$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: hblfY32Q4YLVQPz35s7/Nlo2Y7UwDbHZ26vZEl94azU= Subject key identifier: 70:95:A0:06:1C:CD:ED:99:C4:C6:22:34:F9:06:55:BD:7A:4F:00:9B Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 33D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 33CC Signing time: Sat 18 May 2024 14:50:23 +0000 Manifest this update: Sat 18 May 2024 14:50:23 +0000 Manifest next update: Sat 25 May 2024 14:50:23 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: RpxOX0X89YPCg9I2nhGVkILbWBXwJLM9T8XqMx5i0Bo=) 2: E1F7FE5C091C11EABCF80D55C4F9AE02.roa (hash: BcTRn5EfUdghEYe/YZiNeeDPqkT/Bf8AcojVAkwa34A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13267 (0x33d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: May 18 14:50:23 2024 GMT Not After : May 25 14:50:23 2024 GMT Subject: CN=6648c02f-b8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:e8:ee:f0:6a:91:7d:eb:96:73:56:a5:f5: 37:27:30:57:07:ed:fd:a0:82:73:8c:73:cf:ec:6e: 70:52:41:89:98:a4:6b:20:6a:de:69:40:dc:ee:2f: b4:a7:80:b0:e7:82:6f:c2:a7:00:88:bc:52:8a:c6: 44:3f:a4:e4:8f:99:29:89:3b:6e:96:02:df:79:d1: 11:d4:0a:1b:02:6b:06:10:b4:58:89:82:b3:d0:a0: d3:cf:74:53:0f:05:86:7f:26:9c:4f:2f:ec:1a:26: d1:5b:f9:e9:af:a0:d7:1e:48:a0:85:5c:4d:5a:7b: 12:3e:9b:5a:52:31:97:24:36:c6:13:69:93:23:5a: 51:f9:0c:9c:75:97:81:52:ef:41:e3:74:c7:e7:6a: 85:d0:77:e9:8b:5c:ec:af:c5:10:04:59:9d:44:bd: 76:9e:af:92:76:9e:a9:53:35:92:6b:b4:cc:2d:de: c4:9e:c9:75:65:3f:ce:b2:1d:d4:93:5d:e3:28:4e: a6:e7:19:51:2e:4e:a5:b5:46:c3:da:b7:92:4f:d1: 12:aa:54:c9:ea:1c:61:e2:33:62:c7:72:f1:ff:09: a5:d3:99:88:84:43:99:b8:02:8e:ff:50:30:6e:e8: 5d:4c:6a:f6:ca:e8:ee:41:cb:ef:df:41:f7:03:05: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:A0:06:1C:CD:ED:99:C4:C6:22:34:F9:06:55:BD:7A:4F:00:9B X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:af:75:b1:e2:6c:11:7b:0e:7a:b0:86:e4:48:50:a9:9b:5d: 47:7e:d2:90:7d:86:64:bd:86:d9:ce:0c:41:c2:af:46:32:1c: 90:bc:7a:ae:ab:35:7a:89:bf:4c:ce:0f:66:ee:06:b3:85:33: 2f:45:18:95:aa:1b:a0:67:70:9b:c2:30:49:07:96:69:8e:37: 9f:dc:c6:69:69:20:9f:ce:dc:c2:70:cf:9c:83:19:07:39:b2: 0e:d2:21:ad:a5:d1:b9:30:02:5c:04:ea:3b:df:45:02:73:e9: dd:56:42:10:8a:08:e7:9e:30:db:95:f2:71:4f:91:98:b6:11: a5:c4:27:80:f4:3c:3a:40:4c:b5:15:44:97:71:a2:f3:50:0a: 92:f2:47:63:95:7a:c2:2e:8c:98:14:ab:70:4c:7a:fb:52:fd: 55:b0:54:13:6a:5b:ac:02:fd:5c:ff:d3:87:d1:2b:9a:2b:96: 71:2c:61:96:f1:a1:23:1b:ba:7f:d2:cf:63:4d:d1:77:5e:d2: 89:26:66:4e:2c:48:9d:fb:ce:a0:8a:9d:98:b0:c6:aa:b6:8e: e2:b0:fd:0b:f0:85:63:4b:d9:eb:df:b0:a1:84:1f:2d:0c:1e: 43:6c:a5:03:9d:ae:6e:99:b7:7b:38:a5:aa:39:e7:f3:5a:5f: bd:6f:79:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjQwNTE4MTQ1MDIzWhcNMjQwNTI1MTQ1MDIzWjAYMRYwFAYD VQQDEw02NjQ4YzAyZi1iOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSno7vBqkX3rlnNWpfU3JzBXB+39oIJzjHPP7G5wUkGJmKRrIGreaUDc7i+0 p4Cw54JvwqcAiLxSisZEP6Tkj5kpiTtulgLfedER1AobAmsGELRYiYKz0KDTz3RT DwWGfyacTy/sGibRW/npr6DXHkighVxNWnsSPptaUjGXJDbGE2mTI1pR+QycdZeB Uu9B43TH52qF0Hfpi1zsr8UQBFmdRL12nq+Sdp6pUzWSa7TMLd7Ensl1ZT/Osh3U k13jKE6m5xlRLk6ltUbD2reST9ESqlTJ6hxh4jNix3Lx/wml05mIhEOZuAKO/1Aw buhdTGr2yujuQcvv30H3AwWqBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCVoAYc ze2ZxMYiNPkGVb16TwCbMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAur3Wx4mwRew56sIbkSFCpm11HftKQfYZkvYbZzgxBwq9GMhyQvHqu qzV6ib9Mzg9m7gazhTMvRRiVqhugZ3CbwjBJB5Zpjjef3MZpaSCfztzCcM+cgxkH ObIO0iGtpdG5MAJcBOo730UCc+ndVkIQigjnnjDblfJxT5GYthGlxCeA9Dw6QEy1 FUSXcaLzUAqS8kdjlXrCLoyYFKtwTHr7Uv1VsFQTalusAv1c/9OH0SuaK5ZxLGGW 8aEjG7p/0s9jTdF3XtKJJmZOLEid+86gip2YsMaqto7isP0L8IVjS9nr37ChhB8t DB5DbKUDna5umbd7OKWqOefzWl+9b3k8 -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org