$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft File: 2v_xEa69_HI1ltxVl1dsYqgD3XU.mft (raw, json) Hash identifier: EAiOzJ/S2t/Dufw1iyF+N7+8qC6lUdUpsn+oeJ/Ovyg= Subject key identifier: 1B:03:63:B2:81:B1:3C:D5:15:63:B8:CB:78:74:E9:D4:2B:C7:5C:B6 Authority key identifier: DA:FF:F1:11:AE:BD:FC:72:35:96:DC:55:97:57:6C:62:A8:03:DD:75 Certificate issuer: /CN=A91B3C87/serialNumber=DAFFF111AEBDFC723596DC5597576C62A803DD75 Certificate serial: 0EF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft Manifest number: 1571 Signing time: Sun 02 Jun 2024 18:29:28 +0000 Manifest this update: Sun 02 Jun 2024 18:29:27 +0000 Manifest next update: Sun 09 Jun 2024 18:29:27 +0000 Files and hashes: 1: 2v_xEa69_HI1ltxVl1dsYqgD3XU.crl (hash: luKmkGih/WBhK2P73UIPCucsrSVG5p6FBq1VmBTfOLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.crl rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 18:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3832 (0xef8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3C87/serialNumber=DAFFF111AEBDFC723596DC5597576C62A803DD75 Validity Not Before: Jun 2 18:29:27 2024 GMT Not After : Jun 9 18:29:27 2024 GMT Subject: CN=665cba07-eae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:b8:29:da:83:e8:b5:62:ab:50:b1:5e:91: 64:f5:10:6b:48:76:e9:23:98:4c:49:f0:9b:1f:cc: 5e:60:83:87:3e:ed:00:c0:40:b9:6d:c0:8d:a0:de: d8:3e:a5:3c:21:ef:83:f1:9f:24:99:c4:d1:b8:31: f8:4a:fb:59:92:44:e5:e5:73:14:9d:b9:52:74:bd: 05:9d:ae:e3:19:70:e2:c3:61:18:59:4e:14:8e:1a: 29:16:8f:90:0b:29:e1:eb:cb:5b:c0:a4:5c:ce:0f: 4b:f2:60:20:ed:1c:ba:fb:9f:35:df:b5:ce:d7:af: b4:eb:b7:39:53:3a:9d:fa:1d:39:63:9d:ae:75:66: 88:68:28:99:b1:62:7c:e6:1d:3a:3b:b7:80:40:55: c8:b1:74:2d:71:b1:8f:d5:40:ef:ef:3a:39:34:ec: a6:c5:ef:f1:cb:60:6a:4c:7b:f7:bc:e7:e2:c3:bc: 9c:b4:61:37:19:5a:00:57:2f:c3:bd:d3:79:07:15: d9:00:57:48:f0:05:56:4e:44:f3:15:4a:37:a0:25: 90:b4:ed:b9:fc:de:3a:9b:5d:66:43:d2:4e:e7:38: e6:14:98:ef:13:46:92:d3:a5:95:94:2d:fc:93:c8: 4f:13:c5:44:92:cd:8b:b9:7b:37:37:8c:01:9e:a8: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:03:63:B2:81:B1:3C:D5:15:63:B8:CB:78:74:E9:D4:2B:C7:5C:B6 X509v3 Authority Key Identifier: keyid:DA:FF:F1:11:AE:BD:FC:72:35:96:DC:55:97:57:6C:62:A8:03:DD:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:59:a6:78:db:4d:ea:87:ea:af:94:86:f5:b1:29:7f:8d:68: 2f:1d:0a:78:44:62:d0:ef:3d:e8:91:8a:dc:a6:88:69:1d:3b: de:fd:49:7b:91:3d:b7:e4:14:e7:1d:47:ee:93:59:34:86:2a: 3f:d0:71:5d:35:05:09:ed:b4:5f:57:9c:6a:83:22:c5:12:98: 73:0f:3b:23:f6:9a:c0:18:18:02:f4:db:da:5a:62:9c:63:1c: 6d:ee:92:2e:52:2a:00:57:3b:93:7b:0b:69:65:e1:88:18:9e: 00:f5:2f:6d:66:30:1e:c2:91:ce:3a:48:1c:80:0b:95:19:9b: 57:5f:ff:ad:5e:a4:12:30:32:89:66:72:37:79:a5:45:33:15: 38:a5:1f:82:d0:24:b6:27:df:23:08:20:99:81:3c:63:1f:17: 4b:9f:db:58:8a:bc:1b:2b:4d:19:a5:32:b6:34:a0:ed:da:64: 2c:e1:b6:e7:3c:be:7e:98:ff:8e:68:b5:9a:c1:1b:a6:b7:5f: e0:2f:1d:00:92:55:d3:f9:16:c7:34:68:54:1b:42:28:d6:d5: a0:72:cb:81:bf:ed:58:28:9a:84:8e:b7:b6:20:4d:40:38:77: d7:c8:85:4e:47:70:5b:ef:9e:ce:57:b7:d6:10:90:f0:d0:23: cf:38:5e:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDODcxMTAvBgNVBAUTKERBRkZGMTExQUVCREZDNzIzNTk2REM1NTk3NTc2QzYy QTgwM0RENzUwHhcNMjQwNjAyMTgyOTI3WhcNMjQwNjA5MTgyOTI3WjAYMRYwFAYD VQQDEw02NjVjYmEwNy1lYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZq4KdqD6LViq1CxXpFk9RBrSHbpI5hMSfCbH8xeYIOHPu0AwEC5bcCNoN7Y PqU8Ie+D8Z8kmcTRuDH4SvtZkkTl5XMUnblSdL0Fna7jGXDiw2EYWU4UjhopFo+Q Cynh68tbwKRczg9L8mAg7Ry6+58137XO16+067c5Uzqd+h05Y52udWaIaCiZsWJ8 5h06O7eAQFXIsXQtcbGP1UDv7zo5NOymxe/xy2BqTHv3vOfiw7yctGE3GVoAVy/D vdN5BxXZAFdI8AVWTkTzFUo3oCWQtO25/N46m11mQ9JO5zjmFJjvE0aS06WVlC38 k8hPE8VEks2LuXs3N4wBnqhGxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsDY7KB sTzVFWO4y3h06dQrx1y2MB8GA1UdIwQYMBaAFNr/8RGuvfxyNZbcVZdXbGKoA911 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0M4Ny84QjdDN0U3NjU3 NTIxMUU5ODA4RUNGMUJDNEY5QUUwMi8ydl94RWE2OV9ISTFsdHhWbDFkc1lxZ0Qz WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2X3hFYTY5X0hJMWx0eFZsMWRzWXFnRDNYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0M4Ny84QjdDN0U3NjU3NTIxMUU5ODA4RUNGMUJDNEY5QUUwMi8ydl94RWE2OV9I STFsdHhWbDFkc1lxZ0QzWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqWaZ4203qh+qvlIb1sSl/jWgvHQp4RGLQ7z3okYrcpohpHTve/Ul7 kT235BTnHUfuk1k0hio/0HFdNQUJ7bRfV5xqgyLFEphzDzsj9prAGBgC9NvaWmKc Yxxt7pIuUioAVzuTewtpZeGIGJ4A9S9tZjAewpHOOkgcgAuVGZtXX/+tXqQSMDKJ ZnI3eaVFMxU4pR+C0CS2J98jCCCZgTxjHxdLn9tYirwbK00ZpTK2NKDt2mQs4bbn PL5+mP+OaLWawRumt1/gLx0AklXT+RbHNGhUG0Io1tWgcsuBv+1YKJqEjre2IE1A OHfXyIVOR3Bb757OV7fWEJDw0CPPOF5t -----END CERTIFICATE-----Generated at Sun Jun 2 21:14:29 2024 by rpki-client on console-ams.rpki-client.org