$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: ClB0AhJJfGbF6GEMWoRXoM51JkceN0HAIzFd/t7R1HI= Subject key identifier: 9E:66:FA:38:C1:94:8D:1A:C2:A5:E4:E4:B9:7F:C1:51:D8:06:46:74 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 76 Signing time: Sun 19 May 2024 07:24:04 +0000 Manifest this update: Sun 19 May 2024 07:24:03 +0000 Manifest next update: Sun 26 May 2024 07:24:03 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: +uFfnSEjBlOJFWXns2NyHAqMn/cZADczfQXikvMwphI=) 2: B5408BB266BB11EEB2022486C4F9AE02.roa (hash: bZsgoJd9cGpYXB7WjrWrxQ8lxtqhEkb+fTSOxr1ZyCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: May 19 07:24:03 2024 GMT Not After : May 26 07:24:03 2024 GMT Subject: CN=6649a914-40a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:e2:92:dc:e4:b2:bd:5b:4f:49:7a:75:0d: 18:76:d2:f7:26:fc:18:38:10:75:9c:60:9a:f5:d6: 10:fa:5b:cd:eb:47:53:22:cf:c4:85:ed:cc:46:fe: 72:92:c8:06:0b:09:11:96:b7:98:11:67:32:71:b5: 8d:7d:cd:6c:d7:a3:df:f7:14:f4:34:0a:cc:cd:0c: c2:2f:66:46:b3:98:df:b0:d5:7b:57:8b:5c:3d:6b: 16:33:91:54:f2:df:5c:9f:87:b8:fb:60:d1:d2:4e: 81:25:d1:07:52:3f:6f:8c:79:60:65:69:fa:99:ed: 34:c7:d9:53:04:6c:78:fe:6b:92:4d:0a:51:0b:a2: 72:1e:ec:92:52:3c:c8:18:5a:c0:01:94:f7:8a:91: 34:33:a2:aa:d8:24:32:e2:d3:41:b4:8e:24:24:d9: 04:4c:73:63:a5:12:a7:12:84:1e:94:2f:3f:4f:e3: a5:3e:1b:6d:65:e3:2d:cf:98:01:7c:dd:af:5e:c1: 73:9a:95:41:11:dc:1d:94:2a:2a:62:14:4c:f7:df: 91:37:07:8b:a1:ae:41:90:0d:3d:fc:2d:cb:2b:e1: a0:52:8a:86:2e:c2:2a:19:1d:f2:df:2a:c2:93:d3: 3c:38:4d:e0:11:6c:34:41:42:bb:07:ca:ba:c5:ca: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:66:FA:38:C1:94:8D:1A:C2:A5:E4:E4:B9:7F:C1:51:D8:06:46:74 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c7:62:90:30:4b:09:60:29:db:fc:58:a1:e0:0d:88:b6:c7: 9b:e3:a3:4a:27:d1:d6:f7:cd:89:d6:92:9c:c5:03:f9:b8:d6: 4d:7c:61:72:ea:ca:f6:34:8f:82:bf:ff:77:b7:ce:7f:47:3b: 06:6c:37:c4:0b:37:74:d4:f3:9d:66:9d:f6:27:1f:5d:9d:89: ab:58:15:67:54:52:db:f1:12:ce:4a:60:3e:76:96:0e:00:70: c2:4f:0b:ed:85:a0:2f:da:d4:ed:e9:c7:d7:45:34:28:af:1d: b6:0b:27:a4:49:ab:c4:da:23:62:a2:c4:f2:9b:82:09:da:a3: e8:c3:60:29:b7:d7:08:45:65:69:9a:18:1f:ba:12:cf:d7:c4: 32:a3:2e:5f:29:2c:03:3e:8d:da:36:21:6e:f5:88:9d:66:7b: 1d:d0:0d:b0:e5:79:fa:17:e3:f0:1c:32:d3:3e:bb:e1:73:59: 2c:81:21:e1:ac:05:77:f0:c3:f1:86:52:55:63:ac:86:32:36: 16:b4:94:9f:87:8d:66:ae:e3:21:0e:7f:60:0a:09:56:ed:95: 75:74:13:8e:1e:72:f2:5b:39:20:b6:46:7d:47:e3:7b:db:1b: 9f:fd:9d:67:49:bb:6f:63:ee:93:3f:2e:93:ac:a8:1a:60:ad: 56:76:5e:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzlFQzExMC8GA1UEBRMoRTFCOUE2RUIwQzhGQUZGN0Y1NEM2OEMwNTYyNEEyOENG RDNGQURFQzAeFw0yNDA1MTkwNzI0MDNaFw0yNDA1MjYwNzI0MDNaMBgxFjAUBgNV BAMTDTY2NDlhOTE0LTQwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXlOKS3OSyvVtPSXp1DRh20vcm/Bg4EHWcYJr11hD6W83rR1Miz8SF7cxG/nKS yAYLCRGWt5gRZzJxtY19zWzXo9/3FPQ0CszNDMIvZkazmN+w1XtXi1w9axYzkVTy 31yfh7j7YNHSToEl0QdSP2+MeWBlafqZ7TTH2VMEbHj+a5JNClELonIe7JJSPMgY WsABlPeKkTQzoqrYJDLi00G0jiQk2QRMc2OlEqcShB6ULz9P46U+G21l4y3PmAF8 3a9ewXOalUER3B2UKipiFEz335E3B4uhrkGQDT38Lcsr4aBSioYuwioZHfLfKsKT 0zw4TeARbDRBQrsHyrrFyn6HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnmb6OMGU jRrCpeTkuX/BUdgGRnQwHwYDVR0jBBgwFoAU4bmm6wyPr/f1TGjAViSijP0/reww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzOUVDLzEzNTVFNzUyNjZC QjExRUU4NDYyRUU4NEM0RjlBRTAyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jl dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGJtbTZ3eVByX2YxVEdqQVZpU2lqUDBfcmV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz OUVDLzEzNTVFNzUyNjZCQjExRUU4NDYyRUU4NEM0RjlBRTAyLzRibW02d3lQcl9m MVRHakFWaVNpalAwX3Jldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDHYpAwSwlgKdv8WKHgDYi2x5vjo0on0db3zYnWkpzFA/m41k18YXLq yvY0j4K//3e3zn9HOwZsN8QLN3TU851mnfYnH12diatYFWdUUtvxEs5KYD52lg4A cMJPC+2FoC/a1O3px9dFNCivHbYLJ6RJq8TaI2KixPKbggnao+jDYCm31whFZWma GB+6Es/XxDKjLl8pLAM+jdo2IW71iJ1mex3QDbDlefoX4/AcMtM+u+FzWSyBIeGs BXfww/GGUlVjrIYyNha0lJ+HjWau4yEOf2AKCVbtlXV0E44ecvJbOSC2Rn1H43vb G5/9nWdJu29j7pM/LpOsqBpgrVZ2Xso= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org