$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: gQfM6C8PYwZRZipedisNzK/hcLFPOrS5ZOF7B9fJFZU= Subject key identifier: EC:3B:63:1A:80:8F:FA:3B:1F:21:00:03:A5:FC:94:50:51:F5:95:F4 Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 08CB Signing time: Sat 18 May 2024 21:27:04 +0000 Manifest this update: Sat 18 May 2024 21:27:03 +0000 Manifest next update: Sat 25 May 2024 21:27:03 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: wvXAWzkS8CXFmQPEcjZB6JI2/sMA58orvb4DsmcLYMo=) 2: 6569BF24997F11ECA6C7F481C4F9AE02.roa (hash: amqaY33SUGxMqxS4wOSnwnxZYO8ZLNJUE6wFt5kYkAE=) 3: 1FD8C94AEFBB11EC95A1FD0DC4F9AE02.roa (hash: FIn0kPD1C/xeAzqL5CC96V2ndMOoPa2kd5A8lLxYLu8=) 4: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: pLGwpLrCF+V9AoOv8xuzFZ0zimW0/KF9iP/Nw6KgGv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: May 18 21:27:03 2024 GMT Not After : May 25 21:27:03 2024 GMT Subject: CN=66491d27-5106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:f1:98:ca:9d:92:3c:42:4f:42:8c:5a:f6: f2:e3:99:60:a2:8f:86:d2:c3:81:04:5c:5b:cd:0c: d8:37:a4:3d:60:9b:2e:36:d1:55:e7:d2:2a:c5:ab: 12:a2:ba:9d:5b:63:1a:cf:e1:44:26:06:4f:b6:24: ac:92:73:9a:f7:fb:df:ec:53:78:9b:4a:ef:dd:ac: 9a:e6:aa:d4:9e:6a:b4:ac:48:4c:36:a1:04:4b:b4: 23:ff:0c:49:d7:56:bc:14:26:77:98:6f:62:ad:78: b6:a4:ae:4f:d2:db:af:11:b2:eb:bc:71:b4:b7:89: b8:2c:0d:69:7c:76:e9:9d:2f:28:e5:7c:60:81:c0: c2:2c:3b:4a:39:d3:2c:11:07:7a:92:7f:56:21:64: 3c:6e:eb:af:25:49:94:6d:b4:1d:8b:6b:83:c7:bd: a8:11:dc:46:ad:66:55:f2:82:e4:eb:b3:31:0f:ef: 0d:f3:16:57:e9:e0:68:cf:44:89:6d:b7:36:8c:25: 42:11:a8:ea:9a:a7:f9:56:40:29:24:5a:d9:07:3c: 9f:54:79:9d:f1:75:79:bd:ee:1a:d8:87:7b:db:5c: c8:b4:56:69:d5:ef:42:e0:60:39:c3:f3:09:97:af: 74:4b:fc:3f:50:40:50:f9:fe:2f:4a:5c:4d:ea:8e: a2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3B:63:1A:80:8F:FA:3B:1F:21:00:03:A5:FC:94:50:51:F5:95:F4 X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a0:a8:14:3b:a3:58:a7:00:07:32:fd:9c:7f:40:3f:98:f7: d0:8f:b5:a8:e4:fd:63:56:25:aa:4a:ba:77:32:69:85:69:ef: a6:2c:22:5b:24:e4:d9:cf:a2:69:21:cb:7f:05:41:ea:a6:72: 71:62:60:02:93:a7:83:e3:a1:09:ab:f0:d3:83:02:2a:c0:bc: 00:1e:33:77:49:7e:46:11:2c:f6:90:b5:53:56:ae:b4:a7:96: 49:16:1a:1f:a6:14:0e:af:ca:ee:67:1f:0e:9b:2f:55:a3:51: c5:37:bf:ef:70:2c:27:3b:40:41:6d:a7:7e:58:18:85:f0:1e: cf:d5:d5:86:0d:4b:e0:75:e0:ab:96:20:ba:ef:46:78:1d:83: 08:ca:a1:47:7d:9f:b2:65:80:45:ed:52:e2:b8:ec:8e:0e:18: bf:0e:b8:23:5f:15:64:75:63:25:be:49:1a:2a:b6:59:85:75: 92:35:ed:32:c3:65:68:9f:8a:25:7e:52:0d:8c:a3:5c:fc:64: 2b:e1:36:80:8a:62:9d:ff:1a:57:35:bd:48:8a:51:9f:cc:c5: f5:0e:42:62:2e:74:b4:39:0a:73:85:22:9a:ec:04:f7:3b:14: 1b:9b:55:a8:94:a8:e6:1d:75:50:fe:45:61:08:4c:86:37:0a: 31:ae:d5:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjQwNTE4MjEyNzAzWhcNMjQwNTI1MjEyNzAzWjAYMRYwFAYD VQQDEw02NjQ5MWQyNy01MTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPjxmMqdkjxCT0KMWvby45lgoo+G0sOBBFxbzQzYN6Q9YJsuNtFV59IqxasS orqdW2Maz+FEJgZPtiSsknOa9/vf7FN4m0rv3aya5qrUnmq0rEhMNqEES7Qj/wxJ 11a8FCZ3mG9irXi2pK5P0tuvEbLrvHG0t4m4LA1pfHbpnS8o5XxggcDCLDtKOdMs EQd6kn9WIWQ8buuvJUmUbbQdi2uDx72oEdxGrWZV8oLk67MxD+8N8xZX6eBoz0SJ bbc2jCVCEajqmqf5VkApJFrZBzyfVHmd8XV5ve4a2Id721zItFZp1e9C4GA5w/MJ l690S/w/UEBQ+f4vSlxN6o6iIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOw7YxqA j/o7HyEAA6X8lFBR9ZX0MB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLoKgUO6NYpwAHMv2cf0A/mPfQj7Wo5P1jViWqSrp3MmmFae+mLCJb JOTZz6JpIct/BUHqpnJxYmACk6eD46EJq/DTgwIqwLwAHjN3SX5GESz2kLVTVq60 p5ZJFhofphQOr8ruZx8Omy9Vo1HFN7/vcCwnO0BBbad+WBiF8B7P1dWGDUvgdeCr liC670Z4HYMIyqFHfZ+yZYBF7VLiuOyODhi/DrgjXxVkdWMlvkkaKrZZhXWSNe0y w2Von4olflINjKNc/GQr4TaAimKd/xpXNb1IilGfzMX1DkJiLnS0OQpzhSKa7AT3 OxQbm1WolKjmHXVQ/kVhCEyGNwoxrtUJ -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org