$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: IU1OCEPBEFCYmIjvyuMWrMsM59O9XcVm4lpcWaJ7Jh8= Subject key identifier: 2F:06:E0:8E:69:3C:5B:02:30:55:AD:BA:27:36:AA:6D:2B:86:65:AC Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2CA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2C84 Signing time: Sat 18 May 2024 15:47:17 +0000 Manifest this update: Sat 18 May 2024 15:47:17 +0000 Manifest next update: Sat 25 May 2024 15:47:17 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: hboz7kPenVvBA35X2pQ8WikzR/bwGvK/jM/RYRP584E=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: bLM4hecBjp4+kZrFBYpUYh3+T8MNWN7sNl7r7CCqW6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11432 (0x2ca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: May 18 15:47:17 2024 GMT Not After : May 25 15:47:17 2024 GMT Subject: CN=6648cd85-d6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:d3:9d:ce:d6:01:8a:12:04:0b:9a:69:88: 62:7c:a3:92:f3:64:fb:ef:6d:54:47:01:a8:13:31: 68:c5:02:a4:72:3b:3e:4f:99:ca:10:7a:71:f0:99: 22:5d:50:82:e8:08:2d:48:f7:16:b0:d6:e2:30:a6: 40:05:ef:bc:bf:3f:f3:8a:d1:3e:80:52:22:57:aa: 91:75:85:3f:36:fc:7b:23:ed:92:99:d0:e4:68:f8: f5:bb:cb:99:a4:25:96:a8:09:52:cb:96:f3:00:bb: 05:a2:f8:4e:fa:1c:7c:ea:c3:77:45:ef:08:2f:e3: 3c:6b:5f:6c:7a:d3:c1:ed:11:44:fb:8e:51:c1:d9: 60:48:d1:21:0a:38:ed:ed:b3:45:9f:0e:34:0c:94: 4d:b2:3e:03:9c:b2:da:4c:98:38:2e:f1:b4:81:f7: 9d:9c:13:b7:11:29:18:3c:50:ab:07:da:84:90:66: 3e:8f:19:98:5b:cb:88:8a:b6:ff:bd:24:a1:0e:18: a3:84:ed:4c:b0:69:52:83:9a:a5:62:aa:69:ef:23: 33:9e:fb:5a:7b:26:15:64:1a:8d:e6:df:30:b4:a4: 89:1c:47:a1:1e:67:2e:d7:16:a0:6f:31:4d:ad:90: a4:51:47:a3:93:91:a6:19:e5:4a:91:7a:88:06:f7: 30:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:06:E0:8E:69:3C:5B:02:30:55:AD:BA:27:36:AA:6D:2B:86:65:AC X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:41:e7:44:c8:50:a7:03:02:5b:1e:01:6f:be:4d:26:de:ab: a6:ad:f8:4b:22:ef:c9:ea:c0:62:32:5d:97:32:e0:a5:5b:de: 3b:20:0d:ae:47:29:79:33:96:bb:e8:86:53:f6:0a:92:42:fc: 3e:f1:21:93:64:2c:ca:2b:49:04:4d:6d:56:14:5c:6f:36:af: 5c:be:3d:a8:cc:45:08:bd:e9:b2:17:96:b8:7f:72:df:8d:77: 81:b5:9f:eb:49:bb:19:1e:46:a0:95:e7:17:10:77:f1:4a:09: e2:ac:5c:19:4f:8c:90:67:01:9f:e0:80:57:da:49:05:cd:da: 4d:71:c0:8f:e1:5a:24:08:6e:49:81:25:19:29:16:74:4a:86: 43:eb:87:cc:73:19:55:50:74:ef:dc:59:01:15:b6:af:13:b0: 70:88:c5:4b:eb:36:ca:a1:87:12:50:18:02:a6:b2:5b:07:51: 63:2a:d5:ec:a7:1f:7e:c0:55:81:f6:ee:79:1a:88:16:c7:88: 96:32:0c:0e:fb:7c:3b:24:a6:b3:84:b6:d0:14:c5:b9:41:bc: b5:52:de:d4:b8:78:a0:e9:3d:1c:81:dc:dc:0b:db:40:a6:72: 43:aa:58:ca:17:43:55:0d:e0:69:dd:63:21:e7:0e:a3:e7:af: b4:e8:c8:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjQwNTE4MTU0NzE3WhcNMjQwNTI1MTU0NzE3WjAYMRYwFAYD VQQDEw02NjQ4Y2Q4NS1kNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNTTnc7WAYoSBAuaaYhifKOS82T7721URwGoEzFoxQKkcjs+T5nKEHpx8Jki XVCC6AgtSPcWsNbiMKZABe+8vz/zitE+gFIiV6qRdYU/Nvx7I+2SmdDkaPj1u8uZ pCWWqAlSy5bzALsFovhO+hx86sN3Re8IL+M8a19setPB7RFE+45RwdlgSNEhCjjt 7bNFnw40DJRNsj4DnLLaTJg4LvG0gfednBO3ESkYPFCrB9qEkGY+jxmYW8uIirb/ vSShDhijhO1MsGlSg5qlYqpp7yMznvtaeyYVZBqN5t8wtKSJHEehHmcu1xagbzFN rZCkUUejk5GmGeVKkXqIBvcwjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8G4I5p PFsCMFWtuic2qm0rhmWsMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjQedEyFCnAwJbHgFvvk0m3qumrfhLIu/J6sBiMl2XMuClW947IA2u Ryl5M5a76IZT9gqSQvw+8SGTZCzKK0kETW1WFFxvNq9cvj2ozEUIvemyF5a4f3Lf jXeBtZ/rSbsZHkaglecXEHfxSgnirFwZT4yQZwGf4IBX2kkFzdpNccCP4VokCG5J gSUZKRZ0SoZD64fMcxlVUHTv3FkBFbavE7BwiMVL6zbKoYcSUBgCprJbB1FjKtXs px9+wFWB9u55GogWx4iWMgwO+3w7JKazhLbQFMW5Qby1Ut7UuHig6T0cgdzcC9tA pnJDqljKF0NVDeBp3WMh5w6j56+06MgO -----END CERTIFICATE-----Generated at Sat May 18 17:20:35 2024 by rpki-client on console-ams.rpki-client.org