$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json) Hash identifier: XFWwFJtCFLuNyOadT+hVYx89RyV7mmI2lYkNylVy4g4= Subject key identifier: 31:C4:04:9F:97:9B:1A:58:2E:4F:34:45:0A:BE:2A:30:7F:69:7C:A8 Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft Manifest number: 044A Signing time: Sun 19 May 2024 01:55:06 +0000 Manifest this update: Sun 19 May 2024 01:55:05 +0000 Manifest next update: Sun 26 May 2024 01:55:05 +0000 Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: j9eLloaqVhW6wsnKH8zxxeU6rfB9S31dclO52yaK1a0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Validity Not Before: May 19 01:55:05 2024 GMT Not After : May 26 01:55:05 2024 GMT Subject: CN=66495bf9-c2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:c6:c9:29:42:5f:23:2d:00:87:6b:28:f6: 3e:cb:e1:7a:7d:d9:bb:ce:4a:a4:6e:b5:99:97:cc: 1c:ad:61:e0:79:fb:b3:29:40:85:64:80:13:0f:2b: a6:c4:15:0a:52:7e:76:a7:6f:63:b2:03:c9:1c:b0: 0b:9c:3d:e1:49:1a:1b:cd:6c:68:75:98:c4:91:3a: 05:86:0d:a1:11:f5:77:6b:c3:97:38:1e:aa:f4:82: 69:5e:04:e7:80:f2:a0:15:fb:1a:9f:f9:f4:fb:ac: b2:6e:61:d3:51:26:22:ab:58:16:a8:3e:45:66:5e: 6a:30:b0:53:cc:f0:ab:31:8b:c0:38:29:1e:03:2f: ca:41:23:ee:77:53:43:8e:fb:c6:66:c8:65:16:89: 83:44:c6:3b:83:d1:4e:6f:c3:9d:f8:18:ad:87:5e: 29:b2:15:d0:64:c3:67:a1:59:d9:ca:8f:06:5b:38: 29:8f:b7:9a:70:b4:7b:71:e8:31:39:c0:df:bc:c1: bb:0e:25:42:61:a4:ba:89:7c:5f:25:76:3d:fa:3f: 10:34:8f:ca:2b:35:74:a2:a0:fe:2d:1e:5f:a4:35: bb:de:7b:55:80:5f:33:4d:ce:b3:b9:08:a9:4d:31: ed:b0:53:fb:9c:ec:89:90:2f:d2:a1:d3:49:7e:0c: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C4:04:9F:97:9B:1A:58:2E:4F:34:45:0A:BE:2A:30:7F:69:7C:A8 X509v3 Authority Key Identifier: keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:09:03:3a:31:e1:66:fb:e0:f7:f0:26:be:a2:75:c9:20:b1: 48:9b:f8:d7:71:29:b2:8f:7c:f6:bf:c3:90:3c:18:aa:ac:2c: ed:ea:00:ff:e3:c8:95:83:14:b5:87:70:e4:c0:d8:c1:52:bc: 6a:ae:b5:3e:30:29:04:d8:86:9e:5e:63:0e:fb:d7:15:d5:cb: 10:cd:ac:f5:b5:8b:25:cf:ed:46:23:34:21:9e:9e:60:11:cb: df:98:4f:30:61:49:89:69:3b:5d:da:85:2a:dc:ba:67:fa:20: 44:79:2b:b5:49:c1:83:ab:4f:bd:68:6e:40:ea:bc:9d:e2:96: 25:51:e8:ef:ec:7a:48:b8:7c:52:47:01:59:33:41:b8:d4:77: 82:12:c4:64:64:fd:3e:38:cf:db:8a:e6:cd:19:2e:99:42:e5: 29:c7:af:7e:bf:9e:2d:74:c1:f0:6e:75:eb:4c:76:25:7f:b8: d3:a9:53:3a:55:61:fc:c1:a4:93:fa:6c:cf:02:d8:64:b1:02: f0:c3:2f:97:31:68:27:af:6e:44:b4:5a:41:ae:1c:92:65:42: ee:dd:ac:06:97:49:19:73:8b:d3:c3:e9:aa:45:c1:51:01:7f: 9d:41:ee:39:d3:cd:2b:ec:2e:e0:7e:04:06:16:a0:a0:87:12: 4a:79:98:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF RDU3NUYxREMwHhcNMjQwNTE5MDE1NTA1WhcNMjQwNTI2MDE1NTA1WjAYMRYwFAYD VQQDEw02NjQ5NWJmOS1jMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7A3GySlCXyMtAIdrKPY+y+F6fdm7zkqkbrWZl8wcrWHgefuzKUCFZIATDyum xBUKUn52p29jsgPJHLALnD3hSRobzWxodZjEkToFhg2hEfV3a8OXOB6q9IJpXgTn gPKgFfsan/n0+6yybmHTUSYiq1gWqD5FZl5qMLBTzPCrMYvAOCkeAy/KQSPud1ND jvvGZshlFomDRMY7g9FOb8Od+Bith14pshXQZMNnoVnZyo8GWzgpj7eacLR7cegx OcDfvMG7DiVCYaS6iXxfJXY9+j8QNI/KKzV0oqD+LR5fpDW73ntVgF8zTc6zuQip TTHtsFP7nOyJkC/SodNJfgw/PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHEBJ+X mxpYLk80RQq+KjB/aXyoMB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgCQM6MeFm++D38Ca+onXJILFIm/jXcSmyj3z2v8OQPBiqrCzt6gD/ 48iVgxS1h3DkwNjBUrxqrrU+MCkE2IaeXmMO+9cV1csQzaz1tYslz+1GIzQhnp5g EcvfmE8wYUmJaTtd2oUq3Lpn+iBEeSu1ScGDq0+9aG5A6ryd4pYlUejv7HpIuHxS RwFZM0G41HeCEsRkZP0+OM/biubNGS6ZQuUpx69+v54tdMHwbnXrTHYlf7jTqVM6 VWH8waST+mzPAthksQLwwy+XMWgnr25EtFpBrhySZULu3awGl0kZc4vTw+mqRcFR AX+dQe45080r7C7gfgQGFqCghxJKeZhA -----END CERTIFICATE-----Generated at Sun May 19 02:59:17 2024 by rpki-client on console-ams.rpki-client.org