$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: RZ4KKj5k/POiEPx8Itr0OM/tSR5JJ+VRBArSTUGmogk= Subject key identifier: B2:DD:29:EE:42:A1:81:87:0E:EE:E8:A9:FB:03:C9:A4:52:A1:30:47 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 33C2 Signing time: Thu 02 May 2024 14:37:51 +0000 Manifest this update: Thu 02 May 2024 14:37:50 +0000 Manifest next update: Thu 09 May 2024 14:37:50 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: 02xP6VWZSipvfaDz7aqj2/QK9OMxQDrtVxir0yb6maw=) 2: 673DC29606B011EFA665703AC4F9AE02.roa (hash: YxKLoyNGvSvfT0xAnWYwcM9ka4knxwtNruW725q0CuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: May 2 14:37:50 2024 GMT Not After : May 9 14:37:50 2024 GMT Subject: CN=6633a53e-1554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:fa:36:d2:3b:8e:6e:8b:51:83:3e:38:0d: e6:5e:4f:12:0c:2b:f9:97:04:a9:e2:40:8a:92:4a: 00:ea:81:a3:fc:24:76:56:29:2a:7c:1d:67:85:66: 7b:68:38:cd:bf:c7:ef:9b:1b:92:a7:c7:a7:18:d8: d0:fe:8f:2b:8d:83:13:e2:78:1d:9c:28:17:ef:f3: c7:60:76:84:c2:45:27:b8:9c:de:c0:ce:0b:76:fe: 1f:3c:83:ea:e4:8a:cd:ba:2f:59:2a:73:c7:a5:55: b3:9a:31:5c:1d:0c:4a:a0:25:7a:de:f3:7e:53:24: 2c:83:c3:36:36:69:85:92:67:09:4c:62:75:ea:36: d1:af:ef:df:81:02:d4:c6:11:32:36:ce:e0:41:d7: c5:96:c6:ec:a4:7e:9c:99:d0:c4:8f:3a:e2:62:ad: 52:c0:2c:c8:3b:e0:ca:e5:80:db:b1:00:20:7e:0e: 2c:a2:c3:1e:42:f2:8a:45:af:de:42:f5:e3:2e:b8: 82:43:9c:94:9a:4e:86:ca:c1:f2:4d:32:b2:a0:54: 08:c7:d2:a7:a0:cf:82:8b:b1:6f:5b:e4:12:f2:2e: 58:80:a1:f7:43:d5:3c:35:a4:2b:cc:c6:d4:16:c0: df:8a:2c:c1:47:3f:a8:a5:de:e9:89:e4:b6:f8:c6: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:29:EE:42:A1:81:87:0E:EE:E8:A9:FB:03:C9:A4:52:A1:30:47 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fb:d4:87:68:e1:cb:68:9d:e8:6c:9b:a4:dc:38:9b:4e:94: 66:11:9c:e3:8c:b0:76:e2:f5:96:ff:9c:7b:4a:3f:2c:85:ac: 77:e2:1a:d3:ae:da:fd:92:e1:53:5b:5f:e4:d6:3a:cd:98:e3: 07:93:e2:1a:ba:eb:6e:ba:79:14:49:21:f4:cf:04:4d:93:4c: cb:91:80:63:8a:c2:e7:98:85:85:e3:30:ad:08:fa:68:72:f4: fa:78:b6:5d:02:31:be:f8:5e:07:87:90:86:4f:3d:8b:1d:6d: 86:e2:32:17:57:4a:32:09:e8:7c:15:30:04:2b:43:82:69:fa: 82:93:0b:be:a0:c3:98:47:29:b1:28:e8:f9:4d:72:58:f5:5f: e9:da:a6:dd:61:61:46:4c:5d:6b:54:3c:b4:2f:73:f7:96:2a: cc:e3:20:0a:de:cc:64:4a:82:a7:d5:c3:da:93:1f:23:f4:3e: 4d:48:7b:0d:91:5b:89:4d:74:11:8e:13:f7:62:13:0a:c3:6a: 9c:58:89:12:0d:65:4a:38:da:bb:60:e7:78:83:7d:c5:69:94: 27:c0:86:0c:11:0b:65:c8:75:d3:a0:7a:d2:7b:ab:a8:2a:16: 5e:ba:38:30:67:0b:49:4f:d0:d1:35:3c:6d:18:e6:ad:b6:2f: 2e:9e:74:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjQwNTAyMTQzNzUwWhcNMjQwNTA5MTQzNzUwWjAYMRYwFAYD VQQDEw02NjMzYTUzZS0xNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGX6NtI7jm6LUYM+OA3mXk8SDCv5lwSp4kCKkkoA6oGj/CR2VikqfB1nhWZ7 aDjNv8fvmxuSp8enGNjQ/o8rjYMT4ngdnCgX7/PHYHaEwkUnuJzewM4Ldv4fPIPq 5IrNui9ZKnPHpVWzmjFcHQxKoCV63vN+UyQsg8M2NmmFkmcJTGJ16jbRr+/fgQLU xhEyNs7gQdfFlsbspH6cmdDEjzriYq1SwCzIO+DK5YDbsQAgfg4sosMeQvKKRa/e QvXjLriCQ5yUmk6GysHyTTKyoFQIx9KnoM+Ci7FvW+QS8i5YgKH3Q9U8NaQrzMbU FsDfiizBRz+opd7pieS2+MadZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLdKe5C oYGHDu7oqfsDyaRSoTBHMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk+9SHaOHLaJ3obJuk3DibTpRmEZzjjLB24vWW/5x7Sj8shax34hrT rtr9kuFTW1/k1jrNmOMHk+IauutuunkUSSH0zwRNk0zLkYBjisLnmIWF4zCtCPpo cvT6eLZdAjG++F4Hh5CGTz2LHW2G4jIXV0oyCeh8FTAEK0OCafqCkwu+oMOYRymx KOj5TXJY9V/p2qbdYWFGTF1rVDy0L3P3lirM4yAK3sxkSoKn1cPakx8j9D5NSHsN kVuJTXQRjhP3YhMKw2qcWIkSDWVKONq7YOd4g33FaZQnwIYMEQtlyHXToHrSe6uo KhZeujgwZwtJT9DRNTxtGOatti8unnQl -----END CERTIFICATE-----Generated at Thu May 2 17:43:48 2024 by rpki-client on console-fra.rpki-client.org