$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json) Hash identifier: pO05OkEvRfluu20JMAw3O80uTJS9huNgqKBwvvGZo34= Subject key identifier: 51:6C:4B:2E:F5:D9:31:4C:01:A5:2A:12:AC:E7:2F:2D:98:F6:92:EF Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Certificate serial: 3242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft Manifest number: 3A7E Signing time: Sat 18 May 2024 15:37:00 +0000 Manifest this update: Sat 18 May 2024 15:37:00 +0000 Manifest next update: Sat 25 May 2024 15:37:00 +0000 Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: OIQ5/lo59/sl+NDQzKxptDsMWV1fMQeCdfG4Ibnb1qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12866 (0x3242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Validity Not Before: May 18 15:37:00 2024 GMT Not After : May 25 15:37:00 2024 GMT Subject: CN=6648cb1c-2258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:18:e7:5b:f4:f0:9e:e9:7e:9d:19:a9:9b: 55:d6:90:4a:40:66:24:a4:eb:05:c5:54:bf:a5:18: 56:0b:ca:5e:12:c2:ae:c2:63:65:f5:da:f7:1f:94: 44:4e:a5:96:65:5a:47:c5:c9:2a:cd:20:00:68:21: 48:03:53:d8:90:54:2f:7e:67:d8:db:1a:4f:37:cd: d1:75:79:59:91:99:a7:38:ff:5f:bf:ef:70:a7:b5: 97:44:c1:33:cd:91:4f:c6:46:29:e8:68:64:bb:46: 12:18:24:16:07:a5:6e:40:11:af:8d:7e:23:6b:d7: 60:68:47:4e:a3:3b:57:26:81:b8:d9:a7:7b:c0:09: ef:0c:e2:9b:5b:38:f3:42:5d:30:06:78:00:15:ef: dd:32:72:1e:db:06:68:6e:ab:9d:cd:c4:75:cb:1d: a6:2c:fe:e5:e2:be:0b:51:6a:5e:0c:fc:44:82:a3: bd:c8:ec:79:73:ad:c3:96:5c:c9:6e:24:92:65:38: cd:7c:75:17:23:07:5c:e5:48:45:a6:4d:7b:a9:72: 76:c0:d0:b9:41:64:4d:35:65:57:cb:e5:1b:84:26: e7:5a:4d:dc:04:0d:15:33:bb:8d:73:62:21:6c:95: d2:d2:69:b0:a7:a1:19:7c:62:9e:cf:db:1b:da:3e: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6C:4B:2E:F5:D9:31:4C:01:A5:2A:12:AC:E7:2F:2D:98:F6:92:EF X509v3 Authority Key Identifier: keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:62:52:54:ed:87:89:69:d0:df:0c:1f:ce:d0:4a:f7:49:15: 9d:d5:34:70:35:2a:94:34:e4:a7:f8:bd:33:a8:75:5e:fb:f3: fb:e0:4d:03:28:0a:8f:fa:d6:50:37:ae:de:db:f1:eb:fd:96: 0f:fb:95:85:ec:e1:b7:95:81:e0:8c:de:0b:67:6e:fc:02:70: 5b:e0:46:41:e3:98:1d:e8:95:a4:ac:d5:d6:16:56:1f:e7:51: dd:ab:15:3a:f7:8d:a7:0b:1c:72:29:14:a0:92:bb:7d:03:bd: 69:84:75:1a:d3:6a:e6:d7:65:c8:d9:f2:c8:47:f2:88:2b:ed: b7:de:c7:41:4e:05:5c:db:c0:cb:58:56:b1:63:77:f2:0b:de: e6:ff:f0:e7:f9:f4:48:0b:ac:86:2d:55:f6:88:ef:ec:2a:f3: d7:c1:bf:cd:34:a3:82:1c:ff:57:d3:7b:1c:be:65:aa:b2:56: 57:90:94:11:4a:6b:d7:ab:f2:59:13:12:62:c1:54:af:49:f2: 73:32:aa:5b:c4:db:6b:7a:2c:fb:f7:af:7b:09:73:56:e5:b5: 90:b5:38:ca:1b:15:8c:4b:12:a9:01:06:86:aa:c1:50:fd:17: 27:fc:bd:9c:87:b7:f8:2e:3f:fc:75:9f:13:bd:fc:a0:04:03: f9:b2:23:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKEVDOTVCOEE4NDk3MjlCQTZFRjg0MkM2MzcxQUFENEFD N0Q4RjIxRjcwHhcNMjQwNTE4MTUzNzAwWhcNMjQwNTI1MTUzNzAwWjAYMRYwFAYD VQQDEw02NjQ4Y2IxYy0yMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuEY51v08J7pfp0ZqZtV1pBKQGYkpOsFxVS/pRhWC8peEsKuwmNl9dr3H5RE TqWWZVpHxckqzSAAaCFIA1PYkFQvfmfY2xpPN83RdXlZkZmnOP9fv+9wp7WXRMEz zZFPxkYp6Ghku0YSGCQWB6VuQBGvjX4ja9dgaEdOoztXJoG42ad7wAnvDOKbWzjz Ql0wBngAFe/dMnIe2wZobqudzcR1yx2mLP7l4r4LUWpeDPxEgqO9yOx5c63DllzJ biSSZTjNfHUXIwdc5UhFpk17qXJ2wNC5QWRNNWVXy+UbhCbnWk3cBA0VM7uNc2Ih bJXS0mmwp6EZfGKez9sb2j6zRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFsSy71 2TFMAaUqEqznLy2Y9pLvMB8GA1UdIwQYMBaAFOyVuKhJcpum74QsY3Gq1Kx9jyH3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02YnZoQ3hqY2FyVXJIMlBJ ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdKVzRxRWx5bTZidmhDeGpjYXJVckgyUElmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02 YnZoQ3hqY2FyVXJIMlBJZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4YlJU7YeJadDfDB/O0Er3SRWd1TRwNSqUNOSn+L0zqHVe+/P74E0D KAqP+tZQN67e2/Hr/ZYP+5WF7OG3lYHgjN4LZ278AnBb4EZB45gd6JWkrNXWFlYf 51HdqxU6942nCxxyKRSgkrt9A71phHUa02rm12XI2fLIR/KIK+233sdBTgVc28DL WFaxY3fyC97m//Dn+fRIC6yGLVX2iO/sKvPXwb/NNKOCHP9X03scvmWqslZXkJQR SmvXq/JZExJiwVSvSfJzMqpbxNtreiz79697CXNW5bWQtTjKGxWMSxKpAQaGqsFQ /Rcn/L2ch7f4Lj/8dZ8TvfygBAP5siMC -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org