$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: jwZggFLN7tvqiA8pa7R6tvF8GDlV6iUQ5KuDxXS7qFs= Subject key identifier: F4:8A:39:82:6C:A9:BD:13:C0:F6:8E:7D:FA:15:93:EA:CA:B8:DA:A9 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1C5A Signing time: Sat 18 May 2024 16:34:07 +0000 Manifest this update: Sat 18 May 2024 16:34:06 +0000 Manifest next update: Sat 25 May 2024 16:34:06 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: 5SFQANQQRTs+j2Hhu1LxyxK6GmDJ/1/jYTMiVMvqFCY=) 2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: B3AMhYtFPA/ESEYQ5MLKldCLC5pmb3wy+Ml4HNOLRF8=) 3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: FksC/G9VYXmf9ycFmdDGc3yLyp750yl7sm9XPl5RbMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7269 (0x1c65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: May 18 16:34:06 2024 GMT Not After : May 25 16:34:06 2024 GMT Subject: CN=6648d87e-1dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:4e:bf:ec:0f:a2:88:90:3e:ee:99:54:f2: d4:e5:72:4d:44:ab:63:3f:69:0c:98:8e:84:89:07: 10:cb:28:97:df:ea:69:20:86:7e:a7:b2:96:86:05: 6f:d7:bf:a6:be:20:7b:e2:f9:52:a5:3e:a0:6a:db: 80:3c:fb:21:ef:68:79:f4:d8:e3:58:2d:fc:74:3a: b3:99:cb:52:ec:8f:34:45:c2:4a:1d:42:a1:bc:f3: 78:b2:b3:ea:06:9a:29:0c:7a:d6:00:1d:6e:5d:86: d4:83:30:11:aa:d1:51:66:93:56:f2:ab:45:0d:81: 17:c0:e7:58:70:35:81:af:8b:af:f6:f9:0f:4d:f4: ee:a5:78:4f:de:0e:8f:cb:69:b5:5c:2c:d8:f5:2c: 41:55:ba:ec:24:74:b3:a4:b2:04:6a:1b:43:47:ca: 7e:38:79:f2:6f:8b:87:06:87:9d:26:36:56:45:57: 99:22:20:a1:a3:ab:f0:ec:6d:36:83:ba:4e:b0:1d: c6:5f:72:36:55:ac:99:3f:a3:29:79:a8:98:8e:3e: 21:84:23:9b:98:22:98:43:3f:8c:a9:7c:66:28:b5: 93:ba:c3:21:d3:db:50:f0:3f:99:c8:f5:d5:e9:ca: 90:2b:1c:c2:f7:f4:e5:6e:82:29:9b:ec:53:b6:b6: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:39:82:6C:A9:BD:13:C0:F6:8E:7D:FA:15:93:EA:CA:B8:DA:A9 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:05:6e:2e:98:56:71:c2:d4:c3:06:9d:7b:a7:51:1a:bb:68: 88:29:bc:e8:f6:b6:99:48:24:0b:f5:8d:83:a8:3f:89:f7:45: 47:37:15:81:9f:1d:1c:fd:36:47:8e:05:80:08:91:34:02:b8: d5:60:eb:7c:05:56:d5:c3:af:34:bb:cd:f6:c7:39:8f:82:fb: 54:2c:f2:35:f5:bd:63:21:7b:83:1f:26:63:39:26:42:3a:41: 6c:29:7a:4e:df:40:f0:3a:00:07:ca:30:64:80:d5:7c:1d:7e: 13:62:7f:7c:21:eb:56:a1:c1:75:3d:ab:92:6c:2b:a5:5a:c2: 64:ac:29:d4:c8:08:27:74:ce:84:d6:25:7d:64:cf:ab:f4:40: 97:cf:4f:86:b9:74:4e:50:20:20:b3:cb:cf:3a:63:c1:9b:f0: 4c:a1:e9:b7:11:5a:98:b8:3f:34:7a:63:70:e7:ea:12:53:40: 92:b9:78:6b:fb:fa:0f:a1:e9:87:57:cd:a8:c4:38:16:bc:96: 76:58:dd:65:51:40:f8:56:60:d9:df:63:41:c7:2e:2a:73:97: 91:e1:7b:1b:5d:b7:e2:d8:4e:6a:9f:b1:81:ea:d0:d3:47:ea: ca:20:cb:26:d3:b5:16:db:6c:f1:dd:13:0f:49:f7:aa:c6:86: f1:a9:4c:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjQwNTE4MTYzNDA2WhcNMjQwNTI1MTYzNDA2WjAYMRYwFAYD VQQDEw02NjQ4ZDg3ZS0xZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTNOv+wPooiQPu6ZVPLU5XJNRKtjP2kMmI6EiQcQyyiX3+ppIIZ+p7KWhgVv 17+mviB74vlSpT6gatuAPPsh72h59NjjWC38dDqzmctS7I80RcJKHUKhvPN4srPq BpopDHrWAB1uXYbUgzARqtFRZpNW8qtFDYEXwOdYcDWBr4uv9vkPTfTupXhP3g6P y2m1XCzY9SxBVbrsJHSzpLIEahtDR8p+OHnyb4uHBoedJjZWRVeZIiCho6vw7G02 g7pOsB3GX3I2VayZP6MpeaiYjj4hhCObmCKYQz+MqXxmKLWTusMh09tQ8D+ZyPXV 6cqQKxzC9/TlboIpm+xTtrYpuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSKOYJs qb0TwPaOffoVk+rKuNqpMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCABW4umFZxwtTDBp17p1Eau2iIKbzo9raZSCQL9Y2DqD+J90VHNxWB nx0c/TZHjgWACJE0ArjVYOt8BVbVw680u832xzmPgvtULPI19b1jIXuDHyZjOSZC OkFsKXpO30DwOgAHyjBkgNV8HX4TYn98IetWocF1PauSbCulWsJkrCnUyAgndM6E 1iV9ZM+r9ECXz0+GuXROUCAgs8vPOmPBm/BMoem3EVqYuD80emNw5+oSU0CSuXhr +/oPoemHV82oxDgWvJZ2WN1lUUD4VmDZ32NBxy4qc5eR4XsbXbfi2E5qn7GB6tDT R+rKIMsm07UW22zx3RMPSfeqxobxqUzu -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org