$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: lCUc8nzzK4yqnI81X5cid1xT+2ozbVYv7Rh8uFHTkFc= Subject key identifier: 31:8A:86:7F:E3:79:6C:A8:D1:B2:B1:FD:17:A6:98:FB:DD:03:06:1B Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 14 Signing time: Wed 15 May 2024 08:56:37 +0000 Manifest this update: Wed 15 May 2024 08:56:37 +0000 Manifest next update: Wed 22 May 2024 08:56:37 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: sFNIaDuKqWL7/CCx0wrLxnf+wp6KaPjmLP1mLsroZjY=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: g91xzTw+GcJwxdeodgfP15f3nvHYakAhKo/OU0NO1do=) 3: 46D954B6F5A811EEA84E8049C4F9AE02.roa (hash: A77avpTyGmVCRuyULkNtg/0wtlh1el5KEEO1Ks56YW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: May 15 08:56:37 2024 GMT Not After : May 22 08:56:37 2024 GMT Subject: CN=664478c5-5fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a2:5f:45:64:b6:41:7c:9b:f5:f1:63:25:24: 1f:2f:8f:ec:38:b6:fe:c9:e5:ed:0b:69:4a:a0:a8: ce:25:b9:28:5a:c9:e3:fb:94:d3:1c:1b:0d:7a:b2: 5c:65:59:e1:90:ee:8a:cc:be:df:28:54:7a:67:cb: 2c:88:2b:a5:6f:fa:43:35:3b:51:e5:8a:64:be:89: 00:ad:b2:2c:fa:41:9d:d8:55:fe:83:a6:c7:9e:69: 36:dc:9d:2a:4e:a2:36:c1:50:f3:f9:a4:46:ac:4f: 93:7d:61:0c:e9:40:83:e0:75:cf:f9:89:df:1c:b6: 0a:54:8e:a5:70:aa:92:14:97:5c:93:f3:e8:e2:3f: 35:1d:a6:66:1b:d9:8e:48:81:46:97:02:d4:c4:a6: 90:9c:b4:2d:6e:3e:1c:c2:52:ca:19:a1:3d:4d:b5: df:f6:b6:12:70:91:f3:10:6e:22:8c:f9:17:50:3d: 53:57:2f:b5:0b:2f:f0:cb:a4:ad:03:07:b0:2f:c5: 9c:c3:16:cc:28:0b:c7:80:0d:8a:60:a3:62:1c:c2: 7e:f7:c0:c2:60:9b:ad:a9:ea:20:3c:cb:36:63:b5: 64:08:58:ed:91:79:a9:06:6f:c3:a6:6f:aa:6c:84: 7e:f7:0c:46:ef:de:64:f4:1a:8f:20:0c:79:58:14: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8A:86:7F:E3:79:6C:A8:D1:B2:B1:FD:17:A6:98:FB:DD:03:06:1B X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:98:1f:df:22:80:c6:89:04:62:da:dc:3d:86:06:6f:3a:bf: 01:9f:39:63:3a:9d:05:33:33:21:9b:6b:14:9f:d6:0e:75:a4: 30:d0:97:93:5e:08:1f:3e:a0:c4:cb:18:48:ea:c1:8c:9c:3c: 1b:cc:94:02:92:c7:41:f8:59:d4:dd:60:0e:ca:89:3b:7b:79: 3f:f1:13:23:06:93:4a:f9:db:28:de:c5:3e:c9:07:cf:33:8e: 1d:d1:e4:92:3e:c8:93:b2:b4:b2:bb:8a:57:c4:70:86:22:e5: 9f:b5:9f:75:79:26:99:b5:cc:b3:e4:d4:9e:bd:97:91:e9:65: 66:7b:28:4e:c4:45:68:bc:8e:98:70:39:e9:df:d2:b8:df:c5: ed:ad:84:e0:ef:0d:2f:b7:df:d7:1d:df:a5:d0:ea:4d:90:32: f3:37:9f:2e:14:20:0d:91:2f:b8:fb:27:5a:a6:e6:be:c0:63: d6:ab:6d:33:27:91:6d:13:dd:88:ae:c3:4a:22:01:16:2d:98: 33:b4:0b:72:19:d4:3d:93:98:b0:11:a9:44:57:fb:33:58:f1: ea:7e:e6:62:40:17:44:2c:01:83:61:c3:c1:9d:30:a5:b0:e8: 13:9b:22:97:37:b1:be:22:10:b0:3c:61:00:0c:8c:df:d8:9f: 09:1a:a3:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODRBQzExMC8GA1UEBRMoRkJDNTVCMkMwQkUwQUIyMzQ3NDhGQkMzNjE1NDdGNjRC RkE3NTE5NzAeFw0yNDA1MTUwODU2MzdaFw0yNDA1MjIwODU2MzdaMBgxFjAUBgNV BAMTDTY2NDQ3OGM1LTVmZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5ol9FZLZBfJv18WMlJB8vj+w4tv7J5e0LaUqgqM4luShayeP7lNMcGw16slxl WeGQ7orMvt8oVHpnyyyIK6Vv+kM1O1HlimS+iQCtsiz6QZ3YVf6DpseeaTbcnSpO ojbBUPP5pEasT5N9YQzpQIPgdc/5id8ctgpUjqVwqpIUl1yT8+jiPzUdpmYb2Y5I gUaXAtTEppCctC1uPhzCUsoZoT1Ntd/2thJwkfMQbiKM+RdQPVNXL7ULL/DLpK0D B7AvxZzDFswoC8eADYpgo2Icwn73wMJgm62p6iA8yzZjtWQIWO2ReakGb8Omb6ps hH73DEbv3mT0Go8gDHlYFJ6NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMYqGf+N5 bKjRsrH9F6aY+90DBhswHwYDVR0jBBgwFoAU+8VbLAvgqyNHSPvDYVR/ZL+nUZcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NEFDLzZEMDI2Q0VDRjVB MTExRUU5OERCQ0QxMUM0RjlBRTAyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVa Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLThWYkxBdmdxeU5IU1B2RFlWUl9aTC1uVVpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NEFDLzZEMDI2Q0VDRjVBMTExRUU5OERCQ0QxMUM0RjlBRTAyLy04VmJMQXZncXlO SFNQdkRZVlJfWkwtblVaYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK6YH98igMaJBGLa3D2GBm86vwGfOWM6nQUzMyGbaxSf1g51pDDQl5Ne CB8+oMTLGEjqwYycPBvMlAKSx0H4WdTdYA7KiTt7eT/xEyMGk0r52yjexT7JB88z jh3R5JI+yJOytLK7ilfEcIYi5Z+1n3V5Jpm1zLPk1J69l5HpZWZ7KE7ERWi8jphw Oenf0rjfxe2thODvDS+339cd36XQ6k2QMvM3ny4UIA2RL7j7J1qm5r7AY9arbTMn kW0T3Yiuw0oiARYtmDO0C3IZ1D2TmLARqURX+zNY8ep+5mJAF0QsAYNhw8GdMKWw 6BObIpc3sb4iELA8YQAMjN/Ynwkaox0= -----END CERTIFICATE-----Generated at Wed May 15 09:28:12 2024 by rpki-client on console-fra.rpki-client.org