$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft File: jIBwVSUDCAuWcjTt7IDAHT25bPY.mft (raw, json) Hash identifier: grq/L7Tb6qtdHzXsRKDEjhQtKLPQK1caYAI9A2x0gdc= Subject key identifier: CA:76:59:0A:CE:93:48:34:F0:7D:E9:BA:BE:82:23:D8:B6:FE:5F:CC Authority key identifier: 8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6 Certificate issuer: /CN=A91B59C1/serialNumber=8C8070552503080B967234EDEC80C01D3DB96CF6 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft Manifest number: 0459 Signing time: Fri 03 May 2024 01:57:14 +0000 Manifest this update: Fri 03 May 2024 01:57:14 +0000 Manifest next update: Fri 10 May 2024 01:57:14 +0000 Files and hashes: 1: jIBwVSUDCAuWcjTt7IDAHT25bPY.crl (hash: qEITnHqq/R8bbSwbDJEaBQQXxczjs5NLYbnoVvtVTjM=) 2: DB5B36C600B511EC9A436071C4F9AE02.roa (hash: cKTNYx51Z3gLmWzIe/5RGmnrk/eCYtcRCpfvC99JSSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.crl rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B59C1/serialNumber=8C8070552503080B967234EDEC80C01D3DB96CF6 Validity Not Before: May 3 01:57:14 2024 GMT Not After : May 10 01:57:14 2024 GMT Subject: CN=6634447a-4215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:38:c6:4f:a3:be:f3:01:69:f4:9f:ba:bf: 39:62:05:e0:d6:08:7a:61:d2:20:6c:7b:fc:8a:ef: e9:32:4c:63:9d:bc:63:a3:46:b9:5c:f7:82:36:a5: b0:5d:27:f1:aa:33:11:81:6f:21:2d:fd:c2:f4:47: e4:d4:86:c3:8f:29:a1:ea:2b:c1:d2:5d:8a:97:cd: ee:5a:1b:e1:97:6c:a9:6d:35:d3:51:1e:3e:8a:e4: 89:62:69:38:a6:54:eb:11:25:1f:b2:7c:2c:ba:7c: 12:8a:d7:27:42:9b:68:af:9a:af:b4:fd:2f:fc:18: f9:eb:74:14:08:21:ca:80:9d:2c:ef:41:df:b6:bf: 77:10:70:e1:e9:30:63:34:2b:54:63:69:fb:f3:ea: 2b:55:91:a7:92:1d:fe:a9:4d:e7:26:c9:67:c5:8e: 13:9f:2b:01:20:1b:65:83:3b:67:3d:15:3c:ba:31: 90:68:02:9c:f9:09:1c:4e:de:e3:88:1f:d4:8c:9a: 18:99:df:78:db:1b:01:30:9b:e1:c8:d0:9b:8f:6c: 95:d7:5b:e7:fe:be:37:cc:bf:98:c6:e8:5b:83:d2: f0:f9:18:24:c0:ea:cd:a6:f6:53:24:3a:16:9d:00: 5f:97:bd:27:b4:89:ab:23:e8:a2:fc:cc:7f:bc:6a: b0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:76:59:0A:CE:93:48:34:F0:7D:E9:BA:BE:82:23:D8:B6:FE:5F:CC X509v3 Authority Key Identifier: keyid:8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:12:c8:9e:22:3e:84:61:07:b8:b4:5e:6a:a7:31:35:36:80: 71:44:b0:cb:91:be:d2:3c:9d:68:ad:3f:85:35:ff:c8:05:bf: be:2d:fe:ec:6c:7b:3e:c3:4e:91:b6:da:11:24:1b:52:29:d6: d5:00:f1:3f:bd:23:7d:63:75:07:b3:13:e3:d9:af:3f:79:8e: d6:77:52:bc:ef:e9:c3:2f:f8:67:33:0b:e6:b2:3d:14:5f:ba: dc:65:43:08:4f:18:c5:88:8c:b7:09:b9:7e:08:13:d6:5f:cb: 7a:dd:f1:ab:b0:36:c8:c0:c0:b4:d4:48:fe:02:43:4f:ae:d7: 9b:6b:1a:0c:04:44:f5:5c:74:7c:6e:d4:23:cb:ab:f1:47:5a: 05:87:90:11:73:07:de:7b:8e:c1:c6:99:a6:6e:2a:8f:72:a9: 60:6f:b8:fc:81:df:f6:7b:0c:a0:a4:20:8c:b0:65:2e:76:22: 38:56:2c:d3:a0:8c:8b:6f:88:d3:9d:24:dd:56:2e:a9:65:2a: f4:93:74:44:8d:11:79:ef:da:11:9d:4e:26:e8:5f:a5:d5:90: e8:f6:f1:5f:c6:3b:4a:c6:3f:e1:3a:b3:f9:a3:e8:5f:e2:af: f5:2b:c1:25:0f:fd:40:95:95:bf:77:c7:bb:e9:a5:e1:2c:71: 86:22:79:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU5QzExMTAvBgNVBAUTKDhDODA3MDU1MjUwMzA4MEI5NjcyMzRFREVDODBDMDFE M0RCOTZDRjYwHhcNMjQwNTAzMDE1NzE0WhcNMjQwNTEwMDE1NzE0WjAYMRYwFAYD VQQDEw02NjM0NDQ3YS00MjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+g4xk+jvvMBafSfur85YgXg1gh6YdIgbHv8iu/pMkxjnbxjo0a5XPeCNqWw XSfxqjMRgW8hLf3C9Efk1IbDjymh6ivB0l2Kl83uWhvhl2ypbTXTUR4+iuSJYmk4 plTrESUfsnwsunwSitcnQptor5qvtP0v/Bj563QUCCHKgJ0s70Hftr93EHDh6TBj NCtUY2n78+orVZGnkh3+qU3nJslnxY4TnysBIBtlgztnPRU8ujGQaAKc+QkcTt7j iB/UjJoYmd942xsBMJvhyNCbj2yV11vn/r43zL+Yxuhbg9Lw+RgkwOrNpvZTJDoW nQBfl70ntImrI+ii/Mx/vGqwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp2WQrO k0g08H3pur6CI9i2/l/MMB8GA1UdIwQYMBaAFIyAcFUlAwgLlnI07eyAwB09uWz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlDMS9DNUU4Nzk3ODAw QjIxMUVDODk2ODgzMkNDNEY5QUUwMi9qSUJ3VlNVRENBdVdjalR0N0lEQUhUMjVi UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pJQndWU1VEQ0F1V2NqVHQ3SURBSFQyNWJQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTlDMS9DNUU4Nzk3ODAwQjIxMUVDODk2ODgzMkNDNEY5QUUwMi9qSUJ3VlNVRENB dVdjalR0N0lEQUhUMjViUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7EsieIj6EYQe4tF5qpzE1NoBxRLDLkb7SPJ1orT+FNf/IBb++Lf7s bHs+w06RttoRJBtSKdbVAPE/vSN9Y3UHsxPj2a8/eY7Wd1K87+nDL/hnMwvmsj0U X7rcZUMITxjFiIy3Cbl+CBPWX8t63fGrsDbIwMC01Ej+AkNPrtebaxoMBET1XHR8 btQjy6vxR1oFh5ARcwfee47BxpmmbiqPcqlgb7j8gd/2ewygpCCMsGUudiI4VizT oIyLb4jTnSTdVi6pZSr0k3REjRF579oRnU4m6F+l1ZDo9vFfxjtKxj/hOrP5o+hf 4q/1K8ElD/1AlZW/d8e76aXhLHGGInlq -----END CERTIFICATE-----Generated at Fri May 3 04:45:25 2024 by rpki-client on console-fra.rpki-client.org