$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: 72/2pO3z7HjGl4TI1ffWGBQ+d9yKAkLoe9OAUgqxfeM= Subject key identifier: A1:71:49:83:43:FD:65:42:EA:5E:E9:EA:B6:09:92:9E:61:A9:4B:9F Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 0324 Signing time: Sun 19 May 2024 03:07:19 +0000 Manifest this update: Sun 19 May 2024 03:07:19 +0000 Manifest next update: Sun 26 May 2024 03:07:19 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: gyIpzdOxII0mbiozkCmiVhgtzvziPdZLrZ6zvxXLUnI=) 2: A98BD3DE91F211ECA28ADD36C4F9AE02.roa (hash: E8V1sk0D8i4WfgIIWQOrfA2cQHivc9el6REKMjdr7Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: May 19 03:07:19 2024 GMT Not After : May 26 03:07:19 2024 GMT Subject: CN=66496ce7-ad6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:79:e2:8c:13:3d:c7:66:70:1e:12:af:67: 3f:88:0d:ba:70:af:a9:01:a3:77:d5:5e:3b:7b:44: 3a:90:65:9f:7b:8e:2e:54:a6:fd:28:c1:7b:a7:58: bb:3c:d6:6c:26:50:b1:d9:77:ea:a8:3f:cb:fd:49: d5:c2:2d:00:86:8d:9b:d8:d5:bc:31:ec:b4:df:36: 32:d5:26:76:17:d2:1f:a3:06:a3:ec:8c:13:4e:82: e2:db:00:78:b2:9a:d8:4b:a1:29:ea:73:3d:d5:89: 6d:4d:75:ba:33:cd:f5:87:c2:e7:59:e1:93:85:6b: 92:16:89:b1:41:c5:51:c5:d1:2f:0e:b4:04:d0:dc: 6a:a1:3d:29:c2:13:fe:2f:2f:c7:2a:a4:88:28:70: fc:86:bf:0c:4d:fa:c3:79:d4:3b:a4:4b:20:d8:1d: 56:9b:4e:01:28:18:55:b6:54:08:b7:6f:21:0d:b8: 9b:0d:51:06:12:1d:1d:bc:a4:1e:56:d4:15:19:5d: 48:89:ae:77:54:32:1a:d8:a3:b5:da:ce:50:2c:05: 61:f9:88:bb:37:11:0d:c6:83:ff:99:09:14:c8:c6: 09:6f:70:f7:8a:17:31:6d:d1:ee:e4:2c:bf:81:f6: e5:34:5d:e5:7f:7c:1d:73:fb:eb:26:9c:d5:5e:c0: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:49:83:43:FD:65:42:EA:5E:E9:EA:B6:09:92:9E:61:A9:4B:9F X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:ca:60:41:1a:d9:67:84:b4:7d:62:9f:ca:a9:3e:c1:9b:0e: 65:b7:30:36:0b:ab:d4:05:15:d2:c7:7b:5c:7f:42:7f:01:a4: 5b:ef:65:74:bb:97:dd:e1:32:9c:90:e0:ae:04:fe:93:bb:81: 24:2a:7c:cf:a8:14:b5:24:bf:e5:9a:fc:e9:ac:69:2e:bb:d4: 40:63:ee:77:be:2a:ee:cd:f6:6c:1d:e6:bc:56:13:bc:85:c9: f5:a2:88:0e:1f:64:c4:eb:c6:ef:4c:78:3e:ad:3d:f3:6f:28: dd:f9:5f:10:d8:8e:d5:6c:d7:44:25:4f:34:3d:d1:1e:ac:12: 32:a0:6b:9c:15:14:6c:1b:48:fe:85:53:f6:75:9a:aa:d8:06: 05:9a:a3:d1:4c:3e:05:a7:d8:e6:72:ca:1c:1c:39:31:f1:6f: 67:a3:00:a4:da:4b:1c:f0:f3:33:c7:b4:3b:db:2f:37:db:6b: 53:b0:7d:46:eb:2e:c6:2f:da:62:bd:bd:18:95:9a:32:9a:ad: ad:5b:47:f6:11:74:65:7d:1f:df:7e:4a:67:36:85:a2:1f:0e: 68:de:41:4c:3a:5c:92:ab:57:e1:1e:fd:2e:fd:5c:8e:7e:61: 29:05:3f:46:16:68:fc:f0:cc:c4:cb:29:57:da:3b:b1:6f:c2: 87:a5:a7:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjQwNTE5MDMwNzE5WhcNMjQwNTI2MDMwNzE5WjAYMRYwFAYD VQQDEw02NjQ5NmNlNy1hZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHp54owTPcdmcB4Sr2c/iA26cK+pAaN31V47e0Q6kGWfe44uVKb9KMF7p1i7 PNZsJlCx2XfqqD/L/UnVwi0Aho2b2NW8Mey03zYy1SZ2F9Ifowaj7IwTToLi2wB4 sprYS6Ep6nM91YltTXW6M831h8LnWeGThWuSFomxQcVRxdEvDrQE0NxqoT0pwhP+ Ly/HKqSIKHD8hr8MTfrDedQ7pEsg2B1Wm04BKBhVtlQIt28hDbibDVEGEh0dvKQe VtQVGV1Iia53VDIa2KO12s5QLAVh+Yi7NxENxoP/mQkUyMYJb3D3ihcxbdHu5Cy/ gfblNF3lf3wdc/vrJpzVXsDaRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFxSYND /WVC6l7p6rYJkp5hqUufMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnymBBGtlnhLR9Yp/KqT7Bmw5ltzA2C6vUBRXSx3tcf0J/AaRb72V0 u5fd4TKckOCuBP6Tu4EkKnzPqBS1JL/lmvzprGkuu9RAY+53viruzfZsHea8VhO8 hcn1oogOH2TE68bvTHg+rT3zbyjd+V8Q2I7VbNdEJU80PdEerBIyoGucFRRsG0j+ hVP2dZqq2AYFmqPRTD4Fp9jmcsocHDkx8W9nowCk2ksc8PMzx7Q72y8322tTsH1G 6y7GL9pivb0YlZoymq2tW0f2EXRlfR/ffkpnNoWiHw5o3kFMOlySq1fhHv0u/VyO fmEpBT9GFmj88MzEyylX2juxb8KHpadS -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org