$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: XCkfCxJ87k8NkC7xB6y5OG9IdFViOahQqZ2JKcqRh7k= Subject key identifier: EC:07:D8:02:90:4B:39:35:EE:1E:CE:A3:D8:D6:A8:C4:47:04:A0:6A Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0667 Signing time: Sat 18 May 2024 23:32:27 +0000 Manifest this update: Sat 18 May 2024 23:32:27 +0000 Manifest next update: Sat 25 May 2024 23:32:27 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: REAMLDpjLBzLe0OeWBbYxJ1s07LQ3Saq9jVyyfhssVM=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: cJ8qCS/BU0fOSywoTphk0xL63F9Di3aiOmWh7haB+aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: May 18 23:32:27 2024 GMT Not After : May 25 23:32:27 2024 GMT Subject: CN=66493a8b-e0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:fc:de:15:f9:05:cf:7c:82:e7:3a:6e:6e: 63:0c:05:b5:0c:f6:df:8b:fb:16:7b:b9:f1:af:29: 52:db:e4:7f:aa:77:6e:35:6b:07:35:eb:b4:7b:60: 42:2e:ae:7d:30:68:af:a8:69:43:65:91:c9:f3:07: 5c:fc:df:a1:e2:81:71:4e:cb:da:35:a3:91:e3:4b: 9f:ac:c5:0c:2b:09:87:51:91:e3:25:5a:0d:d8:9c: 9a:33:a8:ce:92:ba:bf:23:9e:d5:06:53:70:c8:48: 62:7c:fe:3d:6b:b7:a1:dc:fe:04:30:48:75:d3:b6: 2a:9a:f4:b0:12:72:91:8d:6e:19:f3:56:21:67:0e: 30:8a:12:2e:49:e3:f4:d5:0b:36:53:28:b9:89:8f: 6a:af:76:17:78:ea:da:82:c7:8b:f3:bc:25:b3:87: 7f:30:69:77:d7:97:a6:97:e3:6b:9e:4d:49:89:98: 90:22:4b:0b:b3:b2:87:52:0c:31:74:67:31:7e:f2: 33:99:e9:c0:75:58:28:f0:c4:ba:b5:ff:1c:13:8c: c7:4e:b9:b3:a4:2b:35:87:7a:cd:74:af:21:5a:56: 19:39:37:c9:99:89:4e:3f:96:45:06:fe:62:9a:56: ae:45:60:0a:07:2f:d8:fe:c8:48:bc:2c:eb:7b:b8: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:07:D8:02:90:4B:39:35:EE:1E:CE:A3:D8:D6:A8:C4:47:04:A0:6A X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:26:14:73:31:b6:cc:b3:a7:4e:12:8d:ce:7e:41:c6:0b:2d: 26:92:7f:87:7e:84:5b:61:9e:07:89:ea:cc:13:b4:1e:78:57: c3:41:a0:ec:12:5d:4e:b7:d4:f6:39:00:21:11:ef:88:3f:c6: e0:aa:70:bf:d0:40:c5:0e:52:19:59:44:f7:d0:01:6c:ba:a3: e4:8a:6b:47:71:fe:3a:ac:15:76:bc:e2:33:3b:8a:d5:b9:11: b5:b5:ff:86:bc:20:70:fb:5c:60:c9:2e:d6:d1:5c:d6:9e:8d: 49:2d:42:3f:d5:da:17:05:f6:41:ac:c8:6a:61:97:b8:66:04: 8c:35:ee:42:ef:17:99:bb:d7:43:a7:e2:9b:84:d4:7a:07:3c: 14:f4:15:65:9c:54:bf:e4:98:e5:26:37:b5:2e:83:08:1a:04: ec:1a:25:8f:1d:4c:98:cb:d9:7b:a3:1a:c1:bf:3c:02:c6:c1: 71:2b:d1:77:ef:f2:15:86:02:d2:78:09:e9:2a:23:81:ee:dd: 2f:ab:6b:b7:09:5f:80:cb:3f:4f:fa:7c:9e:11:79:a4:d0:3a: 35:17:17:b8:1e:de:09:f2:a9:fb:4b:88:4a:2a:40:cf:13:5f: bc:59:6b:b1:d7:06:1e:15:17:44:46:dd:16:68:b5:2a:00:c7: 81:82:3d:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjQwNTE4MjMzMjI3WhcNMjQwNTI1MjMzMjI3WjAYMRYwFAYD VQQDEw02NjQ5M2E4Yi1lMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo383hX5Bc98guc6bm5jDAW1DPbfi/sWe7nxrylS2+R/qnduNWsHNeu0e2BC Lq59MGivqGlDZZHJ8wdc/N+h4oFxTsvaNaOR40ufrMUMKwmHUZHjJVoN2JyaM6jO krq/I57VBlNwyEhifP49a7eh3P4EMEh107YqmvSwEnKRjW4Z81YhZw4wihIuSeP0 1Qs2Uyi5iY9qr3YXeOragseL87wls4d/MGl315eml+Nrnk1JiZiQIksLs7KHUgwx dGcxfvIzmenAdVgo8MS6tf8cE4zHTrmzpCs1h3rNdK8hWlYZOTfJmYlOP5ZFBv5i mlauRWAKBy/Y/shIvCzre7j+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwH2AKQ Szk17h7Oo9jWqMRHBKBqMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcJhRzMbbMs6dOEo3OfkHGCy0mkn+HfoRbYZ4HierME7QeeFfDQaDs El1Ot9T2OQAhEe+IP8bgqnC/0EDFDlIZWUT30AFsuqPkimtHcf46rBV2vOIzO4rV uRG1tf+GvCBw+1xgyS7W0VzWno1JLUI/1doXBfZBrMhqYZe4ZgSMNe5C7xeZu9dD p+KbhNR6BzwU9BVlnFS/5JjlJje1LoMIGgTsGiWPHUyYy9l7oxrBvzwCxsFxK9F3 7/IVhgLSeAnpKiOB7t0vq2u3CV+Ayz9P+nyeEXmk0Do1Fxe4Ht4J8qn7S4hKKkDP E1+8WWux1wYeFRdERt0WaLUqAMeBgj0r -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org