$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json) Hash identifier: k4uwvqSfn3TIE3l61Elwuoef/10pkZCLdpeyHX6DDjo= Subject key identifier: 96:C9:24:53:1F:87:E9:B2:16:E8:3A:31:2A:6A:CA:40:66:34:C1:60 Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft Manifest number: 0264 Signing time: Sun 19 May 2024 03:49:19 +0000 Manifest this update: Sun 19 May 2024 03:49:18 +0000 Manifest next update: Sun 26 May 2024 03:49:18 +0000 Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: Mu2YAxcU9+PIsC+Kzj4C4Z6Lo4TNa2aBSvQS/3dCk50=) 2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: ziC+4E1YChOduXVyJ0jy/1ifVphFnzBug4X1uVrRcws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Validity Not Before: May 19 03:49:18 2024 GMT Not After : May 26 03:49:18 2024 GMT Subject: CN=664976be-db36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:d7:c2:fd:0e:91:d6:9a:13:c3:bd:f8:8b: 82:2b:bc:c5:52:f7:2b:57:16:be:df:28:8b:3b:a6: 2e:55:f0:85:71:68:c8:3f:d7:75:13:bc:23:6a:b0: 9a:0f:18:fb:24:75:4d:d8:09:96:07:97:0e:44:71: 8f:d5:43:a6:3d:c7:50:57:3b:0b:88:96:48:8f:7c: 42:24:9a:52:70:1d:8e:68:90:52:6e:d7:74:70:bb: e7:29:65:b2:f6:5e:15:49:bc:29:19:cc:6e:90:fb: 77:4f:dc:26:95:94:85:f4:2c:42:83:56:ea:a1:27: 69:8f:26:a1:32:22:ac:0a:d1:0a:b4:73:68:89:df: e9:79:51:11:41:e2:33:26:e0:a6:19:36:7c:38:d9: c5:b5:cb:6e:fd:4b:f2:5c:05:dd:0f:2f:86:57:8b: 1d:97:84:53:53:73:68:81:fc:a4:6f:5c:5a:cb:2c: ce:c1:6b:56:89:f1:16:10:b2:dc:0e:29:9f:d4:82: 73:5b:4d:e8:39:32:e0:55:fc:70:80:e4:28:8d:8b: 4b:80:d0:ec:d3:e5:47:ed:e9:c3:0f:fa:4a:41:cc: 57:81:1c:6d:28:26:48:a9:d5:cb:1c:f2:1c:65:d5: 0f:b3:db:5e:bf:e3:69:41:ee:f7:6f:09:4d:76:76: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C9:24:53:1F:87:E9:B2:16:E8:3A:31:2A:6A:CA:40:66:34:C1:60 X509v3 Authority Key Identifier: keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:86:75:c2:96:00:e3:c0:18:fe:0c:18:fe:86:a6:8e:68:ee: ec:70:30:cf:69:2f:d1:b8:47:dc:7c:bf:48:33:5d:67:28:43: 25:30:de:c3:1e:ce:ad:c3:df:ab:75:ba:63:75:d7:d8:1e:57: 05:f9:4b:0a:90:88:4b:5e:89:ed:17:d9:19:b0:10:31:fe:40: 6f:0f:c1:8c:da:14:eb:6b:98:47:8b:34:45:01:d3:0c:66:25: 17:5e:0c:4e:dc:55:48:e1:de:10:c2:42:4e:f7:dc:a7:27:37: f6:2c:f6:cd:63:7f:b3:cd:05:11:15:6e:d3:32:15:43:d5:9e: 54:17:ad:78:15:ac:af:7b:f4:df:ee:f0:3c:e1:9e:85:6f:3b: 84:5b:f8:80:a8:1b:30:c3:b1:f8:30:d5:ba:fb:60:6d:6f:74: 58:5d:d4:89:f0:9f:d5:91:d4:82:9c:51:87:21:3f:b5:d9:82: 67:68:9f:cb:8d:21:41:87:38:6c:b3:e6:3f:b8:e7:53:6f:ea: 48:c3:ca:45:97:4b:36:fc:82:7c:12:1d:4c:77:9a:bc:94:a0: 3c:07:c9:71:3f:52:cb:ed:a4:71:7e:5f:54:5a:91:eb:0b:b0: 77:59:f7:b5:4b:31:3a:a9:6e:5a:c6:a2:c4:d7:e2:f4:51:32: 79:4a:0e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF NTM3RjVGQ0UwHhcNMjQwNTE5MDM0OTE4WhcNMjQwNTI2MDM0OTE4WjAYMRYwFAYD VQQDEw02NjQ5NzZiZS1kYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzojXwv0OkdaaE8O9+IuCK7zFUvcrVxa+3yiLO6YuVfCFcWjIP9d1E7wjarCa Dxj7JHVN2AmWB5cORHGP1UOmPcdQVzsLiJZIj3xCJJpScB2OaJBSbtd0cLvnKWWy 9l4VSbwpGcxukPt3T9wmlZSF9CxCg1bqoSdpjyahMiKsCtEKtHNoid/peVERQeIz JuCmGTZ8ONnFtctu/UvyXAXdDy+GV4sdl4RTU3Nogfykb1xayyzOwWtWifEWELLc Dimf1IJzW03oOTLgVfxwgOQojYtLgNDs0+VH7enDD/pKQcxXgRxtKCZIqdXLHPIc ZdUPs9tev+NpQe73bwlNdnbj3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbJJFMf h+myFug6MSpqykBmNMFgMB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5 RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx anJmVTlzdnBaSHZsTl9YODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMhnXClgDjwBj+DBj+hqaOaO7scDDPaS/RuEfcfL9IM11nKEMlMN7D Hs6tw9+rdbpjddfYHlcF+UsKkIhLXontF9kZsBAx/kBvD8GM2hTra5hHizRFAdMM ZiUXXgxO3FVI4d4QwkJO99ynJzf2LPbNY3+zzQURFW7TMhVD1Z5UF614Fayve/Tf 7vA84Z6FbzuEW/iAqBsww7H4MNW6+2Btb3RYXdSJ8J/VkdSCnFGHIT+12YJnaJ/L jSFBhzhss+Y/uOdTb+pIw8pFl0s2/IJ8Eh1Md5q8lKA8B8lxP1LL7aRxfl9UWpHr C7B3Wfe1SzE6qW5axqLE1+L0UTJ5Sg7x -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org