$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: 2kLjqUj7xL1QMx8P4kJy2gDLaYYxP7uTmjBQq0ruRAo= Subject key identifier: B8:55:8A:35:17:12:2E:20:9B:A7:16:68:1A:8B:99:14:4A:0C:E1:87 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 07E4 Signing time: Tue 30 Apr 2024 22:16:07 +0000 Manifest this update: Tue 30 Apr 2024 22:16:06 +0000 Manifest next update: Tue 07 May 2024 22:16:06 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: q91G4bkTSzz9Abm3RpMJzDuVttN/XNrJAyuSvP9U6L8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Apr 30 22:16:06 2024 GMT Not After : May 7 22:16:06 2024 GMT Subject: CN=66316da7-59dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:cf:d8:b2:6a:df:bb:1e:f4:bb:91:a7:6f: 2e:4d:c7:2f:69:4d:1c:b1:eb:a3:57:28:d4:be:5f: 56:64:eb:d5:43:fb:e1:21:8e:bf:ef:47:a9:4e:99: d1:e7:7b:5b:c4:cd:14:ff:cd:6b:26:f9:f4:c1:59: ab:bd:1c:a4:4f:61:ff:57:49:02:22:0f:df:26:10: db:6e:d1:d8:fe:33:09:97:5a:6a:5c:9a:ad:0a:cf: 83:ea:9f:39:d9:4c:eb:05:9c:d9:ca:df:7c:b5:6c: 50:ea:63:da:71:af:2c:da:15:c4:cd:e6:fa:ea:9f: 84:6c:e8:67:7a:8e:ec:6e:d6:46:3e:38:ee:80:4f: 13:0e:b1:71:a2:45:35:11:4f:b6:69:eb:51:e2:e4: 82:e7:a3:0d:80:ee:fc:16:70:38:1b:0f:16:07:05: c5:ad:8a:8e:0f:6f:db:d9:f8:33:83:04:e3:75:5a: 58:0c:77:24:01:cd:7c:ce:12:c4:c2:a4:b8:36:bd: 79:21:ec:e1:69:f2:83:14:81:e5:43:d2:72:04:f4: 69:e1:9d:08:62:fb:51:ad:76:d4:09:60:85:47:96: f1:92:8d:8b:97:c1:c5:d4:53:38:90:fe:54:95:10: 52:50:f0:6e:14:34:2e:57:c1:50:7c:73:b7:bb:8d: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:55:8A:35:17:12:2E:20:9B:A7:16:68:1A:8B:99:14:4A:0C:E1:87 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fc:65:23:5b:1f:61:ee:85:75:5a:7d:bc:c9:99:13:9b:fa: 64:4b:93:b6:99:6a:34:8f:71:2a:1b:7d:c0:ed:fc:31:28:43: 89:59:11:37:5a:98:78:3a:93:5d:5d:04:15:91:cb:04:09:e0: a8:76:ff:51:67:77:a3:82:51:86:4b:30:6d:9b:28:4d:2f:1a: 7d:6f:ce:45:4d:42:f6:6b:3c:ea:18:70:eb:23:cb:17:7d:14: b6:a3:9b:50:c0:5d:ef:74:2d:5f:aa:74:04:dd:33:20:c8:0b: cc:ca:28:a7:38:d8:85:77:61:b9:1b:ab:c4:b5:4e:15:34:27: eb:3a:45:40:59:de:9a:0a:c1:f6:3b:0a:ce:ba:f4:84:83:30: dd:59:dc:92:bb:26:a0:84:99:3b:f7:9b:c0:f4:76:7e:7a:4e: e1:25:bf:b6:f8:09:6f:11:ef:10:fe:01:ca:ab:50:ee:6a:5d: d6:02:fa:f9:61:87:a9:0d:22:f2:3f:45:7b:b2:ea:f1:c3:77: 2e:bd:66:70:1d:63:80:32:00:ae:39:c3:89:88:09:97:1a:44: 2d:35:27:3c:1d:5a:e1:ed:22:6f:5f:fe:11:66:68:92:b2:a5: 14:b8:3b:ff:8a:d6:68:d2:8e:56:20:e4:65:a3:fe:9b:f8:b3: 86:d8:25:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjQwNDMwMjIxNjA2WhcNMjQwNTA3MjIxNjA2WjAYMRYwFAYD VQQDEw02NjMxNmRhNy01OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunfP2LJq37se9LuRp28uTccvaU0cseujVyjUvl9WZOvVQ/vhIY6/70epTpnR 53tbxM0U/81rJvn0wVmrvRykT2H/V0kCIg/fJhDbbtHY/jMJl1pqXJqtCs+D6p85 2UzrBZzZyt98tWxQ6mPaca8s2hXEzeb66p+EbOhneo7sbtZGPjjugE8TDrFxokU1 EU+2aetR4uSC56MNgO78FnA4Gw8WBwXFrYqOD2/b2fgzgwTjdVpYDHckAc18zhLE wqS4Nr15IezhafKDFIHlQ9JyBPRp4Z0IYvtRrXbUCWCFR5bxko2Ll8HF1FM4kP5U lRBSUPBuFDQuV8FQfHO3u42rnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhVijUX Ei4gm6cWaBqLmRRKDOGHMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm/GUjWx9h7oV1Wn28yZkTm/pkS5O2mWo0j3EqG33A7fwxKEOJWRE3 Wph4OpNdXQQVkcsECeCodv9RZ3ejglGGSzBtmyhNLxp9b85FTUL2azzqGHDrI8sX fRS2o5tQwF3vdC1fqnQE3TMgyAvMyiinONiFd2G5G6vEtU4VNCfrOkVAWd6aCsH2 OwrOuvSEgzDdWdySuyaghJk795vA9HZ+ek7hJb+2+AlvEe8Q/gHKq1Dual3WAvr5 YYepDSLyP0V7surxw3cuvWZwHWOAMgCuOcOJiAmXGkQtNSc8HVrh7SJvX/4RZmiS sqUUuDv/itZo0o5WIORlo/6b+LOG2CWj -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:09 2024 by rpki-client on console-ams.rpki-client.org