$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: lPS0KKiREKL6QYia3rNv7jL8uceRzZa2tVPLD9mibOQ= Subject key identifier: 3D:1C:FD:EE:9B:E6:46:DD:27:62:64:0C:07:A8:DE:37:DE:79:A5:1E Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 110A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 10FD Signing time: Sat 18 May 2024 17:51:54 +0000 Manifest this update: Sat 18 May 2024 17:51:53 +0000 Manifest next update: Sat 25 May 2024 17:51:53 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: JBv9a4PGqaQ1hKhPFJRE89ZEtH3OodSApcuer8sowA8=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: yzhbO4fNgFXSarfTZtISXiyDIysa917WS3nmXTjeXuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4362 (0x110a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: May 18 17:51:53 2024 GMT Not After : May 25 17:51:53 2024 GMT Subject: CN=6648eab9-82e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:19:d0:c7:d0:fe:4c:db:6d:b6:f9:a9:71: 7f:5a:ca:a8:47:4b:21:46:8d:0c:a5:6e:4f:07:65: 09:b9:a5:91:e3:1b:ac:bb:40:b0:35:57:18:31:1a: 68:fe:45:97:67:80:bc:2a:11:7a:43:fe:27:c8:7a: c9:42:69:f8:bb:0a:d9:e2:56:6c:57:63:2a:ee:49: 39:62:ef:9f:30:7a:98:83:89:15:27:1f:31:00:ab: 18:21:fb:26:fb:07:1c:e0:69:f8:3d:c6:22:76:ed: d7:0b:d7:19:19:3f:33:c6:4b:49:69:c1:6b:be:ce: 07:b4:2d:58:45:5a:2a:f5:bd:31:2d:e1:a9:52:c2: 40:29:05:07:8d:1f:6b:7b:f7:2b:02:21:97:91:43: b6:a3:d7:34:06:40:cc:2e:4d:36:4f:dd:c1:a0:36: ec:45:8b:c5:06:4f:4f:4d:aa:06:d6:06:50:5a:ea: 60:ee:0e:9a:bf:08:84:cd:8c:98:13:77:e3:6b:db: 59:83:47:04:cf:e0:68:4a:e1:3d:20:64:ce:b8:15: cb:39:78:a2:45:fb:0a:1b:22:e3:5d:b7:3d:44:56: 1e:18:47:52:e5:24:02:98:8c:18:3c:50:22:1c:5b: 2a:1d:c5:cf:96:22:95:43:de:47:ab:14:5d:ea:7f: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1C:FD:EE:9B:E6:46:DD:27:62:64:0C:07:A8:DE:37:DE:79:A5:1E X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:8b:1c:de:ba:90:d6:97:c8:a8:b4:43:15:bd:65:c5:ae:a0: 7a:b4:f9:7a:ce:e0:88:30:30:40:11:0f:9a:13:d2:b4:44:19: c5:62:95:c1:88:47:92:d2:7e:fb:a4:1b:e7:c9:76:8c:3c:f6: 0d:05:b5:bf:6c:8d:69:e9:1c:4d:47:2e:81:41:81:a2:73:f6: 4d:ce:ad:06:f6:09:7d:62:cc:ec:05:03:1d:b5:d8:56:6b:73: db:14:8c:33:08:90:7b:10:c2:8d:24:0e:13:35:1e:d5:1a:53: 6d:2c:4f:ce:c8:96:6e:1c:bf:e8:46:26:cd:05:a8:20:51:89: c1:15:7d:f3:47:d9:1c:4c:58:1d:48:71:9a:8c:d9:cd:d8:a0: a1:b7:6f:68:1a:e9:23:46:e3:ac:8c:2d:13:f6:fa:de:1b:12: d5:2d:e0:b4:8c:29:14:b4:9c:9d:8c:af:8f:33:62:f6:00:b7: a5:4b:ca:90:11:8a:b1:a9:26:d0:e4:c3:58:74:21:12:7d:03: 8b:01:18:06:1e:c2:26:96:9f:30:ff:d6:b5:d7:d4:b7:eb:93: d8:80:7d:30:1e:92:69:8f:fc:a1:41:1c:c8:a2:69:4b:91:3e: d8:c4:74:aa:7a:ee:1c:76:e1:a7:66:48:2d:8d:0c:6f:7b:eb: 90:56:11:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjQwNTE4MTc1MTUzWhcNMjQwNTI1MTc1MTUzWjAYMRYwFAYD VQQDEw02NjQ4ZWFiOS04MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykQZ0MfQ/kzbbbb5qXF/WsqoR0shRo0MpW5PB2UJuaWR4xusu0CwNVcYMRpo /kWXZ4C8KhF6Q/4nyHrJQmn4uwrZ4lZsV2Mq7kk5Yu+fMHqYg4kVJx8xAKsYIfsm +wcc4Gn4PcYidu3XC9cZGT8zxktJacFrvs4HtC1YRVoq9b0xLeGpUsJAKQUHjR9r e/crAiGXkUO2o9c0BkDMLk02T93BoDbsRYvFBk9PTaoG1gZQWupg7g6avwiEzYyY E3fja9tZg0cEz+BoSuE9IGTOuBXLOXiiRfsKGyLjXbc9RFYeGEdS5SQCmIwYPFAi HFsqHcXPliKVQ95HqxRd6n8MZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0c/e6b 5kbdJ2JkDAeo3jfeeaUeMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmixzeupDWl8iotEMVvWXFrqB6tPl6zuCIMDBAEQ+aE9K0RBnFYpXB iEeS0n77pBvnyXaMPPYNBbW/bI1p6RxNRy6BQYGic/ZNzq0G9gl9YszsBQMdtdhW a3PbFIwzCJB7EMKNJA4TNR7VGlNtLE/OyJZuHL/oRibNBaggUYnBFX3zR9kcTFgd SHGajNnN2KCht29oGukjRuOsjC0T9vreGxLVLeC0jCkUtJydjK+PM2L2ALelS8qQ EYqxqSbQ5MNYdCESfQOLARgGHsImlp8w/9a119S365PYgH0wHpJpj/yhQRzIomlL kT7YxHSqeu4cduGnZkgtjQxve+uQVhHE -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org