$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json) Hash identifier: u3b8Ixqgh/uuXW7+jTdD8HpbOKcalW2sRzjFJjTmxks= Subject key identifier: 69:8D:AC:B4:A3:DD:AD:63:CF:F3:91:45:31:ED:CB:47:36:06:2A:93 Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft Manifest number: 3E3B Signing time: Sat 18 May 2024 14:56:26 +0000 Manifest this update: Sat 18 May 2024 14:56:25 +0000 Manifest next update: Sat 25 May 2024 14:56:25 +0000 Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: Ak52a0i5EzztKOORdxyZFyocHvSMRqpO58GGQaFUdaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9 Validity Not Before: May 18 14:56:25 2024 GMT Not After : May 25 14:56:25 2024 GMT Subject: CN=6648c19a-9253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:12:34:c7:21:d3:02:d1:e2:84:30:d3:05: f8:d0:b9:20:2f:6e:11:42:e7:39:8f:9e:e7:35:e3: c0:ce:6a:ca:7c:6e:5d:ea:e0:72:80:e9:96:97:f1: 61:44:a0:8b:dd:51:7d:82:b6:89:56:02:1e:73:a7: 2a:82:8e:56:38:80:ce:9e:ef:c7:3d:69:c4:b9:48: 7c:6c:88:e3:79:41:4a:f5:a1:db:00:32:6a:51:4d: d7:bf:3f:5c:cc:e5:8d:e8:27:c1:ba:47:20:27:0a: ad:4d:90:da:2e:97:ee:2e:b8:e8:d5:b6:33:25:61: 04:03:8c:5b:70:a4:5c:43:74:5e:cb:c9:01:8e:17: 26:7e:75:c3:8a:aa:8d:a9:1a:fa:68:bf:49:17:28: c7:f6:1a:7b:c6:e4:d8:ef:55:1c:13:50:d5:e1:4d: ce:62:74:7d:7b:42:c6:61:df:84:4c:ca:5a:a8:85: 6d:c2:1e:fe:0b:7d:99:cb:0e:19:79:9f:10:de:45: 23:65:71:63:e7:05:19:d5:c7:86:c2:26:e6:8f:b6: c9:11:0e:a8:51:01:38:c0:6f:d7:92:60:40:cf:83: e8:ff:35:7b:d6:64:7e:c1:ef:1a:de:35:11:76:43: 72:cb:ba:fd:c9:25:63:05:ac:ec:aa:fd:b8:10:ad: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8D:AC:B4:A3:DD:AD:63:CF:F3:91:45:31:ED:CB:47:36:06:2A:93 X509v3 Authority Key Identifier: keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:61:d0:eb:9c:88:28:34:e1:3c:9f:c2:c4:d3:31:2f:25:1b: 28:bc:c0:a0:c1:f0:a0:40:66:ad:de:22:d8:26:71:a4:6d:ac: 03:bb:51:b5:57:05:28:e3:54:f1:2b:a5:da:46:ec:3f:d3:2b: f9:6c:de:a1:f7:b6:9b:70:69:40:d7:0a:ad:fb:ee:34:d6:67: 66:a7:c8:e9:53:e8:bc:77:f0:90:c5:af:bf:cd:09:60:12:27: 6f:10:e7:cb:7a:96:e8:8e:11:5b:93:c2:cd:3a:e4:b9:fc:af: 96:75:57:29:4a:8e:9a:f6:22:1b:1d:73:60:86:e7:e0:a0:22: 65:f9:5f:06:0a:61:3c:fc:50:9c:44:3b:53:35:03:81:fe:a8: cb:2f:6b:c6:47:bd:7f:35:3e:3d:36:69:b1:55:5f:a0:3f:9c: 1f:3f:70:3f:26:95:ae:6f:0b:cd:37:21:3b:ae:5a:86:13:85: d9:76:56:e0:0e:9d:62:57:bc:5d:00:95:4d:5a:d8:ae:63:f2: 26:49:2e:bc:f5:6c:36:11:41:38:4a:78:9d:9b:cd:ab:4f:d3: af:04:6a:91:06:c3:da:a5:db:31:96:79:5e:60:6f:3b:11:e3: 87:b0:bb:1c:ec:49:d7:99:33:e8:69:07:ef:92:fb:59:8a:e2: 56:f4:75:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKEVEQzFGRTc4QkM4N0JGMjVCMkUzOEQ3RDcyQ0Q5Q0Ez MzAyMjZDRTkwHhcNMjQwNTE4MTQ1NjI1WhcNMjQwNTI1MTQ1NjI1WjAYMRYwFAYD VQQDEw02NjQ4YzE5YS05MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kASNMch0wLR4oQw0wX40LkgL24RQuc5j57nNePAzmrKfG5d6uBygOmWl/Fh RKCL3VF9graJVgIec6cqgo5WOIDOnu/HPWnEuUh8bIjjeUFK9aHbADJqUU3Xvz9c zOWN6CfBukcgJwqtTZDaLpfuLrjo1bYzJWEEA4xbcKRcQ3Rey8kBjhcmfnXDiqqN qRr6aL9JFyjH9hp7xuTY71UcE1DV4U3OYnR9e0LGYd+ETMpaqIVtwh7+C32Zyw4Z eZ8Q3kUjZXFj5wUZ1ceGwibmj7bJEQ6oUQE4wG/XkmBAz4Po/zV71mR+we8a3jUR dkNyy7r9ySVjBazsqv24EK3xkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmNrLSj 3a1jz/ORRTHty0c2BiqTMB8GA1UdIwQYMBaAFO3B/ni8h78lsuONfXLNnKMwImzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5V3k0NDE5Y3MyY296QWli T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjSC1lTHlIdnlXeTQ0MTljczJjb3pBaWJPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5 V3k0NDE5Y3MyY296QWliT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4YdDrnIgoNOE8n8LE0zEvJRsovMCgwfCgQGat3iLYJnGkbawDu1G1 VwUo41TxK6XaRuw/0yv5bN6h97abcGlA1wqt++401mdmp8jpU+i8d/CQxa+/zQlg EidvEOfLepbojhFbk8LNOuS5/K+WdVcpSo6a9iIbHXNghufgoCJl+V8GCmE8/FCc RDtTNQOB/qjLL2vGR71/NT49NmmxVV+gP5wfP3A/JpWubwvNNyE7rlqGE4XZdlbg Dp1iV7xdAJVNWtiuY/ImSS689Ww2EUE4Snidm82rT9OvBGqRBsPapdsxlnleYG87 EeOHsLsc7EnXmTPoaQfvkvtZiuJW9HUn -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org