$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: cXTo4iGHO4bTwtrv63ACUGqNNSIUgnTvye4FSA5SQnY= Subject key identifier: 60:5C:1D:87:7A:CB:42:3B:26:61:00:31:2A:E4:0A:E8:38:68:20:BA Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: B5 Signing time: Sun 19 May 2024 05:38:19 +0000 Manifest this update: Sun 19 May 2024 05:38:18 +0000 Manifest next update: Sun 26 May 2024 05:38:18 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: X43sE/b8KNpZgZpHTd6CV6wP0QUOPt9piQ/I7HfyJME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: May 19 05:38:18 2024 GMT Not After : May 26 05:38:18 2024 GMT Subject: CN=6649904b-fef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:4b:f4:03:85:4d:a5:ee:0c:6a:e9:c6:f5: 7e:ea:30:75:13:66:2d:d2:89:7b:15:75:13:aa:26: b3:95:44:52:d8:0f:04:12:d0:dd:e8:78:c0:01:95: 01:64:22:37:30:74:c2:ee:d1:26:4d:5c:ae:0c:97: 95:b1:40:a5:9e:fa:84:1a:0b:bc:17:fd:87:6f:fc: 92:1f:0e:e6:e8:a1:43:8b:fb:5a:ce:aa:99:94:6f: 52:5d:6c:35:80:4b:d7:d2:dd:d1:fa:e0:e5:6b:2a: 2d:f5:51:7c:63:4e:8b:c0:42:6b:5a:65:8e:ac:f7: c6:a8:62:b7:05:21:a0:61:f2:77:34:5b:5e:22:ba: 45:63:7b:f9:0a:4a:30:7b:5b:47:7f:de:ad:34:cb: 9c:f5:7f:b5:9b:8b:d4:95:5f:cb:6e:f2:57:a5:d1: ff:bf:c1:be:bf:f6:20:f2:27:c8:6a:49:12:14:9a: 2d:6f:db:10:d8:67:44:05:b6:52:9d:c5:f9:c9:d2: 63:32:e0:41:ad:56:4d:3c:46:02:30:e1:da:16:36: a8:6a:9d:4a:97:bf:55:a6:e5:19:8b:06:53:18:9a: 97:e3:d1:b9:7c:73:95:cb:9a:45:f8:53:83:be:53: 9a:8b:90:45:d9:80:b1:39:2c:d1:cb:49:76:3d:63: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5C:1D:87:7A:CB:42:3B:26:61:00:31:2A:E4:0A:E8:38:68:20:BA X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bd:c3:f0:f8:00:dd:43:91:7e:41:b5:2e:0d:e6:2b:8f:57: 5d:ca:83:b3:c7:c6:f9:e3:04:be:a6:87:36:25:15:24:41:44: 20:14:bc:2b:f6:e1:22:a2:3c:73:4a:b6:b5:b7:16:f1:43:e9: d6:67:21:87:1c:5f:ef:5f:9f:cd:8f:04:f7:a5:2d:ce:fd:44: 8e:3b:2a:84:d2:f5:64:d2:52:ca:e8:d3:0c:b5:71:56:4e:94: f7:54:68:d6:d6:22:04:97:94:42:52:53:04:ad:1f:a9:88:47: 81:a1:69:c1:fc:b2:ea:e8:3a:6a:cd:cc:e5:86:fc:24:41:e8: e2:bc:52:5a:bf:9b:f6:e1:8d:4a:e3:d9:b2:78:6f:61:1c:26: 5d:51:e8:c4:6c:09:46:6d:37:4a:e0:6c:21:d4:5d:55:bc:a9: 4f:04:b8:21:62:46:da:99:14:35:b0:16:be:85:ce:72:a4:f3: c4:21:a4:bc:c4:b1:e1:00:26:bd:ef:49:4e:60:2f:c8:f9:e0: 92:59:43:2f:2c:d7:f1:49:71:45:16:6c:3b:18:d3:09:10:19: 84:89:c2:fb:a1:65:e4:57:cc:f3:65:58:00:61:75:e8:b8:52: 37:b5:ff:7d:19:f5:b7:61:c5:56:09:2d:24:5b:e3:0b:ef:8e: f6:b2:ab:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjQwNTE5MDUzODE4WhcNMjQwNTI2MDUzODE4WjAYMRYwFAYD VQQDEw02NjQ5OTA0Yi1mZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWhL9AOFTaXuDGrpxvV+6jB1E2Yt0ol7FXUTqiazlURS2A8EEtDd6HjAAZUB ZCI3MHTC7tEmTVyuDJeVsUClnvqEGgu8F/2Hb/ySHw7m6KFDi/tazqqZlG9SXWw1 gEvX0t3R+uDlayot9VF8Y06LwEJrWmWOrPfGqGK3BSGgYfJ3NFteIrpFY3v5Ckow e1tHf96tNMuc9X+1m4vUlV/LbvJXpdH/v8G+v/Yg8ifIakkSFJotb9sQ2GdEBbZS ncX5ydJjMuBBrVZNPEYCMOHaFjaoap1Kl79VpuUZiwZTGJqX49G5fHOVy5pF+FOD vlOai5BF2YCxOSzRy0l2PWP4qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBcHYd6 y0I7JmEAMSrkCug4aCC6MB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0vcPw+ADdQ5F+QbUuDeYrj1ddyoOzx8b54wS+poc2JRUkQUQgFLwr 9uEiojxzSra1txbxQ+nWZyGHHF/vX5/NjwT3pS3O/USOOyqE0vVk0lLK6NMMtXFW TpT3VGjW1iIEl5RCUlMErR+piEeBoWnB/LLq6DpqzczlhvwkQejivFJav5v24Y1K 49myeG9hHCZdUejEbAlGbTdK4Gwh1F1VvKlPBLghYkbamRQ1sBa+hc5ypPPEIaS8 xLHhACa970lOYC/I+eCSWUMvLNfxSXFFFmw7GNMJEBmEicL7oWXkV8zzZVgAYXXo uFI3tf99GfW3YcVWCS0kW+ML7472sqsi -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org