$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: 1BvBCq7pCkmYq1zVusZ/RqMlUtffs/ce+JjBhOr+rJQ= Subject key identifier: 4F:E8:90:B6:11:C8:1C:57:C2:15:90:1B:D7:AF:B5:FD:A9:E6:96:51 Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0C5D Signing time: Sat 18 May 2024 18:54:34 +0000 Manifest this update: Sat 18 May 2024 18:54:34 +0000 Manifest next update: Sat 25 May 2024 18:54:33 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: LSfsRRRR9s+gTUdpQBHsB51HLlJ3P6zu01GtkP4ZHZo=) 2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: xXMoWckO51I4mArTtMuq39Mlgrtlx9fnP9Y8culZBac=) 3: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: G+Hg04K214tOW+obz1Ogpl9COrBHiRBCE7c3okXDxqo=) 4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: Qo9ujKHP/HIgjR+Cul2ZeUPgzD/7WS2wzo33IIGZAg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: May 18 18:54:34 2024 GMT Not After : May 25 18:54:33 2024 GMT Subject: CN=6648f96a-99ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:52:85:83:95:39:28:5d:3f:2b:f2:88:7f: 21:ba:2b:f6:80:8c:15:47:23:29:d9:e5:04:70:29: a8:9e:5f:34:9b:c2:1f:f6:49:a3:85:38:80:42:63: bd:ea:5e:1b:92:a8:88:19:42:df:8f:19:13:10:68: 1b:13:ce:be:4a:e2:16:b9:25:70:02:a3:d7:72:b9: bb:d4:32:1c:77:17:85:36:bc:6d:4e:86:5b:d9:7b: ac:00:5c:1b:cd:e6:43:f0:10:dc:47:0f:c4:e5:6b: 27:c5:c5:59:4a:44:86:f1:d1:ca:96:19:15:aa:77: 1d:e1:65:3e:7a:ec:2b:49:68:4c:19:9c:47:a0:93: 61:82:1c:dd:d5:fa:a0:fd:34:c0:fe:d0:90:e7:0b: c0:43:74:7c:83:fa:10:24:d7:21:f3:4f:ed:db:ee: d6:54:70:2b:4f:23:4b:77:75:3e:05:e8:d7:26:50: 27:09:50:c1:f2:1f:78:24:1b:f6:3b:02:4b:89:d1: 51:b8:00:0f:8a:c9:1f:55:8c:88:9e:c8:43:6b:e9: 4e:f9:7f:17:27:de:12:f0:2b:b8:da:b6:fc:8c:e0: 1c:ea:05:dc:1d:fe:5b:eb:f8:54:2a:a2:75:9f:4d: 09:dd:b8:4d:1f:39:5e:a1:ac:4c:d2:2c:09:13:bd: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E8:90:B6:11:C8:1C:57:C2:15:90:1B:D7:AF:B5:FD:A9:E6:96:51 X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:23:6a:1b:d0:fe:f6:2b:87:62:7f:2e:3c:6b:fc:e1:ea:c7: 30:99:46:7a:47:f9:58:73:ad:27:98:4a:85:10:f4:66:2c:a1: 37:ea:39:de:e8:9b:73:bf:04:ea:62:08:31:9f:fe:21:23:00: d2:49:02:dc:2d:47:f0:a8:af:24:ef:b4:0b:17:59:a0:23:13: 25:0f:e3:e3:17:43:ce:d2:dc:67:8a:d1:cf:ed:91:aa:26:33: 95:bc:3b:57:a4:1b:09:b0:27:4d:4f:d0:b8:b8:d6:47:e3:cf: e0:01:e2:92:69:f0:11:65:e3:a6:c1:3b:40:b9:39:1c:0b:ec: 96:6d:c2:a3:cc:e4:f6:ed:76:69:51:6d:6d:a2:46:1e:34:a3: e7:25:6b:60:aa:cc:2f:8f:62:ed:45:18:9e:23:3a:d9:bd:7c: ef:2b:64:5a:22:e9:ce:9e:af:0e:51:6d:87:02:fd:c5:59:20: 7a:d7:cf:6f:3d:37:52:4e:ab:20:e3:84:08:60:3a:a7:75:97: 89:fb:aa:e1:1b:16:43:1b:c6:fd:5b:6e:19:83:7c:20:c7:58: e1:c8:4b:14:4d:b6:45:8c:11:93:4f:9d:75:bc:79:87:19:22: e1:96:cb:4f:00:3f:d8:dd:7f:36:7e:07:73:8f:22:c0:6c:6a: 7b:87:3a:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjQwNTE4MTg1NDM0WhcNMjQwNTI1MTg1NDMzWjAYMRYwFAYD VQQDEw02NjQ4Zjk2YS05OWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYpShYOVOShdPyvyiH8huiv2gIwVRyMp2eUEcCmonl80m8If9kmjhTiAQmO9 6l4bkqiIGULfjxkTEGgbE86+SuIWuSVwAqPXcrm71DIcdxeFNrxtToZb2XusAFwb zeZD8BDcRw/E5WsnxcVZSkSG8dHKlhkVqncd4WU+euwrSWhMGZxHoJNhghzd1fqg /TTA/tCQ5wvAQ3R8g/oQJNch80/t2+7WVHArTyNLd3U+BejXJlAnCVDB8h94JBv2 OwJLidFRuAAPiskfVYyInshDa+lO+X8XJ94S8Cu42rb8jOAc6gXcHf5b6/hUKqJ1 n00J3bhNHzleoaxM0iwJE732MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/okLYR yBxXwhWQG9evtf2p5pZRMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoI2ob0P72K4dify48a/zh6scwmUZ6R/lYc60nmEqFEPRmLKE36jne 6JtzvwTqYggxn/4hIwDSSQLcLUfwqK8k77QLF1mgIxMlD+PjF0PO0txnitHP7ZGq JjOVvDtXpBsJsCdNT9C4uNZH48/gAeKSafARZeOmwTtAuTkcC+yWbcKjzOT27XZp UW1tokYeNKPnJWtgqswvj2LtRRieIzrZvXzvK2RaIunOnq8OUW2HAv3FWSB6189v PTdSTqsg44QIYDqndZeJ+6rhGxZDG8b9W24Zg3wgx1jhyEsUTbZFjBGTT511vHmH GSLhlstPAD/Y3X82fgdzjyLAbGp7hzpy -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org