$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft File: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json) Hash identifier: dRwOky5gpZbNQX9iwDVREuAaT1G4ILJRTQaWneUBnIo= Subject key identifier: 50:3F:6D:56:7E:56:12:46:DC:EA:0F:D6:26:88:2F:EF:BC:29:84:08 Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 Certificate issuer: /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft Manifest number: 89 Signing time: Fri 31 May 2024 08:08:07 +0000 Manifest this update: Fri 31 May 2024 08:08:07 +0000 Manifest next update: Fri 07 Jun 2024 08:08:07 +0000 Files and hashes: 1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: fzP0Xp18Y6211BiMqJefc73WvglRFSGTjE/rJeUf4xQ=) 2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: v7Dt+vDpE5l+seUqJNghMo9p/KJYaK9+kV/JnepJsag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Validity Not Before: May 31 08:08:07 2024 GMT Not After : Jun 7 08:08:07 2024 GMT Subject: CN=66598567-5252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:79:12:0a:79:68:cf:7d:d1:1e:ac:1c:69: bc:59:78:d6:a9:8c:d1:26:40:96:14:6e:5e:8c:cc: 45:6b:ac:27:9a:1d:2d:85:5f:1f:0d:d3:8b:cd:ec: 7a:65:0a:da:11:57:98:2d:32:d1:c7:bf:85:08:56: a8:dd:e1:cb:12:56:53:93:63:d5:b0:cb:14:37:54: 6c:33:46:7c:5a:6e:3a:2c:ac:70:9b:b4:3b:e7:6f: 26:c8:29:5f:40:20:f6:d2:c9:9f:f9:54:bd:b3:71: ca:a2:80:c8:54:ea:7e:22:a6:24:45:c3:59:3e:67: a8:e3:c0:1b:da:14:5f:a3:34:cf:f4:5d:4a:21:4c: d7:98:13:ed:62:65:41:43:67:ec:c7:9b:60:cb:cc: 93:b8:11:84:5c:0b:94:30:7d:d2:a6:1f:10:e4:5e: 14:19:44:77:a4:49:76:c0:3c:48:f0:97:f1:d8:4d: 55:cd:13:22:4b:c7:00:56:c5:a9:90:08:1c:bb:c9: f7:86:66:07:ce:15:0b:4f:45:db:b8:5f:24:fc:93: 27:3f:e4:3a:1c:1d:03:5b:a6:31:a1:4c:b1:1c:f2: 20:0c:e8:e9:e4:d5:58:ee:09:f3:87:36:41:04:af: c8:60:4a:f7:55:70:3a:60:eb:67:f3:9e:59:2c:ec: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3F:6D:56:7E:56:12:46:DC:EA:0F:D6:26:88:2F:EF:BC:29:84:08 X509v3 Authority Key Identifier: keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:94:84:57:df:19:68:0e:38:e3:3c:a1:d7:e9:e6:51:03:8b: a0:34:79:d8:81:e7:9f:27:5e:81:16:45:58:f9:71:34:4b:21: c3:40:61:db:fd:75:d0:a8:d5:12:42:aa:83:ec:f6:1e:c6:92: 72:51:3a:14:4d:70:83:d8:c3:9d:a3:bb:aa:84:92:57:89:9f: 71:fc:3b:f3:a5:aa:75:2c:e6:f5:a0:c5:10:5e:98:af:f5:72: 25:57:05:50:e1:e8:7b:5e:50:6f:e3:c8:4e:d4:5e:9d:65:c8: 55:6e:40:47:22:67:5d:8b:13:f8:cc:d4:89:8a:b1:c0:4e:95: cb:3a:10:e1:18:a3:d6:38:4f:80:06:0d:23:72:60:2c:ed:3f: df:a6:6c:32:e1:5b:32:91:0a:3c:9d:2c:7c:ec:6d:0a:c1:9a: f5:2f:88:7e:4c:68:c7:75:07:39:93:b0:49:0f:60:d4:a1:e1: dd:8a:af:5e:dd:eb:05:da:75:49:ea:07:b3:0a:a9:90:f4:78: eb:a3:95:bc:79:f7:42:26:e5:c3:02:80:4d:58:a5:65:60:0c: 82:21:ab:c7:5b:bc:71:e9:10:d5:fb:15:a1:6e:60:73:04:bc: fd:ce:5d:d9:81:29:b2:a8:14:49:16:2e:c3:03:80:52:3b:5f: 87:77:05:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzOTkxMTAvBgNVBAUTKDNEQkREN0VENDEyNDgwRTkzNTVDMjdGM0MxMTNCNTY0 MEQzMTg2QjMwHhcNMjQwNTMxMDgwODA3WhcNMjQwNjA3MDgwODA3WjAYMRYwFAYD VQQDEw02NjU5ODU2Ny01MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOV5Egp5aM990R6sHGm8WXjWqYzRJkCWFG5ejMxFa6wnmh0thV8fDdOLzex6 ZQraEVeYLTLRx7+FCFao3eHLElZTk2PVsMsUN1RsM0Z8Wm46LKxwm7Q7528myClf QCD20smf+VS9s3HKooDIVOp+IqYkRcNZPmeo48Ab2hRfozTP9F1KIUzXmBPtYmVB Q2fsx5tgy8yTuBGEXAuUMH3Sph8Q5F4UGUR3pEl2wDxI8Jfx2E1VzRMiS8cAVsWp kAgcu8n3hmYHzhULT0XbuF8k/JMnP+Q6HB0DW6YxoUyxHPIgDOjp5NVY7gnzhzZB BK/IYEr3VXA6YOtn855ZLOx61QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA/bVZ+ VhJG3OoP1iaIL++8KYQIMB8GA1UdIwQYMBaAFD291+1BJIDpNVwn88ETtWQNMYaz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzM5OS9CQTY4QzMyODVD QjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dPazFYQ2Z6d1JPMVpBMHho ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BiM1g3VUVrZ09rMVhDZnp3Uk8xWkEweGhyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzM5OS9CQTY4QzMyODVDQjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dP azFYQ2Z6d1JPMVpBMHhock0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBclIRX3xloDjjjPKHX6eZRA4ugNHnYgeefJ16BFkVY+XE0SyHDQGHb /XXQqNUSQqqD7PYexpJyUToUTXCD2MOdo7uqhJJXiZ9x/Dvzpap1LOb1oMUQXpiv 9XIlVwVQ4eh7XlBv48hO1F6dZchVbkBHImddixP4zNSJirHATpXLOhDhGKPWOE+A Bg0jcmAs7T/fpmwy4VsykQo8nSx87G0KwZr1L4h+TGjHdQc5k7BJD2DUoeHdiq9e 3esF2nVJ6gezCqmQ9Hjro5W8efdCJuXDAoBNWKVlYAyCIavHW7xx6RDV+xWhbmBz BLz9zl3ZgSmyqBRJFi7DA4BSO1+HdwWr -----END CERTIFICATE-----Generated at Fri May 31 10:02:39 2024 by rpki-client on console-ams.rpki-client.org