$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: G/czFg6SGm4FO0dEQ2I9yDMfEaafX2GUiKDc/tAVhrM= Subject key identifier: 6F:AB:58:F8:94:4E:59:A6:91:7A:85:CB:73:18:93:9D:CD:90:B7:54 Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0D5C Signing time: Sat 01 Jun 2024 00:02:14 +0000 Manifest this update: Sat 01 Jun 2024 00:02:14 +0000 Manifest next update: Sat 08 Jun 2024 00:02:14 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: nHvIK780IR+2F0JP9aNxGA3Hbc4Qsk/YSSt8bkuQeAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Jun 1 00:02:14 2024 GMT Not After : Jun 8 00:02:14 2024 GMT Subject: CN=665a6506-e945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:9f:2b:95:d2:d8:7f:76:fe:e8:bf:40:bb: 12:38:bb:bb:b6:6e:31:84:cd:4c:39:0e:41:c0:d5: 54:4c:03:c0:00:75:a5:03:e5:9a:e1:b2:5e:69:85: a1:f2:fe:83:ee:19:e4:bd:a9:ef:fe:54:93:b4:ca: 22:96:3d:0a:16:fd:7b:48:4e:97:34:9f:cc:05:75: 4d:6b:10:98:4e:be:54:af:da:74:51:03:8f:d9:bb: b1:0e:a8:95:6a:75:3d:c8:e6:6a:4b:f0:8d:5d:09: 33:0f:2a:83:06:a5:d0:e6:f8:25:85:a3:8a:d0:fe: 60:31:fb:03:2f:18:53:a4:57:48:c3:49:45:c1:87: 24:d2:44:59:dd:ff:c2:38:79:98:a6:8c:cb:44:71: b1:12:fa:bb:70:97:a6:ee:57:12:c4:56:45:69:46: a4:12:45:e2:ca:db:2f:f3:e4:e1:56:c0:36:c9:76: b0:b7:ef:5d:05:66:73:64:96:54:7d:a1:78:eb:a3: 37:7e:f3:e8:7a:ef:fd:7c:2f:25:a1:bb:07:8f:14: 16:50:b8:2b:5e:34:06:8e:f8:32:d4:e9:4f:77:41: df:fa:d4:d4:62:a5:ab:3c:a8:b5:eb:dd:6c:0a:f0: fe:71:3d:13:68:db:dc:0c:bb:58:89:b0:30:2c:2b: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AB:58:F8:94:4E:59:A6:91:7A:85:CB:73:18:93:9D:CD:90:B7:54 X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a7:e2:ab:82:e3:84:79:7e:f2:06:49:52:f2:cb:65:36:b2: 5c:91:6b:03:93:29:d6:ff:4b:87:11:c7:53:d2:60:23:17:b4: 74:dd:e6:a0:a1:3b:dd:1a:46:a6:68:41:ca:23:de:2e:b3:25: 93:89:e2:4d:fa:d0:99:e0:16:12:05:d9:19:33:cf:df:54:36: 74:7c:8e:80:d4:39:4d:14:53:a3:22:b5:d4:47:cf:e1:e6:7c: 2b:10:69:9d:e6:b8:17:2d:28:d3:59:22:39:48:a9:64:13:02: a2:eb:30:40:ea:72:94:98:31:72:68:bd:d1:c4:c0:ad:f5:18: 49:6e:3b:4c:1a:10:0f:4c:70:6b:97:cb:ef:39:32:6a:98:e6: 2f:b6:b9:89:ff:3c:ea:99:5e:30:3f:a9:51:b1:4b:97:41:34: 2f:76:66:37:c5:59:82:1b:56:31:7d:47:f3:ac:4f:b0:7e:35: 78:de:b1:38:b2:e9:69:b8:0a:c3:b7:c6:c8:ed:47:26:e0:1f: da:fd:15:e2:03:1c:65:f5:58:0d:63:84:27:82:42:a7:75:d2: b8:3d:dc:70:f8:bb:cd:80:f7:b3:c7:28:38:a7:16:95:a8:c5: 46:27:8d:a7:24:87:fb:0f:69:00:f4:89:6f:4d:2a:13:aa:ba: b6:9b:be:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjQwNjAxMDAwMjE0WhcNMjQwNjA4MDAwMjE0WjAYMRYwFAYD VQQDEw02NjVhNjUwNi1lOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NqfK5XS2H92/ui/QLsSOLu7tm4xhM1MOQ5BwNVUTAPAAHWlA+Wa4bJeaYWh 8v6D7hnkvanv/lSTtMoilj0KFv17SE6XNJ/MBXVNaxCYTr5Ur9p0UQOP2buxDqiV anU9yOZqS/CNXQkzDyqDBqXQ5vglhaOK0P5gMfsDLxhTpFdIw0lFwYck0kRZ3f/C OHmYpozLRHGxEvq7cJem7lcSxFZFaUakEkXiytsv8+ThVsA2yXawt+9dBWZzZJZU faF466M3fvPoeu/9fC8lobsHjxQWULgrXjQGjvgy1OlPd0Hf+tTUYqWrPKi1691s CvD+cT0TaNvcDLtYibAwLCtKDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+rWPiU TlmmkXqFy3MYk53NkLdUMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlp+KrguOEeX7yBklS8stlNrJckWsDkynW/0uHEcdT0mAjF7R03eag oTvdGkamaEHKI94usyWTieJN+tCZ4BYSBdkZM8/fVDZ0fI6A1DlNFFOjIrXUR8/h 5nwrEGmd5rgXLSjTWSI5SKlkEwKi6zBA6nKUmDFyaL3RxMCt9RhJbjtMGhAPTHBr l8vvOTJqmOYvtrmJ/zzqmV4wP6lRsUuXQTQvdmY3xVmCG1YxfUfzrE+wfjV43rE4 sulpuArDt8bI7Ucm4B/a/RXiAxxl9VgNY4QngkKnddK4Pdxw+LvNgPezxyg4pxaV qMVGJ42nJIf7D2kA9IlvTSoTqrq2m76f -----END CERTIFICATE-----Generated at Sat Jun 1 00:33:00 2024 by rpki-client on console-fra.rpki-client.org