$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft File: AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json) Hash identifier: lPVxInWzHm/1TMhH25SUCyMnkBI+YBfjBg3ueYHdqoQ= Subject key identifier: 4A:CF:13:DC:C5:13:5E:B8:BE:B9:46:4B:C6:C6:F8:8D:C3:2A:78:9F Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 Certificate issuer: /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft Manifest number: 64 Signing time: Sun 19 May 2024 07:41:30 +0000 Manifest this update: Sun 19 May 2024 07:41:30 +0000 Manifest next update: Sun 26 May 2024 07:41:30 +0000 Files and hashes: 1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: qjXqVyFSdgydW6JB2EEQJIvk0B1QoBzxf4RJSolDSSs=) 2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: 3UMzDkmaCKQSgaeBeiUzWqmgHjiQdo/Y4B6yGA1t2M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Validity Not Before: May 19 07:41:30 2024 GMT Not After : May 26 07:41:30 2024 GMT Subject: CN=6649ad2a-7cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:cf:ef:bb:43:79:3e:ec:fb:33:bc:eb:9b: 4b:3c:71:64:0f:3d:2a:f7:80:ba:00:e9:b6:23:94: f6:e3:52:aa:93:33:80:1f:6c:76:f1:22:e9:8d:ff: 1b:e7:bc:d6:60:47:4f:fe:4f:23:26:8d:67:a8:2e: 34:7c:bb:f9:09:1f:01:4d:00:ed:f0:1a:d5:cc:f8: 32:a5:75:e0:ad:8d:c9:e5:5b:7d:f4:82:44:32:01: 03:62:85:28:37:ab:28:b8:45:e0:1f:6a:8c:0e:a6: 65:0d:2f:2d:e5:02:a6:dd:9b:db:ec:91:23:1f:59: 62:9c:b5:f1:b6:32:59:d1:6f:d0:82:7a:d0:1b:99: 7d:d6:2b:c4:1d:4d:fe:fd:7d:86:5e:bd:03:b9:4b: 96:4f:11:8c:6d:c5:a2:14:2a:88:a3:85:06:2f:f3: 5b:d5:8f:25:54:4c:a0:94:ef:52:9d:81:35:26:7c: f8:bc:67:76:4d:e8:4b:74:31:cb:93:03:b3:59:f5: fd:02:f5:d1:64:39:b0:47:22:38:ae:8d:dc:a6:59: ee:c8:b9:16:91:45:94:ab:90:39:e5:2a:3b:82:f3: 5a:6a:be:c7:1f:11:87:fc:90:6e:ed:dd:3d:87:fb: ce:2e:f5:b2:75:4d:d1:f5:bf:78:b9:41:56:be:47: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:13:DC:C5:13:5E:B8:BE:B9:46:4B:C6:C6:F8:8D:C3:2A:78:9F X509v3 Authority Key Identifier: keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:98:f1:31:9b:26:b4:28:d2:84:77:8a:d9:60:4b:e8:19:08: ff:05:0f:2c:11:9d:0a:a9:28:1d:1f:17:f7:b7:a5:77:b7:42: bf:85:53:0c:91:2d:f1:4f:5b:06:10:a1:ad:fa:e9:f1:f8:5d: 73:7d:cb:9c:d9:a3:81:6a:2f:bc:9d:e8:78:a5:e1:3c:e3:c4: b9:32:ae:d3:22:e3:18:fd:21:e4:16:48:ba:e8:70:aa:50:ef: 92:fc:ce:28:a2:7b:f2:de:72:a7:27:53:9a:03:17:2b:32:26: 3b:f4:4d:d6:ed:6f:9a:1c:2a:b5:99:c0:a9:d5:df:fb:bc:5c: 29:32:a3:5d:63:da:b7:d5:74:44:30:1f:39:ee:3c:c9:77:65: d5:b9:a7:05:ce:aa:89:33:2e:fe:86:8d:ef:93:c6:89:76:2e: 0f:75:76:0d:bf:c8:f8:c5:64:83:6d:69:38:6f:57:45:51:0f: 18:03:1a:76:6b:cf:19:90:cd:bb:1d:9d:04:40:d1:4a:02:8c: 45:50:8b:78:68:7a:83:e2:85:e8:1b:cd:40:da:70:a1:92:89: 39:c4:0d:a6:ec:a8:e9:44:3d:f3:8e:49:45:89:ed:a6:86:65: 71:70:cf:d1:58:e7:e6:d1:d9:c9:76:e8:ed:5d:88:6c:00:73: b8:05:bf:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0M1MjExMC8GA1UEBRMoMDFCNkRCNEJGMUQzM0EzNDFGNDc2MEE5OEM4NUY4NzYx MDNGQUVFOTAeFw0yNDA1MTkwNzQxMzBaFw0yNDA1MjYwNzQxMzBaMBgxFjAUBgNV BAMTDTY2NDlhZDJhLTdjYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBn8/vu0N5Puz7M7zrm0s8cWQPPSr3gLoA6bYjlPbjUqqTM4AfbHbxIumN/xvn vNZgR0/+TyMmjWeoLjR8u/kJHwFNAO3wGtXM+DKldeCtjcnlW330gkQyAQNihSg3 qyi4ReAfaowOpmUNLy3lAqbdm9vskSMfWWKctfG2MlnRb9CCetAbmX3WK8QdTf79 fYZevQO5S5ZPEYxtxaIUKoijhQYv81vVjyVUTKCU71KdgTUmfPi8Z3ZN6Et0McuT A7NZ9f0C9dFkObBHIjiujdymWe7IuRaRRZSrkDnlKjuC81pqvscfEYf8kG7t3T2H +84u9bJ1TdH1v3i5QVa+R2gVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSs8T3MUT Xri+uUZLxsb4jcMqeJ8wHwYDVR0jBBgwFoAUAbbbS/HTOjQfR2CpjIX4dhA/rukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQzUyLzdEQzNBMzQyODQx RTExRUU4ODk4MzA4N0M0RjlBRTAyL0FiYmJTX0hUT2pRZlIyQ3BqSVg0ZGhBX3J1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWJiYlNfSFRPalFmUjJDcGpJWDRkaEFfcnVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz QzUyLzdEQzNBMzQyODQxRTExRUU4ODk4MzA4N0M0RjlBRTAyL0FiYmJTX0hUT2pR ZlIyQ3BqSVg0ZGhBX3J1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJeY8TGbJrQo0oR3itlgS+gZCP8FDywRnQqpKB0fF/e3pXe3Qr+FUwyR LfFPWwYQoa366fH4XXN9y5zZo4FqL7yd6Hil4TzjxLkyrtMi4xj9IeQWSLrocKpQ 75L8ziiie/LecqcnU5oDFysyJjv0Tdbtb5ocKrWZwKnV3/u8XCkyo11j2rfVdEQw HznuPMl3ZdW5pwXOqokzLv6Gje+Txol2Lg91dg2/yPjFZINtaThvV0VRDxgDGnZr zxmQzbsdnQRA0UoCjEVQi3hoeoPihegbzUDacKGSiTnEDabsqOlEPfOOSUWJ7aaG ZXFwz9FY5+bR2cl26O1diGwAc7gFv4E= -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org