$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: YZaUVgfNg4wP2tOFfNcz75Bl9En8b6vcJizciSqkkNw= Subject key identifier: 5D:59:35:F7:BF:6A:84:9E:AC:5A:2B:49:15:77:96:2A:DE:B0:BD:D4 Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: EE Signing time: Sun 19 May 2024 05:46:36 +0000 Manifest this update: Sun 19 May 2024 05:46:36 +0000 Manifest next update: Sun 26 May 2024 05:46:36 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: ZWQYfJk0o1xYjCZ6pOpA11ha/8ZAHFubotpUwwW/tIo=) 2: 11F911FAA8D811ED90192E3CC4F9AE02.roa (hash: sH6RSBzgF8O7XXFI0vDSzB0+2iLMaRJT/qc++pD4NXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: May 19 05:46:36 2024 GMT Not After : May 26 05:46:36 2024 GMT Subject: CN=6649923c-0701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:c9:c0:3c:e6:44:01:90:e2:d4:ab:02:13: 1a:d7:00:0e:3c:40:e0:02:b8:2d:2c:a6:99:9a:18: 88:1e:38:b7:55:63:3b:92:66:5b:ed:51:9b:27:84: 8a:99:c1:ec:d1:93:18:8f:ef:97:f0:96:63:79:14: fe:82:4a:fc:7a:14:2c:26:76:47:98:8a:bf:93:2c: be:50:2b:af:6e:af:71:a2:2c:96:10:65:0e:19:de: b3:75:ca:b1:01:eb:62:f3:22:81:a4:aa:e8:67:0d: 0a:f5:82:63:21:fc:f8:06:9d:0d:0a:0f:25:28:b8: 92:58:7a:b3:2b:a1:16:38:ca:ab:16:2d:66:67:ec: 80:ba:23:f4:aa:d4:28:c6:22:e2:bd:ea:78:a9:f2: 96:97:40:b0:49:43:59:5c:7f:4d:56:85:5c:54:49: 01:45:20:61:8b:9a:f6:2f:4b:20:88:89:86:bf:cb: 73:7a:a2:a8:db:2c:e7:d1:67:f7:65:4c:5c:51:5d: 99:b4:b5:fa:e9:ee:ac:28:72:34:4a:9b:26:42:87: 49:72:c3:15:f3:ac:1c:01:66:0c:8e:80:2e:20:e1: 87:d3:5b:70:68:ba:2d:fd:94:5e:f5:cd:ec:f0:21: fa:92:f2:26:a3:47:02:cd:b9:73:31:22:d7:b7:d4: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:59:35:F7:BF:6A:84:9E:AC:5A:2B:49:15:77:96:2A:DE:B0:BD:D4 X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1e:59:4e:62:61:38:b5:05:a1:19:48:09:00:eb:1c:41:bf: 8a:02:39:85:1e:b1:a1:c1:83:b5:ec:d7:5b:0a:2d:ab:43:e1: cd:5f:e8:d0:43:fa:2e:96:14:20:b7:be:1a:8b:66:4d:02:d0: 8d:8c:10:e9:51:ee:90:50:1b:e3:c0:73:2c:fe:0d:aa:93:bf: 4c:d1:c7:bd:81:56:d5:ee:24:9d:88:24:2c:0f:a7:b5:8d:9c: 10:25:74:1b:5e:dd:02:7f:97:76:ee:0a:b2:05:f6:50:94:b2: 68:75:e5:1f:f1:71:6d:0e:97:21:b0:84:32:2a:0a:07:0f:be: e3:b9:4e:e2:27:40:b9:12:46:3b:cd:6e:4f:34:b6:79:ac:c1: 7c:e6:77:cc:e5:a6:79:5b:81:91:fd:f2:99:64:52:f0:4b:d3: 61:a0:88:65:bb:30:df:d3:3e:44:96:2f:e5:7c:a3:7f:a2:ff: 98:97:6f:f5:e6:1c:41:1c:ee:a4:27:ea:e8:29:b5:a5:77:41: 13:4e:fc:70:57:f7:95:2b:df:d7:5a:82:4b:10:33:20:27:9f: e6:2c:c0:55:f0:63:81:53:05:74:ea:93:06:3a:82:fd:19:73: 57:e2:9b:fd:1b:e4:ce:9c:66:78:0a:27:60:61:4f:3e:29:c3: eb:8b:21:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjQwNTE5MDU0NjM2WhcNMjQwNTI2MDU0NjM2WjAYMRYwFAYD VQQDEw02NjQ5OTIzYy0wNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SzJwDzmRAGQ4tSrAhMa1wAOPEDgArgtLKaZmhiIHji3VWM7kmZb7VGbJ4SK mcHs0ZMYj++X8JZjeRT+gkr8ehQsJnZHmIq/kyy+UCuvbq9xoiyWEGUOGd6zdcqx Aeti8yKBpKroZw0K9YJjIfz4Bp0NCg8lKLiSWHqzK6EWOMqrFi1mZ+yAuiP0qtQo xiLivep4qfKWl0CwSUNZXH9NVoVcVEkBRSBhi5r2L0sgiImGv8tzeqKo2yzn0Wf3 ZUxcUV2ZtLX66e6sKHI0SpsmQodJcsMV86wcAWYMjoAuIOGH01twaLot/ZRe9c3s 8CH6kvImo0cCzblzMSLXt9RsRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1ZNfe/ aoSerForSRV3liresL3UMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2HllOYmE4tQWhGUgJAOscQb+KAjmFHrGhwYO17NdbCi2rQ+HNX+jQ Q/oulhQgt74ai2ZNAtCNjBDpUe6QUBvjwHMs/g2qk79M0ce9gVbV7iSdiCQsD6e1 jZwQJXQbXt0Cf5d27gqyBfZQlLJodeUf8XFtDpchsIQyKgoHD77juU7iJ0C5EkY7 zW5PNLZ5rMF85nfM5aZ5W4GR/fKZZFLwS9NhoIhluzDf0z5Eli/lfKN/ov+Yl2/1 5hxBHO6kJ+roKbWld0ETTvxwV/eVK9/XWoJLEDMgJ5/mLMBV8GOBUwV06pMGOoL9 GXNX4pv9G+TOnGZ4CidgYU8+KcPriyFf -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org