$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json) Hash identifier: cxbNDZpHoJWX5u2gWoM/f6Y2M6CTJOnqjPjJySJ1Zsk= Subject key identifier: 84:EB:BB:88:DD:2B:C0:7E:51:04:90:BA:5E:AD:8D:E2:5F:B5:F2:A6 Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F Certificate issuer: /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft Manifest number: 052F Signing time: Wed 01 May 2024 01:17:43 +0000 Manifest this update: Wed 01 May 2024 01:17:43 +0000 Manifest next update: Wed 08 May 2024 01:17:43 +0000 Files and hashes: 1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: asagIinwUTdajPTnRBdZDlbNx44/CGPbM2k0NTOC3n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Validity Not Before: May 1 01:17:43 2024 GMT Not After : May 8 01:17:43 2024 GMT Subject: CN=66319837-5b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:df:58:67:92:af:8f:e7:a6:71:8a:e4:24: db:57:25:79:dc:c5:a8:69:4c:73:c0:5e:b4:e6:71: 84:f8:29:d8:f9:bc:02:71:e0:5f:15:02:5b:4c:82: 6b:b1:bc:29:08:82:c6:b7:38:a6:56:81:92:95:79: c7:2c:80:19:3c:8f:62:55:7e:aa:1f:d3:2b:14:3d: 0e:3a:41:a2:51:72:f6:4f:41:cf:2b:da:8b:0f:4f: b3:e0:66:a6:88:d1:ef:78:b3:45:56:db:45:1d:c5: 25:ac:fc:a7:eb:04:22:8f:87:5d:e3:b9:19:18:83: 94:d3:44:87:b1:0e:9c:2e:4d:f8:ff:d4:4d:83:db: f4:a5:fe:54:22:07:ee:4f:da:59:13:34:81:1f:d0: 46:b9:8e:54:47:24:6a:71:ab:ac:ff:4b:08:f4:9b: 04:28:7d:ef:37:e1:86:75:50:ca:bb:e5:45:95:c4: 8d:2c:74:1f:0f:fc:eb:ff:41:85:f6:09:03:3d:e3: 9c:06:89:c8:ef:f9:e2:15:bb:a9:1e:d6:d8:07:e6: d3:35:3e:da:d8:44:9d:4b:07:30:42:69:1f:10:99: 0e:aa:9c:96:76:40:9f:92:3d:20:f9:b9:56:e5:90: 82:e8:5f:4b:ee:a2:7e:38:65:6e:f4:5a:84:a0:ad: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EB:BB:88:DD:2B:C0:7E:51:04:90:BA:5E:AD:8D:E2:5F:B5:F2:A6 X509v3 Authority Key Identifier: keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:50:b5:f3:e8:50:af:38:38:e1:64:e2:e3:11:d2:e9:58:10: b6:4a:0e:92:88:07:4d:ae:b8:40:a6:c7:39:55:43:44:68:a5: 9d:b6:f4:33:22:b7:cc:16:d6:43:a2:6d:78:4b:4e:13:e7:e6: 3d:b7:92:35:bc:11:24:2d:4a:7c:c2:5c:48:a4:b0:29:d9:cb: 71:06:53:89:34:24:66:63:7f:a0:7c:e8:fa:56:af:23:7a:92: 04:3c:30:8c:9d:1f:32:d6:b5:29:c9:58:1c:67:a6:68:2d:3e: a9:f6:93:fe:5e:e5:a4:54:49:36:35:61:54:70:d8:1a:54:c1: ec:b9:ac:65:75:df:33:a4:03:60:55:e7:67:42:99:78:52:8a: 47:80:5f:d2:10:73:b3:d5:a1:d0:0f:37:eb:4c:1b:5d:f9:52: e0:38:74:f8:86:cb:a4:8c:e5:5e:89:4f:e2:03:b6:8a:56:52: 0a:9f:59:68:38:99:34:41:da:33:b0:2d:4a:77:53:65:8a:1f: 9c:9a:d8:e2:d7:ba:b1:57:0f:c7:39:6b:e5:c4:69:59:3e:a8: d8:c2:69:39:8a:de:f1:2d:1c:41:02:79:79:a7:55:47:30:c7: 9a:f3:01:dd:b6:0a:42:ad:39:06:33:d1:bc:f7:d7:35:7c:0d: 37:d4:72:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwRDIxMTAvBgNVBAUTKDJFODI1Q0RGMjQ4QUMyMEEzOUMwNThFMjM4RkE5MjYx NDkyNEZBMEYwHhcNMjQwNTAxMDExNzQzWhcNMjQwNTA4MDExNzQzWjAYMRYwFAYD VQQDEw02NjMxOTgzNy01YjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY3fWGeSr4/npnGK5CTbVyV53MWoaUxzwF605nGE+CnY+bwCceBfFQJbTIJr sbwpCILGtzimVoGSlXnHLIAZPI9iVX6qH9MrFD0OOkGiUXL2T0HPK9qLD0+z4Gam iNHveLNFVttFHcUlrPyn6wQij4dd47kZGIOU00SHsQ6cLk34/9RNg9v0pf5UIgfu T9pZEzSBH9BGuY5URyRqcaus/0sI9JsEKH3vN+GGdVDKu+VFlcSNLHQfD/zr/0GF 9gkDPeOcBonI7/niFbupHtbYB+bTNT7a2ESdSwcwQmkfEJkOqpyWdkCfkj0g+blW 5ZCC6F9L7qJ+OGVu9FqEoK1wFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITru4jd K8B+UQSQul6tjeJftfKmMB8GA1UdIwQYMBaAFC6CXN8kisIKOcBY4jj6kmFJJPoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTBEMi82RkExMjFBQUE5 QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dnbzV3RmppT1BxU1lVa2st ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvSmMzeVNLd2dvNXdGamlPUHFTWVVray1nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTBEMi82RkExMjFBQUE5QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dn bzV3RmppT1BxU1lVa2stZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBULXz6FCvODjhZOLjEdLpWBC2Sg6SiAdNrrhApsc5VUNEaKWdtvQz IrfMFtZDom14S04T5+Y9t5I1vBEkLUp8wlxIpLAp2ctxBlOJNCRmY3+gfOj6Vq8j epIEPDCMnR8y1rUpyVgcZ6ZoLT6p9pP+XuWkVEk2NWFUcNgaVMHsuaxldd8zpANg VednQpl4UopHgF/SEHOz1aHQDzfrTBtd+VLgOHT4hsukjOVeiU/iA7aKVlIKn1lo OJk0QdozsC1Kd1Nlih+cmtji17qxVw/HOWvlxGlZPqjYwmk5it7xLRxBAnl5p1VH MMea8wHdtgpCrTkGM9G899c1fA031HIU -----END CERTIFICATE-----Generated at Wed May 1 02:46:20 2024 by rpki-client on console-ams.rpki-client.org