$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: P/3Jnch74kMFWwvxugTyAjYdIW+NYrYJFTCoVbk/Ctw= Subject key identifier: 60:CF:98:73:3E:EF:80:3E:75:B7:21:69:0A:25:61:55:88:77:DE:3B Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 0112 Signing time: Sat 27 Apr 2024 05:08:18 +0000 Manifest this update: Sat 27 Apr 2024 05:08:18 +0000 Manifest next update: Sat 04 May 2024 05:08:17 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: Kq3LKsoI4ZPSP2dwh+fSPvJRhDndRze9YNDiytV5puc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Apr 27 05:08:18 2024 GMT Not After : May 4 05:08:17 2024 GMT Subject: CN=662c8842-7ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d0:64:45:b9:73:bb:8b:26:7e:3a:fc:d4:79: 2b:00:36:7b:ee:d9:0b:ff:e7:27:26:70:b2:12:8d: ec:9f:ed:37:b5:a8:87:ca:07:32:55:14:db:30:c5: 43:a4:cf:cf:c5:a6:7c:f9:f0:2d:ad:8b:2a:b0:2d: 43:38:59:3f:dd:b6:50:87:1d:12:2e:5a:e3:f8:86: fd:5b:21:02:ab:65:83:43:24:f4:31:26:45:ef:0f: 17:21:da:fc:fe:8b:3e:17:87:76:6b:9b:ef:fd:29: 8c:d6:43:3f:30:2b:34:82:7a:6d:fc:b0:14:48:64: c9:e5:d4:88:a6:e3:15:31:da:86:8f:6b:b9:0d:35: a8:80:db:57:4d:fc:5c:8a:10:2a:e3:db:65:11:31: 60:3f:46:dc:e1:78:4a:f9:46:54:72:03:5c:e8:fb: 65:77:26:ce:d4:ac:15:9f:32:2f:a6:3e:98:70:95: b0:74:c2:38:2f:ac:72:8d:52:5e:9c:14:24:20:f1: 1a:60:9e:1a:a1:a6:75:24:09:9b:b6:85:7b:9c:ee: 5d:e6:72:1b:28:00:f1:15:2a:39:9a:96:8c:32:ab: 3f:48:24:f5:5e:6d:75:c4:74:04:f1:d9:57:2d:62: 7f:8b:52:38:6e:3b:aa:c5:f2:1b:ad:b5:be:54:3c: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CF:98:73:3E:EF:80:3E:75:B7:21:69:0A:25:61:55:88:77:DE:3B X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:89:0b:86:ba:23:49:59:68:5a:9a:b0:37:04:f5:02:a4:9d: d2:73:d8:30:3a:9f:1e:6b:e6:d0:68:7e:fc:7f:41:a5:0b:3c: f2:b5:a3:57:d8:3d:45:af:5e:a0:d6:1e:a3:e5:69:e5:18:9a: 53:53:6f:09:0c:47:e0:bc:dc:97:15:49:76:3b:7f:26:a6:1f: 15:1c:bd:f4:95:37:be:13:07:a6:d6:bc:b1:12:d5:da:c3:9b: 7f:f5:0a:f5:a8:37:f7:77:9c:07:ff:70:40:f4:6e:2b:c6:cf: 11:48:9c:38:45:74:65:2a:db:bf:cc:96:46:c2:5e:d7:e4:c1: 4b:1b:f1:f0:73:47:86:3d:d7:c9:2e:76:3a:a0:92:67:a2:7c: 1e:5f:68:46:24:a6:36:94:91:c9:36:c2:b1:66:18:ff:06:38: 9f:90:b9:cd:63:6e:da:64:13:9b:ff:04:54:3e:37:78:7e:cc: 21:d7:69:bd:c4:3e:74:4f:6e:84:b7:91:2b:8b:8a:8c:2f:78: 18:d1:37:e2:ec:f9:55:f4:b5:46:b3:2f:21:19:e3:8c:a1:35: c1:0e:68:70:d0:f8:5d:f8:df:93:86:61:de:a1:fc:c5:0b:4a: 17:6a:f3:d5:dc:5c:f4:b3:ee:bc:5a:a2:7a:f5:4f:be:e7:69: 31:65:f5:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjQwNDI3MDUwODE4WhcNMjQwNTA0MDUwODE3WjAYMRYwFAYD VQQDEw02NjJjODg0Mi03Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49BkRblzu4smfjr81HkrADZ77tkL/+cnJnCyEo3sn+03taiHygcyVRTbMMVD pM/PxaZ8+fAtrYsqsC1DOFk/3bZQhx0SLlrj+Ib9WyECq2WDQyT0MSZF7w8XIdr8 /os+F4d2a5vv/SmM1kM/MCs0gnpt/LAUSGTJ5dSIpuMVMdqGj2u5DTWogNtXTfxc ihAq49tlETFgP0bc4XhK+UZUcgNc6PtldybO1KwVnzIvpj6YcJWwdMI4L6xyjVJe nBQkIPEaYJ4aoaZ1JAmbtoV7nO5d5nIbKADxFSo5mpaMMqs/SCT1Xm11xHQE8dlX LWJ/i1I4bjuqxfIbrbW+VDy1aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDPmHM+ 74A+dbchaQolYVWId947MB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBniQuGuiNJWWhamrA3BPUCpJ3Sc9gwOp8ea+bQaH78f0GlCzzytaNX 2D1Fr16g1h6j5WnlGJpTU28JDEfgvNyXFUl2O38mph8VHL30lTe+Ewem1ryxEtXa w5t/9Qr1qDf3d5wH/3BA9G4rxs8RSJw4RXRlKtu/zJZGwl7X5MFLG/Hwc0eGPdfJ LnY6oJJnonweX2hGJKY2lJHJNsKxZhj/BjifkLnNY27aZBOb/wRUPjd4fswh12m9 xD50T26Et5Eri4qML3gY0Tfi7PlV9LVGsy8hGeOMoTXBDmhw0Phd+N+ThmHeofzF C0oXavPV3Fz0s+68WqJ69U++52kxZfX/ -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org