$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: xsOnKhQMN9Y6bzuXxCRMgaGT7+q1dJpuBUiope1Zmvw= Subject key identifier: CB:E4:55:88:BB:31:4D:A5:BB:1D:E5:7D:68:D2:45:E8:9C:D6:0A:53 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 08E4 Signing time: Fri 24 May 2024 21:30:37 +0000 Manifest this update: Fri 24 May 2024 21:30:37 +0000 Manifest next update: Fri 31 May 2024 21:30:37 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: 6No+4DC6wnDX/8BujgRu21PqepcEDzl1DkxbZZoCJRo=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: sYwVE1L2S9DVLlLPiPsujA+9SMHdkm/oUQt4rK/izSo=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: w4J4xAuvdERMPvfOUQHJ8THCJMJLk8tx9s5ftfLsDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 21:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: May 24 21:30:37 2024 GMT Not After : May 31 21:30:37 2024 GMT Subject: CN=665106fd-1a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:a7:cc:5b:6b:32:a7:f6:4d:cf:d6:a0:b3: 8b:ea:35:d3:ad:29:f4:0c:a9:2d:4e:cc:3f:34:74: d1:67:de:d0:6a:34:df:07:89:e6:4b:ab:61:0e:c3: a3:ff:ce:15:c3:4b:bd:1a:9f:f0:cf:e6:3c:47:34: fe:ad:c2:84:f1:22:7d:32:01:fe:7e:bc:4c:73:ae: 09:b3:47:41:ad:89:ec:3f:02:4b:01:f1:51:9b:72: dd:76:b8:15:76:0c:53:cb:9a:7d:38:2d:47:d6:70: 5f:4d:52:0a:54:33:af:be:b2:1a:82:a6:47:97:48: 13:c3:07:2e:d0:88:df:13:87:68:db:40:59:66:62: 7b:8e:9f:c4:3a:0e:cc:8d:d5:d6:b7:83:9d:15:fe: eb:53:c5:11:34:32:05:ee:97:a7:69:f8:6a:ca:20: 59:dc:14:aa:ac:82:6c:95:76:fc:74:14:cc:02:6f: 26:14:7e:0a:86:bb:60:02:75:ff:c5:1c:4b:58:2f: a4:bb:6d:8d:9c:46:48:33:f0:8d:eb:44:6f:e6:1a: eb:db:3f:31:27:87:b7:5a:2b:ef:86:0c:0e:5c:57: c7:b3:3f:c0:a3:81:76:e5:9c:b3:e0:f5:14:d7:da: 8c:7f:e0:4a:d3:51:e2:20:f9:58:df:b5:39:16:c5: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E4:55:88:BB:31:4D:A5:BB:1D:E5:7D:68:D2:45:E8:9C:D6:0A:53 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:ff:50:ef:80:2e:44:22:f9:c1:9b:ae:1f:eb:07:93:df: 43:14:66:12:8b:19:42:31:8d:30:05:11:84:5f:67:65:b0:a7: 03:04:55:d1:b2:8d:d2:60:2a:2d:a7:ce:01:dc:bf:42:6d:17: 95:b2:62:29:c9:a4:36:eb:c3:f7:d3:e5:04:6f:ed:ed:5c:1d: 73:00:f5:09:43:c9:58:57:79:00:48:cb:c8:5c:3a:a1:ca:20: 7b:d6:9c:94:91:bd:a0:c7:76:4e:ca:78:86:eb:0a:96:ae:95: 99:87:e8:e3:3e:7f:6f:da:5e:6f:8d:24:14:da:49:f5:13:a9: 77:23:95:13:be:79:da:3f:a5:4e:1b:cc:03:50:20:1e:69:87: 6a:23:e1:0b:7b:a1:00:2c:36:26:f5:82:ab:e9:13:49:6a:30: e3:81:9f:1f:5e:b6:4d:c9:c5:32:8b:6c:42:ef:00:8b:81:e8: c0:16:5c:20:f8:57:11:c6:37:58:57:78:c8:d9:04:b2:64:88: 8a:2e:d1:91:03:50:80:1c:17:91:87:fe:f8:b3:ac:d1:83:28: 96:4a:45:fb:ca:18:a7:74:5f:6d:35:20:92:05:4f:b9:d7:df: df:24:76:7b:07:25:0b:42:e5:7f:9e:3e:bc:00:af:0e:f4:c6: 38:5a:18:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjQwNTI0MjEzMDM3WhcNMjQwNTMxMjEzMDM3WjAYMRYwFAYD VQQDEw02NjUxMDZmZC0xYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6enzFtrMqf2Tc/WoLOL6jXTrSn0DKktTsw/NHTRZ97QajTfB4nmS6thDsOj /84Vw0u9Gp/wz+Y8RzT+rcKE8SJ9MgH+frxMc64Js0dBrYnsPwJLAfFRm3LddrgV dgxTy5p9OC1H1nBfTVIKVDOvvrIagqZHl0gTwwcu0IjfE4do20BZZmJ7jp/EOg7M jdXWt4OdFf7rU8URNDIF7penafhqyiBZ3BSqrIJslXb8dBTMAm8mFH4KhrtgAnX/ xRxLWC+ku22NnEZIM/CN60Rv5hrr2z8xJ4e3WivvhgwOXFfHsz/Ao4F25Zyz4PUU 19qMf+BK01HiIPlY37U5FsXybwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvkVYi7 MU2lux3lfWjSReic1gpTMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgwP9Q74AuRCL5wZuuH+sHk99DFGYSixlCMY0wBRGEX2dlsKcDBFXR so3SYCotp84B3L9CbReVsmIpyaQ268P30+UEb+3tXB1zAPUJQ8lYV3kASMvIXDqh yiB71pyUkb2gx3ZOyniG6wqWrpWZh+jjPn9v2l5vjSQU2kn1E6l3I5UTvnnaP6VO G8wDUCAeaYdqI+ELe6EALDYm9YKr6RNJajDjgZ8fXrZNycUyi2xC7wCLgejAFlwg +FcRxjdYV3jI2QSyZIiKLtGRA1CAHBeRh/74s6zRgyiWSkX7yhindF9tNSCSBU+5 19/fJHZ7ByULQuV/nj68AK8O9MY4Whiv -----END CERTIFICATE-----Generated at Fri May 24 23:25:38 2024 by rpki-client on console-fra.rpki-client.org