$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: R0iDYzd2CZuRXbChI7nxzJBDLxc/qv6ZNVRryTnvggg= Subject key identifier: 70:85:8F:6D:F6:4D:31:DE:E3:BD:3E:D7:F7:24:48:79:F6:9A:C9:D5 Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0BDE Signing time: Sat 18 May 2024 19:08:51 +0000 Manifest this update: Sat 18 May 2024 19:08:51 +0000 Manifest next update: Sat 25 May 2024 19:08:51 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: 2lociY+lcVF6VGVB1Hx/Wi/TRtr6/ndi4nEF73YEn3o=) 2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: xP6ndfAIUT4kjjg3Z1yDgdvpNzEsqIUZcM1cJmsAZNg=) 3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: NI1ZoCOniGYBu2VFAx4PdtMcylM7TuUiNnsC0whwimk=) 4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: 9hZUw6OiygXcs2VV6xxLdgPVz+MABiI7dpW7FTbMjXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: May 18 19:08:51 2024 GMT Not After : May 25 19:08:51 2024 GMT Subject: CN=6648fcc3-ba12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:9b:f6:bb:79:6a:96:89:af:64:b4:eb:9d: 49:03:cf:90:ad:f2:6d:fa:aa:e2:f6:68:18:0d:e1: 56:c3:57:d6:c8:14:97:42:0e:f6:39:85:63:7b:98: 6b:30:2b:61:a4:61:15:0b:72:e0:6f:8c:73:70:ba: 7e:f2:09:8b:69:6c:4f:2a:99:82:13:2f:73:e6:ce: bf:ed:3c:cf:33:30:21:d2:1f:67:31:7a:db:e5:eb: f7:e0:19:86:44:c4:d2:c8:fd:7f:f6:8d:d5:a9:75: de:49:cd:26:b0:f3:02:39:ae:e6:bf:2e:d0:9f:09: 8a:77:b2:9a:1b:1a:7d:01:ea:bc:05:ae:40:fb:da: 68:86:0e:1f:3a:00:40:31:74:71:9c:ab:c9:92:ec: f6:18:21:e9:f1:85:3a:f0:9d:67:16:1e:93:b0:7a: c7:7d:27:17:41:e7:90:c4:94:cc:9e:e0:63:74:fa: 35:01:f8:f9:cb:f7:29:2e:9d:06:b0:d1:eb:3b:4d: 7a:6e:d3:a1:75:cb:ef:64:f1:fc:9e:77:1e:14:75: 6e:44:80:3f:77:45:41:b3:d0:10:60:f1:ae:b0:0e: 79:82:71:b9:0b:cc:16:0e:7f:13:71:31:3a:9e:9a: 30:21:54:f1:28:69:50:cf:2a:eb:41:f6:f5:b1:b2: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:8F:6D:F6:4D:31:DE:E3:BD:3E:D7:F7:24:48:79:F6:9A:C9:D5 X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:39:17:65:cd:d7:88:52:43:62:fe:a1:dc:dc:a2:a2:57:64: a2:cd:fc:06:fb:ad:5e:65:26:62:99:4e:9c:dc:35:9b:dd:aa: 60:ef:ae:75:60:d3:d8:71:8a:d4:2c:cf:8a:63:60:8d:9b:53: c9:8f:f4:c6:2b:21:52:89:ee:33:03:a8:1d:37:40:73:56:1a: c5:51:22:98:75:f7:95:fe:06:31:0a:2c:e9:66:e1:a9:b6:a1: 72:91:b1:16:f0:26:cd:88:fb:a7:87:cb:12:1e:e9:71:7e:ed: 68:dc:f2:b6:4c:a0:18:42:50:19:8f:da:b3:e9:b3:f9:da:d0: 32:85:1c:49:5d:a5:72:95:80:3d:8f:fc:d6:04:9c:09:46:4f: a4:77:42:de:28:1d:f2:e8:78:bf:5e:bb:ee:a3:df:57:21:09: d2:7d:c9:61:78:a0:cb:fc:c3:51:6f:66:fd:df:f0:4a:e5:e5: 85:40:c5:7f:39:f0:90:a4:ef:45:27:83:c3:31:f4:18:14:fa: 3f:40:ad:4b:47:c1:37:25:98:66:e4:5a:0c:98:14:13:32:c4: 27:94:31:24:27:2c:66:fb:ec:49:5d:35:b9:60:3c:bd:34:5f: d0:11:5e:de:ca:09:2c:be:2b:41:70:6d:ec:fe:79:35:8c:8f: 26:6f:e1:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjQwNTE4MTkwODUxWhcNMjQwNTI1MTkwODUxWjAYMRYwFAYD VQQDEw02NjQ4ZmNjMy1iYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tKb9rt5apaJr2S0651JA8+QrfJt+qri9mgYDeFWw1fWyBSXQg72OYVje5hr MCthpGEVC3Lgb4xzcLp+8gmLaWxPKpmCEy9z5s6/7TzPMzAh0h9nMXrb5ev34BmG RMTSyP1/9o3VqXXeSc0msPMCOa7mvy7QnwmKd7KaGxp9Aeq8Ba5A+9pohg4fOgBA MXRxnKvJkuz2GCHp8YU68J1nFh6TsHrHfScXQeeQxJTMnuBjdPo1Afj5y/cpLp0G sNHrO016btOhdcvvZPH8nnceFHVuRIA/d0VBs9AQYPGusA55gnG5C8wWDn8TcTE6 npowIVTxKGlQzyrrQfb1sbJiSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCFj232 TTHe470+1/ckSHn2msnVMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQORdlzdeIUkNi/qHc3KKiV2SizfwG+61eZSZimU6c3DWb3apg7651 YNPYcYrULM+KY2CNm1PJj/TGKyFSie4zA6gdN0BzVhrFUSKYdfeV/gYxCizpZuGp tqFykbEW8CbNiPunh8sSHulxfu1o3PK2TKAYQlAZj9qz6bP52tAyhRxJXaVylYA9 j/zWBJwJRk+kd0LeKB3y6Hi/Xrvuo99XIQnSfclheKDL/MNRb2b93/BK5eWFQMV/ OfCQpO9FJ4PDMfQYFPo/QK1LR8E3JZhm5FoMmBQTMsQnlDEkJyxm++xJXTW5YDy9 NF/QEV7eygksvitBcG3s/nk1jI8mb+Gl -----END CERTIFICATE-----Generated at Sat May 18 19:56:08 2024 by rpki-client on console-fra.rpki-client.org