$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft File: deIxCEEFtBXk1XmhraSOU5dW17M.mft (raw, json) Hash identifier: A2w03++VBFTgD/6JyPGXGJcu0895OWFUW/r62o9QslU= Subject key identifier: 95:82:88:7F:5B:3C:96:76:DC:C1:57:DA:93:76:BF:0E:48:46:ED:CC Authority key identifier: 75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 Certificate issuer: /CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft Manifest number: 78 Signing time: Fri 17 May 2024 07:24:36 +0000 Manifest this update: Fri 17 May 2024 07:24:35 +0000 Manifest next update: Fri 24 May 2024 07:24:35 +0000 Files and hashes: 1: deIxCEEFtBXk1XmhraSOU5dW17M.crl (hash: uxnm3UwpvuhY9RcrsG7n4eA+xg/Et22mxfnQCc3k+0I=) 2: 39F3DEAC5BE711EE8D63E752C4F9AE02.roa (hash: iPD/wFnBuITDzyZfpCm7N4MsAE73A1QWegIUmzf7Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Validity Not Before: May 17 07:24:35 2024 GMT Not After : May 24 07:24:35 2024 GMT Subject: CN=66470633-8b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:f2:b9:ac:fc:8a:ef:f5:9b:a4:e2:28:b9: 1e:33:8f:00:25:20:f2:5b:b4:fa:fb:f8:e0:4e:0e: 12:63:ca:8b:25:22:1e:cc:cc:c1:97:0f:05:77:d8: 10:0d:b5:bd:42:75:96:66:f5:f6:d8:13:30:9e:b2: 09:04:de:5c:e4:d9:f6:69:c6:0f:08:2e:aa:06:f7: 9c:c8:2e:0b:11:92:c8:2a:31:37:e8:3d:13:c7:cf: c6:c5:d5:22:e9:73:11:d0:c8:0a:9a:ef:4f:34:9b: ea:fd:8e:e7:5f:14:06:5a:83:b9:7d:34:b7:2e:64: 52:6a:51:c7:a7:ac:28:51:70:03:d2:de:1e:a2:79: db:fb:5f:3e:ef:10:90:e7:7a:49:4b:f0:0c:e6:f3: 97:fd:33:0d:7e:ca:05:ac:86:ad:cc:08:36:63:d8: bd:04:d5:20:e7:a9:0c:1a:19:aa:c2:67:c5:4f:f3: 13:ba:7c:dc:0b:0b:5b:9e:76:61:f0:86:34:cf:0e: e6:d3:22:2b:83:28:25:0d:cc:d5:4f:3f:63:44:4c: a1:6b:5b:9f:24:48:ca:85:92:7c:b2:49:97:ee:77: ce:8a:17:6d:3b:36:f3:63:14:fc:4b:c5:62:59:09: 3c:97:98:c8:9b:b5:b6:96:c8:8e:26:14:c5:0e:56: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:82:88:7F:5B:3C:96:76:DC:C1:57:DA:93:76:BF:0E:48:46:ED:CC X509v3 Authority Key Identifier: keyid:75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:46:fc:e1:7e:20:56:f6:df:b7:0c:bb:57:89:88:1d:99:70: 2a:12:67:2d:12:c2:ea:2b:83:96:1e:ef:c4:02:cb:8f:4c:d0: a8:d7:49:af:d5:b0:84:e1:8b:71:0b:7c:4a:f4:fe:77:7b:20: 15:1d:b5:49:cb:cc:5b:e9:bf:f0:c3:61:17:d7:86:d4:0d:70: 98:55:1e:69:1b:7c:fa:22:b5:21:c8:be:48:1d:9e:a3:1b:17: d5:a9:14:09:da:ea:09:24:fa:d4:fd:0e:28:ec:47:ac:7d:d2: 33:48:86:5d:0b:46:4b:33:d3:d6:86:dc:32:9c:b7:52:b3:8a: 87:cb:f4:5b:8b:eb:78:eb:92:4f:77:79:95:71:b4:d6:de:a4: 4e:a5:ee:75:8c:83:27:0d:02:a1:8e:a0:07:c4:a4:d8:ae:57: 55:da:22:b5:ed:f3:58:97:95:1f:c7:0c:7e:42:d8:43:ba:e3: d6:bb:6f:4f:ad:66:81:3b:41:6d:59:8d:b4:04:2a:fa:d3:ac: 4b:df:2d:4a:95:b7:d6:d8:d6:87:56:4d:c5:8f:29:fa:4d:6e: 6b:1a:9d:3e:67:a3:c8:b7:27:97:a7:6b:7c:32:5c:68:2c:03: 8a:d7:3f:e0:65:d2:43:02:9e:e2:5c:b2:fd:65:7a:d8:67:33: dd:9b:83:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RDlFRjExMC8GA1UEBRMoNzVFMjMxMDg0MTA1QjQxNUU0RDU3OUExQURBNDhFNTM5 NzU2RDdCMzAeFw0yNDA1MTcwNzI0MzVaFw0yNDA1MjQwNzI0MzVaMBgxFjAUBgNV BAMTDTY2NDcwNjMzLThiMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV2PK5rPyK7/WbpOIouR4zjwAlIPJbtPr7+OBODhJjyoslIh7MzMGXDwV32BAN tb1CdZZm9fbYEzCesgkE3lzk2fZpxg8ILqoG95zILgsRksgqMTfoPRPHz8bF1SLp cxHQyAqa7080m+r9judfFAZag7l9NLcuZFJqUcenrChRcAPS3h6iedv7Xz7vEJDn eklL8Azm85f9Mw1+ygWshq3MCDZj2L0E1SDnqQwaGarCZ8VP8xO6fNwLC1uedmHw hjTPDubTIiuDKCUNzNVPP2NETKFrW58kSMqFknyySZfud86KF207NvNjFPxLxWJZ CTyXmMibtbaWyI4mFMUOVvA/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlYKIf1s8 lnbcwVfak3a/DkhG7cwwHwYDVR0jBBgwFoAUdeIxCEEFtBXk1XmhraSOU5dW17Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEOUVGLzhFQjNFRUNFNUJF NjExRUVBNzA1QTc2NUM0RjlBRTAyL2RlSXhDRUVGdEJYazFYbWhyYVNPVTVkVzE3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGVJeENFRUZ0QlhrMVhtaHJhU09VNWRXMTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE OUVGLzhFQjNFRUNFNUJFNjExRUVBNzA1QTc2NUM0RjlBRTAyL2RlSXhDRUVGdEJY azFYbWhyYVNPVTVkVzE3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABVG/OF+IFb237cMu1eJiB2ZcCoSZy0Swuorg5Ye78QCy49M0KjXSa/V sIThi3ELfEr0/nd7IBUdtUnLzFvpv/DDYRfXhtQNcJhVHmkbfPoitSHIvkgdnqMb F9WpFAna6gkk+tT9DijsR6x90jNIhl0LRksz09aG3DKct1KziofL9FuL63jrkk93 eZVxtNbepE6l7nWMgycNAqGOoAfEpNiuV1XaIrXt81iXlR/HDH5C2EO649a7b0+t ZoE7QW1ZjbQEKvrTrEvfLUqVt9bY1odWTcWPKfpNbmsanT5no8i3J5ena3wyXGgs A4rXP+Bl0kMCnuJcsv1lethnM92bg8I= -----END CERTIFICATE-----Generated at Fri May 17 08:52:52 2024 by rpki-client on console-ams.rpki-client.org