$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft File: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json) Hash identifier: pDTzJW7Lw855XM6rs4tPFHllnSOZYxg00q3t4xxaeJM= Subject key identifier: 8E:28:4A:26:E6:ED:60:D4:5F:9F:94:E8:F4:F4:4A:F1:05:A5:58:7E Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Certificate serial: 1066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft Manifest number: 1053 Signing time: Sat 18 May 2024 17:59:03 +0000 Manifest this update: Sat 18 May 2024 17:59:01 +0000 Manifest next update: Sat 25 May 2024 17:59:01 +0000 Files and hashes: 1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: 7Hsst98TXQlxYLi61ofn8BXbW6YA4HkqBxo1XEB2VjQ=) 2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: s8QouP6yXPvwTL8mRL6l5s2tkMEdi2DlBm8vLodEmCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Validity Not Before: May 18 17:59:01 2024 GMT Not After : May 25 17:59:01 2024 GMT Subject: CN=6648ec67-7aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:dd:ba:6a:e7:0e:d0:10:09:11:ec:80:8d: f6:0b:8e:2f:44:34:02:08:64:6f:87:29:73:6a:8b: fa:bb:49:3f:04:1f:dc:0a:4b:d6:8d:f8:41:83:f2: fa:c3:3b:ea:ea:1f:7f:37:f3:79:6b:d0:79:8f:ae: 45:83:cb:4e:b7:90:ea:0e:db:ee:41:ab:60:03:7c: 02:29:9d:eb:31:b8:b7:1a:02:b2:5d:b6:03:95:87: 5f:e9:9e:23:3f:3c:73:ff:b9:6f:b7:c9:09:94:c1: da:0d:26:35:e3:a6:50:db:72:55:2d:5f:70:33:cd: bd:1c:14:50:8c:ab:8e:9e:28:3f:af:ee:39:9f:75: 1e:5f:e4:cf:44:2f:db:8c:43:3f:4a:5d:f6:2c:c2: 9b:d4:22:ee:c9:03:8c:59:d7:f7:45:c2:9d:9a:bf: db:a3:97:01:bc:09:63:ef:7e:61:dd:ec:dc:f8:ab: 1e:64:ac:cd:7b:2e:3b:90:4f:62:fb:d4:74:e2:01: a1:48:e1:bb:2e:a2:a4:2b:c8:fe:57:57:7c:ad:cd: 3e:4c:51:8e:73:62:ca:21:09:9a:80:d8:27:35:ae: 52:a9:b8:f6:21:34:53:cd:8f:bd:00:ca:ed:0f:99: 4c:50:b1:f7:aa:92:6e:39:44:68:01:53:4a:a5:e6: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:4A:26:E6:ED:60:D4:5F:9F:94:E8:F4:F4:4A:F1:05:A5:58:7E X509v3 Authority Key Identifier: keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d8:1a:88:4e:62:94:88:60:0f:c2:ad:09:f4:3a:06:d8:8a: 70:1e:1b:28:91:aa:9d:51:64:19:06:24:11:1a:36:67:ee:66: 48:cc:12:c8:41:39:b5:d3:8b:9f:91:4e:32:1a:15:4a:20:b6: c8:8f:0b:2f:30:6a:4d:d9:7c:64:a1:a1:a3:c6:a9:0a:77:84: b6:0c:ef:d4:5f:9a:98:ef:a2:23:48:e1:31:00:1d:78:03:1e: d2:4b:50:40:9b:9b:2e:dd:95:38:e2:24:f3:54:de:8f:8c:58: 3e:c4:72:b0:18:7e:20:f0:83:65:0d:ff:0a:b2:56:56:82:c1: 14:a7:d6:c8:81:d7:dc:f4:35:7c:b8:f8:e0:b0:22:9c:3d:fb: d0:17:22:09:d7:e1:ac:30:d3:97:45:4a:3b:a2:f1:40:ca:16: 66:33:65:57:7f:ad:0e:12:1d:ad:53:ef:4d:c6:e6:cd:1f:3a: f8:61:65:b4:9e:25:6b:d9:13:d7:6a:0b:08:5e:40:6a:a0:24: 49:44:4a:b2:7e:f2:c2:54:85:7c:ff:38:db:1d:14:6a:d1:b8: 23:4d:53:dc:6a:ba:34:22:a6:ad:2b:cc:1b:da:a2:fa:ab:fb: fe:cd:b0:f9:da:d5:68:e5:46:14:d6:c7:2b:09:22:4a:82:61: 82:d2:0f:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCNjUxMTAvBgNVBAUTKEMwNTcxMTlDQTQ1REQzMTQyMTVDNjFFMDlCRjg3MUQ0 OEFCQjVGOUIwHhcNMjQwNTE4MTc1OTAxWhcNMjQwNTI1MTc1OTAxWjAYMRYwFAYD VQQDEw02NjQ4ZWM2Ny03YWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NvdumrnDtAQCRHsgI32C44vRDQCCGRvhylzaov6u0k/BB/cCkvWjfhBg/L6 wzvq6h9/N/N5a9B5j65Fg8tOt5DqDtvuQatgA3wCKZ3rMbi3GgKyXbYDlYdf6Z4j Pzxz/7lvt8kJlMHaDSY146ZQ23JVLV9wM829HBRQjKuOnig/r+45n3UeX+TPRC/b jEM/Sl32LMKb1CLuyQOMWdf3RcKdmr/bo5cBvAlj735h3ezc+KseZKzNey47kE9i +9R04gGhSOG7LqKkK8j+V1d8rc0+TFGOc2LKIQmagNgnNa5Sqbj2ITRTzY+9AMrt D5lMULH3qpJuOURoAVNKpeYawwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4oSibm 7WDUX5+U6PT0SvEFpVh+MB8GA1UdIwQYMBaAFMBXEZykXdMUIVxh4Jv4cdSKu1+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEI2NS9FNkU0MjJBNjE1 NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4UWhYR0hnbV9oeDFJcTdY NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGY1JuS1JkMHhRaFhHSGdtX2h4MUlxN1g1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEI2NS9FNkU0MjJBNjE1NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4 UWhYR0hnbV9oeDFJcTdYNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC82BqITmKUiGAPwq0J9DoG2IpwHhsokaqdUWQZBiQRGjZn7mZIzBLI QTm104ufkU4yGhVKILbIjwsvMGpN2XxkoaGjxqkKd4S2DO/UX5qY76IjSOExAB14 Ax7SS1BAm5su3ZU44iTzVN6PjFg+xHKwGH4g8INlDf8KslZWgsEUp9bIgdfc9DV8 uPjgsCKcPfvQFyIJ1+GsMNOXRUo7ovFAyhZmM2VXf60OEh2tU+9NxubNHzr4YWW0 niVr2RPXagsIXkBqoCRJREqyfvLCVIV8/zjbHRRq0bgjTVPcaro0IqatK8wb2qL6 q/v+zbD52tVo5UYU1scrCSJKgmGC0g/n -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org