$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: hcDEcYxJRDosKJ0nCdXwgIBT0E7ObH+4XxRtE/BaLjs= Subject key identifier: 77:4C:9B:26:F0:A5:69:85:71:B0:27:6F:CE:95:3F:C6:83:B8:E1:40 Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0BA8 Signing time: Sat 18 May 2024 19:14:02 +0000 Manifest this update: Sat 18 May 2024 19:14:01 +0000 Manifest next update: Sat 25 May 2024 19:14:01 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: gEbFv9ZFW8Uqi1wMjb65+Cw2QNsK4khdhFP87VnwgVQ=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 4IYIB01vfapV8uIVjZVvt9vfa/un9Di3AF5QTJRdC70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: May 18 19:14:01 2024 GMT Not After : May 25 19:14:01 2024 GMT Subject: CN=6648fdf9-8b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4b:cc:a4:c7:16:7d:1b:44:af:2d:2d:e1:be: 41:15:71:3b:13:d0:76:9c:1c:94:e4:98:36:a6:b7: d6:60:36:a2:ab:a8:a1:93:da:93:3c:f9:8b:a9:8a: 85:8e:95:4f:96:67:a0:40:3b:22:26:6b:9e:e4:e7: e9:83:ee:de:83:71:ba:ae:c3:cd:0a:6f:b1:ba:36: 99:67:f8:ff:c7:64:bf:34:06:0f:53:f1:1a:8e:42: c3:b5:bd:fb:c8:4e:75:f4:7c:f4:a7:b5:7a:7f:a9: 35:83:c9:10:04:1f:9d:dd:89:96:35:70:ab:f8:6a: 1a:d9:b8:4e:94:90:88:63:ee:62:e6:14:37:f5:b1: e2:f1:a4:4e:36:98:61:4e:91:9d:a4:bb:a2:d7:1b: 8c:d1:5c:29:38:91:74:3d:9c:0f:77:6a:c2:41:4f: 45:24:ba:05:5d:27:c3:cb:45:36:44:27:9c:44:e2: 9c:8d:d6:dd:9b:a1:eb:0b:4c:ad:e1:b9:86:d6:59: 84:84:fd:b8:19:f7:1b:2a:7a:d9:96:1c:42:af:de: 27:3b:a9:c3:12:ed:1a:57:d2:7b:7c:24:0c:20:6b: ae:7a:e6:a5:c3:92:bf:53:d6:8b:57:ad:86:fa:05: 8a:47:09:2d:e0:9e:67:22:fe:b9:f6:ea:e2:09:c5: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4C:9B:26:F0:A5:69:85:71:B0:27:6F:CE:95:3F:C6:83:B8:E1:40 X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1d:22:f8:7f:12:c0:c7:68:0f:64:2d:56:6f:5c:ff:c9:25: 96:7e:df:3d:2b:ff:80:a7:ff:1e:01:50:84:f7:8b:c8:b0:aa: ed:e5:1b:10:02:23:f6:3c:bf:81:61:1b:c2:47:26:7a:56:ee: 6a:0b:a0:52:c3:8b:84:2c:8f:2c:22:70:19:81:cb:43:00:f9: c1:98:45:45:b5:dc:6e:c5:46:34:07:74:cc:b9:ad:6c:25:1a: 72:3c:be:95:9d:1b:47:3e:59:0f:67:42:bb:ce:2c:90:79:62: 7c:05:d1:87:d9:f8:d0:4e:12:8c:79:d2:91:80:13:05:5a:13: 6d:55:d2:c4:b9:ea:9c:cc:89:b2:f8:a5:f5:67:fe:b1:25:3b: 21:80:ca:63:43:0f:52:31:82:60:37:13:91:58:69:10:76:6c: f1:9b:91:72:fe:52:f7:85:b6:2a:21:c1:8b:86:ca:88:d4:38: ec:af:57:20:d3:9d:d2:9c:c9:8b:39:37:49:f7:be:c7:b4:50: 1e:23:c3:94:b6:39:e5:93:9e:b1:64:f8:d6:a8:cd:09:f6:1c: 1a:c2:87:25:f9:fb:9d:ca:92:8a:19:94:a3:59:eb:73:f2:1e: 6c:17:f8:ea:53:ef:78:f7:03:94:d9:44:a5:ed:ce:69:e2:ba: fa:4b:ec:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjQwNTE4MTkxNDAxWhcNMjQwNTI1MTkxNDAxWjAYMRYwFAYD VQQDEw02NjQ4ZmRmOS04YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kvMpMcWfRtEry0t4b5BFXE7E9B2nByU5Jg2prfWYDaiq6ihk9qTPPmLqYqF jpVPlmegQDsiJmue5Ofpg+7eg3G6rsPNCm+xujaZZ/j/x2S/NAYPU/EajkLDtb37 yE519Hz0p7V6f6k1g8kQBB+d3YmWNXCr+Goa2bhOlJCIY+5i5hQ39bHi8aRONphh TpGdpLui1xuM0VwpOJF0PZwPd2rCQU9FJLoFXSfDy0U2RCecROKcjdbdm6HrC0yt 4bmG1lmEhP24GfcbKnrZlhxCr94nO6nDEu0aV9J7fCQMIGuueualw5K/U9aLV62G +gWKRwkt4J5nIv659uriCcX46QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdMmybw pWmFcbAnb86VP8aDuOFAMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACHSL4fxLAx2gPZC1Wb1z/ySWWft89K/+Ap/8eAVCE94vIsKrt5RsQ AiP2PL+BYRvCRyZ6Vu5qC6BSw4uELI8sInAZgctDAPnBmEVFtdxuxUY0B3TMua1s JRpyPL6VnRtHPlkPZ0K7ziyQeWJ8BdGH2fjQThKMedKRgBMFWhNtVdLEueqczImy +KX1Z/6xJTshgMpjQw9SMYJgNxORWGkQdmzxm5Fy/lL3hbYqIcGLhsqI1Djsr1cg 053SnMmLOTdJ977HtFAeI8OUtjnlk56xZPjWqM0J9hwawocl+fudypKKGZSjWetz 8h5sF/jqU+949wOU2USl7c5p4rr6S+we -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org