$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: TNm0wTOpJcI/KUQNaDNtCVCIyhgS3hss1qdDW3B8DA0= Subject key identifier: 43:A3:0C:5C:65:53:82:F8:FF:A0:3D:A1:8E:57:A6:A6:04:A9:BC:37 Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 07A8 Signing time: Sat 18 May 2024 22:07:06 +0000 Manifest this update: Sat 18 May 2024 22:07:06 +0000 Manifest next update: Sat 25 May 2024 22:07:06 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: /3vUWStHENQPr28TSGi7rI6DY6BB4Nh5WqvLY+9Kyrc=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: hjSkQxYAxZJa0FcToZk4nbKLBcJPNMlDcdQXL1B56UY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: May 18 22:07:06 2024 GMT Not After : May 25 22:07:06 2024 GMT Subject: CN=6649268a-b4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:01:ca:a6:7d:9d:03:e3:8f:48:44:98:13: 8c:18:c8:d2:2d:72:91:e4:33:e1:93:63:18:86:74: b3:da:35:84:02:75:14:88:98:fd:b1:19:0f:be:e5: af:94:fa:9a:18:c5:c8:25:e7:19:43:c2:d7:eb:1e: 1f:68:63:07:64:dc:0b:87:57:5e:e7:d9:b6:dd:88: d0:75:36:eb:8f:f5:50:e1:7d:23:55:f2:b0:4d:bd: 9e:2d:bb:99:50:79:7e:eb:6f:d1:25:68:a7:05:62: 49:7b:61:01:91:07:6f:5f:ac:76:b0:e4:fb:36:6e: 79:7b:98:80:74:d6:2c:a9:7a:c4:42:a3:f6:a2:fb: 12:28:78:38:51:76:94:e6:60:80:95:bd:2a:46:ea: c3:79:c5:1a:46:8a:5d:3a:76:78:91:a0:fc:cc:81: 97:12:f8:66:f9:5e:6a:ce:55:0c:23:a0:a9:f6:69: 7c:1a:80:1f:ec:61:6f:cf:e9:c6:99:4b:24:93:25: 45:96:45:fc:d4:75:0d:f0:b1:e2:57:54:1f:5e:c6: 36:19:9b:a9:83:ca:11:49:0d:21:3e:22:cb:d0:2f: c7:12:25:62:94:cc:ef:5e:4c:32:a9:9c:a4:50:bb: 07:ff:36:0a:cb:6a:13:d3:81:4f:81:c2:e7:64:72: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A3:0C:5C:65:53:82:F8:FF:A0:3D:A1:8E:57:A6:A6:04:A9:BC:37 X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9f:bc:74:ab:4d:1e:9f:66:39:62:4a:d3:d9:23:1c:01:c8: d2:73:09:80:44:d0:f3:33:ce:e8:68:c8:65:49:55:9f:bd:99: 1c:f2:6b:f7:97:c6:29:62:d6:ef:e5:43:0d:3a:0b:33:48:bd: af:bc:fe:56:97:e7:29:e3:53:50:db:4a:09:33:97:6f:be:87: 76:f5:d2:ab:92:af:fe:3f:34:0d:6c:c4:f6:27:48:e9:e1:2a: 28:10:4e:17:38:c9:2e:c3:3b:7b:9e:d7:18:8e:00:ea:c8:f6: f5:b1:ef:2b:89:fd:d0:e0:38:18:c4:f5:1f:f8:20:c4:28:a0: 6f:5d:b9:de:07:06:e4:b7:cb:c1:73:00:73:db:c4:6b:9c:11: ee:84:0e:1c:75:3f:2f:26:22:d5:e0:76:63:00:aa:8e:0d:38: a9:93:82:39:54:af:54:a2:3b:13:22:98:6a:62:e2:04:89:fa: c9:a9:98:72:bc:41:94:73:a9:01:05:04:e2:5c:43:8e:e7:8b: 7a:37:f5:e5:4f:95:8a:bc:37:2a:96:c0:03:b2:aa:bd:6d:21: 1c:65:5a:1b:6c:f2:8c:52:7b:e9:a2:ed:ab:2a:84:62:72:19: d2:53:cf:1f:21:42:c6:79:76:59:4d:4c:cc:37:db:b3:a9:f2: 79:75:fe:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjQwNTE4MjIwNzA2WhcNMjQwNTI1MjIwNzA2WjAYMRYwFAYD VQQDEw02NjQ5MjY4YS1iNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrMByqZ9nQPjj0hEmBOMGMjSLXKR5DPhk2MYhnSz2jWEAnUUiJj9sRkPvuWv lPqaGMXIJecZQ8LX6x4faGMHZNwLh1de59m23YjQdTbrj/VQ4X0jVfKwTb2eLbuZ UHl+62/RJWinBWJJe2EBkQdvX6x2sOT7Nm55e5iAdNYsqXrEQqP2ovsSKHg4UXaU 5mCAlb0qRurDecUaRopdOnZ4kaD8zIGXEvhm+V5qzlUMI6Cp9ml8GoAf7GFvz+nG mUskkyVFlkX81HUN8LHiV1QfXsY2GZupg8oRSQ0hPiLL0C/HEiVilMzvXkwyqZyk ULsH/zYKy2oT04FPgcLnZHLuCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOjDFxl U4L4/6A9oY5XpqYEqbw3MB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRn7x0q00en2Y5YkrT2SMcAcjScwmARNDzM87oaMhlSVWfvZkc8mv3 l8YpYtbv5UMNOgszSL2vvP5Wl+cp41NQ20oJM5dvvod29dKrkq/+PzQNbMT2J0jp 4SooEE4XOMkuwzt7ntcYjgDqyPb1se8rif3Q4DgYxPUf+CDEKKBvXbneBwbkt8vB cwBz28RrnBHuhA4cdT8vJiLV4HZjAKqODTipk4I5VK9UojsTIphqYuIEifrJqZhy vEGUc6kBBQTiXEOO54t6N/XlT5WKvDcqlsADsqq9bSEcZVobbPKMUnvpou2rKoRi chnSU88fIULGeXZZTUzMN9uzqfJ5df7k -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org