$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: w4bj5QTosyusvAYQAAjCFucl1q6xFexuNmGOori+A4A= Subject key identifier: 7C:3B:71:DA:E2:FF:15:4C:FA:EB:59:36:C9:4E:2D:35:C1:C2:6B:23 Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: 15 Signing time: Fri 17 May 2024 08:54:29 +0000 Manifest this update: Fri 17 May 2024 08:54:29 +0000 Manifest next update: Fri 24 May 2024 08:54:29 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: T4f1s5R+X0IOwpbFbBW9rwT+lwh9IN0K1cqTJpZtry4=) 2: BF0AEB12F63311EE863CC844C4F9AE02.roa (hash: G/J3iORvNE81RBoxtrIbg1rhldWObuX031NoD7+NMa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: May 17 08:54:29 2024 GMT Not After : May 24 08:54:29 2024 GMT Subject: CN=66471b45-6163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:e9:ef:74:e3:5d:44:46:3f:6b:0a:88:fe: 1d:9a:a3:bc:2f:3b:3f:c7:a9:2b:3e:22:e7:4d:54: 07:9a:e1:4f:19:58:c3:b8:a0:7f:8c:8a:13:03:21: 2b:74:57:31:96:31:f4:3f:b0:f7:17:c9:c5:66:b5: d7:ce:21:dd:c6:ab:ed:cf:45:5d:1a:45:39:c5:a6: f6:80:39:03:f3:6a:3f:ad:30:de:02:ed:f8:38:61: 84:e0:15:9b:33:8d:b1:00:3d:17:93:3b:f1:66:67: a0:d5:18:9b:39:23:77:0e:92:31:ec:78:b3:ed:81: 96:bf:71:ef:ca:6f:21:66:5c:16:a9:4b:11:08:32: 94:97:bd:23:f8:23:a3:c8:f3:14:c5:9c:cd:c5:49: 42:cd:e2:f7:1d:21:f7:54:8b:a9:ac:f6:f7:dd:2a: f2:b1:a4:e3:d1:fa:62:8a:43:32:96:9f:7c:62:3b: 36:69:bc:e6:28:9c:d5:59:e0:e3:47:71:c5:f3:49: 84:25:b9:67:47:d3:ee:6a:b4:95:68:b6:c8:88:1a: 6a:a6:c0:37:0e:a7:d7:f8:58:e1:d2:37:2f:7a:39: 97:8d:34:94:0b:d2:0a:ba:dd:30:43:81:cd:30:c6: 46:b9:11:32:b3:54:0a:81:6f:48:11:46:26:30:07: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:71:DA:E2:FF:15:4C:FA:EB:59:36:C9:4E:2D:35:C1:C2:6B:23 X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0a:62:b6:39:48:45:9e:56:3c:3f:8d:79:fd:a7:9c:fe:17: 79:15:2d:8f:e6:89:a7:58:44:cb:f5:5b:c0:f5:1b:ed:dd:06: 29:9f:a1:37:6f:8e:a1:c6:06:ee:cd:7c:7a:f9:2e:95:94:79: a0:66:d9:f3:ed:26:1a:47:18:bd:37:4e:7b:cd:58:d9:cb:b1: 80:1f:af:43:ac:3c:e9:1f:fc:43:f1:ed:ee:96:69:12:aa:d8: 91:43:fd:a3:28:47:3f:a2:a6:78:35:a0:6b:68:6b:b9:11:ea: a5:53:3d:40:33:6f:e2:53:a2:fc:f3:9f:c1:e8:fb:cb:93:b6: 6e:4f:7d:2c:f3:5d:4d:4f:0c:d2:8c:37:0a:c1:63:05:e4:34: 87:5c:f2:c0:2a:9d:a7:54:f7:58:2c:42:20:6f:d5:b0:91:90: 00:9d:51:f1:d9:8d:12:0d:a4:dc:54:8c:cf:58:0b:1c:f6:a3: e9:9e:96:6c:0b:1d:5a:2b:ba:b5:69:5f:7d:78:06:11:f0:a0: 91:68:cf:2b:8c:5a:56:c0:8c:07:c9:6f:45:b2:19:16:08:3f: e5:12:6e:a0:ac:bd:95:e9:80:c9:99:fe:32:a8:23:8c:3e:38: b3:e3:3b:4a:69:5a:5b:cb:8a:03:b0:ed:b9:34:69:dd:b4:80: bd:b8:27:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjE5MzExMC8GA1UEBRMoN0IxQUUyN0QzQ0Y1MTQ5OUM1MDU2RTdEQTg3MzY2NUU0 RTQxNTE3OTAeFw0yNDA1MTcwODU0MjlaFw0yNDA1MjQwODU0MjlaMBgxFjAUBgNV BAMTDTY2NDcxYjQ1LTYxNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs5+nvdONdREY/awqI/h2ao7wvOz/HqSs+IudNVAea4U8ZWMO4oH+MihMDISt0 VzGWMfQ/sPcXycVmtdfOId3Gq+3PRV0aRTnFpvaAOQPzaj+tMN4C7fg4YYTgFZsz jbEAPReTO/FmZ6DVGJs5I3cOkjHseLPtgZa/ce/KbyFmXBapSxEIMpSXvSP4I6PI 8xTFnM3FSULN4vcdIfdUi6ms9vfdKvKxpOPR+mKKQzKWn3xiOzZpvOYonNVZ4ONH ccXzSYQluWdH0+5qtJVotsiIGmqmwDcOp9f4WOHSNy96OZeNNJQL0gq63TBDgc0w xka5ETKzVAqBb0gRRiYwB9o3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfDtx2uL/ FUz661k2yU4tNcHCayMwHwYDVR0jBBgwFoAUexrifTz1FJnFBW59qHNmXk5BUXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMTkzLzkzRDRFNDkwRjYz MTExRUU5QUNCRTIyMUM0RjlBRTAyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXhyaWZUejFGSm5GQlc1OXFITm1YazVCVVhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MTkzLzkzRDRFNDkwRjYzMTExRUU5QUNCRTIyMUM0RjlBRTAyL2V4cmlmVHoxRkpu RkJXNTlxSE5tWGs1QlVYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoKYrY5SEWeVjw/jXn9p5z+F3kVLY/miadYRMv1W8D1G+3dBimfoTdv jqHGBu7NfHr5LpWUeaBm2fPtJhpHGL03TnvNWNnLsYAfr0OsPOkf/EPx7e6WaRKq 2JFD/aMoRz+ipng1oGtoa7kR6qVTPUAzb+JTovzzn8Ho+8uTtm5PfSzzXU1PDNKM NwrBYwXkNIdc8sAqnadU91gsQiBv1bCRkACdUfHZjRINpNxUjM9YCxz2o+melmwL HVorurVpX314BhHwoJFozyuMWlbAjAfJb0WyGRYIP+USbqCsvZXpgMmZ/jKoI4w+ OLPjO0ppWlvLigOw7bk0ad20gL24J5w= -----END CERTIFICATE-----Generated at Fri May 17 10:10:52 2024 by rpki-client on console-fra.rpki-client.org