$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: BFtPMqNjE6Vbpu7LRRIcwjRElskfOV+iUhDm+HaeiRY= Subject key identifier: 7E:1D:7E:1F:E3:4C:56:AC:24:03:EA:AF:4A:34:34:3E:01:DB:16:E0 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 10DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 10CB Signing time: Sat 18 May 2024 17:53:32 +0000 Manifest this update: Sat 18 May 2024 17:53:31 +0000 Manifest next update: Sat 25 May 2024 17:53:31 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: Du16Y47wRsMvIO7ZxYQMUf5NBCjTFsf0+kNGlO27ClI=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: W7J7CZ7K1SQs80EMK/WL5CtVaWJnhQcFLeI1LnfC9vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4315 (0x10db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: May 18 17:53:31 2024 GMT Not After : May 25 17:53:31 2024 GMT Subject: CN=6648eb1b-9950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:f2:36:ab:82:79:bc:4a:4a:55:54:c6:d8: fb:5a:f9:a5:83:09:d4:9e:e7:a9:7c:6e:37:95:24: d9:46:7c:db:2a:a7:68:5f:a8:8f:29:f6:3b:52:47: 04:75:9b:e6:a4:63:a4:ed:f9:31:2f:2e:1a:0b:02: 4b:1d:0e:76:17:1b:06:ea:b7:25:2a:fc:37:5b:93: 91:55:1c:e1:a9:d2:05:50:48:98:01:81:2a:10:7a: ce:c8:21:4a:ca:6f:29:21:c3:52:5f:c2:2e:7b:7f: e7:60:3e:c5:90:3c:56:42:58:2a:16:61:38:b4:61: eb:1a:b2:09:4c:39:5c:c2:3e:a0:d7:29:66:55:2b: 4a:6c:9c:96:6d:f1:95:96:29:8b:36:0b:01:c6:18: 1a:26:b1:da:24:d4:38:0d:b8:80:e5:8b:8b:d0:7f: ee:9b:55:92:51:e3:b4:cd:c3:52:e6:a2:bb:e9:b3: 51:bf:2a:a0:69:e1:c3:45:0b:6e:1c:53:a4:c2:ad: 0e:3e:5a:d5:c5:eb:e3:e9:2d:5d:dd:03:29:c2:05: ae:67:11:9c:df:ca:9c:97:74:e7:d6:16:5a:0e:39: 60:7c:82:56:3e:a7:0a:56:49:12:1d:24:37:fa:e3: 0e:3d:ba:3d:74:6f:05:06:9b:2f:bd:8d:6c:b1:7e: 9c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1D:7E:1F:E3:4C:56:AC:24:03:EA:AF:4A:34:34:3E:01:DB:16:E0 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7c:f2:b7:7e:46:55:ff:cd:83:20:a1:d1:83:6d:28:52:42: 64:3a:03:da:1a:48:e0:2d:84:14:0b:9b:59:1d:6f:12:7e:c5: bc:91:bf:0f:a0:8d:30:9f:02:4a:94:52:00:0c:fd:be:40:fc: 60:57:7f:d6:11:c4:db:96:0c:8a:6b:9a:e2:08:67:84:ff:80: e0:fe:1e:7a:1a:dc:35:28:b7:36:b7:14:9b:8c:84:4b:9b:2d: 8b:48:d2:6f:04:3f:9f:67:6d:99:6d:58:2d:e9:d0:c7:b2:d0: 9f:ab:d4:8a:0c:29:93:c2:b0:fb:44:32:90:60:e5:f5:86:7b: b9:8d:0b:79:13:bf:5d:d2:a6:d0:01:f3:6e:7d:00:7c:c8:33: 06:a8:9a:ea:15:07:2e:4f:e5:d9:82:1e:37:7c:34:7d:1c:86: 05:ef:34:00:dc:0a:0b:a0:5b:56:91:0b:6e:8a:16:08:26:fb: e7:a1:45:fa:96:1a:95:e9:15:f0:c3:7b:7b:37:a6:e2:e2:e1: bc:41:b1:7a:d6:5b:1d:9e:8f:5f:4a:95:fb:a3:3d:d6:de:85: f7:ff:17:01:5c:07:bc:db:fc:8a:cb:93:77:af:32:88:8d:d2: 9d:2c:29:ca:be:05:04:cc:3e:12:12:97:94:8c:dd:82:fc:6e: ec:db:e2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjQwNTE4MTc1MzMxWhcNMjQwNTI1MTc1MzMxWjAYMRYwFAYD VQQDEw02NjQ4ZWIxYi05OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNvyNquCebxKSlVUxtj7WvmlgwnUnuepfG43lSTZRnzbKqdoX6iPKfY7UkcE dZvmpGOk7fkxLy4aCwJLHQ52FxsG6rclKvw3W5ORVRzhqdIFUEiYAYEqEHrOyCFK ym8pIcNSX8Iue3/nYD7FkDxWQlgqFmE4tGHrGrIJTDlcwj6g1ylmVStKbJyWbfGV limLNgsBxhgaJrHaJNQ4DbiA5YuL0H/um1WSUeO0zcNS5qK76bNRvyqgaeHDRQtu HFOkwq0OPlrVxevj6S1d3QMpwgWuZxGc38qcl3Tn1hZaDjlgfIJWPqcKVkkSHSQ3 +uMOPbo9dG8FBpsvvY1ssX6cbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4dfh/j TFasJAPqr0o0ND4B2xbgMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOfPK3fkZV/82DIKHRg20oUkJkOgPaGkjgLYQUC5tZHW8SfsW8kb8P oI0wnwJKlFIADP2+QPxgV3/WEcTblgyKa5riCGeE/4Dg/h56Gtw1KLc2txSbjIRL my2LSNJvBD+fZ22ZbVgt6dDHstCfq9SKDCmTwrD7RDKQYOX1hnu5jQt5E79d0qbQ AfNufQB8yDMGqJrqFQcuT+XZgh43fDR9HIYF7zQA3AoLoFtWkQtuihYIJvvnoUX6 lhqV6RXww3t7N6bi4uG8QbF61lsdno9fSpX7oz3W3oX3/xcBXAe82/yKy5N3rzKI jdKdLCnKvgUEzD4SEpeUjN2C/G7s2+Kd -----END CERTIFICATE-----Generated at Sat May 18 18:46:47 2024 by rpki-client on console-fra.rpki-client.org