$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: z8rN8U0/LqHspBbnrlqHOtvMQRN5HN5wHRntNNG5UwQ= Subject key identifier: 84:4A:78:6B:B7:D8:C0:1D:5C:51:D3:53:4C:AF:DA:14:FB:DB:15:68 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1C9D Signing time: Fri 31 May 2024 16:43:52 +0000 Manifest this update: Fri 31 May 2024 16:43:51 +0000 Manifest next update: Fri 07 Jun 2024 16:43:51 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: z2XJjWSjxRSw6Kj9oWoIuBkHJnl9sregNKdI+KhLgOY=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: w5zPHT/MnklfAHwgONGX9qlk6vPsgxlPKR5J+9H6c/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7338 (0x1caa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: May 31 16:43:51 2024 GMT Not After : Jun 7 16:43:51 2024 GMT Subject: CN=6659fe48-89c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:1d:4d:a0:51:4d:e3:b5:f8:c2:14:ce:13: 03:14:f7:bf:7f:40:53:c0:80:99:67:72:15:ef:1d: 26:66:65:0b:d8:36:51:0a:20:b8:34:52:87:e5:15: ff:21:55:e8:b6:2d:fa:69:ad:67:07:86:55:0c:3a: 0d:38:2b:05:00:9d:53:62:13:6d:51:43:a3:31:97: 9d:83:25:ed:3a:21:9f:b7:2e:26:da:3c:c8:67:8a: 8c:19:f8:86:0c:bc:b0:77:ab:c5:c1:66:4b:14:b5: 2d:71:14:9b:3f:8b:9d:3f:74:41:58:48:26:ae:47: 7b:9b:43:f8:21:44:8c:6a:86:51:e9:b5:ac:14:c9: 60:9c:f9:f7:9c:94:af:e6:0c:cb:a8:1f:51:55:52: d5:a2:68:94:72:85:b9:6b:16:4b:d8:39:b0:c4:33: 4a:7f:de:d1:02:5d:11:69:bc:3a:c0:f9:6d:30:c3: d5:e5:05:34:88:71:64:62:99:ec:33:2e:9c:c1:c4: be:8b:7e:b4:49:c9:e2:51:b6:8b:73:57:25:b1:b0: 63:e8:66:09:e9:7d:76:ed:c4:2e:b5:07:c3:6d:4d: cf:d0:2a:cf:57:76:95:75:26:fc:eb:be:e8:b7:e6: 3f:e7:c6:ef:ef:64:0f:1f:78:9e:5a:ee:09:31:0b: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:78:6B:B7:D8:C0:1D:5C:51:D3:53:4C:AF:DA:14:FB:DB:15:68 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b5:50:1a:15:36:82:64:5b:15:8f:5c:69:3b:a4:63:bf:f3: a1:44:54:cf:1c:a6:ec:93:50:fb:36:02:37:e3:50:e7:8a:32: f8:88:7e:47:7c:63:ad:99:ab:ae:ff:05:1d:e1:0a:83:0c:76: 3c:40:34:7a:ee:23:0b:79:44:08:95:d9:0c:f5:35:1c:69:49: a5:94:f9:cd:06:80:53:34:6a:e8:aa:9a:09:dd:20:41:de:85: df:b7:18:55:8f:3a:33:85:a3:34:2f:ef:9a:24:0f:ef:16:77: ea:24:5a:5a:86:51:b9:4d:11:4d:94:ba:58:e9:1a:03:e5:ba: 54:5d:ca:81:d6:cb:94:dc:5b:b2:7e:da:0d:70:25:4b:eb:18: 57:8c:84:b4:78:7e:33:2f:fd:2b:a1:40:fd:b2:4c:77:35:d9: 6c:7f:bc:d0:25:aa:a9:03:10:be:b3:66:96:44:67:e0:e1:f6: a0:5e:05:cb:88:a2:20:c4:66:36:46:ac:49:4b:0e:21:9b:f7: 63:66:63:63:77:ab:3d:49:a9:01:9c:4b:64:ac:75:35:d7:64: 33:08:46:7b:d5:66:aa:2a:b2:c2:3c:f5:83:8e:a3:02:92:73: 48:78:b8:c3:18:64:30:1b:5b:c4:20:03:1d:ed:a1:a3:40:51: 0b:2b:32:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjQwNTMxMTY0MzUxWhcNMjQwNjA3MTY0MzUxWjAYMRYwFAYD VQQDEw02NjU5ZmU0OC04OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhgdTaBRTeO1+MIUzhMDFPe/f0BTwICZZ3IV7x0mZmUL2DZRCiC4NFKH5RX/ IVXoti36aa1nB4ZVDDoNOCsFAJ1TYhNtUUOjMZedgyXtOiGfty4m2jzIZ4qMGfiG DLywd6vFwWZLFLUtcRSbP4udP3RBWEgmrkd7m0P4IUSMaoZR6bWsFMlgnPn3nJSv 5gzLqB9RVVLVomiUcoW5axZL2DmwxDNKf97RAl0Rabw6wPltMMPV5QU0iHFkYpns My6cwcS+i360ScniUbaLc1clsbBj6GYJ6X127cQutQfDbU3P0CrPV3aVdSb8677o t+Y/58bv72QPH3ieWu4JMQt+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRKeGu3 2MAdXFHTU0yv2hT72xVoMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAltVAaFTaCZFsVj1xpO6Rjv/OhRFTPHKbsk1D7NgI341DnijL4iH5H fGOtmauu/wUd4QqDDHY8QDR67iMLeUQIldkM9TUcaUmllPnNBoBTNGroqpoJ3SBB 3oXftxhVjzozhaM0L++aJA/vFnfqJFpahlG5TRFNlLpY6RoD5bpUXcqB1suU3Fuy ftoNcCVL6xhXjIS0eH4zL/0roUD9skx3Ndlsf7zQJaqpAxC+s2aWRGfg4fagXgXL iKIgxGY2RqxJSw4hm/djZmNjd6s9SakBnEtkrHU112QzCEZ71WaqKrLCPPWDjqMC knNIeLjDGGQwG1vEIAMd7aGjQFELKzKW -----END CERTIFICATE-----Generated at Fri May 31 17:44:51 2024 by rpki-client on console-fra.rpki-client.org