$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: 3EuOBJpNCJNNNSvQ498KAJ4El3n7y9AOf8TpHkqb7Zk= Subject key identifier: 0D:F7:79:FA:B1:B0:CE:6E:EF:FE:37:F6:1E:E2:1A:35:76:20:D1:54 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 75 Signing time: Sun 19 May 2024 07:24:33 +0000 Manifest this update: Sun 19 May 2024 07:24:32 +0000 Manifest next update: Sun 26 May 2024 07:24:32 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: H8HbFAJ8h/tfk2HzT6p7suEIM1rQnfysoz7a1pidIDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: May 19 07:24:32 2024 GMT Not After : May 26 07:24:32 2024 GMT Subject: CN=6649a930-72fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:62:72:dd:de:86:74:cc:81:8b:ed:2f:c0: 65:8e:16:11:d8:34:00:51:62:a6:e5:67:0f:82:3d: da:2b:9b:70:d2:16:24:7f:7f:00:85:51:3c:1c:55: 63:5b:b6:52:14:7b:01:f0:08:a0:cd:aa:c2:54:d8: 7d:36:ec:e2:03:07:1a:e3:51:d4:07:8b:8c:ff:f5: 9c:b1:5e:c4:67:87:c9:60:c5:2c:b8:b4:b6:d4:70: c4:23:2e:98:2c:44:61:96:97:6a:05:6d:11:cf:dc: 5b:9b:d2:81:aa:c0:02:0c:bf:2d:b2:79:6a:12:2a: 05:c0:cf:7b:61:a0:51:6e:6e:98:99:d7:72:c2:64: 5e:18:48:8d:e4:af:20:bd:db:f3:d1:9b:33:89:5f: 52:99:e2:56:66:15:15:e6:f5:e1:b1:0a:40:f3:5f: cb:b3:ef:2d:d3:3b:2f:10:6c:0f:f3:12:a3:66:49: 36:80:01:5e:8c:85:6f:99:b1:7e:aa:9f:5b:f2:f7: d5:21:65:19:5e:5d:b4:8e:89:53:d7:29:e2:cb:5f: a2:ec:8c:19:bc:24:42:47:c3:04:2a:82:e8:c1:66: fb:c5:a1:1b:70:85:0c:32:e6:e5:04:b9:42:f2:46: 20:75:92:19:fb:f7:b4:fa:42:af:35:9c:e1:fe:4f: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F7:79:FA:B1:B0:CE:6E:EF:FE:37:F6:1E:E2:1A:35:76:20:D1:54 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:21:eb:9b:14:bf:eb:af:7a:1d:6e:54:0c:b6:18:3f:66:88: be:f7:50:40:0f:8f:60:7a:1a:2c:04:c3:5a:38:7f:49:99:0d: 39:ab:9f:80:c6:6d:b5:99:25:ed:f9:dc:7f:b5:29:9f:19:e7: 43:e6:df:f6:23:50:c1:a2:48:9d:b6:9f:3b:a2:e3:7d:f2:90: b1:27:55:5c:fa:a5:e5:f1:17:52:76:17:40:76:72:d3:eb:29: 94:de:a7:4c:08:58:00:62:ad:d2:ce:f9:eb:5c:53:53:60:50: 0c:3e:43:8f:f6:0c:58:29:e3:6f:72:ce:c5:3c:e3:1c:4a:6b: 67:ea:f3:8c:a3:65:28:d9:0f:b3:82:a9:4b:c6:6b:6d:cf:4d: 04:ca:cb:35:d8:80:7a:bc:36:b4:88:fa:8b:a6:8b:05:16:a3: 99:4d:6c:6e:36:37:91:f3:c4:82:e4:95:78:ae:9f:6e:bd:9c: 2c:6b:c5:59:e5:51:59:ea:b1:fc:ef:cd:df:cd:0b:11:1a:aa: 14:0c:a1:ac:ad:31:f7:42:30:3b:86:9f:7c:01:b7:54:f6:ee: 61:71:3b:68:02:e5:ba:26:62:1b:f3:8d:8c:fb:8e:f3:bf:26: 16:90:ea:9b:89:94:4d:5a:b2:4f:32:1f:21:81:82:78:64:f4: 46:df:49:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkQ4QjExMC8GA1UEBRMoOUFCNjg2RTNDMjk5QUE3RTQ0NTU0OTM0OTVCNDZCQTVB NzQ0MDk5RDAeFw0yNDA1MTkwNzI0MzJaFw0yNDA1MjYwNzI0MzJaMBgxFjAUBgNV BAMTDTY2NDlhOTMwLTcyZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF+WJy3d6GdMyBi+0vwGWOFhHYNABRYqblZw+CPdorm3DSFiR/fwCFUTwcVWNb tlIUewHwCKDNqsJU2H027OIDBxrjUdQHi4z/9ZyxXsRnh8lgxSy4tLbUcMQjLpgs RGGWl2oFbRHP3Fub0oGqwAIMvy2yeWoSKgXAz3thoFFubpiZ13LCZF4YSI3kryC9 2/PRmzOJX1KZ4lZmFRXm9eGxCkDzX8uz7y3TOy8QbA/zEqNmSTaAAV6MhW+ZsX6q n1vy99UhZRleXbSOiVPXKeLLX6LsjBm8JEJHwwQqgujBZvvFoRtwhQwy5uUEuULy RiB1khn797T6Qq81nOH+T7eNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDfd5+rGw zm7v/jf2HuIaNXYg0VQwHwYDVR0jBBgwFoAUmraG48KZqn5EVUk0lbRrpadECZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RDhCL0IyRjIzNUIyNjcy MDExRUVBMTQ2QzIyREM0RjlBRTAyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXJhRzQ4S1pxbjVFVlVrMGxiUnJwYWRFQ1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RDhCL0IyRjIzNUIyNjcyMDExRUVBMTQ2QzIyREM0RjlBRTAyL21yYUc0OEtacW41 RVZVazBsYlJycGFkRUNaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADoh65sUv+uveh1uVAy2GD9miL73UEAPj2B6GiwEw1o4f0mZDTmrn4DG bbWZJe353H+1KZ8Z50Pm3/YjUMGiSJ22nzui433ykLEnVVz6peXxF1J2F0B2ctPr KZTep0wIWABirdLO+etcU1NgUAw+Q4/2DFgp429yzsU84xxKa2fq84yjZSjZD7OC qUvGa23PTQTKyzXYgHq8NrSI+oumiwUWo5lNbG42N5HzxILklXiun269nCxrxVnl UVnqsfzvzd/NCxEaqhQMoaytMfdCMDuGn3wBt1T27mFxO2gC5bomYhvzjYz7jvO/ JhaQ6puJlE1ask8yHyGBgnhk9EbfSZE= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org