a:1d:2f:2b:a8:e6:90:ff:95:da:bd:e1:81:df:8d:98:d3:bb: 51:cc:fc:ad:2c:74:c6:48:9d:c9:49:f3:b7:b5:a8:fe:45:4a: c1:c2:42:47:0d:13:9a:98:d7:26:1f:0e:a3:5c:02:19:b5:ff: 90:16:53:c6:5a:1d:c0:a4:11:1c:81:55:88:1b:fa:51:26:cd: 2d:86:17:ad:57:88:94:c9:a2:91:78:e3:5e:a4:55:a1:db:44: 92:75:94:d0:92:50:b7:cc:9d:0a:fa:81:72:ce:60:46:c3:ed: 4a:c3:22:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTQxQzExMC8GA1UEBRMoNzlENjMwNUZBMjJGRkRGN0UzNTEwNjc0OTc4NjJDNjRB MTY1NDcyRjAeFw0yNDA1MTkwODM3MjRaFw0yNDA1MjYwODM3MjRaMBgxFjAUBgNV BAMTDTY2NDliYTQ0LWRiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpUW7qNFxy68DJntNslIJOP7Ejd3RRHTlAdHAAZJlOCHB6qkfIsd/A8RRFU0zY Liw653HmRYQDaG0njObrAjB5lyq+CNxcLcSP2rMQGiwekWQwP3k9DdaRefkzdsSv lgbedkdf57hMeepL7M5VLcyKvHBDkb9YjiSiMKXwURbyLl0iXmMi6ClORGfrjjYe qfPotABvuM72DSi2NerH/O7lDCBQIaoy/Fe0vZfsHkSCPZ/jGCQtAv0aafc6qY0o zoca4Cj4+IriuTqsJiQbs4iIIgIKXeDzHAzXUU5OvtPEDagUtTlBaSTp5liYsmyb RubrUJXw9QuND5eAeofRxnb9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUapBAk5G3 9QXnbRXfBAmhmREwWccwHwYDVR0jBBgwFoAUedYwX6Iv/ffjUQZ0l4YsZKFlRy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NDFDLzUzQUFCNEU2RTcy RjExRUVCNzJDNkU2OEM0RjlBRTAyL2VkWXdYNkl2X2ZmalVRWjBsNFlzWktGbFJ5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZWRZd1g2SXZfZmZqVVFaMGw0WXNaS0ZsUnk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NDFDLzUzQUFCNEU2RTcyRjExRUVCNzJDNkU2OEM0RjlBRTAyL2VkWXdYNkl2X2Zm alVRWjBsNFlzWktGbFJ5OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADT8iqQc4YS56LXA3PtvCsY8NVgRTHDIBNak2gIuAKHSvpVmuzQWPaqk U73HrX2qruBznOF0IzVUPl2H82sS3Sq4QfQy47c0u7n4mRZetkIxu1BXQUX8d5Be x03GUA9wUv6AZ2VDm9HYtMpjOazvprK9cr6LMzKLpaTyYy+rYjMXT1GpowMyHXJ1 SabkYWVO6FodLyuo5pD/ldq94YHfjZjTu1HM/K0sdMZInclJ87e1qP5FSsHCQkcN E5qY1yYfDqNcAhm1/5AWU8ZaHcCkERyBVYgb+lEmzS2GF61XiJTJopF4416kVaHb RJJ1lNCSULfMnQr6gXLOYEbD7UrDIg4= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org