$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: EMYBRv+mtJANrlB60630oz+/1R0ULmI08M3XZJsqc6w= Subject key identifier: 52:FA:DE:D7:3C:A5:15:44:10:40:04:D1:42:19:61:55:49:74:F5:AB Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 235B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 441B Signing time: Sat 04 May 2024 16:11:05 +0000 Manifest this update: Sat 04 May 2024 16:11:05 +0000 Manifest next update: Sat 11 May 2024 16:11:05 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: Q50HFSUqEPmZVJT4z8Gp5VpHPO4uGZLJh+hnOVcV12s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9051 (0x235b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: May 4 16:11:05 2024 GMT Not After : May 11 16:11:05 2024 GMT Subject: CN=66365e19-c32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:d8:de:c1:30:2c:43:7f:ad:b4:84:d6:a0: 70:41:49:1a:77:38:f5:21:8d:65:e5:32:d9:35:4f: fd:c7:ae:de:92:80:a5:8c:b4:e2:97:2d:30:28:35: 19:7a:26:d1:88:36:ae:30:94:44:83:f9:1f:e7:67: e3:57:a6:96:64:59:54:29:68:76:8f:e6:2a:76:a7: a1:ae:a1:1b:c4:d1:75:e0:57:0b:16:12:eb:ca:93: 5a:06:25:10:0f:2d:3e:8b:88:e9:26:91:6d:4a:f3: 8a:76:55:34:7c:4a:1f:66:b1:de:d1:a1:48:b8:3c: 9f:24:8c:9d:bd:6e:e8:b5:72:c9:9d:56:29:3d:16: 98:45:6e:51:e9:a0:f6:8b:ff:11:3b:c4:37:bb:b1: 44:a6:d7:46:ca:6a:e6:d4:52:01:c9:41:a0:97:24: a6:41:a6:79:e3:58:0b:3d:ce:b7:77:b8:07:c3:05: 50:3d:77:46:e3:93:e6:28:29:3a:bd:e1:8b:b3:c9: 36:21:5e:de:08:c7:44:be:ef:71:56:f3:34:f0:d0: 75:05:39:84:08:84:3e:e2:12:f2:5c:76:78:1c:8c: 08:8e:3c:92:e9:75:26:ab:3c:cc:81:4f:e0:4c:97: 02:c6:47:94:c7:09:1d:48:7e:dd:f2:33:73:ac:79: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FA:DE:D7:3C:A5:15:44:10:40:04:D1:42:19:61:55:49:74:F5:AB X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6d:2e:70:c9:ea:fc:95:b9:a7:01:47:4c:4e:b4:37:a0:5e: 2d:cd:b4:a7:d6:26:b0:ad:fc:43:30:5e:e1:4f:36:e9:1c:b6: 2e:75:7b:a8:f6:42:3d:12:dc:86:08:08:c6:61:5b:12:76:eb: 1f:d9:cf:c1:0c:7b:6f:ae:13:61:05:45:43:75:50:61:ae:89: 40:bd:76:56:11:66:06:4e:9b:81:94:a5:0a:1d:f1:01:d9:b4: a4:54:f8:58:62:a3:58:65:e7:70:92:d4:78:22:a4:6c:10:4c: 16:a0:03:bb:bd:5d:cb:d8:33:05:cf:08:a7:2d:7f:31:ec:92: 45:95:18:fc:21:b4:43:57:0e:fa:2d:d3:bc:65:7e:24:35:e4: 66:9a:3a:e9:21:64:b5:d1:25:41:c4:b7:65:58:64:d5:60:f0: 92:82:b8:9c:71:f8:8a:95:5d:ef:0f:58:5e:fa:c2:87:a5:5f: 2c:4f:ad:95:4b:f1:14:f1:ae:a9:62:9d:cc:52:9b:f5:ca:11: 5e:ff:38:06:80:01:95:5d:16:0f:dc:71:0e:48:5c:89:6c:36: 74:3c:f1:50:25:98:62:49:d3:44:98:da:bf:87:bb:7e:75:8a: 42:5f:44:e4:1f:3b:23:b5:9c:70:92:c0:a5:af:ce:74:57:2d: ff:18:57:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjQwNTA0MTYxMTA1WhcNMjQwNTExMTYxMTA1WjAYMRYwFAYD VQQDEw02NjM2NWUxOS1jMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZbY3sEwLEN/rbSE1qBwQUkadzj1IY1l5TLZNU/9x67ekoCljLTily0wKDUZ eibRiDauMJREg/kf52fjV6aWZFlUKWh2j+YqdqehrqEbxNF14FcLFhLrypNaBiUQ Dy0+i4jpJpFtSvOKdlU0fEofZrHe0aFIuDyfJIydvW7otXLJnVYpPRaYRW5R6aD2 i/8RO8Q3u7FEptdGymrm1FIByUGglySmQaZ541gLPc63d7gHwwVQPXdG45PmKCk6 veGLs8k2IV7eCMdEvu9xVvM08NB1BTmECIQ+4hLyXHZ4HIwIjjyS6XUmqzzMgU/g TJcCxkeUxwkdSH7d8jNzrHmTsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL63tc8 pRVEEEAE0UIZYVVJdPWrMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBbS5wyer8lbmnAUdMTrQ3oF4tzbSn1iawrfxDMF7hTzbpHLYudXuo 9kI9EtyGCAjGYVsSdusf2c/BDHtvrhNhBUVDdVBhrolAvXZWEWYGTpuBlKUKHfEB 2bSkVPhYYqNYZedwktR4IqRsEEwWoAO7vV3L2DMFzwinLX8x7JJFlRj8IbRDVw76 LdO8ZX4kNeRmmjrpIWS10SVBxLdlWGTVYPCSgriccfiKlV3vD1he+sKHpV8sT62V S/EU8a6pYp3MUpv1yhFe/zgGgAGVXRYP3HEOSFyJbDZ0PPFQJZhiSdNEmNq/h7t+ dYpCX0TkHzsjtZxwksClr850Vy3/GFd7 -----END CERTIFICATE-----Generated at Sat May 4 17:19:49 2024 by rpki-client on console-fra.rpki-client.org