$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json) Hash identifier: Ruk+JDxEtzeA59bvLatJsJrqqYoVZvWj6l0a/Dsr65M= Subject key identifier: 5D:F6:C3:11:13:E9:F9:BF:E3:62:81:80:EB:2D:DE:B6:CD:93:A5:AC Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft Manifest number: 0120 Signing time: Fri 31 May 2024 05:52:17 +0000 Manifest this update: Fri 31 May 2024 05:52:17 +0000 Manifest next update: Fri 07 Jun 2024 05:52:17 +0000 Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: uNdwPyXX+r1CV1NEg7Hvtq1CS6kXDTJ3Pxflbe3IyqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Validity Not Before: May 31 05:52:17 2024 GMT Not After : Jun 7 05:52:17 2024 GMT Subject: CN=66596591-dd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:1c:8b:ed:b6:cc:e3:79:31:f1:db:45:60: 18:2e:c0:28:4e:23:32:97:12:74:46:0d:bd:ce:35: ab:5b:65:2e:03:07:58:8f:29:e4:40:8c:74:db:f4: 64:ff:b0:2a:fc:f7:62:c8:7c:35:fb:12:cd:e7:29: 91:75:76:db:28:09:74:7e:90:41:e6:56:24:48:19: 09:bf:29:7f:3c:19:0f:7a:1d:5a:c3:c2:64:b9:e2: 9b:ae:1b:ec:73:86:b2:8e:4a:88:8b:7c:29:85:eb: 89:4d:c7:17:43:49:5f:66:e6:b1:71:38:9d:97:c3: a9:e9:32:a6:91:f4:ce:eb:d8:ad:48:a2:8a:96:e0: 6e:79:6b:15:5f:38:05:14:e8:ca:10:cf:9c:90:28: c5:a3:c4:bf:0b:e9:5e:3e:31:f4:b3:55:a3:e3:76: 51:90:c9:ae:58:4e:48:84:28:58:e7:df:29:49:00: b1:59:16:ef:3d:21:06:15:7c:1d:31:80:d6:7e:2b: 46:b1:ba:d9:b4:e5:a3:ed:a2:53:8b:d9:47:b9:19: 6c:48:96:d3:a3:87:0a:23:94:f4:49:f3:43:c3:6a: 83:2a:30:d6:73:07:dc:42:04:a7:3f:70:2d:6e:3c: 6f:31:a5:4b:07:85:ad:6f:fc:d9:bd:4d:16:f2:9c: 66:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F6:C3:11:13:E9:F9:BF:E3:62:81:80:EB:2D:DE:B6:CD:93:A5:AC X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4d:e6:f2:e9:19:bb:c0:b6:9e:53:96:28:17:df:c4:e2:93: e5:fd:02:31:78:11:b8:ba:bb:76:a8:cb:c8:1a:7c:cf:21:44: 7b:30:72:27:7e:d2:03:43:f6:1b:cf:f6:97:81:f6:39:2b:6a: 68:a3:e7:c1:61:07:1d:7a:47:a4:44:c0:2f:2b:1b:61:c3:ae: c2:d4:ce:fc:96:71:0c:a1:ed:a2:cb:86:ec:3e:cf:68:e1:f4: 22:fd:16:8d:dc:1f:55:4f:3e:a4:08:fc:99:5a:1d:81:57:1d: b5:89:bf:61:ce:6b:11:6f:0d:e0:d1:bf:a8:d2:45:dd:6f:49: c7:7b:c4:48:6f:54:6c:85:2a:e1:f2:d5:0c:f5:b5:87:f2:0e: 7e:4e:d9:9e:9c:94:b0:99:20:c3:3e:d7:51:7d:da:22:93:aa: 1c:c0:ab:7a:27:f6:6f:7d:0c:0e:cc:a5:2e:65:cc:9d:d4:ba: 07:90:8a:67:62:ec:e8:ca:3a:12:3e:22:69:80:73:9f:42:0a: 09:aa:21:6b:4b:5f:86:22:b1:56:f0:6b:90:5d:f2:05:69:af: 8f:c8:e4:36:86:6c:08:60:1b:ed:21:ba:01:20:6b:eb:66:fd: 26:ae:ec:8f:75:70:ec:6f:fa:d6:79:a9:e8:f5:c0:e1:8e:97: 58:a9:33:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjQwNTMxMDU1MjE3WhcNMjQwNjA3MDU1MjE3WjAYMRYwFAYD VQQDEw02NjU5NjU5MS1kZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CUci+22zON5MfHbRWAYLsAoTiMylxJ0Rg29zjWrW2UuAwdYjynkQIx02/Rk /7Aq/PdiyHw1+xLN5ymRdXbbKAl0fpBB5lYkSBkJvyl/PBkPeh1aw8JkueKbrhvs c4ayjkqIi3wpheuJTccXQ0lfZuaxcTidl8Op6TKmkfTO69itSKKKluBueWsVXzgF FOjKEM+ckCjFo8S/C+lePjH0s1Wj43ZRkMmuWE5IhChY598pSQCxWRbvPSEGFXwd MYDWfitGsbrZtOWj7aJTi9lHuRlsSJbTo4cKI5T0SfNDw2qDKjDWcwfcQgSnP3At bjxvMaVLB4Wtb/zZvU0W8pxm/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF32wxET 6fm/42KBgOst3rbNk6WsMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOTeby6Rm7wLaeU5YoF9/E4pPl/QIxeBG4urt2qMvIGnzPIUR7MHIn ftIDQ/Ybz/aXgfY5K2poo+fBYQcdekekRMAvKxthw67C1M78lnEMoe2iy4bsPs9o 4fQi/RaN3B9VTz6kCPyZWh2BVx21ib9hzmsRbw3g0b+o0kXdb0nHe8RIb1RshSrh 8tUM9bWH8g5+TtmenJSwmSDDPtdRfdoik6ocwKt6J/ZvfQwOzKUuZcyd1LoHkIpn YuzoyjoSPiJpgHOfQgoJqiFrS1+GIrFW8GuQXfIFaa+PyOQ2hmwIYBvtIboBIGvr Zv0mruyPdXDsb/rWeano9cDhjpdYqTPI -----END CERTIFICATE-----Generated at Fri May 31 06:49:26 2024 by rpki-client on console-ams.rpki-client.org