$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: jmBUAxDEIvV40W+UbHO14rMsKDrRlwKOWPcCDYHTAg0= Subject key identifier: 86:24:EC:15:71:D5:03:79:0B:4E:79:77:D6:49:B5:4B:AF:E4:81:5C Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 0579 Signing time: Sat 01 Jun 2024 01:31:06 +0000 Manifest this update: Sat 01 Jun 2024 01:31:05 +0000 Manifest next update: Sat 08 Jun 2024 01:31:05 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: 8ceXVCxr6+0vUyPsgHOxNaiy2BmzjllvKyVYD8opJMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Jun 1 01:31:05 2024 GMT Not After : Jun 8 01:31:05 2024 GMT Subject: CN=665a79da-d260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:60:84:c2:fb:f5:a3:fd:9e:fd:8c:71:ba: 32:d0:11:57:79:8f:70:91:38:29:c2:95:2d:4d:da: 07:8b:c0:86:b5:1d:ca:6a:ea:86:36:da:e9:7e:36: db:2e:d1:e5:67:45:84:7f:11:3d:b9:fd:c9:83:d1: 4d:8e:74:49:73:fa:a3:5e:b2:11:f2:8e:c2:f9:3f: 48:7c:df:0b:86:41:86:2a:c3:93:af:8b:3a:8a:39: 12:4f:13:12:40:e1:2b:61:c8:95:a9:67:45:3f:02: bb:27:92:f9:64:a0:82:3a:16:f8:49:cd:32:ea:cb: 38:30:07:1b:bc:cc:d7:1f:b3:68:e4:b6:21:70:9a: 16:54:86:57:b2:d8:29:93:ab:dc:f3:08:41:83:97: de:b9:1c:db:45:de:cf:58:0c:80:d4:c1:d0:9b:8d: ab:9f:0c:43:e8:cf:ed:12:bf:75:18:4c:0e:36:d5: 9e:39:f0:27:3d:32:2b:5d:56:c9:87:38:7e:7a:d3: 7b:e6:4e:af:96:f0:18:0d:d5:e7:68:e4:a6:e2:59: de:d7:5f:a4:93:de:6e:47:f0:73:13:cf:f3:60:07: d4:93:07:fd:7f:31:f9:3f:57:d0:dd:f2:33:77:b7: 6a:a7:08:aa:88:9a:76:4d:30:bf:9d:51:55:c6:57: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:24:EC:15:71:D5:03:79:0B:4E:79:77:D6:49:B5:4B:AF:E4:81:5C X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:60:5c:16:f6:92:d1:14:2d:4c:b5:09:98:fd:e5:25:88:6f: 53:15:83:d7:86:d1:c5:ba:fe:f6:fe:78:4b:30:8a:3d:69:bf: 2f:f9:8c:2b:1c:1a:fb:95:88:ab:39:83:53:38:a7:b4:92:26: cc:cb:af:74:0c:10:7e:1c:8f:8f:9b:21:61:4e:30:5e:00:9b: 8b:09:44:75:a7:51:fa:a6:17:e8:f2:c7:23:c7:a9:57:31:0b: 8a:d0:aa:80:b1:ac:c4:9b:c2:17:67:c2:9d:ad:89:5e:d2:88: 4d:08:b3:a0:3a:a4:f3:0d:97:78:82:26:7c:f3:10:93:b4:87: da:35:76:c6:1c:50:e4:e5:24:32:5f:98:35:7b:6a:b7:02:2c: 62:4d:35:b8:eb:84:15:50:e2:6d:0d:68:74:51:12:14:56:b4: f8:c5:02:13:aa:21:c0:d9:fb:67:06:8b:1e:98:3a:d1:ba:ef: 55:f0:87:85:87:75:26:19:3c:a5:0c:62:71:95:8a:bb:3a:7a: a4:28:84:3a:01:86:cc:aa:69:79:8c:40:e2:89:2a:a8:bc:bc: f0:fb:5c:fb:b7:b8:d4:aa:93:58:a3:79:f6:5c:04:c2:09:a3: 5a:0f:ca:1a:98:c8:d1:99:39:5d:a2:11:05:02:55:fc:d7:41: 87:12:0f:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjQwNjAxMDEzMTA1WhcNMjQwNjA4MDEzMTA1WjAYMRYwFAYD VQQDEw02NjVhNzlkYS1kMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroBghML79aP9nv2Mcboy0BFXeY9wkTgpwpUtTdoHi8CGtR3KauqGNtrpfjbb LtHlZ0WEfxE9uf3Jg9FNjnRJc/qjXrIR8o7C+T9IfN8LhkGGKsOTr4s6ijkSTxMS QOErYciVqWdFPwK7J5L5ZKCCOhb4Sc0y6ss4MAcbvMzXH7No5LYhcJoWVIZXstgp k6vc8whBg5feuRzbRd7PWAyA1MHQm42rnwxD6M/tEr91GEwONtWeOfAnPTIrXVbJ hzh+etN75k6vlvAYDdXnaOSm4lne11+kk95uR/BzE8/zYAfUkwf9fzH5P1fQ3fIz d7dqpwiqiJp2TTC/nVFVxleTkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYk7BVx 1QN5C055d9ZJtUuv5IFcMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxYFwW9pLRFC1MtQmY/eUliG9TFYPXhtHFuv72/nhLMIo9ab8v+Ywr HBr7lYirOYNTOKe0kibMy690DBB+HI+PmyFhTjBeAJuLCUR1p1H6phfo8scjx6lX MQuK0KqAsazEm8IXZ8KdrYle0ohNCLOgOqTzDZd4giZ88xCTtIfaNXbGHFDk5SQy X5g1e2q3AixiTTW464QVUOJtDWh0URIUVrT4xQITqiHA2ftnBosemDrRuu9V8IeF h3UmGTylDGJxlYq7OnqkKIQ6AYbMqml5jEDiiSqovLzw+1z7t7jUqpNYo3n2XATC CaNaD8oamMjRmTldohEFAlX810GHEg9J -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:32 2024 by rpki-client on console-ams.rpki-client.org