$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: L3CvfmyyswRKUreDQ0/SEdNd22qzx8j40D+ThjYpwog= Subject key identifier: 3D:36:7B:A0:DD:FA:9B:CC:2A:32:86:DC:13:D8:5C:58:E3:4D:A6:4C Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0C55 Signing time: Sat 18 May 2024 18:58:12 +0000 Manifest this update: Sat 18 May 2024 18:58:11 +0000 Manifest next update: Sat 25 May 2024 18:58:11 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: 5sa6zqCHw1xIT3fqX+1U6wYCM5YsD5cg4iFQachg3xc=) 2: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: uFwM8LreBhn8Fcw4RkwA0LxFpt/4z5yiF/8SYFOQzMQ=) 3: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: 7dmfcHoWv+inuKPdIjsHAWvAtL0OBcHABQxsrOzrAJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: May 18 18:58:11 2024 GMT Not After : May 25 18:58:11 2024 GMT Subject: CN=6648fa44-565a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:32:93:6f:c0:31:4c:7e:2c:6e:d9:a0:4c: 60:f0:6d:60:e6:46:d3:57:a4:73:76:22:24:14:1f: 9c:ed:d9:f6:fe:dc:f2:23:89:2b:01:6d:e5:aa:b2: 9e:32:c7:40:24:34:a9:53:81:c1:50:7b:f6:03:ba: 17:92:c7:6d:6f:2f:a8:31:6d:da:8d:e2:02:06:3d: 9e:94:03:7a:54:c0:88:85:ed:ec:2c:fa:93:65:ff: 1f:48:3b:2f:79:f6:1c:62:82:8f:eb:50:e9:a1:7e: 19:3b:99:e6:97:1f:4e:e4:ca:6f:12:bc:d3:d8:55: 9c:00:63:8b:e4:01:a2:2a:b2:5c:41:37:bf:7f:c4: b9:eb:c1:da:0f:ba:48:59:f9:f8:ec:28:ee:f1:4b: a9:0f:21:e8:05:1f:3d:f7:71:dc:ea:82:38:06:1e: e1:db:e1:06:db:1a:d4:88:56:03:e8:c3:96:db:eb: 00:06:37:49:4c:7e:60:1d:b2:4d:1b:4d:80:45:aa: 01:b6:29:e7:cb:7b:ff:f6:b5:0f:f1:ae:56:80:e0: 46:12:30:fc:af:c8:98:e2:50:5d:a8:ba:31:ab:ee: 92:9e:ca:d9:28:0e:2e:86:63:b2:81:a8:00:45:e5: 45:26:86:14:d2:13:a6:33:1f:47:43:5a:13:f2:97: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:36:7B:A0:DD:FA:9B:CC:2A:32:86:DC:13:D8:5C:58:E3:4D:A6:4C X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9b:fd:cc:3c:0d:4d:05:44:0f:d9:3b:77:46:32:5f:3b:ba: e7:c3:1b:b0:ab:10:5f:8f:93:5a:83:59:ff:fb:04:bb:51:98: 03:e1:02:e9:66:87:48:49:f9:e7:5c:2f:a1:04:87:ad:ca:05: 0c:75:6e:2a:21:90:c5:0b:7d:f8:09:42:1f:6f:d3:76:21:02: d4:27:83:66:10:3f:15:b6:2e:87:77:13:ce:6e:69:99:18:e0: 13:20:3a:60:40:f1:db:24:3e:1f:2c:e6:b3:45:9a:7d:45:80: a3:b7:07:65:99:33:cc:05:99:1f:71:6a:44:00:2b:86:16:5f: 5e:2c:af:9d:dc:b8:14:48:e8:f9:ff:67:3f:1e:e0:7e:47:c3: 3b:e8:ce:e3:b6:31:02:ff:ac:7c:8c:0f:cd:6b:3d:68:30:49: a5:ce:c7:6a:c0:57:88:9a:70:9c:55:3f:41:0d:17:76:0a:8d: 5c:99:88:27:3e:63:d3:53:b7:05:40:c7:ca:ef:23:3a:b0:bb: 5d:39:5f:39:08:3f:06:4c:2f:19:22:34:c7:94:7a:9d:25:50: cc:d6:69:e6:7a:cc:68:11:7f:5b:0f:f0:31:6e:56:da:18:81: 68:5e:7b:72:df:13:f3:13:23:3b:07:b1:8e:23:02:6f:ec:5c: 3f:cd:e7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjQwNTE4MTg1ODExWhcNMjQwNTI1MTg1ODExWjAYMRYwFAYD VQQDEw02NjQ4ZmE0NC01NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwakyk2/AMUx+LG7ZoExg8G1g5kbTV6RzdiIkFB+c7dn2/tzyI4krAW3lqrKe MsdAJDSpU4HBUHv2A7oXksdtby+oMW3ajeICBj2elAN6VMCIhe3sLPqTZf8fSDsv efYcYoKP61DpoX4ZO5nmlx9O5MpvErzT2FWcAGOL5AGiKrJcQTe/f8S568HaD7pI Wfn47Cju8UupDyHoBR8993Hc6oI4Bh7h2+EG2xrUiFYD6MOW2+sABjdJTH5gHbJN G02ARaoBtinny3v/9rUP8a5WgOBGEjD8r8iY4lBdqLoxq+6SnsrZKA4uhmOygagA ReVFJoYU0hOmMx9HQ1oT8pdxLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD02e6Dd +pvMKjKG3BPYXFjjTaZMMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+m/3MPA1NBUQP2Tt3RjJfO7rnwxuwqxBfj5Nag1n/+wS7UZgD4QLp ZodISfnnXC+hBIetygUMdW4qIZDFC334CUIfb9N2IQLUJ4NmED8Vti6HdxPObmmZ GOATIDpgQPHbJD4fLOazRZp9RYCjtwdlmTPMBZkfcWpEACuGFl9eLK+d3LgUSOj5 /2c/HuB+R8M76M7jtjEC/6x8jA/Naz1oMEmlzsdqwFeImnCcVT9BDRd2Co1cmYgn PmPTU7cFQMfK7yM6sLtdOV85CD8GTC8ZIjTHlHqdJVDM1mnmesxoEX9bD/Axblba GIFoXnty3xPzEyM7B7GOIwJv7Fw/zee5 -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org