$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: dFhgm0dGvQ805nqp+qjdwOBA+/rBzCm+8wyS+e9Ikp0= Subject key identifier: C7:79:B9:A8:E7:32:06:A2:B1:76:9F:E0:8D:CC:14:DB:9C:90:19:89 Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 08CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 08C3 Signing time: Sat 18 May 2024 20:47:55 +0000 Manifest this update: Sat 18 May 2024 20:47:55 +0000 Manifest next update: Sat 25 May 2024 20:47:55 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: Mj8hWffBG4xPutg45GwEyDoX2H0kAAbgU2jHyBmd2mc=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: 64lTU6HFby5BegD1+Uu1tjRR9NUUxrJlKQqqFASdN5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: May 18 20:47:55 2024 GMT Not After : May 25 20:47:55 2024 GMT Subject: CN=664913fb-97a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:c3:f4:b4:8f:fc:5b:1b:ab:5a:50:24:74: 3f:85:33:30:1b:20:2f:d5:91:8b:c0:9a:b8:31:7e: c5:d3:10:24:8a:06:0a:d6:19:2d:a3:97:23:e6:aa: 3c:b8:54:98:6e:ba:2c:d6:f1:48:e5:5d:32:a1:fe: 9d:fc:06:12:b8:49:79:d3:ff:f9:9e:f0:0d:fe:0c: 1e:3a:3d:5a:24:5b:b1:0d:4c:b5:34:bf:f1:97:12: 50:6c:ce:3f:b7:9f:c0:cd:39:b7:76:d0:89:89:9d: 19:a8:87:62:21:f4:31:23:48:bd:c0:50:5f:04:90: 21:7d:0b:16:e6:a3:fb:5f:7b:68:ee:3f:57:a0:29: a4:1f:7c:d1:41:50:78:a8:de:30:cd:16:b4:74:15: c5:33:a2:29:4a:1e:bc:87:cb:d9:9d:25:11:60:a9: 40:61:99:dc:b1:9d:ca:a2:63:d4:f5:63:68:d6:52: d9:d8:3b:26:3c:97:6a:fa:d3:6e:34:36:f7:4c:41: b5:27:be:1e:a1:ac:4a:cd:f3:0f:79:f1:18:e3:04: f3:6a:ec:6d:7c:a7:3b:84:ab:33:14:69:bb:b8:67: 69:57:48:d9:ae:a9:cf:30:fa:46:03:c3:ec:82:54: d7:d5:e6:bb:bc:02:2b:2c:99:e0:3e:62:5e:72:a3: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:79:B9:A8:E7:32:06:A2:B1:76:9F:E0:8D:CC:14:DB:9C:90:19:89 X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:33:d0:60:c5:ef:9a:b3:11:13:6e:34:a9:b7:1f:3f:f0:97: f5:45:4c:ff:47:38:d6:f9:0a:cf:97:f4:58:74:11:9f:ce:04: d1:de:21:b7:10:2c:7b:b7:bc:f5:3f:1d:b9:7f:5f:3f:ec:46: 27:a3:b1:89:04:ad:d6:1d:e2:69:00:5a:c6:b3:bf:d3:82:87: 9a:3b:c9:ef:d3:97:63:c2:99:63:76:61:be:12:df:9f:dc:98: d1:a4:4a:a1:70:13:de:49:64:42:2e:a2:69:f5:4e:d8:6a:15: 44:03:a3:b4:43:d9:97:62:31:b5:f2:ac:8a:93:34:b9:2d:b3: e9:78:b3:c8:83:1b:28:ac:03:75:50:75:50:15:ce:54:b5:9d: 1d:1b:ac:23:5e:78:21:5c:c8:b7:39:43:cd:f9:49:a9:d5:61: 05:be:66:64:db:b5:09:01:c7:5a:5a:2d:84:72:86:92:57:43: 78:2a:50:a3:21:99:d4:39:3e:30:c6:c4:1f:24:75:7f:a4:e7: 6c:9a:e8:56:0c:25:ec:40:f4:6f:4f:a5:3d:94:c2:aa:b8:5b: 3b:e2:88:45:d5:7b:32:32:17:6b:51:dd:6d:fe:80:54:db:1a: 25:81:c2:5a:35:c7:fa:36:fe:08:71:32:40:f3:0d:3c:7a:ba: e7:f6:2e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjQwNTE4MjA0NzU1WhcNMjQwNTI1MjA0NzU1WjAYMRYwFAYD VQQDEw02NjQ5MTNmYi05N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOXD9LSP/Fsbq1pQJHQ/hTMwGyAv1ZGLwJq4MX7F0xAkigYK1hkto5cj5qo8 uFSYbros1vFI5V0yof6d/AYSuEl50//5nvAN/gweOj1aJFuxDUy1NL/xlxJQbM4/ t5/AzTm3dtCJiZ0ZqIdiIfQxI0i9wFBfBJAhfQsW5qP7X3to7j9XoCmkH3zRQVB4 qN4wzRa0dBXFM6IpSh68h8vZnSURYKlAYZncsZ3KomPU9WNo1lLZ2DsmPJdq+tNu NDb3TEG1J74eoaxKzfMPefEY4wTzauxtfKc7hKszFGm7uGdpV0jZrqnPMPpGA8Ps glTX1ea7vAIrLJngPmJecqNa2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd5uajn MgaisXaf4I3MFNuckBmJMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsM9Bgxe+asxETbjSptx8/8Jf1RUz/RzjW+QrPl/RYdBGfzgTR3iG3 ECx7t7z1Px25f18/7EYno7GJBK3WHeJpAFrGs7/TgoeaO8nv05djwpljdmG+Et+f 3JjRpEqhcBPeSWRCLqJp9U7YahVEA6O0Q9mXYjG18qyKkzS5LbPpeLPIgxsorAN1 UHVQFc5UtZ0dG6wjXnghXMi3OUPN+Ump1WEFvmZk27UJAcdaWi2EcoaSV0N4KlCj IZnUOT4wxsQfJHV/pOdsmuhWDCXsQPRvT6U9lMKquFs74ohF1XsyMhdrUd1t/oBU 2xolgcJaNcf6Nv4IcTJA8w08errn9i4I -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org