$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: qj3UE/0GEurcULMbkLq48Nxi1qlk0djFlCPUMvEdW1A= Subject key identifier: 37:0F:3E:81:A2:C5:C9:52:51:01:1C:79:06:47:01:82:BC:CF:65:42 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 255F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 253C Signing time: Mon 06 May 2024 16:06:36 +0000 Manifest this update: Mon 06 May 2024 16:06:36 +0000 Manifest next update: Mon 13 May 2024 16:06:36 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: b9qQTx98lPtGkXaRdyAwp9sFzCFrqD6l5TFsYHT7bbk=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: E5fRK4tWefT188aIUYNU5UCVMde5+DWGZ9E6YNxsBBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9567 (0x255f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: May 6 16:06:36 2024 GMT Not After : May 13 16:06:36 2024 GMT Subject: CN=6639000c-7d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:34:6f:67:2d:36:9b:76:1c:cd:66:65:5d:71: 36:5e:38:d9:73:95:37:2e:74:01:63:70:f8:1c:3f: 8d:3c:c7:ec:02:77:3e:f0:26:5f:f0:80:e1:05:aa: 77:3e:d2:96:ea:e8:4d:aa:df:9a:48:27:97:05:0e: ed:d4:0a:ad:46:1d:b0:43:54:e1:54:9b:c9:15:ad: e9:bc:5c:06:ee:9a:6e:f1:5f:19:0d:27:2c:59:f6: f8:b7:b3:b6:b1:42:8a:4d:06:aa:ae:9b:5d:3f:f7: bd:a1:dd:9d:b3:c8:e8:ad:97:e3:08:8e:d7:4f:a1: 9d:2d:e7:14:88:8a:83:a6:a4:1c:68:4d:c6:e7:a5: 5d:2f:16:41:3c:e1:70:00:e1:96:8c:96:82:54:00: d2:93:94:f7:cc:15:1d:68:01:36:99:fd:e4:9c:23: b5:7a:b1:3f:2c:dd:db:b3:5a:45:6e:e0:ad:af:7b: 90:bc:7e:ba:08:ff:68:08:ce:19:8f:7a:03:e0:0d: bf:36:5f:77:ee:d6:eb:95:5b:57:13:15:a6:d5:b7: 47:99:f2:84:4d:06:df:ab:7c:6e:ae:4e:54:58:b5: 08:c0:13:1b:e7:7a:78:50:46:45:54:4b:b9:cb:82: 28:0f:15:ce:2b:42:7f:0c:a9:0b:2a:70:ea:8d:ba: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:3E:81:A2:C5:C9:52:51:01:1C:79:06:47:01:82:BC:CF:65:42 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1d:95:19:ea:ad:da:31:67:bc:30:8f:9d:b0:07:50:5a:7e: 36:8c:50:c3:a7:97:ef:73:27:d7:5c:9d:e7:8e:81:6e:10:db: 1b:82:7c:64:da:65:dc:74:be:2d:71:7d:48:ff:84:06:b1:32: a0:82:12:54:b9:66:87:0b:79:0b:f3:2c:6a:4b:02:b8:57:1e: 70:6d:7f:29:19:a5:db:de:ce:c1:64:f3:56:b5:f2:04:fb:d4: b5:4a:62:d7:37:9f:bd:c3:bc:47:af:3e:e3:43:83:36:16:f0: 84:c1:0f:f1:93:1c:50:18:48:05:95:6e:2a:5b:98:28:1e:9a: 30:8e:a0:09:b1:99:3b:8c:83:8a:7e:4e:92:3f:6a:18:9e:61: 18:c7:c7:5f:cb:78:fd:74:25:ef:4b:02:ee:8b:3a:a9:76:48: 16:04:3f:8a:38:8a:0d:ab:97:4b:7f:16:d2:1e:b2:de:9a:07: 73:85:cd:9a:44:5d:8f:56:21:f4:96:60:a4:23:bb:a8:15:05: a8:75:c1:9e:8a:e3:b1:47:7e:3c:15:f2:2e:95:cc:82:fd:41: 79:92:08:71:70:f2:6f:af:d3:a8:38:0d:6f:0d:6e:b3:06:d4: ff:3a:4b:39:c4:b7:ab:c6:1b:44:5b:b8:c4:06:0a:68:96:93: 55:42:62:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjQwNTA2MTYwNjM2WhcNMjQwNTEzMTYwNjM2WjAYMRYwFAYD VQQDEw02NjM5MDAwYy03ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TRvZy02m3YczWZlXXE2XjjZc5U3LnQBY3D4HD+NPMfsAnc+8CZf8IDhBap3 PtKW6uhNqt+aSCeXBQ7t1AqtRh2wQ1ThVJvJFa3pvFwG7ppu8V8ZDScsWfb4t7O2 sUKKTQaqrptdP/e9od2ds8jorZfjCI7XT6GdLecUiIqDpqQcaE3G56VdLxZBPOFw AOGWjJaCVADSk5T3zBUdaAE2mf3knCO1erE/LN3bs1pFbuCtr3uQvH66CP9oCM4Z j3oD4A2/Nl937tbrlVtXExWm1bdHmfKETQbfq3xurk5UWLUIwBMb53p4UEZFVEu5 y4IoDxXOK0J/DKkLKnDqjbqmpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcPPoGi xclSUQEceQZHAYK8z2VCMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVHZUZ6q3aMWe8MI+dsAdQWn42jFDDp5fvcyfXXJ3njoFuENsbgnxk 2mXcdL4tcX1I/4QGsTKgghJUuWaHC3kL8yxqSwK4Vx5wbX8pGaXb3s7BZPNWtfIE +9S1SmLXN5+9w7xHrz7jQ4M2FvCEwQ/xkxxQGEgFlW4qW5goHpowjqAJsZk7jIOK fk6SP2oYnmEYx8dfy3j9dCXvSwLuizqpdkgWBD+KOIoNq5dLfxbSHrLemgdzhc2a RF2PViH0lmCkI7uoFQWodcGeiuOxR348FfIulcyC/UF5kghxcPJvr9OoOA1vDW6z BtT/Oks5xLerxhtEW7jEBgpolpNVQmJy -----END CERTIFICATE-----Generated at Mon May 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org