$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft File: 7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json) Hash identifier: QWNqMCqdB8sFVtX8DUp37t0xl/BjlAzbuIo46pmaRNE= Subject key identifier: 25:69:65:32:49:0C:B7:5A:CF:AA:C3:E3:61:23:F6:EB:A6:46:60:CA Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D Certificate issuer: /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft Manifest number: 76 Signing time: Sun 19 May 2024 07:21:42 +0000 Manifest this update: Sun 19 May 2024 07:21:42 +0000 Manifest next update: Sun 26 May 2024 07:21:42 +0000 Files and hashes: 1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: FlcryRjXF/INnMJqQfGbD/sUMslKdYoU38hhOvrxntw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Validity Not Before: May 19 07:21:42 2024 GMT Not After : May 26 07:21:42 2024 GMT Subject: CN=6649a886-35fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e9:74:96:7d:dc:ba:45:27:9a:61:ec:9c:92: 51:77:64:5a:0c:5c:97:f0:6d:87:49:54:8d:c3:f8: 8d:56:7b:f3:13:fa:af:c6:82:10:0d:fe:a2:6f:70: 41:a5:32:f9:ca:cf:80:1a:ac:93:fb:45:cd:b3:75: 48:cb:72:26:ed:1a:d7:8e:67:94:77:70:a5:de:e4: 2a:2e:04:66:4d:fb:1c:6e:6a:2a:43:52:18:3b:5b: c8:c7:91:c6:da:c9:d6:ca:53:5f:21:d3:55:84:e3: 75:b5:26:e9:43:af:87:ae:95:0b:b9:c0:4e:c5:7c: 3a:a2:a1:0e:01:ef:6c:87:10:d3:14:e5:c8:a2:69: 4d:0a:4c:65:3b:31:18:59:1a:1e:26:54:9d:d5:1a: 17:d5:06:a3:9d:82:21:21:aa:d7:5c:4f:97:1c:bf: 86:1e:5e:9f:c5:3f:21:c4:f8:64:2b:15:29:72:b0: de:b0:8f:b7:d9:31:4c:0a:09:b4:fd:63:ec:b5:ca: 7b:e7:f3:d8:a3:ad:79:79:5b:18:a0:fb:61:d6:47: 85:f6:ff:22:e2:bf:6c:31:46:3f:cd:d3:b7:d2:bd: f2:15:b4:e4:3c:f8:56:ca:5f:55:ae:4b:21:bd:28: 5a:4d:08:c0:c5:01:b3:8e:08:99:c9:6b:fc:7c:c8: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:69:65:32:49:0C:B7:5A:CF:AA:C3:E3:61:23:F6:EB:A6:46:60:CA X509v3 Authority Key Identifier: keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:a1:83:3d:1a:2d:2d:43:67:72:fd:76:8e:ab:d7:86:a8: f7:e1:70:1e:48:11:79:c0:7c:0f:03:ff:dd:a0:37:e8:7d:66: 68:18:c0:52:73:f8:72:b2:22:03:5c:70:33:ef:79:83:5e:92: 3a:ad:22:4b:89:a8:d1:32:75:f7:b3:fb:4f:c5:0c:f8:cd:49: 1b:b1:c9:34:1a:3b:06:e6:d4:21:d9:e5:0f:0c:14:7f:89:48: 52:70:ef:aa:1b:99:42:e0:44:3c:20:c0:1c:25:42:cf:d1:55: d4:de:78:dd:f8:8d:0c:c3:a1:03:3d:e0:36:28:5f:bd:e8:38: 10:82:5e:2f:6f:40:d5:a4:c6:1e:53:10:d5:20:39:71:2c:b0: 5d:54:63:9e:22:6a:b4:7b:b6:d0:a9:52:84:f7:29:8b:f1:e5: 83:19:cb:59:d7:5a:d0:13:a4:fc:30:38:65:f7:59:31:43:00: 2d:0e:13:e3:1c:b6:b9:bb:6c:ca:8b:d7:1f:26:87:a5:bc:7f: d4:07:09:78:2e:c2:af:8a:01:f4:a8:70:31:70:94:1b:78:07: 96:05:d1:27:b1:80:3a:cf:b8:93:9c:ec:52:17:6b:5e:4f:8e: 92:d3:51:f6:ad:88:ff:20:6c:aa:0f:63:b0:13:7c:8e:27:88: d3:7c:d7:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkY2MjExMC8GA1UEBRMoRUVFQzUzRUFEMTdGQkY4OUIyMjFEOUJBNUFGQ0QwMTA3 OTBDOTk0RDAeFw0yNDA1MTkwNzIxNDJaFw0yNDA1MjYwNzIxNDJaMBgxFjAUBgNV BAMTDTY2NDlhODg2LTM1ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw6XSWfdy6RSeaYeycklF3ZFoMXJfwbYdJVI3D+I1We/MT+q/GghAN/qJvcEGl MvnKz4AarJP7Rc2zdUjLcibtGteOZ5R3cKXe5CouBGZN+xxuaipDUhg7W8jHkcba ydbKU18h01WE43W1JulDr4eulQu5wE7FfDqioQ4B72yHENMU5ciiaU0KTGU7MRhZ Gh4mVJ3VGhfVBqOdgiEhqtdcT5ccv4YeXp/FPyHE+GQrFSlysN6wj7fZMUwKCbT9 Y+y1ynvn89ijrXl5Wxig+2HWR4X2/yLiv2wxRj/N07fSvfIVtOQ8+FbKX1WuSyG9 KFpNCMDFAbOOCJnJa/x8yM1/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJWllMkkM t1rPqsPjYSP266ZGYMowHwYDVR0jBBgwFoAU7uxT6tF/v4myIdm6WvzQEHkMmU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRjYyLzFBOEEwNjY0NjI2 MjExRUU4MEJDODU1REM0RjlBRTAyLzd1eFQ2dEZfdjRteUlkbTZXdnpRRUhrTW1V MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3V4VDZ0Rl92NG15SWRtNld2elFFSGtNbVUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RjYyLzFBOEEwNjY0NjI2MjExRUU4MEJDODU1REM0RjlBRTAyLzd1eFQ2dEZfdjRt eUlkbTZXdnpRRUhrTW1VMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAT+oYM9Gi0tQ2dy/XaOq9eGqPfhcB5IEXnAfA8D/92gN+h9ZmgYwFJz +HKyIgNccDPveYNekjqtIkuJqNEydfez+0/FDPjNSRuxyTQaOwbm1CHZ5Q8MFH+J SFJw76obmULgRDwgwBwlQs/RVdTeeN34jQzDoQM94DYoX73oOBCCXi9vQNWkxh5T ENUgOXEssF1UY54iarR7ttCpUoT3KYvx5YMZy1nXWtATpPwwOGX3WTFDAC0OE+Mc trm7bMqL1x8mh6W8f9QHCXguwq+KAfSocDFwlBt4B5YF0SexgDrPuJOc7FIXa15P jpLTUfatiP8gbKoPY7ATfI4niNN812w= -----END CERTIFICATE-----Generated at Sun May 19 08:25:08 2024 by rpki-client on console-ams.rpki-client.org