$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: aeFAqIP6Hlt5/i542C/NFAnLO/tBd3YRkAr7iq255Xc= Subject key identifier: 8D:C4:5D:C3:C7:11:A5:A1:E1:41:46:10:0F:40:C4:26:16:61:15:FC Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0B50 Signing time: Sat 18 May 2024 19:38:37 +0000 Manifest this update: Sat 18 May 2024 19:38:36 +0000 Manifest next update: Sat 25 May 2024 19:38:36 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: ezfellwRXnrdPEW1e10b7PHmI8XGI5ltmG+7i2qpoNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: May 18 19:38:36 2024 GMT Not After : May 25 19:38:36 2024 GMT Subject: CN=664903bc-8c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:c3:79:92:ee:e7:bf:6c:34:9f:58:ba:d7: 73:7c:81:c6:bb:d3:08:cf:27:33:b0:b7:7a:66:bd: 5f:3e:1d:f9:42:e0:af:4a:a7:02:65:cb:88:da:2d: bc:c9:55:79:07:1b:ba:1d:0a:ca:1e:27:6a:60:96: d1:e7:03:59:ba:41:f2:89:99:d6:6f:a2:ad:31:12: f1:12:b4:05:9c:a0:27:b4:26:a1:7a:1a:22:3e:a2: 64:82:57:d8:ba:60:0f:15:87:3a:32:93:d3:61:37: 93:25:d6:6f:54:a5:f9:03:40:9a:6e:74:af:b4:22: 38:23:7f:02:b8:2d:3d:c7:b0:11:fa:9c:90:e2:bc: 4c:cb:45:bf:19:41:29:a1:a5:f2:8a:b8:87:11:8c: 6c:87:4d:76:fa:da:72:1d:4a:a0:0e:d6:60:66:d4: 7e:31:f2:a6:6a:fe:09:ac:d0:b9:c5:2e:d2:53:8f: dc:aa:f0:10:ec:3b:22:b4:fb:b4:56:62:48:30:d6: d8:5d:d4:44:4c:9b:54:19:61:cd:b0:e9:96:45:b4: d6:88:07:1b:26:a1:a8:cf:71:ac:25:82:9f:d0:85: 7f:84:1f:6e:0c:fe:bc:fd:09:09:4e:87:39:d6:f7: 05:d6:1a:a4:5a:12:79:50:48:02:89:bc:11:4a:8b: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C4:5D:C3:C7:11:A5:A1:E1:41:46:10:0F:40:C4:26:16:61:15:FC X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:84:0d:a7:fd:b3:15:8c:11:bd:06:ed:3a:99:b6:c7:96:0b: 2a:f6:d6:db:b6:a8:55:7a:b9:fb:86:94:8e:d0:72:be:aa:61: 12:09:96:86:02:82:26:6b:5d:99:75:dd:e5:d5:21:0d:a9:b5: cc:56:f2:12:10:61:a4:1b:1d:e6:ce:27:84:5c:90:c9:13:fe: 4a:8c:a2:5b:f1:a3:3b:29:21:5c:34:50:64:d8:e5:46:9c:9b: 28:a1:b8:31:27:37:70:61:a5:b5:0f:64:06:37:5f:eb:ea:df: 27:2e:41:11:8c:d2:57:a4:c6:eb:13:f1:68:12:dd:79:03:93: 3a:2b:ab:89:a0:48:3e:5a:13:d8:8c:84:57:5b:29:d7:22:b8: b5:14:bb:25:4e:a8:e8:ca:62:43:a2:46:ea:95:a2:f3:85:17: 7c:dc:64:b5:b2:8d:40:e0:e8:47:5f:58:b2:57:f4:d6:f3:0d: 2c:be:aa:e0:cc:b5:1c:cf:91:9b:f8:3d:1c:d4:1b:56:e8:6f: e3:3e:1e:50:94:5f:5a:40:64:57:a6:bd:bf:e5:0c:09:6d:85: 3a:7d:a3:2a:34:a1:5b:d5:33:46:ce:c7:73:2f:22:ba:f9:eb: 85:58:19:24:a3:4d:69:bd:37:92:c4:ed:9b:5c:9c:32:64:83: 70:ba:52:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjQwNTE4MTkzODM2WhcNMjQwNTI1MTkzODM2WjAYMRYwFAYD VQQDEw02NjQ5MDNiYy04YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsTDeZLu579sNJ9YutdzfIHGu9MIzyczsLd6Zr1fPh35QuCvSqcCZcuI2i28 yVV5Bxu6HQrKHidqYJbR5wNZukHyiZnWb6KtMRLxErQFnKAntCahehoiPqJkglfY umAPFYc6MpPTYTeTJdZvVKX5A0CabnSvtCI4I38CuC09x7AR+pyQ4rxMy0W/GUEp oaXyiriHEYxsh012+tpyHUqgDtZgZtR+MfKmav4JrNC5xS7SU4/cqvAQ7DsitPu0 VmJIMNbYXdRETJtUGWHNsOmWRbTWiAcbJqGoz3GsJYKf0IV/hB9uDP68/QkJToc5 1vcF1hqkWhJ5UEgCibwRSosVDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3EXcPH EaWh4UFGEA9AxCYWYRX8MB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+hA2n/bMVjBG9Bu06mbbHlgsq9tbbtqhVern7hpSO0HK+qmESCZaG AoIma12Zdd3l1SENqbXMVvISEGGkGx3mzieEXJDJE/5KjKJb8aM7KSFcNFBk2OVG nJsoobgxJzdwYaW1D2QGN1/r6t8nLkERjNJXpMbrE/FoEt15A5M6K6uJoEg+WhPY jIRXWynXIri1FLslTqjoymJDokbqlaLzhRd83GS1so1A4OhHX1iyV/TW8w0svqrg zLUcz5Gb+D0c1BtW6G/jPh5QlF9aQGRXpr2/5QwJbYU6faMqNKFb1TNGzsdzLyK6 +euFWBkko01pvTeSxO2bXJwyZINwulIy -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org