$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json) Hash identifier: LX8cH2fUGMBroALxdS8llWplBBdJwE8DvK2WySEBrtY= Subject key identifier: 56:64:D7:1B:FA:51:7F:66:DB:71:20:8C:FA:04:62:C8:5E:8B:FD:FB Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Certificate serial: 16F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft Manifest number: 16E3 Signing time: Sat 18 May 2024 17:06:21 +0000 Manifest this update: Sat 18 May 2024 17:06:21 +0000 Manifest next update: Sat 25 May 2024 17:06:21 +0000 Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: dT2IbbXHHnOrZ+u9I2QJXBV59qEhO5luW5cuzXGXitA=) 2: 1615AC3AD9E911EC9017DD21C4F9AE02.roa (hash: cu7wnZWG2QCQARWSCZlDCkdY4NqxVTtM35LKYc28sLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5877 (0x16f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Validity Not Before: May 18 17:06:21 2024 GMT Not After : May 25 17:06:21 2024 GMT Subject: CN=6648e00d-43a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:51:99:e0:f9:92:1d:e3:0a:33:9c:02:be: c2:1f:e4:a5:fc:b8:6e:86:24:d3:8d:b9:4f:d8:b9: 3a:8b:60:45:b3:37:c0:62:ce:59:18:51:8b:31:1d: 13:4e:73:b7:e1:76:bb:fc:b8:16:b9:a1:c0:8e:96: 04:53:2c:c7:cc:ec:48:25:8d:a3:f9:00:47:07:32: c6:c5:cf:6b:5b:14:b4:c1:8f:db:57:f6:10:68:9d: 13:a0:87:74:0d:5e:8d:ca:7d:ef:50:87:70:a2:d1: 4c:86:f0:25:8f:9c:c1:83:fa:18:d0:df:6c:16:0a: 05:40:be:5b:d0:93:de:c4:ae:49:0e:77:9e:f3:9f: 46:eb:a5:35:31:a6:15:e4:bb:0d:28:86:4d:41:d5: 2f:eb:32:f1:9d:1a:7f:bd:3b:0f:8f:74:98:c5:48: 28:b7:e1:0b:61:16:da:1f:d3:a0:31:21:51:21:63: 68:65:49:50:a7:54:45:18:5b:95:f9:b6:d7:33:b7: 4b:05:e6:bf:be:e6:4d:d7:17:10:fc:c2:d9:20:1a: cb:7b:bd:85:2f:60:9f:86:89:20:bb:b1:96:47:5a: 90:f1:82:aa:3a:7a:77:f3:92:a7:c5:c6:ae:ff:d0: 96:ec:d4:07:7d:b9:b5:1c:3a:7c:20:3d:92:4e:14: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:64:D7:1B:FA:51:7F:66:DB:71:20:8C:FA:04:62:C8:5E:8B:FD:FB X509v3 Authority Key Identifier: keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:c7:e3:1e:d8:3f:5c:c3:15:ab:13:82:8d:ec:de:fa:c0:fd: 67:68:ab:26:3e:d4:e8:0c:b6:fa:a4:61:cf:22:44:ea:2e:2a: cb:67:94:a8:5b:82:ed:ea:d0:e8:14:da:07:0d:81:91:bf:a9: ef:6a:00:fb:70:07:d7:09:46:8e:04:93:23:9e:9f:ae:a7:45: 1f:2e:75:71:28:59:c2:b7:ad:75:62:67:ef:ed:30:cc:50:36: 98:6e:0a:06:90:ad:6a:e6:41:0c:c9:87:6b:f9:00:c7:ab:15: 66:c3:8c:6b:62:7f:73:25:c4:0e:52:10:0f:3e:26:8a:21:f4: d3:60:49:68:40:59:50:51:ce:de:78:14:80:5b:20:4f:8c:f6: f9:99:c4:64:c0:c6:f8:ff:30:c9:ab:c0:31:73:35:2e:00:39: 45:2f:90:31:38:25:d1:f7:26:61:6d:4b:4c:ce:f2:86:47:5a: 8e:44:a9:a9:9e:c8:89:2e:a7:e8:82:49:e6:74:d9:83:3d:0a: 9b:4d:84:c6:dd:f8:ff:d4:fc:37:34:9d:2e:2d:68:b6:62:89: 1e:06:75:ea:ea:e8:b4:62:87:70:d1:7c:47:99:c1:2f:da:47: 34:79:54:e4:13:bc:c3:8b:68:59:7b:3a:dc:7e:98:bc:af:8c: db:53:16:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0REIxMTAvBgNVBAUTKDNGQjc4NTVFRjMzMEJBNzdEOUYzQjcyREZGREVDMjA3 MTJBQzE0MDcwHhcNMjQwNTE4MTcwNjIxWhcNMjQwNTI1MTcwNjIxWjAYMRYwFAYD VQQDEw02NjQ4ZTAwZC00M2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TRRmeD5kh3jCjOcAr7CH+Sl/LhuhiTTjblP2Lk6i2BFszfAYs5ZGFGLMR0T TnO34Xa7/LgWuaHAjpYEUyzHzOxIJY2j+QBHBzLGxc9rWxS0wY/bV/YQaJ0ToId0 DV6Nyn3vUIdwotFMhvAlj5zBg/oY0N9sFgoFQL5b0JPexK5JDnee859G66U1MaYV 5LsNKIZNQdUv6zLxnRp/vTsPj3SYxUgot+ELYRbaH9OgMSFRIWNoZUlQp1RFGFuV +bbXM7dLBea/vuZN1xcQ/MLZIBrLe72FL2Cfhokgu7GWR1qQ8YKqOnp385Knxcau /9CW7NQHfbm1HDp8ID2SThS2IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZk1xv6 UX9m23EgjPoEYshei/37MB8GA1UdIwQYMBaAFD+3hV7zMLp32fO3Lf/ewgcSrBQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDREQi8zQTMxNURDRUNE MDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3VuZlo4N2N0Xzk3Q0J4S3NG QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3ZUZYdk13dW5mWjg3Y3RfOTdDQnhLc0ZBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDREQi8zQTMxNURDRUNEMDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3Vu Zlo4N2N0Xzk3Q0J4S3NGQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7x+Me2D9cwxWrE4KN7N76wP1naKsmPtToDLb6pGHPIkTqLirLZ5So W4Lt6tDoFNoHDYGRv6nvagD7cAfXCUaOBJMjnp+up0UfLnVxKFnCt611Ymfv7TDM UDaYbgoGkK1q5kEMyYdr+QDHqxVmw4xrYn9zJcQOUhAPPiaKIfTTYEloQFlQUc7e eBSAWyBPjPb5mcRkwMb4/zDJq8AxczUuADlFL5AxOCXR9yZhbUtMzvKGR1qORKmp nsiJLqfogknmdNmDPQqbTYTG3fj/1Pw3NJ0uLWi2YokeBnXq6ui0Yodw0XxHmcEv 2kc0eVTkE7zDi2hZezrcfpi8r4zbUxbY -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org