$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft File: RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json) Hash identifier: DtrsbZqOtLi9X1Yj2Zj+bZlMZAlPOKiJx/laWZKoHtM= Subject key identifier: C2:B1:31:C1:78:17:0C:C5:FB:C5:70:3D:2B:B2:5A:E4:88:84:51:3E Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 Certificate issuer: /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Certificate serial: 0B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft Manifest number: 0B54 Signing time: Sat 18 May 2024 19:37:20 +0000 Manifest this update: Sat 18 May 2024 19:37:19 +0000 Manifest next update: Sat 25 May 2024 19:37:19 +0000 Files and hashes: 1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: ajX2ovQB7fMbmgoYiA5WY1QoCdtvYzUrN0HUPjDyIWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2901 (0xb55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Validity Not Before: May 18 19:37:19 2024 GMT Not After : May 25 19:37:19 2024 GMT Subject: CN=6649036f-ebec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:b8:1c:d2:59:2f:5d:8f:d0:2f:58:6b:1d: 14:3b:06:42:6c:ba:d5:3f:c1:3f:ee:d1:23:fc:b8: 1a:1d:0a:3d:1a:cd:7a:cd:48:f6:c7:a3:a2:6c:ab: da:5c:8d:d4:91:ff:50:8b:44:97:56:01:3f:f8:f8: 9e:9a:76:2f:ce:b4:43:64:02:68:c9:2d:95:df:3e: 5d:c8:bf:97:93:66:8e:44:46:32:e4:97:38:c6:35: e1:ff:ce:f9:49:fa:51:c7:79:78:21:93:a6:61:d3: cc:09:45:3f:ba:65:17:60:e5:72:39:6c:b6:aa:c9: 79:10:dd:4f:23:b7:cc:2d:df:87:d7:30:40:62:4a: 74:33:07:08:66:1a:35:d4:fd:3c:44:b2:cd:55:b0: 69:51:68:33:69:e4:12:23:07:5a:de:ea:b7:45:8c: 4d:ce:6d:f6:af:8b:a4:5d:92:2a:25:e9:ee:f3:3f: 7b:6d:67:f5:e0:3e:c7:59:2d:79:94:8f:38:fb:02: e6:dc:36:1d:f0:79:c2:4a:8f:21:bf:78:c1:ff:d1: 84:82:be:20:dd:8f:c9:e0:d1:52:59:14:05:6c:ac: b3:00:13:9c:4c:52:48:92:3a:84:c1:17:73:5e:44: f9:2b:12:33:cb:af:b7:cb:09:3b:1e:ec:d8:68:a2: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B1:31:C1:78:17:0C:C5:FB:C5:70:3D:2B:B2:5A:E4:88:84:51:3E X509v3 Authority Key Identifier: keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:15:9f:65:66:31:6c:a3:4b:8f:39:0e:3d:37:a2:9b:b7:5d: 2b:a0:ef:c7:13:37:25:a2:03:ca:b5:1b:0a:c1:55:f4:f1:1e: 37:12:b7:7e:d0:85:e3:c4:aa:2c:2b:25:f4:ae:01:41:d3:5e: cb:1a:61:bc:ff:94:09:0f:f9:fe:08:6f:84:c3:f0:a1:6b:77: 86:06:4f:53:2e:dd:f1:26:7a:a6:a5:8b:8b:49:33:97:6f:71: ca:25:c8:1c:ba:63:b9:7e:c2:b4:52:b1:0b:72:ab:c3:aa:fb: ca:5f:d2:55:a4:49:89:cc:c2:5b:43:0d:e7:8a:0d:b8:af:02: f1:36:82:1a:9a:90:a0:96:20:60:ec:33:78:02:25:cb:3b:87: e6:81:06:78:06:40:f7:60:bf:19:25:af:cd:77:34:21:c7:b5: 36:9b:58:78:45:15:fe:f7:bf:41:26:7e:92:4d:e1:ba:fd:cb: 5d:a5:31:e0:b1:8e:a5:d1:54:45:16:58:21:81:b1:8e:51:02: 38:93:fd:9a:85:34:d6:10:58:a4:d0:0c:35:3a:ce:91:e0:27: a9:3c:41:c2:27:ae:54:83:42:18:4e:51:5d:5c:9f:37:f5:eb: 09:a4:df:86:36:95:0c:65:8d:0d:62:2b:af:c9:a7:5e:bb:4b: 12:a2:8f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RjMxMTAvBgNVBAUTKDQ2Njg5RTREOUY3N0VFNENDNkM4QTg4RTY3OUVDRkVG Mzc1MkY0MzcwHhcNMjQwNTE4MTkzNzE5WhcNMjQwNTI1MTkzNzE5WjAYMRYwFAYD VQQDEw02NjQ5MDM2Zi1lYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb+4HNJZL12P0C9Yax0UOwZCbLrVP8E/7tEj/LgaHQo9Gs16zUj2x6OibKva XI3Ukf9Qi0SXVgE/+PiemnYvzrRDZAJoyS2V3z5dyL+Xk2aOREYy5Jc4xjXh/875 SfpRx3l4IZOmYdPMCUU/umUXYOVyOWy2qsl5EN1PI7fMLd+H1zBAYkp0MwcIZho1 1P08RLLNVbBpUWgzaeQSIwda3uq3RYxNzm32r4ukXZIqJenu8z97bWf14D7HWS15 lI84+wLm3DYd8HnCSo8hv3jB/9GEgr4g3Y/J4NFSWRQFbKyzABOcTFJIkjqEwRdz XkT5KxIzy6+3ywk7HuzYaKKeoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKxMcF4 FwzF+8VwPSuyWuSIhFE+MB8GA1UdIwQYMBaAFEZonk2fd+5Mxsiojmeez+83UvQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGMy9DRkM2RENCODBD MDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdrekd5S2lPWjU3UDd6ZFM5 RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JtaWVUWjkzN2t6R3lLaU9aNTdQN3pkUzlEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGMy9DRkM2RENCODBDMDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdr ekd5S2lPWjU3UDd6ZFM5RGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTFZ9lZjFso0uPOQ49N6Kbt10roO/HEzclogPKtRsKwVX08R43Erd+ 0IXjxKosKyX0rgFB017LGmG8/5QJD/n+CG+Ew/Cha3eGBk9TLt3xJnqmpYuLSTOX b3HKJcgcumO5fsK0UrELcqvDqvvKX9JVpEmJzMJbQw3nig24rwLxNoIampCgliBg 7DN4AiXLO4fmgQZ4BkD3YL8ZJa/NdzQhx7U2m1h4RRX+979BJn6STeG6/ctdpTHg sY6l0VRFFlghgbGOUQI4k/2ahTTWEFik0Aw1Os6R4CepPEHCJ65Ug0IYTlFdXJ83 9esJpN+GNpUMZY0NYiuvyadeu0sSoo8D -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org