$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: T0SPhrC5Z44RTcXeigsAx8t2eOzrK/FkSDZWpnA8Rm4= Subject key identifier: D5:CB:D0:56:91:C2:71:8E:D4:47:C7:14:8B:2E:A1:00:9B:62:C6:1B Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0366 Signing time: Sun 19 May 2024 02:52:17 +0000 Manifest this update: Sun 19 May 2024 02:52:17 +0000 Manifest next update: Sun 26 May 2024 02:52:17 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: k22gZg+JulayaoSr6NecH/AYFJLeusRIGz1CYaPyLR4=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: G5PTC5mR/M/6C4He79GPX1zDTZ+AVyhpusoSCKs7omI=) 3: 4D87ACF0C4C911EE9E405162C4F9AE02.roa (hash: pWNwLfsYpEMZbwqMhQZBrEi+YnwT/SrdeDb1+G/W2AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: May 19 02:52:17 2024 GMT Not After : May 26 02:52:17 2024 GMT Subject: CN=66496961-3d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d8:a1:c6:cc:5b:ac:fc:56:ae:ae:34:e3:c7: 0c:49:41:f3:8d:69:46:c6:6c:3c:55:b2:81:fc:64: 5e:c1:f0:1f:ae:bf:34:e6:72:0f:0d:62:e1:02:a2: 2c:6e:b4:c9:2f:a1:72:96:22:cb:d3:80:ab:9d:88: da:22:13:30:fc:a8:79:a8:d5:85:ef:0f:db:65:e3: 37:d3:97:d0:a2:6b:90:2c:ab:67:b6:97:f7:be:a8: 1d:4c:56:0b:d6:a7:d1:19:10:b4:8b:dc:5f:93:bb: a4:40:0e:01:77:ef:14:2c:6b:fa:c8:49:43:77:6a: a0:88:65:37:b4:b5:8d:8a:5d:38:7e:d2:9c:08:ab: 0f:36:96:7d:1e:10:82:bf:e6:3f:5d:5a:5f:45:91: 63:5f:57:bd:3a:40:e8:43:86:66:5f:73:a7:81:b3: d4:3c:ef:c5:04:4d:e4:b8:d7:59:3b:a3:87:0e:35: a8:53:d9:a6:ae:57:d0:39:bf:c3:0f:92:48:7c:c6: e0:da:16:24:e8:65:b6:87:39:c8:13:5e:27:19:e5: 3f:73:f3:24:3d:98:be:fd:7a:fd:ea:e6:6d:7c:a1: 7d:e4:6e:8d:0c:b5:6a:18:f8:8c:43:b8:2f:07:1e: 97:1d:8a:a9:00:13:31:83:2a:2b:21:1b:aa:e5:8c: be:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CB:D0:56:91:C2:71:8E:D4:47:C7:14:8B:2E:A1:00:9B:62:C6:1B X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:05:0d:2f:31:b4:34:fc:00:78:b6:8a:f7:3e:45:07:10:e6: e6:2f:f6:0d:04:38:81:38:76:a0:b0:43:0c:6a:50:b5:7a:d2: 1c:a4:1d:4b:e0:71:8b:3b:40:c4:78:d9:4b:dc:51:16:f6:41: ea:30:08:30:01:70:f1:ab:cb:70:e3:56:82:52:4f:af:60:3f: 7a:ff:3a:51:c8:8c:a7:59:ba:1a:78:33:c3:7e:c4:cf:1a:40: 56:fd:43:97:90:f7:7a:39:22:46:41:f9:86:c5:e1:4b:27:9d: f7:71:8d:78:6c:e7:ec:12:5b:6d:e0:52:51:d9:d7:52:11:e1: f4:09:66:7a:03:d3:be:e3:19:1a:79:68:40:68:a3:01:d6:71: 70:9f:9a:70:9b:9c:05:1a:9c:1e:64:84:55:b6:ea:15:16:cd: ea:89:99:46:1c:01:bb:84:3e:c6:b7:9e:ce:f1:18:d5:32:c6: db:37:78:e9:d1:23:b8:dd:52:e7:13:a1:78:06:0d:b0:b2:d0: 9d:0c:74:1a:62:c9:7f:41:a7:b4:b2:a9:99:54:18:68:6e:bf: 4a:a2:1f:a5:7f:db:31:79:0a:88:dd:21:bb:3c:f2:6f:ed:49: 3c:96:b2:5c:5e:be:b8:7c:53:6c:39:f6:fa:e8:c5:6c:05:cd: a8:5d:d0:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjQwNTE5MDI1MjE3WhcNMjQwNTI2MDI1MjE3WjAYMRYwFAYD VQQDEw02NjQ5Njk2MS0zZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dihxsxbrPxWrq4048cMSUHzjWlGxmw8VbKB/GRewfAfrr805nIPDWLhAqIs brTJL6FyliLL04CrnYjaIhMw/Kh5qNWF7w/bZeM305fQomuQLKtntpf3vqgdTFYL 1qfRGRC0i9xfk7ukQA4Bd+8ULGv6yElDd2qgiGU3tLWNil04ftKcCKsPNpZ9HhCC v+Y/XVpfRZFjX1e9OkDoQ4ZmX3OngbPUPO/FBE3kuNdZO6OHDjWoU9mmrlfQOb/D D5JIfMbg2hYk6GW2hznIE14nGeU/c/MkPZi+/Xr96uZtfKF95G6NDLVqGPiMQ7gv Bx6XHYqpABMxgyorIRuq5Yy+aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXL0FaR wnGO1EfHFIsuoQCbYsYbMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfBQ0vMbQ0/AB4tor3PkUHEObmL/YNBDiBOHagsEMMalC1etIcpB1L 4HGLO0DEeNlL3FEW9kHqMAgwAXDxq8tw41aCUk+vYD96/zpRyIynWboaeDPDfsTP GkBW/UOXkPd6OSJGQfmGxeFLJ533cY14bOfsEltt4FJR2ddSEeH0CWZ6A9O+4xka eWhAaKMB1nFwn5pwm5wFGpweZIRVtuoVFs3qiZlGHAG7hD7Gt57O8RjVMsbbN3jp 0SO43VLnE6F4Bg2wstCdDHQaYsl/Qae0sqmZVBhobr9Koh+lf9sxeQqI3SG7PPJv 7Uk8lrJcXr64fFNsOfb66MVsBc2oXdBo -----END CERTIFICATE-----Generated at Sun May 19 03:48:54 2024 by rpki-client on console-fra.rpki-client.org