$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft File: voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json) Hash identifier: Bnisth0Zl9i+APUrc3x9BG2CvXgV2pwyZ9igAKDO4dw= Subject key identifier: E9:25:84:5E:9A:99:B9:43:DA:7F:03:F3:C4:8E:0B:A1:C5:37:79:C7 Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F Certificate issuer: /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Certificate serial: 06E0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft Manifest number: 06DF Signing time: Sun 02 Jun 2024 15:36:07 +0000 Manifest this update: Sun 02 Jun 2024 15:36:06 +0000 Manifest next update: Sun 09 Jun 2024 15:36:06 +0000 Files and hashes: 1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: jHRS3Q4t7nADmYuiiWH/JjSeR1UgZ4GofPk+I2yrsQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1760 (0x6e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Validity Not Before: Jun 2 15:36:06 2024 GMT Not After : Jun 9 15:36:06 2024 GMT Subject: CN=665c9166-75fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:71:be:f1:fa:15:ea:8b:71:92:ac:1b:6c:3d: 32:37:fd:f5:49:e2:e2:e3:65:14:96:47:d2:b3:51: 79:bb:77:4a:15:10:53:94:33:b0:c8:6e:a5:06:66: 30:2e:a9:47:ee:cf:ac:ae:21:72:58:5d:de:45:60: d8:9c:cb:e5:76:d3:19:fc:5d:65:68:12:6e:e0:61: 0e:2a:61:83:2b:7f:0a:38:20:ed:57:dd:c4:6e:0e: 3e:01:d5:6a:00:8d:e9:12:03:3c:bf:05:3a:89:9d: 00:31:eb:3c:8c:2a:16:42:67:96:f8:09:74:71:45: 08:7a:02:7d:4d:83:35:3f:5a:34:7a:f4:6a:c1:1f: 44:80:ae:9c:07:b8:6c:1d:09:c4:bb:30:06:77:ec: b5:2b:3d:93:98:2f:59:91:4b:80:24:69:75:59:68: 34:39:82:cc:a3:80:22:d7:de:f5:55:23:ac:01:eb: 46:08:4b:a5:6b:1d:0c:9d:50:8f:94:a2:17:ba:85: 48:e6:49:bb:fb:67:f0:22:fa:20:40:09:41:82:57: b9:0d:e4:05:70:f8:1d:f2:ba:c1:12:c3:a8:5e:a3: 90:3c:bb:2d:67:eb:7e:e6:07:46:57:ed:6f:29:28: 44:a1:c4:fc:d6:7d:b5:1a:ae:ae:c4:39:b8:09:34: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:25:84:5E:9A:99:B9:43:DA:7F:03:F3:C4:8E:0B:A1:C5:37:79:C7 X509v3 Authority Key Identifier: keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1c:30:d3:e8:12:fa:78:27:a8:c7:f2:da:4f:7a:38:a0:d2: 2c:7f:f6:5d:ad:7d:90:81:1b:db:05:8a:b4:af:d8:8e:69:12: f1:7d:a5:c0:60:37:aa:fa:5e:16:18:81:31:37:fb:be:b4:83: 58:e6:18:fb:a2:ef:88:9f:af:85:c3:a9:7c:ae:ea:79:89:30: 71:b8:d3:f6:a4:2a:c5:b7:11:23:30:e7:33:7e:00:d6:cf:76: 2d:41:64:b4:2b:39:d4:24:8a:13:2f:ff:0b:40:32:6e:de:ed: d6:6f:b0:55:a0:b3:ec:60:28:39:f8:fe:9b:95:3c:87:ff:73: 39:14:32:34:13:04:20:5e:97:b3:8e:93:75:05:23:d6:82:d6: 98:43:7b:f9:07:c5:89:ec:03:3f:d4:98:ea:5d:fe:5d:3a:72: 7b:0b:57:78:fb:c3:10:87:61:33:9d:33:5d:3f:96:72:ad:21: e0:bc:47:78:9b:8b:0a:3b:c2:f3:b5:43:30:79:cd:b8:50:d4: 57:b4:0a:ba:3a:53:be:d2:79:ad:6a:a0:6c:fc:8c:f5:30:eb: 4d:2c:fd:a1:7c:5d:2b:15:08:34:7a:3f:55:97:14:ed:b1:59: 4f:45:4a:32:e2:a1:a6:43:d7:cf:b0:1c:1b:0f:25:17:f0:49: 27:b3:e2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEJFODMxMzQ1OTEwQUM4MkMxOEE4ODMxQzJEODUwQUU1 QjM4RTUwMEYwHhcNMjQwNjAyMTUzNjA2WhcNMjQwNjA5MTUzNjA2WjAYMRYwFAYD VQQDEw02NjVjOTE2Ni03NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nG+8foV6otxkqwbbD0yN/31SeLi42UUlkfSs1F5u3dKFRBTlDOwyG6lBmYw LqlH7s+sriFyWF3eRWDYnMvldtMZ/F1laBJu4GEOKmGDK38KOCDtV93Ebg4+AdVq AI3pEgM8vwU6iZ0AMes8jCoWQmeW+Al0cUUIegJ9TYM1P1o0evRqwR9EgK6cB7hs HQnEuzAGd+y1Kz2TmC9ZkUuAJGl1WWg0OYLMo4Ai1971VSOsAetGCEulax0MnVCP lKIXuoVI5km7+2fwIvogQAlBgle5DeQFcPgd8rrBEsOoXqOQPLstZ+t+5gdGV+1v KShEocT81n21Gq6uxDm4CTQjawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOklhF6a mblD2n8D88SOC6HFN3nHMB8GA1UdIwQYMBaAFL6DE0WRCsgsGKiDHC2FCuWzjlAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9GODlDNEY2ODBE NjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lDd1lxSU1jTFlVSzViT09V QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3ZvTVRSWkVLeUN3WXFJTWNMWVVLNWJPT1VBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9GODlDNEY2ODBENjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lD d1lxSU1jTFlVSzViT09VQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtHDDT6BL6eCeox/LaT3o4oNIsf/ZdrX2QgRvbBYq0r9iOaRLxfaXA YDeq+l4WGIExN/u+tINY5hj7ou+In6+Fw6l8rup5iTBxuNP2pCrFtxEjMOczfgDW z3YtQWS0KznUJIoTL/8LQDJu3u3Wb7BVoLPsYCg5+P6blTyH/3M5FDI0EwQgXpez jpN1BSPWgtaYQ3v5B8WJ7AM/1JjqXf5dOnJ7C1d4+8MQh2EznTNdP5ZyrSHgvEd4 m4sKO8LztUMwec24UNRXtAq6OlO+0nmtaqBs/Iz1MOtNLP2hfF0rFQg0ej9VlxTt sVlPRUoy4qGmQ9fPsBwbDyUX8Ekns+I8 -----END CERTIFICATE-----Generated at Sun Jun 2 18:47:15 2024 by rpki-client on console-ams.rpki-client.org