$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: 1Nmh9bGrUInzAIpsChOvs9uJdTwlvUUR98XWHWguaFg= Subject key identifier: AF:F9:A3:6D:C7:95:CD:A9:27:9D:3B:F3:61:18:DE:53:4B:0E:6A:86 Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 33C4 Signing time: Sat 18 May 2024 15:11:19 +0000 Manifest this update: Sat 18 May 2024 15:11:18 +0000 Manifest next update: Sat 25 May 2024 15:11:18 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: nuuyozwNLM+sun+BXEmYtr1RnOau02Hyu/Px81RkJys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: May 18 15:11:18 2024 GMT Not After : May 25 15:11:18 2024 GMT Subject: CN=6648c516-c133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:64:cf:34:2d:0a:9b:b7:d4:49:8a:67:09: a1:72:37:ab:05:dd:02:33:9a:2c:d6:75:75:35:e6: aa:e5:76:1f:25:d2:3c:d7:77:12:ae:d6:49:05:8b: 76:51:78:cc:e4:b4:24:76:a9:7e:f9:b1:4c:94:87: f8:43:ae:73:26:1e:8e:f6:2c:c6:cc:e7:92:73:04: 07:ab:57:51:d8:95:3d:04:e7:aa:44:b0:24:6e:ff: 9f:e0:e5:0b:65:f0:85:68:e6:d3:44:b8:99:8c:44: d0:c6:0a:51:31:cc:0d:e7:5c:89:0d:e5:d6:65:44: 5c:93:ff:23:12:b6:b2:bc:05:3f:71:f7:b3:ca:d0: 54:80:d0:3b:18:40:7e:23:c3:f0:31:3f:1c:75:c9: 7f:12:1d:e6:fd:34:6f:32:e6:97:ec:ab:07:5f:a5: 4d:f7:2f:e8:45:87:e6:1c:f9:10:34:ae:ad:8f:c1: b8:17:d8:fb:51:ff:86:52:2f:22:2d:5e:ba:a1:bf: fa:70:04:e6:84:ea:a8:c2:da:77:7b:41:dc:74:48: a8:c9:ab:b2:59:fb:d9:99:cb:45:47:e3:56:02:28: 1d:74:38:7c:23:24:20:fc:17:62:4a:c6:17:b4:ee: 95:fb:24:d9:6f:4a:3d:3e:65:46:5b:c5:96:4c:ff: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F9:A3:6D:C7:95:CD:A9:27:9D:3B:F3:61:18:DE:53:4B:0E:6A:86 X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:59:de:bd:99:65:aa:53:c7:a7:f5:3c:06:5c:8f:d2:bd:49: c5:1e:d0:a6:6a:63:1f:d8:0b:d3:7a:19:99:1a:31:b6:ab:db: 1f:4a:c0:73:be:04:9b:51:e4:25:d7:3a:08:bf:b0:86:dc:1b: 97:ff:9d:6c:e4:41:0c:0d:c8:6c:d3:5b:a5:32:b4:d3:b2:83: ce:d3:b4:23:e7:74:bd:5f:9c:e5:4f:aa:c6:0d:6f:68:64:15: 5b:72:04:f4:c2:7b:f3:9b:28:b8:b5:7f:7a:45:75:99:c8:35: 91:48:8e:bf:e9:dc:a8:48:90:02:08:b6:e4:c6:1a:8e:6d:43: ab:cb:af:25:8e:2c:a1:9a:a4:02:b4:d1:bc:6f:18:16:7d:c5: 0d:32:a9:65:67:92:72:2a:8b:62:35:6e:ab:dc:f5:f4:fe:68: e7:55:d5:57:12:82:40:c0:2c:5d:5d:79:32:97:17:ac:de:e9: 6c:cf:2e:cb:38:ec:ad:51:eb:93:a9:71:c8:e4:a8:32:7f:2f: f3:2f:8c:1c:2e:cc:3c:de:56:fc:4d:f6:38:0b:a2:41:ac:7b: 84:0d:a0:30:95:7c:8e:f1:48:e2:00:67:1e:e1:1b:a0:cf:5c: c2:00:0a:db:56:29:0d:0b:92:43:e0:c1:05:7d:ba:97:28:c6: 39:69:ba:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjQwNTE4MTUxMTE4WhcNMjQwNTI1MTUxMTE4WjAYMRYwFAYD VQQDEw02NjQ4YzUxNi1jMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq1kzzQtCpu31EmKZwmhcjerBd0CM5os1nV1Neaq5XYfJdI813cSrtZJBYt2 UXjM5LQkdql++bFMlIf4Q65zJh6O9izGzOeScwQHq1dR2JU9BOeqRLAkbv+f4OUL ZfCFaObTRLiZjETQxgpRMcwN51yJDeXWZURck/8jErayvAU/cfezytBUgNA7GEB+ I8PwMT8cdcl/Eh3m/TRvMuaX7KsHX6VN9y/oRYfmHPkQNK6tj8G4F9j7Uf+GUi8i LV66ob/6cATmhOqowtp3e0HcdEioyauyWfvZmctFR+NWAigddDh8IyQg/BdiSsYX tO6V+yTZb0o9PmVGW8WWTP/oswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/5o23H lc2pJ50782EY3lNLDmqGMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWd69mWWqU8en9TwGXI/SvUnFHtCmamMf2AvTehmZGjG2q9sfSsBz vgSbUeQl1zoIv7CG3BuX/51s5EEMDchs01ulMrTTsoPO07Qj53S9X5zlT6rGDW9o ZBVbcgT0wnvzmyi4tX96RXWZyDWRSI6/6dyoSJACCLbkxhqObUOry68ljiyhmqQC tNG8bxgWfcUNMqllZ5JyKotiNW6r3PX0/mjnVdVXEoJAwCxdXXkylxes3ulszy7L OOytUeuTqXHI5Kgyfy/zL4wcLsw83lb8TfY4C6JBrHuEDaAwlXyO8UjiAGce4Rug z1zCAArbVikNC5JD4MEFfbqXKMY5abpo -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org