$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: j+vBRHmbLIUMIihSb1ghqDCaVbLy5coWDrcucOsMF6s= Subject key identifier: 52:F7:3B:88:EB:87:9B:DF:50:F5:96:F1:98:FC:BE:BB:2A:2F:C9:C1 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 1830 Signing time: Fri 31 May 2024 17:09:16 +0000 Manifest this update: Fri 31 May 2024 17:09:15 +0000 Manifest next update: Fri 07 Jun 2024 17:09:15 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: QPU9srh5cALHj7mJeQMsoKnQVop0EamOOY1aMi0BdRw=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: ifTj4bmRcP6WlBCwYDTYrnIU+zXFS4bROesTCN1rmbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6200 (0x1838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: May 31 17:09:15 2024 GMT Not After : Jun 7 17:09:15 2024 GMT Subject: CN=665a043b-9175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:94:02:07:6d:43:f2:dd:0b:dc:7c:9e:93: 45:cf:05:39:cf:de:9e:8f:d7:a7:81:81:8d:7c:f3: 48:8f:b0:cd:63:d9:e7:5b:c8:66:b7:d1:29:ce:cb: 61:25:b9:1f:ee:28:ae:5d:6c:02:35:45:69:ad:0d: 97:e8:be:77:17:a7:ca:38:39:ae:70:32:cd:0a:39: 93:eb:cf:11:3b:06:fd:84:8f:67:6c:36:de:38:a3: d5:67:f2:8e:16:cc:34:2e:77:9a:c6:c5:c1:87:36: ba:a2:b2:ae:28:3d:c5:4e:a3:93:22:6e:4a:8a:db: 48:a7:44:6e:96:ca:5e:46:05:b4:4a:7a:7c:87:69: 15:dc:f3:af:82:2a:05:49:da:3f:da:e2:c7:47:8d: e4:30:bb:c3:dd:fc:8b:5f:eb:0f:bb:90:d9:c3:cf: 55:0a:a3:8d:14:c9:c3:73:ea:b2:cf:75:0a:40:84: 74:53:19:16:43:33:d9:0a:ef:8c:31:f0:5c:c9:72: 10:6b:20:4c:9d:66:88:5c:63:82:14:84:00:09:ac: 87:0f:b6:65:a4:2f:29:ed:60:2e:9c:a6:77:d0:b9: f7:ba:5b:ec:7d:45:13:13:09:50:e5:f6:af:85:d5: e6:76:1a:85:d1:05:e3:a7:1a:01:21:ed:8a:7a:f9: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:3B:88:EB:87:9B:DF:50:F5:96:F1:98:FC:BE:BB:2A:2F:C9:C1 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:f7:e3:13:15:78:6a:65:15:f1:f9:08:bd:9e:b4:ed:b3:d6: c7:63:c7:a0:9c:1a:55:47:0a:b5:5e:ff:50:87:50:3c:5a:bb: 96:25:68:55:2b:4f:67:aa:97:18:bf:c5:ea:05:88:6d:01:6e: 49:58:98:1a:af:5b:09:40:4c:8e:21:f1:3d:27:0e:9f:b8:20: 64:65:72:fd:0a:17:8e:5d:b4:7a:69:00:af:9c:67:29:1d:8e: 3d:4b:cf:6c:b9:d1:ea:bb:da:36:44:1e:46:dd:53:cb:90:57: 6e:37:53:2c:10:4e:1c:28:2b:25:90:5a:67:4f:43:31:5b:05: 10:61:4d:99:8f:b8:34:9b:7d:46:81:f0:ca:de:66:01:e9:0e: 49:a5:a6:5d:51:77:fa:b3:1d:85:01:39:d2:fd:e5:3e:14:ed: 66:5b:47:88:55:f9:d1:96:ee:92:f3:89:dc:31:10:e9:41:b6: ee:ef:fa:4f:31:dd:3b:88:de:3a:2f:a8:a7:24:0e:88:5d:53: b0:ff:29:2c:8a:ff:6b:32:c4:08:ca:02:69:f4:6d:32:df:ba: 8a:45:6e:66:e6:54:b8:9b:f3:88:cb:c1:0a:7e:bc:e4:7c:61: ff:f1:ca:38:a5:c9:bf:eb:36:56:41:61:1b:7d:d3:43:ad:a7: ea:02:6e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjQwNTMxMTcwOTE1WhcNMjQwNjA3MTcwOTE1WjAYMRYwFAYD VQQDEw02NjVhMDQzYi05MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sGUAgdtQ/LdC9x8npNFzwU5z96ej9engYGNfPNIj7DNY9nnW8hmt9Epzsth Jbkf7iiuXWwCNUVprQ2X6L53F6fKODmucDLNCjmT688ROwb9hI9nbDbeOKPVZ/KO Fsw0LneaxsXBhza6orKuKD3FTqOTIm5KittIp0RulspeRgW0Snp8h2kV3POvgioF Sdo/2uLHR43kMLvD3fyLX+sPu5DZw89VCqONFMnDc+qyz3UKQIR0UxkWQzPZCu+M MfBcyXIQayBMnWaIXGOCFIQACayHD7ZlpC8p7WAunKZ30Ln3ulvsfUUTEwlQ5fav hdXmdhqF0QXjpxoBIe2KevlKqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL3O4jr h5vfUPWW8Zj8vrsqL8nBMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG9+MTFXhqZRXx+Qi9nrTts9bHY8egnBpVRwq1Xv9Qh1A8WruWJWhV K09nqpcYv8XqBYhtAW5JWJgar1sJQEyOIfE9Jw6fuCBkZXL9CheOXbR6aQCvnGcp HY49S89sudHqu9o2RB5G3VPLkFduN1MsEE4cKCslkFpnT0MxWwUQYU2Zj7g0m31G gfDK3mYB6Q5JpaZdUXf6sx2FATnS/eU+FO1mW0eIVfnRlu6S84ncMRDpQbbu7/pP Md07iN46L6inJA6IXVOw/yksiv9rMsQIygJp9G0y37qKRW5m5lS4m/OIy8EKfrzk fGH/8co4pcm/6zZWQWEbfdNDrafqAm7M -----END CERTIFICATE-----Generated at Fri May 31 19:47:54 2024 by rpki-client on console-fra.rpki-client.org