$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: 5iT9fM9rPD9+RTbQOZ6oi8faoszgPyKCLvxI9sHmpbM= Subject key identifier: F2:B7:F4:22:BD:30:B7:7C:80:98:DC:B4:4A:DF:52:6A:B7:04:32:1C Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0AEC Signing time: Sat 18 May 2024 20:00:46 +0000 Manifest this update: Sat 18 May 2024 20:00:46 +0000 Manifest next update: Sat 25 May 2024 20:00:46 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: HjJ1JVl3qo4Yys+ZcsfsNp0501kv7aA6y9sWSP4hA/E=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: mTSSoL8tObAjFiioAAe2ubxQyBHZ7fTNk/+PPebDd3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: May 18 20:00:46 2024 GMT Not After : May 25 20:00:46 2024 GMT Subject: CN=664908ee-98fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:7d:c1:46:9c:ab:43:e1:a8:cf:af:94:65: ee:44:c8:ce:23:90:e4:90:e0:a2:14:fe:f6:ed:b3: 0b:12:80:ab:67:89:1e:db:3b:d9:a8:de:80:f0:d6: bf:06:f9:0c:1c:26:6e:c1:5f:ce:96:df:01:ff:f5: 10:ba:55:10:b8:d8:67:be:34:d8:f2:56:84:d7:8c: 54:4c:88:55:e0:7f:d8:d4:34:3d:23:35:59:18:34: 97:a1:65:c4:37:b5:cb:0e:aa:36:2c:11:9e:6f:7b: ba:20:2b:54:85:f2:69:0d:53:81:fe:a6:3c:37:f7: 15:4f:11:65:6a:c4:cc:c9:da:c1:52:a9:65:e6:5c: d8:90:07:c9:8b:56:11:f1:b9:10:90:e9:04:5c:24: 4a:76:29:f7:92:42:88:c3:2d:b0:3a:77:58:2e:62: dd:ea:11:37:bf:af:53:89:d2:8e:6d:d8:f5:95:67: 84:01:f6:63:db:01:d0:a8:55:91:0a:e2:19:ab:13: 06:bd:00:2a:71:b8:6b:15:f0:31:0f:80:e1:80:06: 17:e4:aa:04:4c:85:13:11:5a:df:4f:51:bd:ce:e5: 54:f8:33:b1:36:72:b8:1e:05:d6:30:17:e0:99:04: fa:dd:6b:07:17:ed:ef:44:2c:f1:bd:9c:d9:1c:42: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:F4:22:BD:30:B7:7C:80:98:DC:B4:4A:DF:52:6A:B7:04:32:1C X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:40:35:bc:36:7e:ec:3c:20:e2:4e:b4:43:11:ca:bc:10:62: 7e:f9:b2:d7:f9:55:8a:cc:13:32:ee:68:bb:80:fd:02:d1:c4: ea:0b:6b:5e:37:91:3a:bf:7b:88:20:21:c2:76:a0:3d:64:1f: 9a:48:9d:53:4a:67:25:2c:93:17:ff:97:d0:65:f4:b0:bf:8c: 1c:cd:72:9a:e9:89:5a:f4:f4:fb:ae:dd:39:03:25:fd:90:9b: 73:3d:57:47:85:0e:67:9d:2d:a8:c3:43:c0:b1:ca:3b:27:bb: 8d:79:01:bb:56:67:ed:50:06:c6:50:7a:e2:40:1a:d8:3c:7d: 2e:cb:58:34:42:11:5b:29:ee:42:10:66:2e:c6:51:4a:c1:d5: 28:8e:59:5e:3c:c7:15:29:b9:a7:41:04:e6:a5:5e:8d:6c:7c: ec:42:5a:ba:14:55:66:08:43:a9:5d:86:55:ca:70:56:d2:84: 9d:15:b9:21:d4:7a:2f:08:e4:df:ab:b1:6e:fc:41:f2:80:7f: 6a:07:53:92:d7:df:d2:34:2e:45:a0:1c:d0:79:ad:60:6d:18: 66:d1:5c:e7:0f:3c:70:41:30:ca:d4:7d:4a:3b:28:d3:33:e0: 37:6a:7a:f1:cb:c5:11:7b:5b:e9:ed:b1:53:b9:e1:48:ee:f6: 59:4f:f7:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjQwNTE4MjAwMDQ2WhcNMjQwNTI1MjAwMDQ2WjAYMRYwFAYD VQQDEw02NjQ5MDhlZS05OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCp9wUacq0PhqM+vlGXuRMjOI5DkkOCiFP727bMLEoCrZ4ke2zvZqN6A8Na/ BvkMHCZuwV/Olt8B//UQulUQuNhnvjTY8laE14xUTIhV4H/Y1DQ9IzVZGDSXoWXE N7XLDqo2LBGeb3u6ICtUhfJpDVOB/qY8N/cVTxFlasTMydrBUqll5lzYkAfJi1YR 8bkQkOkEXCRKdin3kkKIwy2wOndYLmLd6hE3v69TidKObdj1lWeEAfZj2wHQqFWR CuIZqxMGvQAqcbhrFfAxD4DhgAYX5KoETIUTEVrfT1G9zuVU+DOxNnK4HgXWMBfg mQT63WsHF+3vRCzxvZzZHEJGLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK39CK9 MLd8gJjctErfUmq3BDIcMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNQDW8Nn7sPCDiTrRDEcq8EGJ++bLX+VWKzBMy7mi7gP0C0cTqC2te N5E6v3uIICHCdqA9ZB+aSJ1TSmclLJMX/5fQZfSwv4wczXKa6Yla9PT7rt05AyX9 kJtzPVdHhQ5nnS2ow0PAsco7J7uNeQG7VmftUAbGUHriQBrYPH0uy1g0QhFbKe5C EGYuxlFKwdUojllePMcVKbmnQQTmpV6NbHzsQlq6FFVmCEOpXYZVynBW0oSdFbkh 1HovCOTfq7Fu/EHygH9qB1OS19/SNC5FoBzQea1gbRhm0VznDzxwQTDK1H1KOyjT M+A3anrxy8URe1vp7bFTueFI7vZZT/fO -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org