$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json) Hash identifier: 6kqnr6Wrhm+zxMxEooY6fnNXkEWObbJfKMilxoMB9CA= Subject key identifier: 4B:5D:09:9C:D5:72:F9:E8:59:93:84:06:F8:13:D8:7B:12:A4:7B:8F Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Certificate serial: 0762 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft Manifest number: 075B Signing time: Sat 18 May 2024 22:17:57 +0000 Manifest this update: Sat 18 May 2024 22:17:57 +0000 Manifest next update: Sat 25 May 2024 22:17:57 +0000 Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: YkucZ7WWHBsYek2+EMeLnMIDEJlqG4sNRJT5xTuiZYM=) 2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: sN9C7nPWDakKP9w8LzClMGecHePSf8JTR+Rrj9/9ZzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1890 (0x762) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Validity Not Before: May 18 22:17:57 2024 GMT Not After : May 25 22:17:57 2024 GMT Subject: CN=66492915-b707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:f7:4f:ea:f8:3d:14:b0:0c:79:00:ea:0b: 7d:7e:3a:92:64:63:0a:f0:49:8d:5d:2f:e1:16:15: 57:d2:a8:52:18:0b:bc:d0:ca:37:ae:75:4e:ca:aa: 6a:f8:08:19:bb:be:8f:4e:bf:30:f5:5e:52:a3:ea: b9:a0:55:1a:24:4d:b0:9e:f2:13:4c:7a:da:d8:f8: 00:63:61:da:5e:69:7f:cf:cc:c2:a7:7c:64:34:a0: 8d:e9:6c:e7:6a:f3:3c:18:15:09:f2:dd:68:fc:e2: f4:32:2c:b7:49:c8:00:b1:00:63:af:b8:58:92:66: 3c:c1:62:09:c2:cb:27:cd:ec:62:3d:09:0b:ad:19: 6d:39:65:e7:f2:46:8a:09:ad:13:33:6f:19:0f:5c: 4b:49:cd:9a:8e:51:b6:72:62:38:5a:b9:b6:f1:62: e4:2b:8b:62:93:61:95:1d:15:6b:b7:1b:a9:db:b7: 6a:be:53:0c:07:4b:75:63:7d:da:14:6e:70:cf:38: 7a:90:f4:53:a6:93:43:a1:77:17:a4:33:f5:65:98: 7d:c9:bd:a9:58:c5:70:9c:ea:b5:cc:03:96:b7:6c: e8:99:5a:d6:91:cf:a3:db:d2:16:8c:ec:73:00:4f: d1:38:46:7c:7d:01:de:73:60:6b:8c:9f:84:42:a7: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:09:9C:D5:72:F9:E8:59:93:84:06:F8:13:D8:7B:12:A4:7B:8F X509v3 Authority Key Identifier: keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:b6:90:a5:31:b0:cd:88:92:06:18:ab:c4:98:94:06:be:28: d6:02:80:d7:26:06:4a:d4:c2:79:45:4c:13:17:42:c7:7d:47: 18:6b:97:fa:53:e1:5c:44:08:78:e4:1c:c5:ac:af:b5:22:c5: ae:69:ab:50:52:61:63:cf:f5:31:99:ef:5e:c9:e3:35:31:70: 97:ac:0f:b3:e5:eb:74:c6:01:02:8e:e4:73:90:50:77:34:31: 4b:18:48:7c:ca:b5:f8:25:9b:ef:e9:14:14:fe:9f:b7:16:6e: 05:b9:3e:93:07:cc:cc:e4:7d:e8:ec:2e:fa:aa:8d:cd:c0:e6: 30:9d:4f:c4:7a:bf:9c:01:c0:3d:1e:de:83:24:d0:5a:c1:cc: c6:89:09:b5:5a:64:71:e6:c3:1e:66:85:0c:62:9f:cb:8d:59: 61:d1:e3:03:27:96:41:d4:0e:d3:11:e3:c7:f3:d6:94:05:3f: 72:2e:74:9e:c2:ac:37:9a:d3:21:1a:4f:1d:2c:71:cf:a5:bf: fa:db:92:cb:5c:8a:f5:3a:de:59:cf:5d:c9:e0:d3:80:8d:59: d2:e8:4c:d3:c2:37:5a:43:eb:d8:da:3f:20:41:68:3c:47:45: cb:fc:21:f7:b4:20:3d:c7:21:f4:2b:c7:b9:78:9b:c2:e9:43: 08:cb:ac:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4 RjhBMjA2QzYwHhcNMjQwNTE4MjIxNzU3WhcNMjQwNTI1MjIxNzU3WjAYMRYwFAYD VQQDEw02NjQ5MjkxNS1iNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Vn3T+r4PRSwDHkA6gt9fjqSZGMK8EmNXS/hFhVX0qhSGAu80Mo3rnVOyqpq +AgZu76PTr8w9V5So+q5oFUaJE2wnvITTHra2PgAY2HaXml/z8zCp3xkNKCN6Wzn avM8GBUJ8t1o/OL0Miy3ScgAsQBjr7hYkmY8wWIJwssnzexiPQkLrRltOWXn8kaK Ca0TM28ZD1xLSc2ajlG2cmI4Wrm28WLkK4tik2GVHRVrtxup27dqvlMMB0t1Y33a FG5wzzh6kPRTppNDoXcXpDP1ZZh9yb2pWMVwnOq1zAOWt2zomVrWkc+j29IWjOxz AE/ROEZ8fQHec2BrjJ+EQqewfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtdCZzV cvnoWZOEBvgT2HsSpHuPMB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0 RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3 M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBtpClMbDNiJIGGKvEmJQGvijWAoDXJgZK1MJ5RUwTF0LHfUcYa5f6 U+FcRAh45BzFrK+1IsWuaatQUmFjz/Uxme9eyeM1MXCXrA+z5et0xgECjuRzkFB3 NDFLGEh8yrX4JZvv6RQU/p+3Fm4FuT6TB8zM5H3o7C76qo3NwOYwnU/Eer+cAcA9 Ht6DJNBawczGiQm1WmRx5sMeZoUMYp/LjVlh0eMDJ5ZB1A7TEePH89aUBT9yLnSe wqw3mtMhGk8dLHHPpb/625LLXIr1Ot5Zz13J4NOAjVnS6EzTwjdaQ+vY2j8gQWg8 R0XL/CH3tCA9xyH0K8e5eJvC6UMIy6zm -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org