$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: JtZwA9FbaswPG8Tf+sg9kMKqR7tX4PTQOatwBlNPyaw= Subject key identifier: 56:E0:EA:6C:BE:05:E2:8B:5A:EE:B1:80:0D:15:D3:EC:0E:B5:E1:33 Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 0FCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 178D Signing time: Sat 18 May 2024 18:04:00 +0000 Manifest this update: Sat 18 May 2024 18:04:00 +0000 Manifest next update: Sat 25 May 2024 18:04:00 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: zbRLblU5qQuZ9mZCmg8KmWbZvPJnEc6yvO7raH/XltY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4046 (0xfce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: May 18 18:04:00 2024 GMT Not After : May 25 18:04:00 2024 GMT Subject: CN=6648ed90-8004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:c8:fd:cc:8a:b8:f4:a9:2f:f7:84:61:40: 60:1b:08:ed:f8:0d:a4:64:e0:75:9e:ea:d2:30:5b: fb:d8:f6:b6:39:7b:f8:9f:e0:1d:34:9c:e2:1c:4d: 5b:58:43:85:5c:f0:9d:cd:f7:8f:1f:63:8e:f5:a0: ed:44:cc:40:33:ce:f8:c5:0c:f0:f1:73:fe:07:0d: 8c:2c:07:00:20:32:6f:16:15:c2:07:62:2f:fe:91: 6b:99:36:0f:94:10:3d:38:d9:6b:e5:d5:0f:6d:59: 9f:9c:d8:01:c2:75:0f:e7:e2:85:4e:04:65:d1:72: e9:54:55:ef:bc:0a:09:7e:82:e1:67:a4:07:f0:8f: ee:79:77:4e:bf:a0:27:76:0e:0e:a1:e2:6f:73:dd: 5e:96:60:bf:e5:1c:c8:2b:c5:7e:40:6a:60:d2:23: b0:37:b4:c9:86:03:e4:3a:11:2b:fa:14:11:5d:ca: a3:1d:10:74:58:eb:55:1c:71:3a:b3:44:7c:86:91: 79:b3:91:b2:0b:9b:46:20:c4:3f:e9:1e:b9:de:c3: d0:fa:83:f8:b1:8d:7e:e9:8f:e3:e6:2d:ef:d2:64: 82:f5:88:fe:e2:83:40:03:83:65:fd:7b:ee:44:7f: a9:fc:75:5e:ce:58:c4:e1:04:a7:cc:b7:80:86:86: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E0:EA:6C:BE:05:E2:8B:5A:EE:B1:80:0D:15:D3:EC:0E:B5:E1:33 X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:a1:91:47:90:ad:e2:0d:74:cf:ec:34:f1:91:61:7d:20:ea: fd:c0:cb:84:13:5f:ff:6e:f8:3b:6e:36:fc:93:69:ec:21:7d: 2d:dc:a9:77:7c:1d:e9:b5:5d:90:a2:f1:15:68:d6:57:bd:05: 0b:12:8c:8a:bc:2b:77:95:7a:c3:bf:5a:cf:14:4a:89:e2:e0: 46:b0:f0:4e:ff:02:7c:65:53:25:54:a0:27:2e:a6:25:13:b2: 6f:f0:8f:cb:46:96:ca:66:bc:59:fc:4a:18:b6:48:be:4b:9f: 74:68:1f:28:cb:0a:e6:c2:a8:61:89:72:bf:cd:53:a3:1d:17: ea:c3:46:00:c7:1f:d4:e2:a3:9b:20:1e:bc:44:d9:e2:98:8a: 2c:e7:93:bb:09:ae:a5:84:06:6d:d4:fa:9f:8f:c0:e3:cb:de: 33:0f:74:bb:96:e1:66:0d:4f:2a:02:03:60:67:05:51:98:e6: f8:fc:eb:42:6a:4b:76:94:72:c6:db:ca:ae:da:99:0d:b2:bd: 00:bf:d6:d2:e0:c5:5a:5e:67:50:5d:c7:4a:78:0b:24:90:2b: 02:ef:e3:3f:dc:e2:17:86:84:98:a0:c7:4b:98:4c:71:86:7c: 3f:8f:5b:e5:d7:58:f3:28:d2:e0:95:22:06:7c:cd:cb:0d:a8: ff:93:8a:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjQwNTE4MTgwNDAwWhcNMjQwNTI1MTgwNDAwWjAYMRYwFAYD VQQDEw02NjQ4ZWQ5MC04MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRjI/cyKuPSpL/eEYUBgGwjt+A2kZOB1nurSMFv72Pa2OXv4n+AdNJziHE1b WEOFXPCdzfePH2OO9aDtRMxAM874xQzw8XP+Bw2MLAcAIDJvFhXCB2Iv/pFrmTYP lBA9ONlr5dUPbVmfnNgBwnUP5+KFTgRl0XLpVFXvvAoJfoLhZ6QH8I/ueXdOv6An dg4OoeJvc91elmC/5RzIK8V+QGpg0iOwN7TJhgPkOhEr+hQRXcqjHRB0WOtVHHE6 s0R8hpF5s5GyC5tGIMQ/6R653sPQ+oP4sY1+6Y/j5i3v0mSC9Yj+4oNAA4Nl/Xvu RH+p/HVezljE4QSnzLeAhobftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbg6my+ BeKLWu6xgA0V0+wOteEzMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/oZFHkK3iDXTP7DTxkWF9IOr9wMuEE1//bvg7bjb8k2nsIX0t3Kl3 fB3ptV2QovEVaNZXvQULEoyKvCt3lXrDv1rPFEqJ4uBGsPBO/wJ8ZVMlVKAnLqYl E7Jv8I/LRpbKZrxZ/EoYtki+S590aB8oywrmwqhhiXK/zVOjHRfqw0YAxx/U4qOb IB68RNnimIos55O7Ca6lhAZt1Pqfj8Djy94zD3S7luFmDU8qAgNgZwVRmOb4/OtC akt2lHLG28qu2pkNsr0Av9bS4MVaXmdQXcdKeAskkCsC7+M/3OIXhoSYoMdLmExx hnw/j1vl11jzKNLglSIGfM3LDaj/k4rz -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org