$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: 3pkZ0s1LzAmVjvHu58gSS2bj2z/Bnxz1ZUHfuZm9928= Subject key identifier: BB:A2:8E:B5:94:99:96:64:7D:28:47:EB:BF:9B:96:B4:FA:84:49:EF Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: E7 Signing time: Fri 31 May 2024 06:37:23 +0000 Manifest this update: Fri 31 May 2024 06:37:22 +0000 Manifest next update: Fri 07 Jun 2024 06:37:22 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: z74N++xlO88O2lnTZbsUpP3GAN/AXyKzY7LmySY07I4=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: V8tQPJgIafOML1xImTfe44DixBLHxhrgUhynPfLWKws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: May 31 06:37:22 2024 GMT Not After : Jun 7 06:37:22 2024 GMT Subject: CN=66597023-1f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:ec:89:e1:f2:37:03:29:96:cc:0e:b7:99: 4f:02:09:ba:f4:9a:46:84:5e:97:26:fe:3f:82:97: cb:67:23:b3:9c:12:43:93:10:6d:8d:c7:ac:ea:42: 89:32:0b:f7:30:bd:be:39:69:a6:f7:7f:20:0c:1b: 05:e8:3d:5e:5a:c2:07:97:b4:55:76:25:eb:27:5b: a6:29:01:d6:22:2a:ff:0b:4a:cb:3e:c0:dc:d0:46: b6:75:4f:c5:3e:ea:46:5f:e9:c7:bc:fb:66:04:a0: 2b:9a:40:18:59:98:b3:32:32:14:ef:c1:84:6c:17: 15:fe:df:57:aa:a9:52:0a:b9:a9:90:84:97:fd:61: 4c:71:20:c3:9b:7f:cb:e5:f8:4a:40:69:d7:c4:ff: 88:ea:37:35:52:7c:a3:cd:a0:11:93:01:60:52:59: 32:1c:a5:b0:76:4f:64:50:42:f8:49:2b:c4:3a:f3: cc:e9:ea:aa:b1:97:fa:99:12:10:37:a8:30:df:ff: 7c:68:b4:c8:4e:25:88:82:89:89:e7:23:a8:1c:11: b2:89:31:a1:1c:74:aa:e4:0a:99:bf:8b:b8:66:37: 2f:78:66:7b:ec:a2:c4:a7:ce:70:1b:1d:c4:51:10: 5d:34:2e:5b:c1:a0:28:85:7c:04:02:fc:64:0b:b4: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A2:8E:B5:94:99:96:64:7D:28:47:EB:BF:9B:96:B4:FA:84:49:EF X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9a:dd:1b:34:54:fa:46:10:8f:ac:b5:46:13:bd:a0:cf:6b: c0:a3:42:35:88:0b:de:07:24:63:58:4b:fe:f7:58:0c:7c:45: 1d:f7:ff:e3:f7:dc:de:f2:25:53:90:e8:dd:bd:7c:1f:c2:0d: 71:d0:64:a4:9e:af:a4:15:41:a3:d0:7b:c2:76:03:6a:73:31: 45:77:68:64:28:0b:8d:e9:af:48:49:0a:13:36:b0:07:03:9c: a0:39:89:16:a1:b7:9b:cf:65:14:85:45:ff:3a:26:5e:7d:1a: 3d:04:e7:16:04:b2:1a:d1:51:e3:68:64:9d:e5:47:da:59:3f: bb:7f:53:a2:85:81:d4:93:cf:d2:4f:a2:5b:4d:b8:eb:41:26: a8:46:8d:05:01:a4:c2:15:84:d3:08:70:30:23:19:8b:17:aa: 1c:2c:2f:ac:de:79:98:27:c0:6f:ef:1c:d7:0d:20:63:d8:d0: 9b:ae:50:8a:fe:ff:3c:77:76:3a:e5:27:b9:7d:a9:2d:36:16: 2d:74:f1:5b:63:5e:c4:51:2f:c7:30:a6:5e:1a:a9:ea:cd:a6: fb:05:01:47:c7:9a:d0:f0:40:72:54:fd:73:c0:a0:86:02:69: 2b:9f:22:cd:96:10:33:07:85:e3:dc:5b:cb:af:1c:c3:56:10: 9c:c2:e3:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjQwNTMxMDYzNzIyWhcNMjQwNjA3MDYzNzIyWjAYMRYwFAYD VQQDEw02NjU5NzAyMy0xZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsevsieHyNwMplswOt5lPAgm69JpGhF6XJv4/gpfLZyOznBJDkxBtjces6kKJ Mgv3ML2+OWmm938gDBsF6D1eWsIHl7RVdiXrJ1umKQHWIir/C0rLPsDc0Ea2dU/F PupGX+nHvPtmBKArmkAYWZizMjIU78GEbBcV/t9XqqlSCrmpkISX/WFMcSDDm3/L 5fhKQGnXxP+I6jc1UnyjzaARkwFgUlkyHKWwdk9kUEL4SSvEOvPM6eqqsZf6mRIQ N6gw3/98aLTITiWIgomJ5yOoHBGyiTGhHHSq5AqZv4u4ZjcveGZ77KLEp85wGx3E URBdNC5bwaAohXwEAvxkC7RdUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuijrWU mZZkfShH67+blrT6hEnvMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6mt0bNFT6RhCPrLVGE72gz2vAo0I1iAveByRjWEv+91gMfEUd9//j 99ze8iVTkOjdvXwfwg1x0GSknq+kFUGj0HvCdgNqczFFd2hkKAuN6a9ISQoTNrAH A5ygOYkWobebz2UUhUX/OiZefRo9BOcWBLIa0VHjaGSd5UfaWT+7f1OihYHUk8/S T6JbTbjrQSaoRo0FAaTCFYTTCHAwIxmLF6ocLC+s3nmYJ8Bv7xzXDSBj2NCbrlCK /v88d3Y65Se5faktNhYtdPFbY17EUS/HMKZeGqnqzab7BQFHx5rQ8EByVP1zwKCG AmkrnyLNlhAzB4Xj3FvLrxzDVhCcwuNw -----END CERTIFICATE-----Generated at Fri May 31 10:02:41 2024 by rpki-client on console-ams.rpki-client.org