$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F0F/875A642AB4DC11E886B66A51C4F9AE02/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.mft File: 4M6LyNK8fd_9uZYQv0Vk9jpzyhs.mft (raw, json) Hash identifier: bREVEeC0n9+kfQ/f2S82tl+bj9sGUndtsxebGzpA/4o= Subject key identifier: 79:0A:9E:DF:76:28:9A:C7:6E:9B:B2:6C:5D:0F:73:6A:42:6F:95:18 Authority key identifier: E0:CE:8B:C8:D2:BC:7D:DF:FD:B9:96:10:BF:45:64:F6:3A:73:CA:1B Certificate issuer: /CN=A91A2F0F/serialNumber=E0CE8BC8D2BC7DDFFDB99610BF4564F63A73CA1B Certificate serial: 124A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F0F/875A642AB4DC11E886B66A51C4F9AE02/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.mft Manifest number: 1239 Signing time: Sat 18 May 2024 17:41:05 +0000 Manifest this update: Sat 18 May 2024 17:41:05 +0000 Manifest next update: Sat 25 May 2024 17:41:05 +0000 Files and hashes: 1: 4M6LyNK8fd_9uZYQv0Vk9jpzyhs.crl (hash: oFaaDfVlI1yG42l9J+5G++kroD8tE0841PylQaoDuGA=) 2: C94B43DA6AC011EBA55CCE47C4F9AE02.roa (hash: 7cLHVz80yIKNCM8YsiGBIiGbTo5SdLRVRPerwx0mPXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F0F/875A642AB4DC11E886B66A51C4F9AE02/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.crl rsync://rpki.apnic.net/member_repository/A91A2F0F/875A642AB4DC11E886B66A51C4F9AE02/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F0F/serialNumber=E0CE8BC8D2BC7DDFFDB99610BF4564F63A73CA1B Validity Not Before: May 18 17:41:05 2024 GMT Not After : May 25 17:41:05 2024 GMT Subject: CN=6648e831-8d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:9a:64:c6:33:da:d5:e0:5f:4c:3b:08:e3: e6:84:68:ee:4a:7a:0c:2d:a3:be:41:d7:2d:1a:30: 1a:03:16:05:6d:b5:5f:96:4d:87:e8:cc:db:89:7e: 0e:55:f1:1f:ba:b2:89:15:d9:1c:0f:b2:4e:8c:1c: 9b:1b:4f:ac:31:33:8b:f3:a0:35:a1:bd:51:5b:47: 60:52:ec:94:ee:9f:69:aa:be:56:69:52:51:9e:8b: 25:bf:95:f3:73:0c:d7:d0:ff:c7:4e:e7:7a:e8:2b: 07:b1:46:0b:f7:17:c8:1e:aa:22:00:c8:3a:dc:b8: ba:41:26:07:ba:84:af:40:fd:87:6d:ff:bc:cd:ce: 03:2f:0b:24:b8:78:93:e6:15:d1:0c:a5:69:e0:2d: 0e:c2:56:17:56:1f:47:e2:a8:d1:03:d1:50:de:78: 31:8e:00:ed:7d:bd:d4:73:2f:31:07:cc:82:7c:13: 4a:4c:e9:d5:5e:2c:9d:6e:f1:5d:13:cd:2b:09:91: 70:c4:28:7a:a5:43:a1:d9:20:e6:5d:6e:e7:f0:ba: 30:d5:8a:66:82:0d:54:27:27:5c:68:70:d1:db:3f: 88:9a:4e:e2:da:c0:5b:37:3f:5f:41:db:3f:e9:df: 04:33:1e:39:40:5f:4e:b9:4b:13:f4:37:17:8f:3e: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0A:9E:DF:76:28:9A:C7:6E:9B:B2:6C:5D:0F:73:6A:42:6F:95:18 X509v3 Authority Key Identifier: keyid:E0:CE:8B:C8:D2:BC:7D:DF:FD:B9:96:10:BF:45:64:F6:3A:73:CA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F0F/875A642AB4DC11E886B66A51C4F9AE02/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F0F/875A642AB4DC11E886B66A51C4F9AE02/4M6LyNK8fd_9uZYQv0Vk9jpzyhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d7:f0:f5:d2:12:e8:ae:f7:56:17:55:3b:3b:df:57:82:49: df:fe:ef:0b:53:7d:2c:1c:32:f7:f1:4a:88:a8:2b:ac:1d:5b: 47:d0:f3:33:8e:80:46:5f:79:30:68:18:a8:e1:cb:a5:ad:db: 45:75:84:45:72:43:90:f5:b4:ed:62:e5:d3:8f:6f:b3:ae:79: 2b:3d:fd:90:0a:55:b2:14:10:7c:8d:18:e5:b6:a5:af:f8:6d: 2f:d4:3e:a8:a0:e6:21:52:4a:5d:84:1d:5d:b2:9b:8d:57:2f: 2c:55:87:d1:61:f5:83:8e:21:af:bf:60:ad:c8:11:94:6b:c4: 20:27:70:4e:c7:ce:11:75:e8:a6:e6:ef:3a:69:48:af:f2:ac: 6c:6c:e2:fa:db:e8:26:37:21:9f:af:51:08:40:09:8a:55:2e: 1d:67:e4:06:4f:31:5e:47:4f:68:61:ed:9b:cc:66:18:19:ee: e0:a2:f3:62:29:4a:5e:2c:20:f0:23:35:ff:67:7b:c7:6c:95: 09:b4:95:1e:3e:d6:f5:7d:51:0f:88:0c:11:c3:f4:fc:88:76: 00:fd:3d:87:2f:ca:2f:77:f8:b5:72:a9:76:0f:d3:90:61:f8: aa:92:aa:f4:5e:85:3e:06:b1:00:02:c8:1d:5d:c9:e1:aa:6c: 77:79:a9:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGMEYxMTAvBgNVBAUTKEUwQ0U4QkM4RDJCQzdEREZGREI5OTYxMEJGNDU2NEY2 M0E3M0NBMUIwHhcNMjQwNTE4MTc0MTA1WhcNMjQwNTI1MTc0MTA1WjAYMRYwFAYD VQQDEw02NjQ4ZTgzMS04ZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QyaZMYz2tXgX0w7COPmhGjuSnoMLaO+QdctGjAaAxYFbbVflk2H6MzbiX4O VfEfurKJFdkcD7JOjBybG0+sMTOL86A1ob1RW0dgUuyU7p9pqr5WaVJRnoslv5Xz cwzX0P/HTud66CsHsUYL9xfIHqoiAMg63Li6QSYHuoSvQP2Hbf+8zc4DLwskuHiT 5hXRDKVp4C0OwlYXVh9H4qjRA9FQ3ngxjgDtfb3Ucy8xB8yCfBNKTOnVXiydbvFd E80rCZFwxCh6pUOh2SDmXW7n8Low1Ypmgg1UJydcaHDR2z+Imk7i2sBbNz9fQds/ 6d8EMx45QF9OuUsT9DcXjz6ZWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkKnt92 KJrHbpuybF0Pc2pCb5UYMB8GA1UdIwQYMBaAFODOi8jSvH3f/bmWEL9FZPY6c8ob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkYwRi84NzVBNjQyQUI0 REMxMUU4ODZCNjZBNTFDNEY5QUUwMi80TTZMeU5LOGZkXzl1WllRdjBWazlqcHp5 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNNkx5Tks4ZmRfOXVaWVF2MFZrOWpwenlocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkYwRi84NzVBNjQyQUI0REMxMUU4ODZCNjZBNTFDNEY5QUUwMi80TTZMeU5LOGZk Xzl1WllRdjBWazlqcHp5aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc1/D10hLorvdWF1U7O99Xgknf/u8LU30sHDL38UqIqCusHVtH0PMz joBGX3kwaBio4culrdtFdYRFckOQ9bTtYuXTj2+zrnkrPf2QClWyFBB8jRjltqWv +G0v1D6ooOYhUkpdhB1dspuNVy8sVYfRYfWDjiGvv2CtyBGUa8QgJ3BOx84Rdeim 5u86aUiv8qxsbOL62+gmNyGfr1EIQAmKVS4dZ+QGTzFeR09oYe2bzGYYGe7govNi KUpeLCDwIzX/Z3vHbJUJtJUePtb1fVEPiAwRw/T8iHYA/T2HL8ovd/i1cql2D9OQ Yfiqkqr0XoU+BrEAAsgdXcnhqmx3eal8 -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org