$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: 8prN0AVB1se7DOxJ/+JyeGhMwINO0sBneIjoucFZvNs= Subject key identifier: F3:CD:DB:0E:2A:87:B1:0A:C1:D4:0F:EF:54:2C:CB:08:5D:D0:62:D4 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0EB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0EAB Signing time: Sat 18 May 2024 18:19:34 +0000 Manifest this update: Sat 18 May 2024 18:19:33 +0000 Manifest next update: Sat 25 May 2024 18:19:33 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: 4m81TT7VRWoronLRVhUrIE1DtCqT6iB+P/UMhCcCSGQ=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 1zH3grg0ceGpDk/dZf7X9+Paneb19S8sTUxBY3dwpvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3761 (0xeb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: May 18 18:19:33 2024 GMT Not After : May 25 18:19:33 2024 GMT Subject: CN=6648f136-4b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:ac:8a:6b:5d:d3:ad:22:77:89:e8:39:cd: 3e:0a:68:a9:a6:c1:70:83:fa:bf:22:0e:41:57:dd: d8:56:a7:0b:f3:cd:d8:6d:ac:45:f1:0e:c7:49:9a: 1a:2c:57:f3:88:15:5e:91:4e:40:1e:5f:f5:d3:66: da:dd:cd:ec:1a:38:e2:a6:a4:f3:3b:f0:00:3e:9c: 61:90:67:1c:f2:f2:e9:ea:0c:91:9f:bb:33:be:16: 7e:cc:fc:60:a6:94:32:ea:fc:3c:73:bb:c5:aa:fa: dd:ef:7e:dd:eb:bf:9f:55:d5:2f:ef:e7:4f:51:44: 4b:a7:11:54:40:46:27:07:b2:ab:4c:d5:a9:3a:9e: 0d:bb:cb:4d:46:11:28:88:30:b7:0d:93:ac:19:32: 8e:9d:7a:3e:3a:1a:92:e2:d4:a1:fe:7e:8f:54:5d: 16:2e:2f:90:49:05:2f:00:2e:1f:7a:9a:b4:aa:a5: f1:6b:be:8e:84:25:21:59:cd:ff:54:e1:60:3b:b3: e1:98:72:02:37:25:bf:4b:22:c4:0a:2c:08:06:fe: 5f:60:0d:f5:b7:70:33:4c:d5:56:3f:28:05:44:70: 6a:95:86:ed:8f:34:38:e1:3e:84:f2:25:9d:3d:e0: 09:a8:5a:d2:1e:f5:61:21:58:bc:56:bf:87:4c:17: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:DB:0E:2A:87:B1:0A:C1:D4:0F:EF:54:2C:CB:08:5D:D0:62:D4 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d0:a3:8b:d4:53:38:bd:0f:86:1c:af:50:b7:90:75:4d:a3: 5b:0f:be:04:dd:c9:ac:ab:f6:91:22:6b:56:01:c2:74:21:7d: c5:0a:d7:fa:5d:1a:1e:de:7a:d8:f5:e7:34:23:3f:34:3f:d5: a3:b9:d9:32:e5:25:4f:07:c0:89:d1:d4:73:f9:3a:81:a5:42: 35:7c:12:f2:69:80:3d:d5:c6:eb:c5:47:d1:e6:1d:f6:1e:76: e8:d0:ce:de:a9:e5:0c:b8:93:bb:9f:f1:44:99:17:41:35:0c: fd:81:e8:b4:7a:1d:f2:5b:e2:05:8c:0c:eb:74:dd:f2:bb:24: 54:d2:bf:72:cc:50:8c:c4:04:5f:b1:80:95:25:90:f3:24:f6: 11:3a:3a:f0:60:4c:46:3c:8e:1e:fb:70:cc:da:9a:57:b8:41: 9c:64:fc:17:e6:44:fd:76:71:ee:b5:32:a0:b6:76:0a:76:72: 84:17:09:70:e8:47:90:7f:fe:78:12:f6:84:3c:1e:4c:5b:11: 71:df:9b:f0:86:92:34:0e:df:a4:bf:76:ba:7a:20:cc:b3:4b: 0b:1a:6c:ef:57:22:25:c9:45:2c:dc:1c:20:60:f6:b5:3a:d9: a5:60:f3:02:36:68:75:d2:45:65:c7:46:f9:a0:6f:c4:81:ef: e9:7c:ec:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjQwNTE4MTgxOTMzWhcNMjQwNTI1MTgxOTMzWjAYMRYwFAYD VQQDEw02NjQ4ZjEzNi00YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2ysimtd060id4noOc0+CmippsFwg/q/Ig5BV93YVqcL883YbaxF8Q7HSZoa LFfziBVekU5AHl/102ba3c3sGjjipqTzO/AAPpxhkGcc8vLp6gyRn7szvhZ+zPxg ppQy6vw8c7vFqvrd737d67+fVdUv7+dPUURLpxFUQEYnB7KrTNWpOp4Nu8tNRhEo iDC3DZOsGTKOnXo+OhqS4tSh/n6PVF0WLi+QSQUvAC4fepq0qqXxa76OhCUhWc3/ VOFgO7PhmHICNyW/SyLECiwIBv5fYA31t3AzTNVWPygFRHBqlYbtjzQ44T6E8iWd PeAJqFrSHvVhIVi8Vr+HTBfSuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPN2w4q h7EKwdQP71Qsywhd0GLUMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq0KOL1FM4vQ+GHK9Qt5B1TaNbD74E3cmsq/aRImtWAcJ0IX3FCtf6 XRoe3nrY9ec0Iz80P9Wjudky5SVPB8CJ0dRz+TqBpUI1fBLyaYA91cbrxUfR5h32 Hnbo0M7eqeUMuJO7n/FEmRdBNQz9gei0eh3yW+IFjAzrdN3yuyRU0r9yzFCMxARf sYCVJZDzJPYROjrwYExGPI4e+3DM2ppXuEGcZPwX5kT9dnHutTKgtnYKdnKEFwlw 6EeQf/54EvaEPB5MWxFx35vwhpI0Dt+kv3a6eiDMs0sLGmzvVyIlyUUs3BwgYPa1 OtmlYPMCNmh10kVlx0b5oG/Ege/pfOy2 -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org