$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: oQpyQ8pKnQ6lTdfwJIOBknicKD5swc2jiuOhqNR3M/o= Subject key identifier: 26:BF:DB:8A:19:D2:48:14:39:C2:6F:86:9D:6F:14:D1:92:BD:A3:3A Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 57 Signing time: Sun 19 May 2024 07:47:30 +0000 Manifest this update: Sun 19 May 2024 07:47:29 +0000 Manifest next update: Sun 26 May 2024 07:47:29 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: sWp2lPmWdfzPp6sHOIkXrobswXEtL9f7w6oOnIuQcfs=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: u78iFIvwF2NEfGN9S77314lW5wUPIwISyfms2svNsdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: May 19 07:47:29 2024 GMT Not After : May 26 07:47:29 2024 GMT Subject: CN=6649ae92-ca4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:07:ef:40:6d:0f:af:96:6a:69:ca:50:dc: c3:5a:38:55:a6:5a:07:41:49:f1:50:21:50:dd:6c: a6:d5:0f:50:73:4a:c3:4e:c1:85:9b:c6:8a:8b:61: 94:30:fb:2e:fa:a7:ed:b9:18:1d:16:8b:f7:91:dc: c1:5e:6f:d1:17:ca:e2:2c:95:27:0d:62:d0:57:bb: df:cd:1d:af:67:0a:3c:d8:68:86:13:c3:13:44:08: 98:33:60:de:b9:7c:34:90:2f:19:1f:c9:07:58:9e: bc:77:82:d0:bb:ae:d3:5f:2a:fd:84:1c:86:85:f5: af:7c:17:46:a1:38:c6:a9:10:41:00:65:ec:6f:52: 61:65:0f:75:95:c8:90:d9:fc:be:f6:46:58:28:82: 70:5f:37:04:d5:ba:bd:a6:54:c6:45:2d:17:49:e6: 12:2f:96:ac:12:7f:fc:38:0a:c6:b4:9f:ed:05:d8: 6b:6b:aa:d1:34:59:de:aa:2a:7d:0a:50:aa:b5:4f: aa:d3:44:1e:05:ab:39:cf:49:74:ba:7b:9f:51:ed: c7:53:a6:6e:0e:6b:36:23:05:89:39:1c:67:da:dd: 8d:a1:2a:26:0a:82:da:50:24:76:a0:ea:eb:c8:d3: 8b:a0:f7:ff:16:90:f5:fc:cb:4b:57:d7:70:c5:fc: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BF:DB:8A:19:D2:48:14:39:C2:6F:86:9D:6F:14:D1:92:BD:A3:3A X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:81:cb:fd:de:28:d7:0e:a4:bc:3b:5e:7c:fb:10:9b:5b:e6: 40:f7:db:78:b4:84:bc:45:af:d6:51:d9:ec:5e:e1:5a:7c:23: 5b:e9:c8:78:f9:2d:db:ef:f4:e2:89:d3:7c:5a:d2:ed:e4:d0: d3:4c:b4:08:5f:e2:5a:d0:8e:88:78:ec:0a:bc:63:4d:22:62: 66:44:7f:b3:d7:9c:09:f8:de:b7:f3:3f:e9:7d:84:a7:71:72: df:7e:4d:84:35:8c:7c:42:5c:ec:e2:a4:e4:db:fa:dc:52:0a: 45:73:1a:f9:f1:fe:e6:15:58:6d:0b:05:fb:6c:0b:8c:c7:d5: cb:eb:7e:1d:c8:ae:4a:f7:5c:b2:f2:1b:72:e3:1f:7a:54:44: 3b:1f:4b:02:84:43:bc:81:b6:45:87:0e:15:51:e1:dc:e5:92: be:73:9f:bb:84:98:ab:ff:13:05:1b:1c:f1:4f:a8:a3:3f:51: df:5a:22:72:21:c4:42:ce:9b:7f:0f:c8:b1:f1:4f:f5:b5:3a: 76:1e:40:24:cc:55:6e:8c:bd:8d:4a:5b:93:8e:ba:14:83:23: 4a:d4:71:d4:25:56:4f:c4:24:f6:6a:f6:d1:70:ef:57:4d:65: a5:f8:50:47:e1:6b:31:84:0c:43:6e:21:5d:8e:dc:2b:35:36: 47:6e:65:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTVENzExMC8GA1UEBRMoNzI5MzU1QUEwMzc4RjZENEY0MDU2RTY2MjZCQkM5QkUz MEM5RDhGMDAeFw0yNDA1MTkwNzQ3MjlaFw0yNDA1MjYwNzQ3MjlaMBgxFjAUBgNV BAMTDTY2NDlhZTkyLWNhNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5XgfvQG0Pr5ZqacpQ3MNaOFWmWgdBSfFQIVDdbKbVD1BzSsNOwYWbxoqLYZQw +y76p+25GB0Wi/eR3MFeb9EXyuIslScNYtBXu9/NHa9nCjzYaIYTwxNECJgzYN65 fDSQLxkfyQdYnrx3gtC7rtNfKv2EHIaF9a98F0ahOMapEEEAZexvUmFlD3WVyJDZ /L72RlgognBfNwTVur2mVMZFLRdJ5hIvlqwSf/w4Csa0n+0F2GtrqtE0Wd6qKn0K UKq1T6rTRB4FqznPSXS6e59R7cdTpm4OazYjBYk5HGfa3Y2hKiYKgtpQJHag6uvI 04ug9/8WkPX8y0tX13DF/NJpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJr/bihnS SBQ5wm+GnW8U0ZK9ozowHwYDVR0jBBgwFoAUcpNVqgN49tT0BW5mJrvJvjDJ2PAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NUQ3LzQwRjlFRkE0OEZE NDExRUVCMDg1ODc0OUM0RjlBRTAyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3BOVnFnTjQ5dFQwQlc1bUpydkp2akRKMlBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 NUQ3LzQwRjlFRkE0OEZENDExRUVCMDg1ODc0OUM0RjlBRTAyL2NwTlZxZ040OXRU MEJXNW1KcnZKdmpESjJQQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHeBy/3eKNcOpLw7Xnz7EJtb5kD323i0hLxFr9ZR2exe4Vp8I1vpyHj5 Ldvv9OKJ03xa0u3k0NNMtAhf4lrQjoh47Aq8Y00iYmZEf7PXnAn43rfzP+l9hKdx ct9+TYQ1jHxCXOzipOTb+txSCkVzGvnx/uYVWG0LBftsC4zH1cvrfh3Irkr3XLLy G3LjH3pURDsfSwKEQ7yBtkWHDhVR4dzlkr5zn7uEmKv/EwUbHPFPqKM/Ud9aInIh xELOm38PyLHxT/W1OnYeQCTMVW6MvY1KW5OOuhSDI0rUcdQlVk/EJPZq9tFw71dN ZaX4UEfhazGEDENuIV2O3Cs1NkduZW8= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org