$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: 38C99e795f0jH8PDS9GzAyweZeLIBrrBkjU84NLwqp0= Subject key identifier: 8B:76:F0:CE:9A:D8:08:2D:0F:F0:B1:7D:EA:FA:4E:E6:F0:FE:5C:89 Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1B20 Signing time: Sat 18 May 2024 16:41:33 +0000 Manifest this update: Sat 18 May 2024 16:41:33 +0000 Manifest next update: Sat 25 May 2024 16:41:33 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: nNQr8j+qu6C5uFTbokQL+iBhJudI3sttOvFRcjDTQgg=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: COpy3wNQKKXf0gi8P4Zw6djZ0b1PLCpYKSkn41WwHKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6968 (0x1b38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: May 18 16:41:33 2024 GMT Not After : May 25 16:41:33 2024 GMT Subject: CN=6648da3d-268e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:09:fb:dd:e4:51:5e:b9:05:98:06:16:cd:cd: f9:04:8e:bf:0f:f4:92:4c:02:07:8c:03:29:24:d8: 2b:07:c7:7c:02:6a:59:fc:f0:b7:b2:5e:c6:de:cc: 51:c4:79:b1:2d:e2:a6:d3:30:d0:e2:f2:41:e2:a1: dc:0a:e7:bb:8d:97:8a:13:f4:23:54:59:6d:6f:9e: 6e:a4:03:6d:fb:62:a3:e6:20:16:3b:01:5b:7e:33: 70:fb:44:b3:1b:84:a0:50:26:38:00:ea:9f:2b:60: 49:67:0c:91:7d:77:57:49:53:6f:6b:a7:b6:75:3a: fc:4e:b0:ab:e7:3c:87:64:83:a7:6d:c0:d8:7e:9e: 24:99:f3:74:9c:d4:f5:71:ab:24:a1:bf:c6:b9:1e: a0:7b:ef:3b:11:16:b6:3d:7a:73:8d:4d:f1:4f:fc: b6:b7:c0:5f:34:f7:64:53:65:c7:24:b6:63:c1:f2: 2c:58:8b:b7:d1:7a:88:a0:5a:3e:6f:fa:10:ca:1e: 64:5a:61:50:90:6f:e8:6c:b6:b1:26:4c:a2:ef:23: 08:ff:b7:44:76:e5:77:29:23:24:83:1e:15:3e:62: 01:4c:7d:ab:46:1b:32:3a:bb:4c:b8:4b:7a:bf:06: 59:e8:d8:a9:25:39:8d:77:e7:bb:ad:c6:2e:83:5d: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:F0:CE:9A:D8:08:2D:0F:F0:B1:7D:EA:FA:4E:E6:F0:FE:5C:89 X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d6:33:23:e7:ba:ed:8c:3d:ed:f5:67:bd:d3:1e:e3:39:50: 3c:06:a7:df:e8:91:ce:4e:b6:3b:5c:1b:3d:75:b8:50:c8:78: 4d:99:ac:54:ee:32:94:d8:4c:fb:a9:68:5c:ca:fc:ca:e5:e6: 0a:f2:61:e7:d9:51:ac:74:8d:03:b2:1d:13:d7:93:b4:b1:5f: 99:33:77:b1:82:e5:f8:3c:cd:4e:f6:02:23:c5:ab:40:bf:d6: d9:46:5e:22:72:f3:62:39:28:f0:61:6e:ed:24:12:10:d2:53: d2:3f:9c:e4:a1:e2:81:c7:56:34:b9:66:23:85:a7:0f:a5:fb: da:3a:ee:90:d3:56:cb:e7:cf:03:12:67:b8:25:8a:80:8d:b3: 94:c9:77:0c:8a:d7:ee:20:4a:65:51:d6:69:1b:8a:45:af:2d: ba:80:1c:b6:29:b0:db:d3:c6:49:0c:fe:0b:7e:91:3f:1f:c0: 43:df:d8:ef:f3:5f:b5:98:db:20:9f:1a:f9:3d:78:f1:32:51: 07:d7:02:7c:51:dd:78:93:71:ab:b6:5c:e7:e1:de:1e:6d:56: ea:8d:83:3b:98:ed:65:5f:5c:bf:20:84:ff:0f:39:06:bf:fe: c3:46:e2:e8:0e:76:25:fa:ae:95:5b:42:43:73:14:9b:2c:cd: 84:8b:c2:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjQwNTE4MTY0MTMzWhcNMjQwNTI1MTY0MTMzWjAYMRYwFAYD VQQDEw02NjQ4ZGEzZC0yNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7An73eRRXrkFmAYWzc35BI6/D/SSTAIHjAMpJNgrB8d8AmpZ/PC3sl7G3sxR xHmxLeKm0zDQ4vJB4qHcCue7jZeKE/QjVFltb55upANt+2Kj5iAWOwFbfjNw+0Sz G4SgUCY4AOqfK2BJZwyRfXdXSVNva6e2dTr8TrCr5zyHZIOnbcDYfp4kmfN0nNT1 caskob/GuR6ge+87ERa2PXpzjU3xT/y2t8BfNPdkU2XHJLZjwfIsWIu30XqIoFo+ b/oQyh5kWmFQkG/obLaxJkyi7yMI/7dEduV3KSMkgx4VPmIBTH2rRhsyOrtMuEt6 vwZZ6NipJTmNd+e7rcYug11+iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt28M6a 2AgtD/Cxfer6Tubw/lyJMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA71jMj57rtjD3t9We90x7jOVA8Bqff6JHOTrY7XBs9dbhQyHhNmaxU 7jKU2Ez7qWhcyvzK5eYK8mHn2VGsdI0Dsh0T15O0sV+ZM3exguX4PM1O9gIjxatA v9bZRl4icvNiOSjwYW7tJBIQ0lPSP5zkoeKBx1Y0uWYjhacPpfvaOu6Q01bL588D Eme4JYqAjbOUyXcMitfuIEplUdZpG4pFry26gBy2KbDb08ZJDP4LfpE/H8BD39jv 81+1mNsgnxr5PXjxMlEH1wJ8Ud14k3Grtlzn4d4ebVbqjYM7mO1lX1y/IIT/DzkG v/7DRuLoDnYl+q6VW0JDcxSbLM2Ei8JK -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org