$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: pkPr+/Q6Li67Yh8o+GhlJQGXlCoeDGLQ1MtzfzPJ/wM= Subject key identifier: FC:D8:10:93:3C:06:D0:39:9C:83:98:A2:2F:51:EF:5F:3A:A4:BC:DA Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 07B0 Signing time: Sat 18 May 2024 22:06:46 +0000 Manifest this update: Sat 18 May 2024 22:06:45 +0000 Manifest next update: Sat 25 May 2024 22:06:45 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: oCA7uNENiJI1qQwjyS5biQqg4X157pGvg2j/VHX4l1E=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: s+fxG626O565z30xIKSf6zC0kXOgcLRjsTejlwJYpnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: May 18 22:06:45 2024 GMT Not After : May 25 22:06:45 2024 GMT Subject: CN=66492675-8987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:be:1e:40:8c:55:c2:7b:96:7b:57:bb:2f: 03:b8:43:f3:5c:96:5f:a4:fc:80:ab:fe:d6:fa:c4: 68:83:bc:2c:50:f7:8e:6c:76:0b:f3:9b:0e:1f:bf: 7b:49:e5:42:d2:39:45:ed:26:8e:00:5d:b1:73:7c: 2a:51:61:b3:5b:06:a4:d7:df:ac:b7:89:cd:3c:e4: c7:69:38:fa:09:11:16:3b:75:db:f7:c5:db:d6:0d: 20:e9:f0:f4:73:f8:8b:54:fa:2b:f1:ed:1d:6c:f3: 38:38:ef:12:ab:c5:72:49:d9:0c:2e:16:79:0c:df: 48:bf:85:35:1e:21:e5:dd:98:97:b2:99:d9:2a:88: 14:92:13:4c:10:97:c9:55:26:0d:4b:8f:4e:3f:3e: 38:53:7f:c4:e7:d3:c9:a7:55:74:13:45:66:33:b1: 5a:e5:a4:c7:d6:e4:f5:3b:16:06:f0:e8:8e:86:23: 65:11:85:10:d2:21:49:d9:0b:7f:15:1c:1f:44:38: 09:dd:17:41:01:f7:d8:15:bf:63:90:3f:59:17:e1: 43:07:c7:42:d4:0e:79:2f:e0:7b:c4:4e:b9:7a:8e: f2:25:3b:5c:b5:e1:28:48:80:fd:58:74:c6:48:1a: 19:4d:65:69:58:c1:81:81:5f:97:d9:2a:f7:87:95: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D8:10:93:3C:06:D0:39:9C:83:98:A2:2F:51:EF:5F:3A:A4:BC:DA X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4a:bf:97:6c:2b:b1:80:6f:80:a9:e8:02:9d:98:6d:87:aa: 55:85:1b:92:e2:24:24:2f:6c:81:0d:b2:19:ef:ce:69:19:18: ba:22:34:84:62:5c:bd:e5:dc:7d:da:f1:e8:b8:5a:83:d1:84: aa:5e:51:ba:6a:ca:2d:18:10:fb:90:37:89:e5:5a:24:6b:23: d9:12:a6:08:1c:0d:1b:fd:45:91:01:fb:11:63:9c:c0:29:cf: ed:50:d9:91:d4:a1:d7:37:50:66:2c:41:37:96:9c:c2:04:1f: 05:5c:e5:d0:cc:b5:fb:c4:8e:d1:44:c6:fb:03:64:57:79:3c: 08:98:97:f2:85:dc:be:aa:a5:b3:16:b4:35:dc:41:ca:e0:6f: ca:a0:dc:b2:54:ed:d3:82:a5:af:2d:a4:7e:20:d0:fd:4d:49: 8e:4b:1b:5a:19:69:5d:47:4c:03:86:7e:ba:ec:49:1e:ab:42: b2:1c:74:9c:59:47:7e:7a:ca:b9:7f:33:ac:58:1e:05:54:2f: 6f:7b:05:b6:7d:23:78:f3:1c:de:96:f3:0b:d0:7d:a4:0b:32: 49:db:af:9e:7c:76:23:96:48:22:fd:25:55:dc:5a:c4:4f:7d: 09:05:69:cf:b2:c4:16:e5:29:fe:ee:fd:98:51:d6:01:16:49: 26:c8:a5:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjQwNTE4MjIwNjQ1WhcNMjQwNTI1MjIwNjQ1WjAYMRYwFAYD VQQDEw02NjQ5MjY3NS04OTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZm+HkCMVcJ7lntXuy8DuEPzXJZfpPyAq/7W+sRog7wsUPeObHYL85sOH797 SeVC0jlF7SaOAF2xc3wqUWGzWwak19+st4nNPOTHaTj6CREWO3Xb98Xb1g0g6fD0 c/iLVPor8e0dbPM4OO8Sq8VySdkMLhZ5DN9Iv4U1HiHl3ZiXspnZKogUkhNMEJfJ VSYNS49OPz44U3/E59PJp1V0E0VmM7Fa5aTH1uT1OxYG8OiOhiNlEYUQ0iFJ2Qt/ FRwfRDgJ3RdBAffYFb9jkD9ZF+FDB8dC1A55L+B7xE65eo7yJTtcteEoSID9WHTG SBoZTWVpWMGBgV+X2Sr3h5XvFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzYEJM8 BtA5nIOYoi9R7186pLzaMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUSr+XbCuxgG+AqegCnZhth6pVhRuS4iQkL2yBDbIZ785pGRi6IjSE Yly95dx92vHouFqD0YSqXlG6asotGBD7kDeJ5VokayPZEqYIHA0b/UWRAfsRY5zA Kc/tUNmR1KHXN1BmLEE3lpzCBB8FXOXQzLX7xI7RRMb7A2RXeTwImJfyhdy+qqWz FrQ13EHK4G/KoNyyVO3TgqWvLaR+IND9TUmOSxtaGWldR0wDhn667Ekeq0KyHHSc WUd+esq5fzOsWB4FVC9vewW2fSN48xzelvML0H2kCzJJ26+efHYjlkgi/SVV3FrE T30JBWnPssQW5Sn+7v2YUdYBFkkmyKXi -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org