$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: 7X5+9Qt/IflXiaN/Gl/vZQGbfPBdNIoRbjWS7ddatos= Subject key identifier: B6:02:37:ED:71:48:B6:8B:D6:13:9E:30:F1:7A:C4:9C:60:04:D7:46 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 87 Signing time: Sun 19 May 2024 07:06:24 +0000 Manifest this update: Sun 19 May 2024 07:06:24 +0000 Manifest next update: Sun 26 May 2024 07:06:24 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: E3qlHt5ny6heJirG7hl+wNnjtZA4xyvvUq+Nz3FPUvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: May 19 07:06:24 2024 GMT Not After : May 26 07:06:24 2024 GMT Subject: CN=6649a4f0-74e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:d3:3f:93:28:fd:de:22:4f:7e:21:88:e0: 97:db:1e:06:00:68:bb:08:21:95:74:00:64:5b:0d: 41:73:14:f5:15:19:37:53:91:7a:22:50:b7:c8:71: a1:23:dd:54:91:96:24:01:7c:81:e1:ce:d8:1d:c7: 84:03:c0:a1:5b:7a:b2:8b:02:95:ce:93:d6:de:36: 8c:ec:07:70:e0:b2:9e:fb:53:d1:a4:28:48:fe:bc: b1:d1:49:fb:70:9b:39:f1:b9:1b:ab:c1:6a:eb:d5: cd:34:03:8b:5e:1c:2c:2f:c4:80:03:d8:a8:3d:00: bf:64:c4:af:36:4b:ca:52:4b:ab:ec:09:1a:1e:b6: 37:76:d6:00:72:a7:9f:05:59:09:da:0f:57:32:07: 04:6c:fc:b3:67:9e:b6:3a:4c:c2:4f:01:21:16:25: 76:88:e0:b0:ea:3d:66:0e:4b:d8:71:24:50:ef:59: a4:ef:57:69:00:cd:43:b1:3f:4d:d6:40:74:f1:76: 83:5f:8a:a0:a4:ef:fa:c9:c8:f9:7c:3c:95:71:8d: 26:9b:07:ff:91:11:e5:48:8a:45:1e:0e:3d:23:3e: aa:b6:d7:e8:6b:f2:a0:de:68:ba:82:15:d0:8a:66: 0b:14:16:7d:e0:19:97:82:95:de:11:5f:a9:8f:5b: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:37:ED:71:48:B6:8B:D6:13:9E:30:F1:7A:C4:9C:60:04:D7:46 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:73:a0:28:20:31:fb:51:1b:6e:ac:3c:5a:e9:63:55:51:ec: d0:80:c4:e0:a2:6d:1a:8a:6b:dc:a3:15:41:fb:19:90:15:c7: e0:a6:9e:05:66:3e:59:4d:8b:51:9d:1e:f1:89:fc:54:4c:03: c6:66:11:17:1c:32:52:18:fc:54:20:6b:63:ac:2f:79:af:d4: de:dd:39:05:c3:1e:d0:f6:45:f9:ab:f4:eb:9f:c1:03:9c:b5: 17:da:90:1b:41:cf:84:e8:19:4a:40:69:3d:1e:4a:43:fc:56: b0:89:25:8d:df:ee:b9:d8:5b:71:2a:b6:ce:2a:59:6b:db:ee: 31:a4:64:44:f8:b2:14:47:7d:3b:95:6c:8f:e5:4c:39:56:67: a0:85:ad:c6:a2:83:06:c8:a1:78:02:0c:63:55:d7:72:60:34: aa:94:bc:f7:d6:46:bf:df:9b:0d:30:ae:b7:2d:09:bb:07:22: df:b5:77:bf:34:55:1c:27:39:ab:a3:c7:b2:04:6b:8c:b7:2f: cb:22:ae:e8:ec:36:1c:66:b6:8c:d8:6f:57:77:9c:97:7c:04: fe:2c:cd:61:79:94:f2:41:ed:8e:7d:51:d7:01:fe:9b:60:2f: c2:a0:c6:84:5a:30:1a:a6:7a:85:39:d5:6e:f5:f1:aa:cb:05: 5f:c1:3d:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjQwNTE5MDcwNjI0WhcNMjQwNTI2MDcwNjI0WjAYMRYwFAYD VQQDEw02NjQ5YTRmMC03NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAbTP5Mo/d4iT34hiOCX2x4GAGi7CCGVdABkWw1BcxT1FRk3U5F6IlC3yHGh I91UkZYkAXyB4c7YHceEA8ChW3qyiwKVzpPW3jaM7Adw4LKe+1PRpChI/ryx0Un7 cJs58bkbq8Fq69XNNAOLXhwsL8SAA9ioPQC/ZMSvNkvKUkur7AkaHrY3dtYAcqef BVkJ2g9XMgcEbPyzZ562OkzCTwEhFiV2iOCw6j1mDkvYcSRQ71mk71dpAM1DsT9N 1kB08XaDX4qgpO/6ycj5fDyVcY0mmwf/kRHlSIpFHg49Iz6qttfoa/Kg3mi6ghXQ imYLFBZ94BmXgpXeEV+pj1u2qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYCN+1x SLaL1hOeMPF6xJxgBNdGMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIc6AoIDH7URturDxa6WNVUezQgMTgom0aimvcoxVB+xmQFcfgpp4F Zj5ZTYtRnR7xifxUTAPGZhEXHDJSGPxUIGtjrC95r9Te3TkFwx7Q9kX5q/Trn8ED nLUX2pAbQc+E6BlKQGk9HkpD/FawiSWN3+652FtxKrbOKllr2+4xpGRE+LIUR307 lWyP5Uw5Vmegha3GooMGyKF4AgxjVddyYDSqlLz31ka/35sNMK63LQm7ByLftXe/ NFUcJzmro8eyBGuMty/LIq7o7DYcZraM2G9Xd5yXfAT+LM1heZTyQe2OfVHXAf6b YC/CoMaEWjAapnqFOdVu9fGqywVfwT1T -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org