$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: JSIuM0b8uwRB8fDP5TxqdDZFpUIPIh80SdrTVoBHgtw= Subject key identifier: 50:2D:F2:3C:BE:17:FE:A7:A4:14:E4:98:5F:55:A1:9B:FB:44:62:E2 Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 06B8 Signing time: Sat 18 May 2024 23:07:28 +0000 Manifest this update: Sat 18 May 2024 23:07:27 +0000 Manifest next update: Sat 25 May 2024 23:07:27 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: bRLY1sYgS3OAp2IH0g0Ch4TgnV4nQU21fNKVQNGD6Vg=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: 1dcSPCIMP72JBbifk8lolmsB6TFZzansy57LAD+i0wI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: May 18 23:07:27 2024 GMT Not After : May 25 23:07:27 2024 GMT Subject: CN=664934b0-1da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:d6:6b:6d:79:e1:8c:87:53:74:5a:38:4e: 87:1a:e0:e9:8b:f8:ef:23:ab:35:eb:b2:3a:cd:3c: 73:08:1d:ba:52:6c:ef:ea:87:d6:77:6b:c5:2d:20: 3a:94:48:09:6d:c3:78:28:b2:2f:98:6b:47:90:07: d2:f4:78:49:1a:b8:14:a9:3c:35:29:9b:3a:b5:77: dc:46:5c:1d:21:7c:d5:1b:6c:ec:28:61:6a:bf:e6: 84:eb:26:c8:83:64:4c:c6:87:f7:33:5a:b1:64:0b: 47:6d:99:f1:27:2f:13:53:41:c4:52:55:15:06:06: 18:8f:aa:f7:76:9a:72:9d:c9:59:bb:a7:9a:10:a1: 9b:05:40:ff:d4:fe:c5:bf:4e:b0:45:df:a8:20:f7: 10:00:9a:21:f0:2a:09:8c:85:ed:2b:41:cf:80:15: c1:a2:c2:55:17:ec:4f:d1:fe:e5:3b:10:21:4e:88: b8:f8:0b:1d:a3:08:f3:81:3a:53:f5:d3:ab:7f:c4: b0:c2:01:08:00:3e:54:dc:a0:d0:42:1d:68:d7:32: cf:7b:41:d5:e6:af:36:dd:b8:39:2f:c7:a2:ab:d3: 91:61:e5:d9:48:96:83:82:f9:35:de:c1:8c:74:5f: de:e0:2f:7a:2d:66:42:eb:0e:1b:82:d3:c5:e1:38: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:F2:3C:BE:17:FE:A7:A4:14:E4:98:5F:55:A1:9B:FB:44:62:E2 X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:3b:bf:c4:cc:76:bc:a1:3c:63:fe:78:86:dd:ee:40:03:55: ba:36:ab:81:c2:b6:c6:10:ec:16:e7:73:cc:94:b3:4b:f3:19: 23:98:4d:66:bf:4c:04:dc:55:a3:09:a3:22:9c:1b:59:5a:63: 5f:14:95:99:e4:31:69:d2:e1:8c:1f:4d:36:b3:6b:34:f4:33: 22:4f:5d:d5:4e:93:1d:bd:d4:85:f4:b7:d5:30:e0:6e:49:38: f4:9d:a3:c6:d1:1b:cf:65:e8:ad:56:c4:25:98:57:38:53:dd: da:09:37:82:71:72:45:af:13:c2:03:40:a0:ea:f2:99:39:1c: e3:5f:3a:84:01:98:0d:36:d5:9b:fc:99:c8:77:08:53:bf:55: e9:11:9b:94:f9:bb:b4:02:e8:f7:d0:aa:fe:34:d1:34:50:38: 7d:31:3b:cd:f9:8d:a8:6f:ae:69:a6:63:b4:95:5a:0c:ca:6d: ef:7a:f3:84:0a:a3:f2:86:c7:c0:64:fd:e1:94:e7:a2:45:cd: 30:db:8c:fc:87:80:7a:fb:c2:4b:0e:1b:22:03:28:32:73:42: e6:ad:70:a3:0d:8c:8c:39:9a:3e:39:44:10:17:52:37:70:c9: 6d:6c:63:97:75:22:64:90:b1:d7:bf:8d:0e:04:eb:47:d8:a1: b5:a4:21:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjQwNTE4MjMwNzI3WhcNMjQwNTI1MjMwNzI3WjAYMRYwFAYD VQQDEw02NjQ5MzRiMC0xZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HfWa2154YyHU3RaOE6HGuDpi/jvI6s167I6zTxzCB26Umzv6ofWd2vFLSA6 lEgJbcN4KLIvmGtHkAfS9HhJGrgUqTw1KZs6tXfcRlwdIXzVG2zsKGFqv+aE6ybI g2RMxof3M1qxZAtHbZnxJy8TU0HEUlUVBgYYj6r3dppynclZu6eaEKGbBUD/1P7F v06wRd+oIPcQAJoh8CoJjIXtK0HPgBXBosJVF+xP0f7lOxAhToi4+AsdowjzgTpT 9dOrf8SwwgEIAD5U3KDQQh1o1zLPe0HV5q823bg5L8eiq9ORYeXZSJaDgvk13sGM dF/e4C96LWZC6w4bgtPF4TjZ5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAt8jy+ F/6npBTkmF9VoZv7RGLiMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNO7/EzHa8oTxj/niG3e5AA1W6NquBwrbGEOwW53PMlLNL8xkjmE1m v0wE3FWjCaMinBtZWmNfFJWZ5DFp0uGMH002s2s09DMiT13VTpMdvdSF9LfVMOBu STj0naPG0RvPZeitVsQlmFc4U93aCTeCcXJFrxPCA0Cg6vKZORzjXzqEAZgNNtWb /JnIdwhTv1XpEZuU+bu0Auj30Kr+NNE0UDh9MTvN+Y2ob65ppmO0lVoMym3vevOE CqPyhsfAZP3hlOeiRc0w24z8h4B6+8JLDhsiAygyc0LmrXCjDYyMOZo+OUQQF1I3 cMltbGOXdSJkkLHXv40OBOtH2KG1pCFv -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org