$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: iV2Gn11sCoEzisBxI0iJhkes6//iyfDoFwa5gci6mho= Subject key identifier: 97:C0:61:05:DD:EC:5C:81:1B:23:B9:DF:0B:19:18:2E:E1:AD:34:93 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 11CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 45AB Signing time: Sat 18 May 2024 14:22:29 +0000 Manifest this update: Sat 18 May 2024 14:22:28 +0000 Manifest next update: Sat 25 May 2024 14:22:28 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: LTuG0pPNo1fvm7CcNF2OwaatNXj2pwmvtkTcXpcCR0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4556 (0x11cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: May 18 14:22:28 2024 GMT Not After : May 25 14:22:28 2024 GMT Subject: CN=6648b9a5-34af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:05:ef:76:e9:c6:53:8f:e9:80:60:84:68: 2e:2b:07:16:84:5b:88:58:7d:15:e2:62:8c:e6:2f: e0:8d:64:13:ef:79:13:ab:85:3b:2c:06:a5:c1:7d: 0c:ab:73:68:6a:92:8f:36:fa:7a:c1:43:9f:0c:c6: bf:96:b5:14:32:0f:b9:e3:16:ac:b8:f5:99:d6:ab: c8:8a:04:d4:5b:b1:9d:c7:3d:eb:75:a7:68:86:b6: 29:3f:44:1c:eb:43:44:39:fd:8e:ad:37:52:58:b8: 28:b3:f3:c1:19:33:3a:a0:48:93:b1:47:7f:a7:04: 77:23:71:5b:e7:84:ae:93:c9:44:75:a0:f5:fb:a8: fc:e9:ef:da:e3:80:e5:63:44:96:80:03:ce:7c:c7: 24:eb:e9:f1:56:11:6b:be:e3:8e:ba:5c:ce:dd:cd: b6:4d:e3:3f:26:38:62:b3:f4:c2:0c:df:43:27:60: 1c:1d:80:ab:b7:a1:0f:e9:a5:cd:d1:1f:f6:20:69: 7b:23:71:cc:e6:16:71:f3:1f:29:3b:15:9d:47:1c: 7d:06:38:67:60:26:76:ea:b4:d7:a9:90:9b:3d:f3: 2f:f3:fe:d1:b5:1c:d1:90:9e:3b:4e:0d:ea:05:95: e6:de:05:17:ca:06:d0:95:ab:02:17:f9:76:da:b2: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C0:61:05:DD:EC:5C:81:1B:23:B9:DF:0B:19:18:2E:E1:AD:34:93 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b9:3e:39:ad:1a:93:d8:39:0a:07:92:bb:c8:90:8c:22:3a: 6a:6d:f3:a8:35:2d:d3:0d:ad:ad:b5:17:f1:aa:fd:9a:25:7d: 93:9c:ac:51:e3:a6:c5:37:1a:77:fd:c4:19:3a:4b:c3:e9:e1: 11:af:fc:4f:c0:7e:96:5f:77:ea:86:2f:c2:e4:d2:f2:3c:43: 67:a9:05:f1:9d:8c:d4:dc:36:67:00:f0:13:97:30:f5:5c:bc: 03:4d:b7:3d:f1:be:11:50:f6:1e:f4:04:0b:09:cc:f1:61:cc: 00:f9:35:c2:64:02:22:cc:f8:36:04:1d:07:fd:ff:88:bf:a9: 29:b5:0b:e6:63:53:f0:71:d8:e8:d6:a2:c5:72:ab:e5:84:43: 6d:56:ba:b7:25:c4:98:05:a5:04:ef:ff:85:f3:20:69:f0:05: 41:ce:92:55:ff:9d:4e:20:7d:ca:44:50:a1:f9:9e:0a:ea:d7: 38:4d:e0:9d:59:5b:3e:75:69:ae:be:3e:7c:63:a1:71:29:4a: 9f:12:c1:db:66:1e:14:c9:e2:6a:71:90:a0:75:17:b4:c6:78: df:88:5c:cc:08:4f:2d:72:8f:0a:fd:1c:00:2b:09:35:0c:5f: 69:24:85:ad:34:b4:2f:78:71:ad:c1:87:68:7c:3f:88:1e:3f: 00:36:45:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjQwNTE4MTQyMjI4WhcNMjQwNTI1MTQyMjI4WjAYMRYwFAYD VQQDEw02NjQ4YjlhNS0zNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPIF73bpxlOP6YBghGguKwcWhFuIWH0V4mKM5i/gjWQT73kTq4U7LAalwX0M q3NoapKPNvp6wUOfDMa/lrUUMg+54xasuPWZ1qvIigTUW7Gdxz3rdadohrYpP0Qc 60NEOf2OrTdSWLgos/PBGTM6oEiTsUd/pwR3I3Fb54Suk8lEdaD1+6j86e/a44Dl Y0SWgAPOfMck6+nxVhFrvuOOulzO3c22TeM/Jjhis/TCDN9DJ2AcHYCrt6EP6aXN 0R/2IGl7I3HM5hZx8x8pOxWdRxx9BjhnYCZ26rTXqZCbPfMv8/7RtRzRkJ47Tg3q BZXm3gUXygbQlasCF/l22rL76QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfAYQXd 7FyBGyO53wsZGC7hrTSTMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3uT45rRqT2DkKB5K7yJCMIjpqbfOoNS3TDa2ttRfxqv2aJX2TnKxR 46bFNxp3/cQZOkvD6eERr/xPwH6WX3fqhi/C5NLyPENnqQXxnYzU3DZnAPATlzD1 XLwDTbc98b4RUPYe9AQLCczxYcwA+TXCZAIizPg2BB0H/f+Iv6kptQvmY1Pwcdjo 1qLFcqvlhENtVrq3JcSYBaUE7/+F8yBp8AVBzpJV/51OIH3KRFCh+Z4K6tc4TeCd WVs+dWmuvj58Y6FxKUqfEsHbZh4UyeJqcZCgdRe0xnjfiFzMCE8tco8K/RwAKwk1 DF9pJIWtNLQveHGtwYdofD+IHj8ANkWC -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org