$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft File: deIxCEEFtBXk1XmhraSOU5dW17M.mft (raw, json) Hash identifier: eGJtixGMuiHYp9JcLmUZM7/rkUGqIc/uf37EuiYhXws= Subject key identifier: A7:74:01:39:08:97:6D:E2:9F:FA:5D:01:C4:BF:3A:76:05:47:49:75 Authority key identifier: 75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 Certificate issuer: /CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft Manifest number: 80 Signing time: Sat 01 Jun 2024 08:36:18 +0000 Manifest this update: Sat 01 Jun 2024 08:36:18 +0000 Manifest next update: Sat 08 Jun 2024 08:36:17 +0000 Files and hashes: 1: deIxCEEFtBXk1XmhraSOU5dW17M.crl (hash: RifTnY/W5BwMa3+58JtjTRHjlUnkoI70P1cftX4vkiY=) 2: 39F3DEAC5BE711EE8D63E752C4F9AE02.roa (hash: iPD/wFnBuITDzyZfpCm7N4MsAE73A1QWegIUmzf7Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Validity Not Before: Jun 1 08:36:18 2024 GMT Not After : Jun 8 08:36:17 2024 GMT Subject: CN=665add82-b276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:3e:82:1d:c2:bf:de:08:42:fb:d0:09:e9: e2:69:ad:79:14:65:da:f5:e6:16:d2:d6:0c:5a:d4: 1c:67:6c:4f:0f:e2:ab:fa:b9:58:cd:f0:9e:91:1f: d6:b9:66:68:e9:8b:e6:46:17:ab:d2:66:d2:06:26: f1:45:68:7e:97:bb:88:e1:80:ce:e6:29:16:c6:69: de:d6:2c:8e:c2:89:d2:49:59:3a:75:7b:2b:99:9e: d1:cd:e5:a7:52:a2:a8:73:d4:40:ce:ed:ee:73:c6: 30:18:18:e6:dd:c8:26:be:00:84:f5:92:d5:13:90: a0:79:23:41:34:f0:29:6e:ab:7c:e2:98:6a:b2:62: c5:82:9b:34:c3:88:96:2f:63:31:87:1b:7a:f8:b9: 45:45:d8:df:a9:e6:ca:f6:4a:d9:de:fd:67:13:b6: f2:67:16:c3:69:79:57:f1:01:3d:5f:b1:8c:a9:fe: 03:a4:5a:2b:b9:2d:2f:c4:7e:fa:ac:1a:36:15:41: fe:88:88:24:94:f7:b8:3c:d2:ea:8a:a5:4a:1a:34: 0d:af:9c:7f:23:cb:a3:83:33:76:c1:e7:fb:09:47: ff:82:52:9f:e9:fb:0e:6c:43:1d:b2:a5:54:54:99: 63:8d:ee:6b:10:f0:ce:07:20:fb:da:88:35:52:12: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:01:39:08:97:6D:E2:9F:FA:5D:01:C4:BF:3A:76:05:47:49:75 X509v3 Authority Key Identifier: keyid:75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:84:38:69:b2:ac:98:ac:08:ae:c5:bc:82:6e:ff:eb:62:8e: ec:91:49:cc:a4:55:4a:96:9e:91:da:01:00:04:53:93:53:cb: 7b:65:92:e3:74:91:ca:1a:0a:44:4b:4b:53:82:21:9c:7d:e4: a3:96:ce:c1:b9:31:83:41:a3:fc:50:cd:fb:82:69:bc:b6:f3: 77:81:d2:39:1d:6a:c1:ff:fd:c3:7d:81:56:50:eb:3a:79:d9: 6e:00:d4:99:4a:0c:a1:7a:ce:41:82:3b:0b:0c:16:3f:80:c1: 96:f6:87:a4:c3:0c:cf:76:f4:4e:ec:26:59:f5:e9:69:72:53: c5:9e:e5:02:82:d5:6c:b9:9b:8d:fb:a5:f0:4d:af:21:f9:be: 4e:30:ce:c3:3f:c2:e4:f1:2a:4b:36:00:9a:35:35:1b:f3:c4: 99:73:81:06:57:0c:d4:db:8e:b6:c9:a6:1a:67:39:ec:29:81: 3a:26:ff:dd:1e:5e:bf:ba:9c:42:85:a3:2f:da:0a:2f:07:74: 20:69:80:08:67:bc:6e:6d:f6:21:5e:fb:c2:1f:49:9e:fe:80: c8:11:fb:c5:54:5c:e6:5c:8c:d8:67:ec:9d:24:bc:d8:06:57: 6b:29:bf:db:22:92:c5:ba:fc:c2:bc:cf:2a:ab:d8:d6:7f:ad: ee:07:98:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5RUYxMTAvBgNVBAUTKDc1RTIzMTA4NDEwNUI0MTVFNEQ1NzlBMUFEQTQ4RTUz OTc1NkQ3QjMwHhcNMjQwNjAxMDgzNjE4WhcNMjQwNjA4MDgzNjE3WjAYMRYwFAYD VQQDEw02NjVhZGQ4Mi1iMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/c+gh3Cv94IQvvQCeniaa15FGXa9eYW0tYMWtQcZ2xPD+Kr+rlYzfCekR/W uWZo6YvmRher0mbSBibxRWh+l7uI4YDO5ikWxmne1iyOwonSSVk6dXsrmZ7RzeWn UqKoc9RAzu3uc8YwGBjm3cgmvgCE9ZLVE5CgeSNBNPApbqt84phqsmLFgps0w4iW L2Mxhxt6+LlFRdjfqebK9krZ3v1nE7byZxbDaXlX8QE9X7GMqf4DpForuS0vxH76 rBo2FUH+iIgklPe4PNLqiqVKGjQNr5x/I8ujgzN2wef7CUf/glKf6fsObEMdsqVU VJljje5rEPDOByD72og1UhJ4nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKd0ATkI l23in/pdAcS/OnYFR0l1MB8GA1UdIwQYMBaAFHXiMQhBBbQV5NV5oa2kjlOXVtez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlFRi84RUIzRUVDRTVC RTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRCWGsxWG1ocmFTT1U1ZFcx N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RlSXhDRUVGdEJYazFYbWhyYVNPVTVkVzE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlFRi84RUIzRUVDRTVCRTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRC WGsxWG1ocmFTT1U1ZFcxN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjhDhpsqyYrAiuxbyCbv/rYo7skUnMpFVKlp6R2gEABFOTU8t7ZZLj dJHKGgpES0tTgiGcfeSjls7BuTGDQaP8UM37gmm8tvN3gdI5HWrB//3DfYFWUOs6 edluANSZSgyhes5BgjsLDBY/gMGW9oekwwzPdvRO7CZZ9elpclPFnuUCgtVsuZuN +6XwTa8h+b5OMM7DP8Lk8SpLNgCaNTUb88SZc4EGVwzU2462yaYaZznsKYE6Jv/d Hl6/upxChaMv2govB3QgaYAIZ7xubfYhXvvCH0me/oDIEfvFVFzmXIzYZ+ydJLzY BldrKb/bIpLFuvzCvM8qq9jWf63uB5jk -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:36 2024 by rpki-client on console-fra.rpki-client.org