$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: qy+jOfyp8axIbRIYztGqutoja2LUTxFznTfJDSbBd4E= Subject key identifier: 6C:76:C1:67:95:0F:45:9F:83:51:90:FB:07:04:AA:BF:19:6F:02:10 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 55 Signing time: Fri 17 May 2024 08:35:47 +0000 Manifest this update: Fri 17 May 2024 08:35:46 +0000 Manifest next update: Fri 24 May 2024 08:35:46 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: dGNbUErrAWuehpSw5p1XyUR7e1iL4BADbKogfaT9KBc=) 2: 860FE244E7F211EEA82C4340C4F9AE02.roa (hash: tJJTcGQ2m2pshzd0U/DwfkAv50Vcbcpb9AnTouLN/sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: May 17 08:35:46 2024 GMT Not After : May 24 08:35:46 2024 GMT Subject: CN=664716e2-3ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:64:84:78:37:8a:ca:ee:5f:06:86:99:14: 6a:ee:fd:76:e1:41:15:71:79:24:e1:5d:f1:12:8e: 97:5d:d8:67:08:08:20:8a:92:82:62:7e:41:d8:a1: b9:6a:4d:23:30:82:b8:75:7b:90:3e:a4:2c:03:77: ee:fa:f4:1a:d8:5c:77:e9:69:15:e8:54:de:a1:d9: 60:69:1d:2c:49:0b:90:03:1f:77:58:61:24:59:3d: e2:e3:11:dd:e3:86:5d:aa:ac:44:6d:67:fc:8a:05: df:f5:f6:a4:49:c3:d8:ba:00:78:7d:ca:09:ca:37: c8:87:6b:b4:fb:a9:d2:a0:0f:fd:84:3b:f9:93:73: 51:ea:32:d3:a3:93:fd:98:1f:d3:55:02:ec:5a:aa: e3:1c:cf:86:2e:b0:77:aa:b2:7c:1c:f8:4c:49:e9: 73:0a:2d:4f:bf:c5:1d:37:e8:b8:40:5a:3d:05:c3: c2:40:54:23:fa:04:b0:63:3d:e2:3a:09:bf:3d:63: ca:c2:1b:76:68:7b:93:d0:cc:37:2d:2d:b2:60:6c: 22:60:f0:88:84:0a:14:f7:77:a1:9d:93:0f:1a:bd: 79:a5:b3:6a:21:c1:88:9a:da:dd:d7:f6:a6:c5:35: ec:da:ba:71:5c:8d:e8:ee:da:83:ad:a2:1f:0a:dd: 4d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:76:C1:67:95:0F:45:9F:83:51:90:FB:07:04:AA:BF:19:6F:02:10 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:79:3c:11:f4:f6:a5:e2:37:ad:1f:02:48:99:0b:da:64:6d: b8:a6:f3:dc:01:75:5d:93:47:00:8d:ab:d1:00:f4:36:a0:32: 4a:c1:c5:71:00:54:65:97:c1:44:ab:1e:6d:05:67:1f:a3:0d: a9:09:f8:7d:40:6e:fa:48:6d:80:93:a4:8a:8d:23:0e:38:bc: dc:05:13:e5:10:85:a1:4d:35:ac:77:ff:9f:63:25:90:74:ac: 76:39:9a:2b:a6:0a:fa:e5:69:25:37:fa:3a:83:6e:b6:85:7f: 01:e4:eb:e1:49:3d:35:5f:2d:a8:17:33:b3:99:17:46:fe:5d: bb:be:2d:71:c0:ab:cf:b5:d3:02:e0:66:40:a2:8a:09:07:e7: 3f:7e:78:5c:f4:7e:52:67:23:cc:c1:8a:e7:1f:9a:8a:62:c9: 01:04:8d:c8:91:5d:2d:aa:7d:d1:f6:7f:bc:28:e0:da:e8:57: 0c:d8:5a:dd:16:d8:0c:4d:be:9a:d0:8b:50:64:51:cf:cb:b2: 00:27:c4:e3:6b:1d:eb:92:04:ec:59:dc:d9:9b:46:57:bf:e6: 52:17:b0:e6:5e:90:87:38:fa:2a:86:77:7e:2f:79:c1:31:d5: d8:bb:de:9f:a1:3c:b5:d2:48:64:0f:8e:f8:06:5a:3f:4a:52: fd:c0:9f:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MDM2QTExMC8GA1UEBRMoMEYxN0YzN0RCQzk0ODREOTZFMUEwQUJDNzhBNEY5Q0FD RDVFREE4QTAeFw0yNDA1MTcwODM1NDZaFw0yNDA1MjQwODM1NDZaMBgxFjAUBgNV BAMTDTY2NDcxNmUyLTNmZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkhWSEeDeKyu5fBoaZFGru/XbhQRVxeSThXfESjpdd2GcICCCKkoJifkHYoblq TSMwgrh1e5A+pCwDd+769BrYXHfpaRXoVN6h2WBpHSxJC5ADH3dYYSRZPeLjEd3j hl2qrERtZ/yKBd/19qRJw9i6AHh9ygnKN8iHa7T7qdKgD/2EO/mTc1HqMtOjk/2Y H9NVAuxaquMcz4YusHeqsnwc+ExJ6XMKLU+/xR036LhAWj0Fw8JAVCP6BLBjPeI6 Cb89Y8rCG3Zoe5PQzDctLbJgbCJg8IiEChT3d6Gdkw8avXmls2ohwYia2t3X9qbF NezaunFcjeju2oOtoh8K3U1DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbHbBZ5UP RZ+DUZD7BwSqvxlvAhAwHwYDVR0jBBgwFoAUDxfzfbyUhNluGgq8eKT5ys1e2oow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMzZBL0JCQzJGNzc2RDFG MTExRUU4NjA1MUE2MUM0RjlBRTAyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHhmemZieVVoTmx1R2dxOGVLVDV5czFlMm9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw MzZBL0JCQzJGNzc2RDFGMTExRUU4NjA1MUE2MUM0RjlBRTAyL0R4ZnpmYnlVaE5s dUdncThlS1Q1eXMxZTJvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKN5PBH09qXiN60fAkiZC9pkbbim89wBdV2TRwCNq9EA9DagMkrBxXEA VGWXwUSrHm0FZx+jDakJ+H1AbvpIbYCTpIqNIw44vNwFE+UQhaFNNax3/59jJZB0 rHY5miumCvrlaSU3+jqDbraFfwHk6+FJPTVfLagXM7OZF0b+Xbu+LXHAq8+10wLg ZkCiigkH5z9+eFz0flJnI8zBiucfmopiyQEEjciRXS2qfdH2f7wo4NroVwzYWt0W 2AxNvprQi1BkUc/LsgAnxONrHeuSBOxZ3NmbRle/5lIXsOZekIc4+iqGd34vecEx 1di73p+hPLXSSGQPjvgGWj9KUv3An1c= -----END CERTIFICATE-----Generated at Fri May 17 10:10:52 2024 by rpki-client on console-fra.rpki-client.org