$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft File: iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json) Hash identifier: dwk+Q4vuEgQc7Lf2PNUZmJYsUjvguaMCt20KzrgctHo= Subject key identifier: BE:D5:5A:68:4B:2A:DC:06:9D:C8:8F:41:6B:17:16:B0:17:95:92:5F Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 Certificate issuer: /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft Manifest number: 057C Signing time: Sun 19 May 2024 00:37:30 +0000 Manifest this update: Sun 19 May 2024 00:37:30 +0000 Manifest next update: Sun 26 May 2024 00:37:30 +0000 Files and hashes: 1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: puSLWvvS+JVK8Y17PHgFzREFWvOqz6IniCm3YxfkC0Y=) 2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: PxaaK39Y5xEd7lxiNReKmMyjJOrete3xtkbzR6qIJuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Validity Not Before: May 19 00:37:30 2024 GMT Not After : May 26 00:37:30 2024 GMT Subject: CN=664949ca-d7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:e2:e9:10:71:1b:19:5f:26:d6:8c:84:50: 46:24:2a:af:54:5c:d3:28:7e:8f:e5:66:a0:52:ab: b1:b7:f3:9f:c3:de:49:67:97:cb:30:a7:63:0c:a0: fb:4b:ac:1b:dd:73:d7:ce:f0:c1:3e:c9:be:fb:f4: 22:6d:f8:87:ea:ed:36:c3:33:d8:d3:72:0b:e1:a6: 8f:d7:fa:ec:3b:fd:62:d7:32:e3:81:8a:f0:98:05: f8:83:86:a4:e5:c4:75:0b:b1:4f:16:5c:c2:02:c8: d0:57:23:01:f2:00:07:6d:f4:27:d4:b0:40:15:72: 4d:99:d9:af:92:fa:c1:df:dd:31:30:4b:aa:fe:a8: 61:0a:fb:f0:63:4b:c2:4c:1d:52:f7:2f:d8:3a:4d: 67:6d:48:b2:ed:f2:56:46:10:70:7d:89:87:91:e6: 7f:e4:fc:ba:19:d0:21:c3:7c:94:c5:de:f7:3f:f7: 24:8b:e7:f0:05:73:1d:0b:e2:d9:62:4b:e9:8b:63: 02:6a:e2:6a:3c:f7:a8:97:e2:d7:6b:bb:5a:2e:b2: 82:0c:eb:7b:60:d4:83:8a:6a:a7:f0:3b:f6:39:b4: 2f:a4:d3:e2:4f:91:af:58:09:d9:fe:0f:ff:bc:52: 03:1b:e7:dd:c7:fa:24:10:5e:ae:84:23:16:7d:aa: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D5:5A:68:4B:2A:DC:06:9D:C8:8F:41:6B:17:16:B0:17:95:92:5F X509v3 Authority Key Identifier: keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:25:d8:30:fa:85:08:a6:b3:8f:30:03:9c:65:02:bd:7d:a9: 1a:b2:60:41:f1:7a:bd:56:fe:53:4d:d1:1a:13:17:bb:df:be: 84:f0:d2:f2:0d:e0:a9:dd:ea:bb:53:d5:da:70:6c:28:89:e6: 67:92:df:68:13:aa:5f:c8:2b:f7:12:35:8d:9d:87:48:e4:b1: 14:a0:23:92:9d:ac:74:3f:c1:4f:a5:b9:4c:97:11:cb:83:c8: 92:06:15:77:da:55:d3:4f:81:2d:9b:09:14:d0:45:4b:9d:6e: 0b:19:ff:78:ae:2e:9a:0a:9d:ed:9b:17:0f:ff:cc:08:a7:e9: b4:64:cb:e4:f5:5c:8d:ff:0a:71:99:2f:da:43:96:a1:c6:20: 1a:5e:ba:8a:4d:c2:af:f1:06:5e:e2:86:5f:55:11:ce:dd:bf: 28:90:58:4a:7a:4a:63:5a:8a:af:8a:e9:52:ed:87:ad:74:fc: 6c:a4:13:da:1d:96:f9:d1:a0:45:83:68:41:e5:1b:d9:c9:c8: 8f:ef:e0:1d:5a:cc:97:44:98:ee:c6:97:31:20:bd:6c:a6:c1: 93:17:7d:b8:6d:ed:a9:ee:13:b8:9a:75:60:cd:b2:fd:8f:12: 77:0a:9d:d1:da:a1:bd:06:da:ee:e8:30:2e:77:d6:aa:7a:04: 16:52:02:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDNTIxMTAvBgNVBAUTKDhBQkI5OTI2QzMxMkExNDE0OUM1MjMwQkE1NUZBOENG NUI4OUFBRTEwHhcNMjQwNTE5MDAzNzMwWhcNMjQwNTI2MDAzNzMwWjAYMRYwFAYD VQQDEw02NjQ5NDljYS1kN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNHi6RBxGxlfJtaMhFBGJCqvVFzTKH6P5WagUquxt/Ofw95JZ5fLMKdjDKD7 S6wb3XPXzvDBPsm++/QibfiH6u02wzPY03IL4aaP1/rsO/1i1zLjgYrwmAX4g4ak 5cR1C7FPFlzCAsjQVyMB8gAHbfQn1LBAFXJNmdmvkvrB390xMEuq/qhhCvvwY0vC TB1S9y/YOk1nbUiy7fJWRhBwfYmHkeZ/5Py6GdAhw3yUxd73P/cki+fwBXMdC+LZ Ykvpi2MCauJqPPeol+LXa7taLrKCDOt7YNSDimqn8Dv2ObQvpNPiT5GvWAnZ/g// vFIDG+fdx/okEF6uhCMWfap/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7VWmhL KtwGnciPQWsXFrAXlZJfMB8GA1UdIwQYMBaAFIq7mSbDEqFBScUjC6VfqM9biarh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM1Mi9CNDZDRDc3RTkx QjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29VRkp4U01McFYtb3oxdUpx dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lydVpKc01Tb1VGSnhTTUxwVi1vejF1SnF1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEM1Mi9CNDZDRDc3RTkxQjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29V Rkp4U01McFYtb3oxdUpxdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaJdgw+oUIprOPMAOcZQK9fakasmBB8Xq9Vv5TTdEaExe7376E8NLy DeCp3eq7U9XacGwoieZnkt9oE6pfyCv3EjWNnYdI5LEUoCOSnax0P8FPpblMlxHL g8iSBhV32lXTT4EtmwkU0EVLnW4LGf94ri6aCp3tmxcP/8wIp+m0ZMvk9VyN/wpx mS/aQ5ahxiAaXrqKTcKv8QZe4oZfVRHO3b8okFhKekpjWoqviulS7YetdPxspBPa HZb50aBFg2hB5RvZyciP7+AdWsyXRJjuxpcxIL1spsGTF324be2p7hO4mnVgzbL9 jxJ3Cp3R2qG9Btru6DAud9aqegQWUgLh -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org