$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: qWDlCHX/RlKSJqqR1SFUd0eBGuMR1DyGp6EPyTgIjpk= Subject key identifier: 2C:63:D1:25:BC:CC:E9:A5:3E:E1:E7:45:E9:D0:C0:BA:8E:92:FC:56 Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 56 Signing time: Fri 17 May 2024 07:53:33 +0000 Manifest this update: Fri 17 May 2024 07:53:33 +0000 Manifest next update: Fri 24 May 2024 07:53:33 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: eXtCX3vHLaTalIm09YQqgf8OXC8Q5gEnwTPX/lipdGQ=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: u78iFIvwF2NEfGN9S77314lW5wUPIwISyfms2svNsdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: May 17 07:53:33 2024 GMT Not After : May 24 07:53:33 2024 GMT Subject: CN=66470cfd-fec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:78:4b:cb:b4:d7:8f:28:c4:8a:8c:4f:90: 9f:7a:c1:fe:91:21:9b:d8:3e:1b:a0:26:44:51:60: cc:fc:7b:bd:9f:8b:4f:cc:e4:6f:28:73:d5:18:59: 0b:f8:e2:7c:96:ce:09:6c:87:90:6d:e8:cf:26:e0: 55:4c:aa:7a:c5:d7:08:83:81:08:5d:a9:39:14:8c: 98:ca:1e:a3:64:46:89:d1:97:27:26:f5:9d:ec:8e: b6:73:2b:8c:66:91:7e:1a:96:d2:d4:56:18:60:56: d9:24:05:47:4c:db:eb:17:d8:5a:a4:ca:23:ef:a0: 6a:28:6b:03:13:f6:c3:b7:8f:46:4f:05:de:68:4f: 67:98:82:8a:3a:d9:bc:ea:44:59:01:44:68:8c:78: 7f:7d:b8:43:b7:e3:d9:57:30:34:58:3f:5a:28:a2: 40:41:f9:1c:7f:40:49:6a:c1:09:fd:70:b7:90:61: 9b:62:58:59:c1:c7:56:89:9f:d5:d6:49:e5:2c:de: 7d:29:3f:4a:3f:a2:b9:c4:49:5e:b9:04:c9:9a:8f: dd:11:6c:cc:e8:c2:55:9f:31:dc:18:e5:54:af:bd: a9:eb:9f:49:c3:03:e4:07:bc:16:34:e3:73:87:0f: eb:f0:0c:d7:5f:a4:a3:29:c6:dc:f1:1f:11:79:1d: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:63:D1:25:BC:CC:E9:A5:3E:E1:E7:45:E9:D0:C0:BA:8E:92:FC:56 X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:76:96:2e:50:f9:8b:4f:57:51:eb:e8:a6:db:fe:22:3f:17: 8a:e4:19:1b:4c:61:7d:31:96:ef:1a:60:2e:08:3f:dc:4e:49: 76:9d:80:52:34:ed:45:77:79:d4:06:60:4b:56:38:c0:f6:7d: 2e:09:b8:e5:f1:10:6c:49:25:0b:bf:dd:59:0e:54:4c:d7:aa: 57:c9:42:3b:ed:3a:ed:15:9b:bb:c3:ab:44:f0:c1:e8:b3:80: 1f:7a:24:7b:1e:5f:da:04:7c:7a:ce:e4:97:28:f9:e2:10:af: 61:48:35:53:31:ce:81:a3:19:de:88:1a:fb:47:81:07:d4:67: 96:f2:0d:db:6b:be:9e:c5:f8:94:dc:b5:78:6f:35:14:6a:db: 29:2e:ac:1f:8d:6a:62:48:8a:e3:74:7a:f3:5d:6e:99:69:7c: 5c:4e:41:89:5d:2c:72:f8:5a:0f:0b:ca:b0:d6:44:05:d0:fd: 47:cd:02:ba:47:94:7e:b1:f0:36:2e:6e:e3:91:03:48:37:5b: 3b:57:b8:95:89:f4:0d:86:23:04:d7:84:19:c7:ea:e6:3b:53: 69:54:fa:46:36:68:8e:ac:99:96:5e:c7:d9:a3:71:7a:c2:3b: 11:df:f3:c8:8b:ad:60:32:9b:18:49:9e:5e:7b:34:96:21:8d: 76:2c:78:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTVENzExMC8GA1UEBRMoNzI5MzU1QUEwMzc4RjZENEY0MDU2RTY2MjZCQkM5QkUz MEM5RDhGMDAeFw0yNDA1MTcwNzUzMzNaFw0yNDA1MjQwNzUzMzNaMBgxFjAUBgNV BAMTDTY2NDcwY2ZkLWZlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs5HhLy7TXjyjEioxPkJ96wf6RIZvYPhugJkRRYMz8e72fi0/M5G8oc9UYWQv4 4nyWzglsh5Bt6M8m4FVMqnrF1wiDgQhdqTkUjJjKHqNkRonRlycm9Z3sjrZzK4xm kX4altLUVhhgVtkkBUdM2+sX2FqkyiPvoGooawMT9sO3j0ZPBd5oT2eYgoo62bzq RFkBRGiMeH99uEO349lXMDRYP1oookBB+Rx/QElqwQn9cLeQYZtiWFnBx1aJn9XW SeUs3n0pP0o/ornESV65BMmaj90RbMzowlWfMdwY5VSvvanrn0nDA+QHvBY043OH D+vwDNdfpKMpxtzxHxF5Hds7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULGPRJbzM 6aU+4edF6dDAuo6S/FYwHwYDVR0jBBgwFoAUcpNVqgN49tT0BW5mJrvJvjDJ2PAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NUQ3LzQwRjlFRkE0OEZE NDExRUVCMDg1ODc0OUM0RjlBRTAyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3BOVnFnTjQ5dFQwQlc1bUpydkp2akRKMlBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 NUQ3LzQwRjlFRkE0OEZENDExRUVCMDg1ODc0OUM0RjlBRTAyL2NwTlZxZ040OXRU MEJXNW1KcnZKdmpESjJQQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGV2li5Q+YtPV1Hr6Kbb/iI/F4rkGRtMYX0xlu8aYC4IP9xOSXadgFI0 7UV3edQGYEtWOMD2fS4JuOXxEGxJJQu/3VkOVEzXqlfJQjvtOu0Vm7vDq0Twweiz gB96JHseX9oEfHrO5Jco+eIQr2FINVMxzoGjGd6IGvtHgQfUZ5byDdtrvp7F+JTc tXhvNRRq2ykurB+NamJIiuN0evNdbplpfFxOQYldLHL4Wg8LyrDWRAXQ/UfNArpH lH6x8DYubuORA0g3WztXuJWJ9A2GIwTXhBnH6uY7U2lU+kY2aI6smZZex9mjcXrC OxHf88iLrWAymxhJnl57NJYhjXYseJ8= -----END CERTIFICATE-----Generated at Fri May 17 08:52:49 2024 by rpki-client on console-ams.rpki-client.org