$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json) Hash identifier: gpVAc+Khn0GEsyRR2iul5T2Xlqg4dxZailfmQ7HeQ7s= Subject key identifier: E2:6C:7B:0E:3A:E7:E7:AC:FE:BB:50:7C:6D:33:67:44:AE:DC:32:66 Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft Manifest number: 059C Signing time: Sat 01 Jun 2024 01:17:18 +0000 Manifest this update: Sat 01 Jun 2024 01:17:17 +0000 Manifest next update: Sat 08 Jun 2024 01:17:17 +0000 Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: nKvB4/Wk1esAPF6vBvLMMhC5gEg6KiUICO6nuk43e+I=) 2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: kbf3PCEGhvUXFavU5qFv+aaFLjEOZ7TZ8kHgmg3vUUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Jun 1 01:17:17 2024 GMT Not After : Jun 8 01:17:17 2024 GMT Subject: CN=665a769e-88d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:7e:30:bb:5b:88:e8:54:ff:12:78:70:ac: a3:d4:c8:cb:84:1c:38:1d:c3:5a:fc:fe:e8:23:d7: 83:55:cb:2e:60:5f:8f:2d:51:f9:cf:83:eb:3a:f3: d6:d0:41:76:44:fd:9e:e7:9b:1e:50:36:cf:cc:66: 3b:bb:98:7c:54:75:09:5c:77:a5:34:63:9b:02:42: f9:aa:99:69:a5:b6:47:56:21:ae:1d:0d:7f:30:37: 7e:b2:8a:e8:dd:f7:9f:7c:a9:de:6b:6a:f8:28:24: 19:b7:ad:2a:d3:e3:e3:97:d0:79:1f:a9:ce:bf:5f: 5f:fe:12:ce:f9:04:ca:1f:8b:af:82:22:f8:92:1e: ec:5c:c9:11:64:da:a9:0d:94:47:6e:ea:72:b9:05: 00:52:13:4f:a5:27:05:50:21:e9:e1:df:bb:ab:c4: 1b:34:c4:d0:28:64:85:4c:1b:e4:2f:4f:72:e8:de: a6:c4:b7:96:61:cc:20:6a:35:4f:3a:a8:c4:95:48: 3f:20:35:46:76:b7:54:7c:5b:ee:a3:04:a0:83:c8: 83:1d:7d:55:9c:e6:d9:e6:02:d0:03:f1:63:2f:f4: f8:53:e1:e4:6f:75:25:e8:88:43:51:e2:6d:84:1a: 44:d7:a0:7e:f5:82:10:b9:98:34:01:9c:6c:83:a0: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6C:7B:0E:3A:E7:E7:AC:FE:BB:50:7C:6D:33:67:44:AE:DC:32:66 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cf:d8:45:89:df:dd:04:02:f1:ed:c7:a5:5b:1a:d1:b8:16: de:a4:af:2d:bb:b5:c5:33:6f:16:23:62:15:b1:fe:97:ed:52: d4:e8:12:bb:5f:07:46:c4:50:1f:6f:15:fd:fb:a0:eb:67:44: 1d:af:5c:29:e2:a0:2d:27:54:a2:5b:da:1d:9b:a5:a5:5c:18: 43:fe:78:b5:ef:01:da:be:4e:94:b3:98:cf:37:9a:cc:98:62: c2:cc:fd:44:34:c9:3e:ea:11:78:df:7a:28:4c:d5:cf:0c:f4: 58:2d:c5:1f:41:0e:6f:78:6a:5b:ca:3e:03:af:5f:67:9b:35: 08:8d:6d:b8:73:95:1c:1c:f3:35:0f:60:26:ad:e1:60:bc:be: 45:86:f0:63:a4:32:1b:cd:09:b9:b3:9b:40:78:64:6f:c2:5a: a2:13:8e:1c:20:07:4d:0a:78:47:15:84:90:8f:78:d3:a9:a6: 7f:fa:83:eb:6f:79:39:cf:42:4a:41:d1:90:0d:6c:a6:06:39: 87:2c:42:cc:84:6b:19:26:dd:39:f7:cd:08:6a:62:45:83:10: 55:c5:95:ab:cd:9a:a4:1d:e8:48:01:e6:bb:e6:72:d6:46:93: 68:53:ff:d1:22:ed:2a:80:3f:0d:10:fe:82:ff:da:c0:8d:62: a3:77:ec:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjQwNjAxMDExNzE3WhcNMjQwNjA4MDExNzE3WjAYMRYwFAYD VQQDEw02NjVhNzY5ZS04OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pF+MLtbiOhU/xJ4cKyj1MjLhBw4HcNa/P7oI9eDVcsuYF+PLVH5z4PrOvPW 0EF2RP2e55seUDbPzGY7u5h8VHUJXHelNGObAkL5qplppbZHViGuHQ1/MDd+soro 3feffKnea2r4KCQZt60q0+Pjl9B5H6nOv19f/hLO+QTKH4uvgiL4kh7sXMkRZNqp DZRHbupyuQUAUhNPpScFUCHp4d+7q8QbNMTQKGSFTBvkL09y6N6mxLeWYcwgajVP OqjElUg/IDVGdrdUfFvuowSgg8iDHX1VnObZ5gLQA/FjL/T4U+Hkb3Ul6IhDUeJt hBpE16B+9YIQuZg0AZxsg6BJFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJsew46 5+es/rtQfG0zZ0Su3DJmMB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzM0RC8yN0U4NjFEODg1RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFF VG5UNnFsU1gwR2N3cmFYekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbz9hFid/dBALx7celWxrRuBbepK8tu7XFM28WI2IVsf6X7VLU6BK7 XwdGxFAfbxX9+6DrZ0Qdr1wp4qAtJ1SiW9odm6WlXBhD/ni17wHavk6Us5jPN5rM mGLCzP1ENMk+6hF433ooTNXPDPRYLcUfQQ5veGpbyj4Dr19nmzUIjW24c5UcHPM1 D2AmreFgvL5FhvBjpDIbzQm5s5tAeGRvwlqiE44cIAdNCnhHFYSQj3jTqaZ/+oPr b3k5z0JKQdGQDWymBjmHLELMhGsZJt05980IamJFgxBVxZWrzZqkHehIAea75nLW RpNoU//RIu0qgD8NEP6C/9rAjWKjd+yP -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:18 2024 by rpki-client on console-fra.rpki-client.org