$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: Aa7i95+FgPV63DDVefQEoWY+iB5HCGVtcLOU9DKBYYk= Subject key identifier: 4A:7E:3B:40:CF:BE:68:1F:12:2D:22:58:47:EE:BC:B4:B3:4E:A1:DB Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 07A7 Signing time: Sat 18 May 2024 22:08:08 +0000 Manifest this update: Sat 18 May 2024 22:08:07 +0000 Manifest next update: Sat 25 May 2024 22:08:07 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: UBYGBIxJqEGUS/NCgb882AA52Zga0YgTPlhg0jnudMQ=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: 4oBxKLYesM3sWZKVveFALJuU9Ca/e2wCq6dTaipkUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: May 18 22:08:07 2024 GMT Not After : May 25 22:08:07 2024 GMT Subject: CN=664926c8-b57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:5c:4c:1f:9c:38:b2:c1:42:0c:11:e3:97: f2:53:4e:9d:12:b1:05:7a:70:a5:12:15:f2:86:e4: fc:f5:75:16:e0:c7:47:23:dd:73:ea:65:89:8e:73: 17:97:21:98:92:0c:f5:35:14:b2:2e:a5:ef:a1:6c: 52:fe:a0:c6:77:67:eb:3a:00:49:2e:c7:4f:76:5b: 92:7e:62:a1:a0:1b:1b:07:75:47:39:be:a0:2f:3e: e8:b3:05:04:ef:4c:6f:bd:35:01:27:1e:2e:85:bd: 52:75:0a:28:b8:8a:da:66:34:51:1b:aa:79:32:52: 1e:e3:92:74:bb:2f:e9:56:b4:a2:4d:7b:1a:55:9d: 82:44:cc:03:ad:63:f9:a7:0e:51:3f:8e:14:7b:55: bc:9e:db:ad:4e:cb:13:d6:d2:da:97:12:96:f2:5f: 4d:2e:38:86:df:aa:4f:5a:35:87:a3:68:6c:09:56: 1e:1e:dd:91:9c:ca:ff:35:49:e0:1a:b2:a2:8a:61: c1:99:57:05:44:86:01:85:13:41:4b:ae:4f:50:8f: a3:dc:a4:8e:60:c2:a5:c8:3c:8e:60:c0:ec:90:86: 2b:e0:e9:f3:65:e2:ce:dd:9c:e8:25:10:d5:b1:d6: 34:33:6b:a2:ab:04:f2:15:eb:19:5d:67:89:83:07: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7E:3B:40:CF:BE:68:1F:12:2D:22:58:47:EE:BC:B4:B3:4E:A1:DB X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ae:5d:82:7a:30:44:e6:43:57:67:af:1b:89:6c:f9:4e:fb: ba:a8:0e:1c:4d:7d:f8:93:d7:8b:11:df:22:13:8f:10:a4:e4: ae:07:32:f7:12:9e:c5:3a:05:21:2e:d5:d1:e5:3b:d7:da:3c: 66:83:06:cb:74:27:4e:77:6d:79:46:c6:9c:7b:ba:70:d9:fb: 8c:5f:d8:f4:8a:c5:5a:93:64:0a:8c:9f:84:0c:a0:ca:ec:dd: fb:30:ff:01:a4:f7:94:b4:d5:5b:47:f2:5a:40:4e:0c:3f:cf: 5a:b9:6e:e9:ab:8c:5a:33:64:ff:fc:83:29:6e:9c:fc:34:77: 7a:da:ad:5b:02:bc:5f:d7:e8:18:f6:d7:b6:f3:8d:b8:18:85: a7:96:2b:b0:86:05:cd:9d:a8:57:a2:cb:b1:37:f0:76:84:1a: 96:10:45:18:bb:2f:52:af:87:dc:86:44:db:a6:e4:ad:f3:a6: f3:bb:de:6e:06:2d:33:42:eb:be:ee:30:69:55:a9:dc:71:48: 01:00:b4:d7:35:3a:94:20:52:a0:b8:14:13:f1:00:74:b4:c8: c9:98:18:c5:73:fd:45:62:b6:60:5c:11:d4:4e:24:79:b3:10: 6d:11:98:e5:7f:b2:a1:f1:56:a8:d8:4b:29:59:a3:3f:32:53: 92:56:88:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjQwNTE4MjIwODA3WhcNMjQwNTI1MjIwODA3WjAYMRYwFAYD VQQDEw02NjQ5MjZjOC1iNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuBcTB+cOLLBQgwR45fyU06dErEFenClEhXyhuT89XUW4MdHI91z6mWJjnMX lyGYkgz1NRSyLqXvoWxS/qDGd2frOgBJLsdPdluSfmKhoBsbB3VHOb6gLz7oswUE 70xvvTUBJx4uhb1SdQoouIraZjRRG6p5MlIe45J0uy/pVrSiTXsaVZ2CRMwDrWP5 pw5RP44Ue1W8ntutTssT1tLalxKW8l9NLjiG36pPWjWHo2hsCVYeHt2RnMr/NUng GrKiimHBmVcFRIYBhRNBS65PUI+j3KSOYMKlyDyOYMDskIYr4OnzZeLO3ZzoJRDV sdY0M2uiqwTyFesZXWeJgwe09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp+O0DP vmgfEi0iWEfuvLSzTqHbMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARrl2CejBE5kNXZ68biWz5Tvu6qA4cTX34k9eLEd8iE48QpOSuBzL3 Ep7FOgUhLtXR5TvX2jxmgwbLdCdOd215Rsace7pw2fuMX9j0isVak2QKjJ+EDKDK 7N37MP8BpPeUtNVbR/JaQE4MP89auW7pq4xaM2T//IMpbpz8NHd62q1bArxf1+gY 9te28424GIWnliuwhgXNnahXosuxN/B2hBqWEEUYuy9Sr4fchkTbpuSt86bzu95u Bi0zQuu+7jBpVanccUgBALTXNTqUIFKguBQT8QB0tMjJmBjFc/1FYrZgXBHUTiR5 sxBtEZjlf7Kh8Vao2EspWaM/MlOSVog/ -----END CERTIFICATE-----Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org