$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft File: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft (raw, json) Hash identifier: 5WMh7LmcHjd1KeKmb3OHmch1RjW8eU/397WbKKo3Y50= Subject key identifier: 27:BE:29:FB:01:4A:86:39:87:C0:0E:8F:2F:10:A4:83:3A:EF:CE:FE Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft Manifest number: 1A Signing time: Fri 17 May 2024 08:49:20 +0000 Manifest this update: Fri 17 May 2024 08:49:20 +0000 Manifest next update: Fri 24 May 2024 08:49:20 +0000 Files and hashes: 1: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl (hash: mB441vU2JDuhNmy7dieNJik3jdR5Yzs417pj+G+uufU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Validity Not Before: May 17 08:49:20 2024 GMT Not After : May 24 08:49:20 2024 GMT Subject: CN=66471a10-f4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:14:7a:8a:72:bf:41:7d:9b:b3:d3:6d:50: 31:be:64:06:de:d2:a1:88:39:64:ba:df:ef:74:e9: 0e:c5:0d:3b:41:0e:35:53:80:c4:dd:2a:89:ed:c3: 5c:aa:c1:45:e7:64:bf:e2:bd:61:54:87:98:65:56: ed:d6:e0:b6:6a:54:5c:20:64:f2:2f:ed:f6:8c:20: 7a:cc:a0:38:e3:88:f6:64:f9:9b:c6:25:80:f5:9e: 77:76:21:c5:6f:7b:42:01:50:6d:92:42:66:8f:f2: 3a:fb:0e:5f:35:0b:57:ee:16:11:a6:37:4e:bd:9c: d0:5d:db:96:f2:89:3d:2f:54:fe:70:a8:1d:86:fa: f5:a2:df:54:e4:85:8a:b7:a3:2a:11:79:e3:ce:7f: a4:53:db:38:a6:d7:4d:b7:c9:29:1a:47:1f:fd:7c: 72:e4:7e:a8:32:6a:19:f7:5f:a9:25:4b:ba:9d:11: a5:a1:4d:8f:e3:d6:e4:cf:74:80:7f:b3:d1:04:8d: ca:46:e1:2b:07:1d:0a:1c:d1:27:0a:e6:3d:00:3d: cd:88:d5:a5:cf:28:4b:de:bb:ea:c4:06:10:5b:ff: b6:83:33:6b:23:e5:71:89:79:c0:5d:77:ee:79:7d: 57:1f:93:ba:b9:98:c5:aa:24:1e:42:75:b4:aa:4b: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BE:29:FB:01:4A:86:39:87:C0:0E:8F:2F:10:A4:83:3A:EF:CE:FE X509v3 Authority Key Identifier: keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:84:f5:6f:7a:15:65:30:ad:72:68:4a:15:b9:a3:ce:39:10: 05:25:7c:65:d6:78:81:df:99:21:c0:dc:bd:c5:0b:c6:4c:bd: 9d:22:03:12:29:20:bc:4b:bc:a9:ce:32:aa:85:0e:f3:04:7f: d2:3e:95:43:0a:a7:e2:00:13:90:68:5d:2f:86:2e:84:e6:d7: 02:e5:65:59:d3:bc:8e:ef:39:37:de:cd:a8:e1:cc:a1:f7:1f: 1f:82:46:16:ec:69:51:e6:79:3c:17:4a:f0:05:23:e1:c8:a1: 72:65:cc:00:ff:9f:52:82:ce:9b:cb:87:5c:98:85:88:b8:c4: 73:51:b0:b8:6b:88:a1:be:3b:1a:3c:af:97:81:2f:5f:1a:ea: 1c:a6:64:93:d9:cd:37:f1:20:29:48:bf:41:3a:e9:c5:c7:d4: 19:92:6b:33:54:b6:9e:f0:41:9c:58:e5:46:ca:fa:e7:d5:29: 93:67:c7:1b:42:72:a7:29:6f:6b:2d:55:5f:5f:f6:e4:27:75: 25:10:93:91:b9:b8:91:31:25:21:34:f7:ec:61:92:7b:82:a8: d7:f7:88:aa:f4:ce:b9:5c:a7:f9:b2:1b:4d:e7:59:40:4c:7e: 43:28:cb:a8:46:ff:c6:e9:24:cd:94:58:f8:02:84:23:9e:b2: cc:20:f2:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzE2OTExMC8GA1UEBRMoRTUwQ0IyNTBCRkFEMDg2M0U4NUMyOTAyRUEwMjE5RDUz Q0MwODEyRTAeFw0yNDA1MTcwODQ5MjBaFw0yNDA1MjQwODQ5MjBaMBgxFjAUBgNV BAMTDTY2NDcxYTEwLWY0ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3yBR6inK/QX2bs9NtUDG+ZAbe0qGIOWS63+906Q7FDTtBDjVTgMTdKontw1yq wUXnZL/ivWFUh5hlVu3W4LZqVFwgZPIv7faMIHrMoDjjiPZk+ZvGJYD1nnd2IcVv e0IBUG2SQmaP8jr7Dl81C1fuFhGmN069nNBd25byiT0vVP5wqB2G+vWi31TkhYq3 oyoReePOf6RT2zim1023ySkaRx/9fHLkfqgyahn3X6klS7qdEaWhTY/j1uTPdIB/ s9EEjcpG4SsHHQoc0ScK5j0APc2I1aXPKEveu+rEBhBb/7aDM2sj5XGJecBdd+55 fVcfk7q5mMWqJB5CdbSqS7chAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ74p+wFK hjmHwA6PLxCkgzrvzv4wHwYDVR0jBBgwFoAU5QyyUL+tCGPoXCkC6gIZ1TzAgS4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MTY5LzZCN0Y5OTNDRUJB RTExRUU4QTBFRDk2NEM0RjlBRTAyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdT NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVF5eVVMLXRDR1BvWENrQzZnSVoxVHpBZ1M0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MTY5LzZCN0Y5OTNDRUJBRTExRUU4QTBFRDk2NEM0RjlBRTAyLzVReXlVTC10Q0dQ b1hDa0M2Z0laMVR6QWdTNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG6E9W96FWUwrXJoShW5o845EAUlfGXWeIHfmSHA3L3FC8ZMvZ0iAxIp ILxLvKnOMqqFDvMEf9I+lUMKp+IAE5BoXS+GLoTm1wLlZVnTvI7vOTfezajhzKH3 Hx+CRhbsaVHmeTwXSvAFI+HIoXJlzAD/n1KCzpvLh1yYhYi4xHNRsLhriKG+Oxo8 r5eBL18a6hymZJPZzTfxIClIv0E66cXH1BmSazNUtp7wQZxY5UbK+ufVKZNnxxtC cqcpb2stVV9f9uQndSUQk5G5uJExJSE09+xhknuCqNf3iKr0zrlcp/myG03nWUBM fkMoy6hG/8bpJM2UWPgChCOesswg8jI= -----END CERTIFICATE-----Generated at Fri May 17 10:59:13 2024 by rpki-client on console-ams.rpki-client.org