$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json) Hash identifier: ImwUz/PgQ2ZSeZ1DUGX4hGLT0JoWV4agTJFcZRT6bws= Subject key identifier: 21:47:84:0C:EC:3E:F6:74:B2:8F:97:76:9F:43:15:5C:BC:26:98:58 Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft Manifest number: 42 Signing time: Sun 19 May 2024 08:23:11 +0000 Manifest this update: Sun 19 May 2024 08:23:10 +0000 Manifest next update: Sun 26 May 2024 08:23:10 +0000 Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: RoZogVD/Bh8FnhOYXimDPZ7XCkSrO/hIGXouFCpFKA8=) 2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: tThNJYbUDEGX7l9BePqZBqRS3H5vx42AJaOXqIGJAP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Validity Not Before: May 19 08:23:10 2024 GMT Not After : May 26 08:23:10 2024 GMT Subject: CN=6649b6ef-69d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:4c:d3:94:32:fc:25:84:9d:bd:68:ce:a9:d7: ed:8f:bf:75:fb:1d:9c:25:81:0a:67:65:f0:d6:4e: 1c:50:e5:c9:a5:b0:27:b1:9d:53:6c:03:32:d4:d5: a8:ef:90:0c:68:30:03:1f:dc:1e:d8:f8:d3:10:55: 69:78:66:cf:3c:e8:f5:1b:28:e3:98:9d:44:27:c7: 10:b6:72:7d:dd:91:82:2d:a0:8d:c0:dd:36:51:d3: 80:e1:54:1c:58:1d:71:c6:3b:df:a1:b5:2d:e4:d4: aa:2c:8e:fa:9b:81:09:4f:5f:e7:33:c1:67:ac:c0: 7b:80:81:12:69:70:0c:84:fb:ff:d9:fd:d4:77:96: 94:09:c0:09:d7:be:10:7c:ee:33:8e:d8:35:d0:63: 02:85:50:93:37:9a:d3:4b:c0:a0:86:4d:ee:af:6d: 32:83:93:35:9b:af:ca:f3:82:b1:b9:9c:9d:2d:1c: 54:94:b5:23:0d:68:42:1b:4d:7d:c7:38:56:c1:6a: c3:59:c1:83:33:d1:d2:88:ce:72:72:98:99:c0:fc: 11:ea:ad:eb:d9:f6:a0:f7:d1:61:f0:c8:63:5f:83: 8e:31:29:72:1c:6a:5e:30:40:ce:31:ca:e4:a5:e9: 7f:d3:82:34:b1:2a:37:97:f4:77:71:57:c0:a5:ae: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:84:0C:EC:3E:F6:74:B2:8F:97:76:9F:43:15:5C:BC:26:98:58 X509v3 Authority Key Identifier: keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d9:a2:38:40:23:9f:b6:84:55:21:83:55:8c:ad:c0:82:48: 69:02:cd:28:fd:87:c4:3d:6a:7e:bc:50:f8:90:db:a4:21:92: 58:30:33:79:82:bd:7e:33:12:08:5f:3f:b8:28:38:85:09:f9: 61:ab:e9:16:89:46:8f:29:9f:36:cc:11:a0:1b:c9:ac:50:db: 08:b1:d5:03:31:e3:f6:f6:bc:cd:25:e2:5c:d9:9f:5d:07:d1: 75:a3:8f:74:42:f3:5f:95:a3:3c:64:a4:2b:e0:46:b2:84:ff: c6:47:f8:f1:5d:2c:09:08:d8:cc:0e:12:6a:2e:df:8b:78:3b: c2:84:fd:18:7c:a4:3a:78:72:1c:dd:12:58:39:d8:bc:75:7b: bb:4c:86:71:4a:db:5b:1d:b1:00:70:7a:b3:43:8c:ff:fa:23: ac:e2:f0:d8:e8:06:95:ad:bd:01:51:86:64:92:9f:2c:76:2f: 37:75:b8:6e:32:35:1e:d8:35:88:63:f5:82:c0:0d:91:09:2a: 78:c6:a7:b9:ba:50:64:26:92:89:b4:5b:fc:a5:c6:61:ed:04: 85:b3:f0:df:63:8a:91:cd:d4:8d:27:a6:f4:a4:77:8a:c1:4e: 82:4f:dc:12:4d:ec:76:5e:b5:ba:79:8d:6a:51:7b:d3:89:80: 89:ab:ac:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjczRDExMC8GA1UEBRMoOUE4OUJCMzdDNTQzODZEQTlBODdBNjRGRjAwOTQ0MjhB MzE3MUE0NzAeFw0yNDA1MTkwODIzMTBaFw0yNDA1MjYwODIzMTBaMBgxFjAUBgNV BAMTDTY2NDliNmVmLTY5ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7TNOUMvwlhJ29aM6p1+2Pv3X7HZwlgQpnZfDWThxQ5cmlsCexnVNsAzLU1ajv kAxoMAMf3B7Y+NMQVWl4Zs886PUbKOOYnUQnxxC2cn3dkYItoI3A3TZR04DhVBxY HXHGO9+htS3k1KosjvqbgQlPX+czwWeswHuAgRJpcAyE+//Z/dR3lpQJwAnXvhB8 7jOO2DXQYwKFUJM3mtNLwKCGTe6vbTKDkzWbr8rzgrG5nJ0tHFSUtSMNaEIbTX3H OFbBasNZwYMz0dKIznJymJnA/BHqrevZ9qD30WHwyGNfg44xKXIcal4wQM4xyuSl 6X/TgjSxKjeX9HdxV8Clrj29AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIUeEDOw+ 9nSyj5d2n0MVXLwmmFgwHwYDVR0jBBgwFoAUmom7N8VDhtqah6ZP8AlEKKMXGkcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNzNEL0M5MkIzMjMyQ0Ux RjExRUVBQzYyNjE3Q0M0RjlBRTAyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdr Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbW9tN044VkRodHFhaDZaUDhBbEVLS01YR2tjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NzNEL0M5MkIzMjMyQ0UxRjExRUVBQzYyNjE3Q0M0RjlBRTAyL21vbTdOOFZEaHRx YWg2WlA4QWxFS0tNWEdrYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTZojhAI5+2hFUhg1WMrcCCSGkCzSj9h8Q9an68UPiQ26QhklgwM3mC vX4zEghfP7goOIUJ+WGr6RaJRo8pnzbMEaAbyaxQ2wix1QMx4/b2vM0l4lzZn10H 0XWjj3RC81+VozxkpCvgRrKE/8ZH+PFdLAkI2MwOEmou34t4O8KE/Rh8pDp4chzd Elg52Lx1e7tMhnFK21sdsQBwerNDjP/6I6zi8NjoBpWtvQFRhmSSnyx2Lzd1uG4y NR7YNYhj9YLADZEJKnjGp7m6UGQmkom0W/ylxmHtBIWz8N9jipHN1I0npvSkd4rB ToJP3BJN7HZetbp5jWpRe9OJgImrrJI= -----END CERTIFICATE-----Generated at Sun May 19 09:04:15 2024 by rpki-client on console-fra.rpki-client.org