$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: sRJ5N13XyQd3IP3Ng2gmeaNRUtO2aIFK0YyZYmUMdOc= Subject key identifier: 64:A3:9B:3E:AF:07:1B:6C:45:02:1A:53:43:E6:8A:43:C9:3B:C0:2F Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 1263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 125A Signing time: Sat 18 May 2024 17:40:09 +0000 Manifest this update: Sat 18 May 2024 17:40:08 +0000 Manifest next update: Sat 25 May 2024 17:40:08 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: QFhB54/6m4YIQOi+9sYiOEB6+m6at74l8fqbRYA9oOc=) 2: 7AFCACAEADB311E8AF75E557C4F9AE02.roa (hash: mM8Bmhl9DbAqaugXBOcgBTc1BLMKnAsF1zyijPb4bXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4707 (0x1263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: May 18 17:40:08 2024 GMT Not After : May 25 17:40:08 2024 GMT Subject: CN=6648e7f8-222e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:b0:a0:f4:03:1b:6e:85:1c:dc:c1:c3:09: 09:e4:bf:b5:96:86:b2:4f:71:3e:ae:0d:95:92:23: d8:dd:93:67:90:17:60:b7:75:5f:ba:52:8e:e2:ff: 29:54:ba:c9:b3:24:22:f6:63:e9:c6:c2:60:a2:0c: 08:78:4f:67:65:d7:46:d4:f7:1f:70:de:aa:3a:1f: 5c:9b:8d:22:4c:56:c3:06:df:b5:c6:d3:f9:ab:74: dd:b4:4b:fb:b5:5f:cc:25:11:d7:5a:7c:31:3c:62: c7:95:86:a2:82:45:a0:fc:19:de:ed:08:37:a5:31: f1:98:4f:50:e0:0b:29:e3:63:c4:7d:97:18:9e:3f: 09:90:59:49:03:ba:a2:ed:22:d7:ac:2f:a7:f6:6f: 7b:a5:34:15:cb:01:c6:da:19:14:f8:9f:6a:99:40: 67:f8:aa:25:f1:2a:06:df:53:20:0c:0a:e1:48:48: 8b:55:72:5f:54:e8:5f:3a:56:46:f1:6d:ad:94:6d: 47:34:b9:a2:7b:68:95:d3:04:20:c6:2a:9d:2f:be: 91:77:eb:dd:f4:27:a5:38:05:1a:8d:47:c3:bd:77: 19:a7:93:5b:b8:c3:05:2a:01:b2:9b:f8:b4:7b:ca: b0:9e:45:ce:16:ea:b7:3c:a0:09:10:9c:6f:24:05: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A3:9B:3E:AF:07:1B:6C:45:02:1A:53:43:E6:8A:43:C9:3B:C0:2F X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e4:99:f3:49:a8:56:bd:b1:dc:ad:11:a1:71:cc:c8:4a:a8: 81:55:b4:2e:df:b4:1c:98:18:c7:7a:e0:be:28:7b:48:5b:b6: c8:ec:9d:e0:5c:70:a5:44:62:f5:80:18:7f:a0:d6:4c:1c:fa: 86:00:d4:17:5c:22:36:2c:f9:53:01:18:0f:81:ba:3e:c6:db: 9e:24:5a:aa:71:9f:a4:ef:1e:97:71:16:ee:ca:32:32:d6:e2: d6:45:1f:30:63:39:b1:e7:cb:fc:22:05:e5:98:ba:68:ba:46: 3a:0a:f4:00:06:f5:d4:d9:fe:d3:4c:b8:48:bd:a0:f8:59:46: 61:e4:28:d6:53:7a:16:cf:7f:12:6d:ba:fb:59:06:20:3f:c2: c5:fc:6c:b2:60:3c:56:ec:44:88:9b:bf:2b:dc:86:20:8c:94: a6:e4:71:55:32:b2:7c:8e:71:b4:c3:58:1f:36:eb:93:40:71: 04:04:25:cf:be:16:39:24:c1:47:12:c8:7d:50:5c:18:e8:5a: 23:d0:4c:41:b4:ec:d8:03:78:25:e3:9e:01:e7:b1:e9:18:a8: 58:22:92:4f:c9:2b:a0:e3:8e:6c:9c:e2:29:38:92:74:b1:57: 48:82:3c:96:f2:51:3b:77:7b:94:50:18:17:e6:bd:3c:ef:84: 4c:88:a4:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjQwNTE4MTc0MDA4WhcNMjQwNTI1MTc0MDA4WjAYMRYwFAYD VQQDEw02NjQ4ZTdmOC0yMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKOwoPQDG26FHNzBwwkJ5L+1loayT3E+rg2VkiPY3ZNnkBdgt3VfulKO4v8p VLrJsyQi9mPpxsJgogwIeE9nZddG1PcfcN6qOh9cm40iTFbDBt+1xtP5q3TdtEv7 tV/MJRHXWnwxPGLHlYaigkWg/Bne7Qg3pTHxmE9Q4Asp42PEfZcYnj8JkFlJA7qi 7SLXrC+n9m97pTQVywHG2hkU+J9qmUBn+Kol8SoG31MgDArhSEiLVXJfVOhfOlZG 8W2tlG1HNLmie2iV0wQgxiqdL76Rd+vd9CelOAUajUfDvXcZp5NbuMMFKgGym/i0 e8qwnkXOFuq3PKAJEJxvJAUjtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSjmz6v BxtsRQIaU0PmikPJO8AvMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp5JnzSahWvbHcrRGhcczISqiBVbQu37QcmBjHeuC+KHtIW7bI7J3g XHClRGL1gBh/oNZMHPqGANQXXCI2LPlTARgPgbo+xtueJFqqcZ+k7x6XcRbuyjIy 1uLWRR8wYzmx58v8IgXlmLpoukY6CvQABvXU2f7TTLhIvaD4WUZh5CjWU3oWz38S bbr7WQYgP8LF/GyyYDxW7ESIm78r3IYgjJSm5HFVMrJ8jnG0w1gfNuuTQHEEBCXP vhY5JMFHEsh9UFwY6Foj0ExBtOzYA3gl454B57HpGKhYIpJPySug445snOIpOJJ0 sVdIgjyW8lE7d3uUUBgX5r0874RMiKTK -----END CERTIFICATE-----Generated at Sat May 18 18:12:34 2024 by rpki-client on console-fra.rpki-client.org