$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft File: 7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json) Hash identifier: yJDo14nN56cVA6XgWcBevu5IfqQvHE/K1SsppgnRdOc= Subject key identifier: 1E:7D:F4:DB:6F:52:F9:84:50:C1:81:1E:E5:47:CA:61:4A:07:EE:EF Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7 Certificate issuer: /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft Manifest number: 06C1 Signing time: Sat 18 May 2024 23:05:26 +0000 Manifest this update: Sat 18 May 2024 23:05:26 +0000 Manifest next update: Sat 25 May 2024 23:05:26 +0000 Files and hashes: 1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: TQek7K2DdkkRHaIyUgBdbZbZgJj/UVSROfpxYGedvlQ=) 2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: 7x4qBE67/oDn1y7KkzQ60QdK+Xtk25yoPaLY3rkvEiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7 Validity Not Before: May 18 23:05:26 2024 GMT Not After : May 25 23:05:26 2024 GMT Subject: CN=66493436-f74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:d8:21:10:30:d3:dc:a9:8f:d4:db:d6:f8: 67:d2:79:4b:42:54:63:73:f1:6c:12:d6:19:f0:88: b4:83:30:1c:61:41:99:ca:01:ea:96:75:f7:82:be: ca:a9:46:b8:dd:80:37:d0:7c:1c:8a:22:3f:76:a9: 1b:47:38:90:d9:b1:dc:6d:75:52:db:ba:c8:77:4b: 4e:0f:4f:dc:51:e2:3a:b1:c6:d9:29:f4:b0:e2:5c: f9:89:17:a8:71:1b:e6:7c:f3:57:19:e4:34:74:fc: cf:a3:de:b1:d8:09:f1:50:e4:9c:e2:0d:5f:7a:af: 4b:87:2b:29:14:a0:85:2f:0f:c2:04:ac:11:69:0a: cc:44:fc:af:19:23:3e:e4:af:86:08:b7:89:af:b7: ae:62:86:6e:14:70:4b:37:31:ce:5a:90:36:c8:40: 69:d9:15:b6:7c:1e:cd:40:b0:ff:7c:8d:b2:4e:f8: 3c:d2:ed:1d:55:a0:bd:c9:8a:9a:98:d9:12:ac:2a: 6b:a4:09:4d:b3:80:d2:92:2a:66:63:5e:9f:3f:29: d6:eb:67:a9:ff:f9:6c:d4:f3:08:db:48:e5:5f:08: 75:99:66:55:75:26:f4:79:55:54:7f:79:85:a3:1a: e1:8d:8d:1d:15:0f:cc:40:52:c0:2e:66:71:cf:36: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:F4:DB:6F:52:F9:84:50:C1:81:1E:E5:47:CA:61:4A:07:EE:EF X509v3 Authority Key Identifier: keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:81:f2:a3:b7:19:ed:fc:22:b7:a2:17:ea:62:e1:0c:81:af: 99:b3:f6:40:3c:78:d3:17:80:27:c9:a7:07:e2:58:29:3c:8e: 9b:b1:15:40:40:04:34:72:80:e7:b6:9b:ed:3c:9c:6c:aa:d0: fb:34:4e:f3:bf:77:69:6f:60:25:37:38:5a:7e:78:72:25:7f: 12:dd:2a:c9:ca:12:9f:87:80:07:9a:5e:0c:44:89:e9:91:42: 4d:dc:2c:f8:d4:29:66:d2:62:a9:42:77:71:b4:09:f9:4e:07: 89:c4:f9:6b:41:9d:36:2c:1d:b1:55:a8:f6:9a:0b:ea:ca:b8: fb:61:6d:10:22:69:86:e0:05:11:e5:55:84:30:70:37:ca:f6: 5d:92:83:d3:e6:9a:e4:a5:58:c2:8a:77:c5:13:cf:50:0e:f4: a6:9b:a9:61:95:62:52:f9:fd:41:4a:cc:c7:0a:2a:eb:b3:5b: bc:80:67:8c:ee:a8:ab:f8:5f:a6:c8:10:72:28:3d:e0:4c:d9: 99:c5:81:0e:57:fa:80:7a:9d:2b:fa:bf:d7:b5:73:83:e2:b4: 14:85:5d:ef:c9:98:6a:b8:2b:1d:02:1f:0c:e3:f4:bb:84:eb: ce:3e:1f:d3:60:62:99:00:02:3b:f2:40:bb:49:bc:d2:73:35: cb:3e:9d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4M0ExMTAvBgNVBAUTKEVEQ0RGMDYwQTYxMDJCRkFEMDZFQkE4RDY4MzFEMjg0 OEQxREJERTcwHhcNMjQwNTE4MjMwNTI2WhcNMjQwNTI1MjMwNTI2WjAYMRYwFAYD VQQDEw02NjQ5MzQzNi1mNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zfYIRAw09ypj9Tb1vhn0nlLQlRjc/FsEtYZ8Ii0gzAcYUGZygHqlnX3gr7K qUa43YA30HwciiI/dqkbRziQ2bHcbXVS27rId0tOD0/cUeI6scbZKfSw4lz5iReo cRvmfPNXGeQ0dPzPo96x2AnxUOSc4g1feq9LhyspFKCFLw/CBKwRaQrMRPyvGSM+ 5K+GCLeJr7euYoZuFHBLNzHOWpA2yEBp2RW2fB7NQLD/fI2yTvg80u0dVaC9yYqa mNkSrCprpAlNs4DSkipmY16fPynW62ep//ls1PMI20jlXwh1mWZVdSb0eVVUf3mF oxrhjY0dFQ/MQFLALmZxzzZ4PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB599Ntv UvmEUMGBHuVHymFKB+7vMB8GA1UdIwQYMBaAFO3N8GCmECv60G66jWgx0oSNHb3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzQS8wNzAxQjM0QTEy RDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtfclFicnFOYURIU2hJMGR2 ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjM3dZS1lRS19yUWJycU5hREhTaEkwZHZlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzQS8wNzAxQjM0QTEyRDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtf clFicnFOYURIU2hJMGR2ZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqgfKjtxnt/CK3ohfqYuEMga+Zs/ZAPHjTF4AnyacH4lgpPI6bsRVA QAQ0coDntpvtPJxsqtD7NE7zv3dpb2AlNzhafnhyJX8S3SrJyhKfh4AHml4MRInp kUJN3Cz41Clm0mKpQndxtAn5TgeJxPlrQZ02LB2xVaj2mgvqyrj7YW0QImmG4AUR 5VWEMHA3yvZdkoPT5prkpVjCinfFE89QDvSmm6lhlWJS+f1BSszHCirrs1u8gGeM 7qir+F+myBByKD3gTNmZxYEOV/qAep0r+r/XtXOD4rQUhV3vyZhquCsdAh8M4/S7 hOvOPh/TYGKZAAI78kC7SbzSczXLPp23 -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org