$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: 4EeFm0aswoiKlLGnJOiAkkd1qSNkuar534JSy6MUrPI= Subject key identifier: 11:A4:20:9D:D2:C5:6B:54:52:DC:ED:1A:53:35:19:21:96:43:11:E2 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1E4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1E4D Signing time: Sat 18 May 2024 16:24:13 +0000 Manifest this update: Sat 18 May 2024 16:24:13 +0000 Manifest next update: Sat 25 May 2024 16:24:13 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: Vd/qpfNiSHNI+b9IQburdJWdJrlyzw/pMweKBsm4tC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7757 (0x1e4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: May 18 16:24:13 2024 GMT Not After : May 25 16:24:13 2024 GMT Subject: CN=6648d62d-e82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:70:ee:be:8c:87:91:ea:3e:ba:8f:3e:24: cd:db:cc:bf:a4:d2:2f:8b:35:31:21:8c:16:0a:13: 67:2f:6e:22:3a:db:5a:46:b0:6d:b4:85:d0:4a:cd: 3b:f8:3c:b0:48:2a:f4:f3:80:b1:9b:84:16:95:33: 73:c5:3b:bb:bc:1c:0b:4e:4e:08:eb:5c:a5:c7:2d: e9:1a:b2:e9:c5:c9:cb:1b:93:88:ad:d2:f3:ea:0f: f7:9b:09:7c:4c:f6:79:e7:7f:c4:ce:b8:7f:7a:3f: 27:bd:8e:4c:73:2c:35:a1:9f:cf:bc:8e:6b:3c:2f: 40:4e:25:30:55:df:2b:af:b0:3a:1b:4a:24:5d:3d: 0a:54:e2:8e:b5:aa:ae:10:d7:e2:2f:d4:38:da:95: 87:7f:f4:0e:11:95:96:d3:8f:b4:b2:27:39:9d:b2: b4:a0:b2:fb:b6:f5:a5:1c:7d:1d:ce:ba:d9:b3:74: 6f:d9:98:e2:ba:dc:0b:ad:3d:e7:d9:e4:36:94:f5: a9:69:07:cb:52:1a:fa:49:c4:f6:af:4f:fb:ba:11: df:36:90:96:c0:88:87:cc:c3:67:44:4c:2f:9e:ee: eb:a4:5a:d3:e8:a2:70:01:23:15:7f:d7:49:e0:86: 34:d1:5a:28:80:f8:9f:05:72:97:ed:8e:47:41:18: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A4:20:9D:D2:C5:6B:54:52:DC:ED:1A:53:35:19:21:96:43:11:E2 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d5:a5:eb:5d:46:c3:0e:93:f3:7d:85:3a:2b:b5:93:87:3f: b6:2f:24:60:78:da:b4:0f:52:6f:f2:ba:48:b3:b0:b4:02:b5: c3:c8:bd:cf:6c:ec:61:2a:bb:e6:f3:d1:02:0a:a9:2e:21:38: c1:37:b1:30:e0:09:41:c7:42:48:71:db:a7:3f:5c:5c:06:5e: 67:74:7b:cc:81:60:e9:a0:bf:57:d5:22:2d:66:56:75:8e:75: bc:eb:a4:18:6d:af:60:c8:14:54:bf:4e:e5:8a:41:39:65:52: ea:e2:48:13:08:f6:df:e9:92:06:97:bf:8e:e5:70:32:e9:1f: e2:09:4b:2c:f6:9b:6f:b0:93:db:83:09:8d:e1:02:49:79:47: 0f:fd:c1:2f:11:4c:09:4b:0f:2a:90:92:02:79:30:10:eb:2a: 1e:01:18:a8:36:28:48:b8:34:ad:de:3b:fc:0b:af:07:06:ac: 28:14:9b:47:64:7a:5f:a4:f4:31:33:5c:c6:5f:9b:57:59:e5: 2e:22:4b:f5:08:12:74:51:42:fd:15:b2:6d:c7:e3:70:9b:be: 9a:d0:6b:26:e8:69:82:54:61:87:6c:f8:09:f2:94:07:c4:77: f6:1b:3e:87:41:1d:9b:4f:09:b3:c3:9b:38:49:b8:e0:8d:83: 23:bf:4e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjQwNTE4MTYyNDEzWhcNMjQwNTI1MTYyNDEzWjAYMRYwFAYD VQQDEw02NjQ4ZDYyZC1lODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmJw7r6Mh5HqPrqPPiTN28y/pNIvizUxIYwWChNnL24iOttaRrBttIXQSs07 +DywSCr084Cxm4QWlTNzxTu7vBwLTk4I61ylxy3pGrLpxcnLG5OIrdLz6g/3mwl8 TPZ553/Ezrh/ej8nvY5Mcyw1oZ/PvI5rPC9ATiUwVd8rr7A6G0okXT0KVOKOtaqu ENfiL9Q42pWHf/QOEZWW04+0sic5nbK0oLL7tvWlHH0dzrrZs3Rv2ZjiutwLrT3n 2eQ2lPWpaQfLUhr6ScT2r0/7uhHfNpCWwIiHzMNnREwvnu7rpFrT6KJwASMVf9dJ 4IY00VoogPifBXKX7Y5HQRh9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGkIJ3S xWtUUtztGlM1GSGWQxHiMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl1aXrXUbDDpPzfYU6K7WThz+2LyRgeNq0D1Jv8rpIs7C0ArXDyL3P bOxhKrvm89ECCqkuITjBN7Ew4AlBx0JIcdunP1xcBl5ndHvMgWDpoL9X1SItZlZ1 jnW866QYba9gyBRUv07likE5ZVLq4kgTCPbf6ZIGl7+O5XAy6R/iCUss9ptvsJPb gwmN4QJJeUcP/cEvEUwJSw8qkJICeTAQ6yoeARioNihIuDSt3jv8C68HBqwoFJtH ZHpfpPQxM1zGX5tXWeUuIkv1CBJ0UUL9FbJtx+Nwm76a0Gsm6GmCVGGHbPgJ8pQH xHf2Gz6HQR2bTwmzw5s4SbjgjYMjv06h -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org