$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: 82pDl2CwkNJDxW3sSeuGARC7iKfRNzhqIq1dXUYOZxQ= Subject key identifier: 3B:57:C9:09:9A:70:9C:75:B0:CF:0F:34:FA:99:9B:CF:7D:02:3E:F3 Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 51 Signing time: Sun 19 May 2024 07:57:26 +0000 Manifest this update: Sun 19 May 2024 07:57:26 +0000 Manifest next update: Sun 26 May 2024 07:57:26 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: 4HlJCf5/uOWhmzz50EaRuoIOgaaaOZ9zhJiCMjn62RA=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: WWv1zP+/ieoUNA4o8+/TPeIk+mIn2LFhm0aViRzuk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: May 19 07:57:26 2024 GMT Not After : May 26 07:57:26 2024 GMT Subject: CN=6649b0e6-cd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:15:bb:f5:6a:f8:40:83:ac:eb:88:6c:ef: ab:88:8b:b7:5d:71:a1:24:57:0d:3b:f5:d5:2f:c9: 27:cf:ac:71:15:3f:e0:df:38:f3:93:f6:e5:96:1a: f7:2a:d8:64:66:c7:6a:50:0f:d7:a0:77:28:91:a0: 43:1e:67:68:99:6a:8d:05:44:f3:68:94:42:d8:bf: 36:2c:8d:a7:a0:ae:15:94:b3:22:12:96:fc:08:d9: d2:6a:45:00:4f:fa:d7:f4:5a:b2:7f:96:56:0f:0b: 63:9d:8b:81:07:32:5b:e9:3b:f9:0c:4c:35:6c:88: 33:92:2b:29:34:51:2b:31:a7:6f:f1:3d:a1:84:1a: e2:86:7c:4c:f7:ff:d4:e5:8a:3f:4e:60:d1:8c:71: a6:92:cc:e5:1d:fa:89:f5:f2:30:bb:d4:28:25:03: 5d:2f:46:52:f2:32:45:78:ff:39:b0:62:5f:1f:6e: f7:39:5b:f7:de:7f:57:c4:ad:c1:34:c0:42:52:c5: 49:33:b7:1d:9b:01:31:9c:ee:00:59:54:60:d7:31: db:01:20:89:b8:67:10:15:1c:16:70:c4:19:49:d5: f6:cb:cb:fe:13:21:8f:70:0f:1b:03:05:d1:e5:24: af:9f:6e:a7:dc:e3:d7:6d:8d:e5:83:39:fa:0e:27: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:57:C9:09:9A:70:9C:75:B0:CF:0F:34:FA:99:9B:CF:7D:02:3E:F3 X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f3:67:d1:21:6a:78:34:4d:be:0f:1f:d9:ec:f8:3e:54:36: d2:11:73:aa:8b:22:13:05:87:13:cd:a4:63:2d:96:4b:28:37: 6a:7c:f6:d2:5a:da:9c:3b:82:5e:b2:a3:37:9c:d4:19:e6:3a: 53:cd:52:4c:d4:e2:00:c8:a8:8f:14:47:7e:4c:10:a5:00:4f: 99:9c:b6:28:0b:16:ef:3f:5c:fd:8f:ca:ca:33:24:63:a0:63: 00:d9:4c:b9:d1:64:56:9f:24:51:92:62:a3:ad:7c:41:76:8f: e1:15:8d:84:f3:79:c8:a1:94:09:14:62:f4:f5:71:bd:72:03: ce:e8:dc:51:15:76:62:94:c8:08:7d:8e:44:e1:b7:7a:83:75: b2:fc:86:ef:a7:7e:54:fb:21:80:6f:dd:74:b6:87:14:1e:a9: 02:df:2f:98:d5:a2:62:ab:4f:02:2e:29:7b:08:b0:ab:6e:aa: 48:7e:e4:a5:96:57:4e:dd:a8:85:a8:4d:da:7b:00:e8:31:a7: 40:42:aa:06:31:51:a4:d9:e4:e0:54:eb:b7:09:a6:a7:4a:93: d6:19:23:01:ac:3a:27:62:bf:61:99:a3:74:a8:8b:8b:62:0e: b7:2f:9e:43:0c:95:30:1a:05:5c:b4:e5:77:a5:78:bd:d6:24: 4d:db:f6:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDM3MjExMC8GA1UEBRMoRjI5QjIzRUE0RTExNENEQzlDQTZEMzdGNUVGNzlFRjRD MzVDNzI4MjAeFw0yNDA1MTkwNzU3MjZaFw0yNDA1MjYwNzU3MjZaMBgxFjAUBgNV BAMTDTY2NDliMGU2LWNkNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgMxW79Wr4QIOs64hs76uIi7ddcaEkVw079dUvySfPrHEVP+DfOPOT9uWWGvcq 2GRmx2pQD9egdyiRoEMeZ2iZao0FRPNolELYvzYsjaegrhWUsyISlvwI2dJqRQBP +tf0WrJ/llYPC2Odi4EHMlvpO/kMTDVsiDOSKyk0USsxp2/xPaGEGuKGfEz3/9Tl ij9OYNGMcaaSzOUd+on18jC71CglA10vRlLyMkV4/zmwYl8fbvc5W/fef1fErcE0 wEJSxUkztx2bATGc7gBZVGDXMdsBIIm4ZxAVHBZwxBlJ1fbLy/4TIY9wDxsDBdHl JK+fbqfc49dtjeWDOfoOJ68HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO1fJCZpw nHWwzw80+pmbz30CPvMwHwYDVR0jBBgwFoAU8psj6k4RTNycptN/Xvee9MNccoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMzcyLzIwQTU0RkM4OUQ4 NTExRUU5MTgxQzEyMUM0RjlBRTAyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2Nv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHBzajZrNFJUTnljcHROX1h2ZWU5TU5jY29JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MzcyLzIwQTU0RkM4OUQ4NTExRUU5MTgxQzEyMUM0RjlBRTAyLzhwc2o2azRSVE55 Y3B0Tl9YdmVlOU1OY2NvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABDzZ9Ehang0Tb4PH9ns+D5UNtIRc6qLIhMFhxPNpGMtlksoN2p89tJa 2pw7gl6yozec1BnmOlPNUkzU4gDIqI8UR35MEKUAT5mctigLFu8/XP2PysozJGOg YwDZTLnRZFafJFGSYqOtfEF2j+EVjYTzecihlAkUYvT1cb1yA87o3FEVdmKUyAh9 jkTht3qDdbL8hu+nflT7IYBv3XS2hxQeqQLfL5jVomKrTwIuKXsIsKtuqkh+5KWW V07dqIWoTdp7AOgxp0BCqgYxUaTZ5OBU67cJpqdKk9YZIwGsOidiv2GZo3Soi4ti DrcvnkMMlTAaBVy05XeleL3WJE3b9i8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org