$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: j273ZZBHke0bZBXtH5TBBEWMTM3gG/iqguBoTLU5xmA= Subject key identifier: 92:35:0C:2B:1E:43:6A:BE:C1:91:3B:AE:B0:0E:5E:CD:D8:C3:5C:8E Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0CA9 Signing time: Tue 30 Apr 2024 19:08:33 +0000 Manifest this update: Tue 30 Apr 2024 19:08:33 +0000 Manifest next update: Tue 07 May 2024 19:08:33 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: PnuBNyhqbx0RwQOZg+/Z/NHkn0keJRZBXC3Ge9iYVpI=) 2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: Cu6hCTIiriLRL3AdNLUgvpmGVO8zmcdh4GOgG+jh7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Apr 30 19:08:33 2024 GMT Not After : May 7 19:08:33 2024 GMT Subject: CN=663141b1-ba95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:91:94:11:87:a6:b9:51:75:12:5c:eb:e5: e8:e3:a0:94:62:00:7d:78:71:7e:71:c9:f5:33:55: d8:62:04:2b:b4:33:87:95:82:cd:59:40:f6:a0:df: b2:a5:5f:fb:d1:9c:32:45:59:6c:fb:e3:f6:8b:ff: e9:a5:4c:99:58:42:da:67:21:15:e9:c8:17:20:91: fe:05:b2:b9:ca:b8:6e:c6:36:ee:fc:12:3e:f9:a0: ac:5f:a9:ce:cd:91:00:6e:02:51:a0:0f:c7:c5:c3: 41:4b:c7:62:9e:70:79:51:b9:71:73:e8:4d:8d:89: 8e:2b:b5:7c:85:a3:3f:c2:74:c5:e6:0b:0b:67:ab: ff:40:11:fe:91:40:8e:21:e7:f8:00:a4:2c:01:6b: 06:2c:1d:43:c2:f0:bb:5c:b1:be:8f:4e:d5:6b:a4: 64:be:39:3c:6a:4d:ce:7d:ae:ca:5a:b3:a0:f9:2a: 66:bf:61:ca:0f:c7:da:b0:75:3b:b2:e2:f1:e8:92: 31:01:a1:d9:61:1e:a5:e8:8d:ad:22:27:33:84:c2: 76:c8:c0:95:18:c2:e3:8f:8f:07:67:49:55:b5:58: ce:cd:d1:73:0b:32:45:99:a5:4d:e3:6a:68:84:cd: 1e:48:f5:38:8d:5c:db:3f:ed:4c:16:d6:6e:44:60: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:35:0C:2B:1E:43:6A:BE:C1:91:3B:AE:B0:0E:5E:CD:D8:C3:5C:8E X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:00:cb:c0:d4:25:93:74:77:71:4c:8d:88:80:d8:1f:2f:61: 34:09:de:c3:8a:1d:d9:c5:2f:80:fb:96:38:f8:79:19:36:72: a9:7d:6f:42:9d:a4:bd:7c:58:85:6d:db:63:4d:e3:31:9c:e2: 1e:71:0f:0a:ae:4c:b1:02:cc:d0:da:ee:f8:75:1a:23:1c:31: 6c:b4:ba:75:09:91:f6:9c:da:07:d2:3b:d4:cd:88:49:6c:f7: 5e:27:54:6b:cf:75:ba:85:4f:b3:7f:1b:8c:02:ce:4c:72:3d: 5b:d6:74:54:8e:e6:36:3e:8d:18:5f:aa:89:aa:fe:c3:bd:9a: c6:e0:83:1e:7b:2c:d2:99:fe:12:26:ac:e6:2f:ec:51:46:60: 4f:62:f4:c4:3c:84:83:87:9f:71:22:b9:1d:2f:4d:4f:c4:90: d3:a9:e8:d3:13:0c:f0:a8:6b:92:8a:a4:6c:45:5f:02:15:2f: 19:9d:b6:f5:c7:64:b5:b1:c6:f1:9d:42:70:13:48:bc:97:a1: 65:39:02:44:f0:46:c7:33:72:64:b0:bf:d4:f1:45:98:56:4b: 69:d4:c8:61:0b:23:dd:c8:b1:ba:62:9c:2d:f5:8e:75:35:3e: 84:1e:3a:d4:93:9b:38:a1:1b:1e:52:f5:81:05:39:bd:9f:3a: eb:6e:6f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjQwNDMwMTkwODMzWhcNMjQwNTA3MTkwODMzWjAYMRYwFAYD VQQDEw02NjMxNDFiMS1iYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEWRlBGHprlRdRJc6+Xo46CUYgB9eHF+ccn1M1XYYgQrtDOHlYLNWUD2oN+y pV/70ZwyRVls++P2i//ppUyZWELaZyEV6cgXIJH+BbK5yrhuxjbu/BI++aCsX6nO zZEAbgJRoA/HxcNBS8dinnB5Ublxc+hNjYmOK7V8haM/wnTF5gsLZ6v/QBH+kUCO Ief4AKQsAWsGLB1DwvC7XLG+j07Va6Rkvjk8ak3Ofa7KWrOg+Spmv2HKD8fasHU7 suLx6JIxAaHZYR6l6I2tIiczhMJ2yMCVGMLjj48HZ0lVtVjOzdFzCzJFmaVN42po hM0eSPU4jVzbP+1MFtZuRGDObwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI1DCse Q2q+wZE7rrAOXs3Yw1yOMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARAMvA1CWTdHdxTI2IgNgfL2E0Cd7Dih3ZxS+A+5Y4+HkZNnKpfW9C naS9fFiFbdtjTeMxnOIecQ8KrkyxAszQ2u74dRojHDFstLp1CZH2nNoH0jvUzYhJ bPdeJ1Rrz3W6hU+zfxuMAs5Mcj1b1nRUjuY2Po0YX6qJqv7DvZrG4IMeeyzSmf4S JqzmL+xRRmBPYvTEPISDh59xIrkdL01PxJDTqejTEwzwqGuSiqRsRV8CFS8Znbb1 x2S1scbxnUJwE0i8l6FlOQJE8EbHM3JksL/U8UWYVktp1MhhCyPdyLG6Ypwt9Y51 NT6EHjrUk5s4oRseUvWBBTm9nzrrbm/w -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:04 2024 by rpki-client on console-fra.rpki-client.org