$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json) Hash identifier: t/q0OSxD7Qhyr9U4K3SWqdlg67IIBups8ttwJ+zQHTY= Subject key identifier: F2:40:36:59:AD:C6:08:BF:DD:E3:0E:4A:B6:C4:9C:44:00:CB:05:4C Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft Manifest number: 064A Signing time: Sat 18 May 2024 14:55:37 +0000 Manifest this update: Sat 18 May 2024 14:55:37 +0000 Manifest next update: Sat 25 May 2024 14:55:37 +0000 Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: no/i9wZQ2dRJq5EP3lIkjT01RD9qhpn1zDe8/4JJbyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Validity Not Before: May 18 14:55:37 2024 GMT Not After : May 25 14:55:37 2024 GMT Subject: CN=6648c169-1e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:1d:ae:fb:9b:00:7d:0a:34:0f:b0:f6:59: 0a:29:2d:b3:b7:3a:02:31:3e:b7:b0:63:28:b2:b4: 99:f4:ed:33:c5:64:9a:97:10:fc:d9:39:12:14:d2: db:f8:2d:87:e5:0d:22:5d:38:f7:24:57:cd:cc:1c: 90:77:e5:cb:eb:05:c0:5a:8f:25:49:46:c3:f5:0f: 15:a8:72:cc:cc:d4:e1:d5:cd:c4:0f:b2:4d:bf:b7: 4f:1d:cf:11:07:44:d6:b5:f3:7b:ea:e0:2e:7e:c8: 1d:66:56:46:40:c6:1f:0a:35:79:1f:e5:32:c1:54: 22:17:34:97:aa:0c:4b:1e:2d:41:13:f4:8f:f3:e0: c9:b6:71:63:51:c5:6a:4d:80:b4:9c:7a:3e:01:3d: e3:52:72:60:c4:68:34:57:da:ce:6a:5c:04:8a:f8: 99:75:36:36:2c:db:ad:08:52:49:ca:df:55:03:a6: d0:1e:e4:4b:b4:c9:38:d6:17:d7:7f:f7:ae:6e:fa: 34:bb:83:d6:1b:52:17:af:db:40:c1:f1:bb:31:59: c6:aa:97:86:75:4f:06:48:03:96:fe:02:5c:ac:97: 90:a5:85:55:b1:65:5b:5f:5f:82:be:d2:97:7e:4e: 42:15:e1:b8:e3:c6:67:8b:a7:68:67:c9:d9:8f:19: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:40:36:59:AD:C6:08:BF:DD:E3:0E:4A:B6:C4:9C:44:00:CB:05:4C X509v3 Authority Key Identifier: keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:29:43:cb:fd:7b:4b:6c:51:d9:f2:35:41:14:33:1f:8c:1e: 0a:46:4d:9b:b6:96:6e:0f:a2:f4:56:98:7e:a3:17:1e:83:f3: 48:26:d7:ae:f5:50:84:1a:3b:cd:32:57:ec:e2:83:e2:48:9b: 18:7a:d2:df:58:5b:d6:d4:ac:7a:2c:3e:c7:a9:c7:b3:cd:af: b3:93:41:70:0b:fa:76:79:96:0d:ba:44:dc:59:07:87:8d:4e: 51:c2:9e:74:6e:cc:a9:ef:df:df:81:a7:30:20:81:af:52:88: 31:83:78:8d:7c:da:13:31:41:79:d1:0c:b8:5e:56:ed:55:60: d3:a6:49:b7:ef:81:82:63:5b:32:27:7a:45:8e:98:17:8f:ba: f3:8a:a4:52:87:ed:e5:ff:de:a9:1b:35:39:b9:6e:c1:42:ee: 75:8b:9a:39:da:0a:5e:3b:1d:dd:49:c6:fe:34:38:a7:13:d1: 67:e4:b2:eb:d2:4a:c5:5a:c2:ba:52:cd:8e:d5:d8:89:0e:29: a1:96:5e:ce:ec:66:46:98:38:ba:f4:80:0e:a9:3c:e9:f5:d9: 5a:e8:24:e8:96:68:ec:87:89:c6:8c:85:05:12:02:27:88:ae: 66:6f:18:84:af:5e:b0:db:f6:24:76:e0:6f:23:91:a1:31:91: fa:90:8e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKDk4NkIwRDUzNzY0QkM4M0RDMEUwNzJFQ0FGMzY5Qzc5 RjIyQTM5RDcwHhcNMjQwNTE4MTQ1NTM3WhcNMjQwNTI1MTQ1NTM3WjAYMRYwFAYD VQQDEw02NjQ4YzE2OS0xZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qEdrvubAH0KNA+w9lkKKS2ztzoCMT63sGMosrSZ9O0zxWSalxD82TkSFNLb +C2H5Q0iXTj3JFfNzByQd+XL6wXAWo8lSUbD9Q8VqHLMzNTh1c3ED7JNv7dPHc8R B0TWtfN76uAufsgdZlZGQMYfCjV5H+UywVQiFzSXqgxLHi1BE/SP8+DJtnFjUcVq TYC0nHo+AT3jUnJgxGg0V9rOalwEiviZdTY2LNutCFJJyt9VA6bQHuRLtMk41hfX f/eubvo0u4PWG1IXr9tAwfG7MVnGqpeGdU8GSAOW/gJcrJeQpYVVsWVbX1+CvtKX fk5CFeG448Zni6doZ8nZjxlsmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJANlmt xgi/3eMOSrbEnEQAywVMMB8GA1UdIwQYMBaAFJhrDVN2S8g9wOBy7K82nHnyKjnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xM0NBODJGQTQz RkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlEM0E0SExzcnphY2VmSXFP ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Hc05VM1pMeUQzQTRITHNyemFjZWZJcU9kYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xM0NBODJGQTQzRkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlE M0E0SExzcnphY2VmSXFPZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKUPL/XtLbFHZ8jVBFDMfjB4KRk2btpZuD6L0Vph+oxceg/NIJteu 9VCEGjvNMlfs4oPiSJsYetLfWFvW1Kx6LD7Hqcezza+zk0FwC/p2eZYNukTcWQeH jU5Rwp50bsyp79/fgacwIIGvUogxg3iNfNoTMUF50Qy4XlbtVWDTpkm374GCY1sy J3pFjpgXj7rziqRSh+3l/96pGzU5uW7BQu51i5o52gpeOx3dScb+NDinE9Fn5LLr 0krFWsK6Us2O1diJDimhll7O7GZGmDi69IAOqTzp9dla6CTolmjsh4nGjIUFEgIn iK5mbxiEr16w2/YkduBvI5GhMZH6kI4p -----END CERTIFICATE-----Generated at Sat May 18 15:58:26 2024 by rpki-client on console-ams.rpki-client.org