$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json) Hash identifier: onkoxY2KrSAujmmGt06ZOJIsGvBLPNuRKVVufPIrHXE= Subject key identifier: 91:39:2C:F8:B6:08:08:0D:23:F3:81:50:F5:7A:A6:F8:07:D3:7C:B6 Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft Manifest number: 4B Signing time: Fri 17 May 2024 08:10:16 +0000 Manifest this update: Fri 17 May 2024 08:10:15 +0000 Manifest next update: Fri 24 May 2024 08:10:15 +0000 Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: CjCGHNUmAhE4tNn4xYr/2OHgUS9yRFpuFF94LCx/6Gw=) 2: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: aRUyVqIfJTn8kVpUhz1W3Sr47MqMAHCDZi0HqrTI2S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: May 17 08:10:15 2024 GMT Not After : May 24 08:10:15 2024 GMT Subject: CN=664710e8-6860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:12:10:a2:21:c0:5e:6c:e8:da:26:21:01:75: c0:56:af:c4:78:a8:ac:48:2c:db:52:6c:a5:1b:a7: 3f:7f:3b:c0:4f:b9:11:23:e5:88:79:ee:c8:87:3f: dc:25:63:de:f3:67:75:44:07:2a:62:43:50:88:c3: 6c:74:38:d9:b7:ac:24:02:01:22:ee:ab:47:c6:e1: 2c:a5:b2:53:b9:6f:8d:88:04:47:6a:68:4c:55:ea: 3d:f5:f8:49:03:e7:bf:4b:e7:7d:d5:76:f1:cf:5b: bc:db:75:88:38:d8:8b:02:f3:40:e9:0e:1a:11:84: 92:dc:65:76:d1:3e:e4:af:fb:42:85:83:47:4c:10: 9f:4f:e0:3f:31:b1:7a:7f:43:31:45:92:89:d2:ea: 6c:e7:6f:a8:84:62:ce:b1:8f:8e:40:0f:23:a7:48: 89:1b:38:6c:15:35:72:24:ed:f0:aa:74:fc:77:9b: e2:d9:dd:f5:40:f2:47:c3:44:d1:0b:65:15:9e:3f: d0:88:d3:12:2f:e8:2a:d1:d0:57:2b:2e:3a:96:78: e9:db:65:00:53:e8:8c:61:91:00:1d:9a:5d:c0:af: ef:5f:24:5d:4d:00:cc:9d:2d:48:cd:a6:0f:d6:30: 65:12:36:16:cb:2c:bd:cb:13:cc:e5:d5:ff:43:67: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:39:2C:F8:B6:08:08:0D:23:F3:81:50:F5:7A:A6:F8:07:D3:7C:B6 X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:71:38:05:6d:ba:96:13:23:b2:de:42:62:4b:03:83:81:67: 2a:0e:db:6c:d3:e9:1a:06:22:6d:d3:05:b8:1a:c9:78:e9:fc: 43:01:4d:61:14:c4:7c:f0:06:c8:4a:24:1b:e4:47:b5:91:0a: 60:8a:23:a5:91:98:9d:d9:9a:03:57:88:27:a5:72:3d:4c:5d: dc:28:a4:06:12:c6:f1:74:fa:d1:5d:31:24:33:9e:22:9e:2c: be:ed:9e:f2:d8:30:35:f2:6d:8f:36:0e:ae:4f:6f:fb:e0:32: 6f:49:64:80:43:79:c0:84:f4:c7:d5:63:ef:06:15:31:4a:26: 3c:13:cd:05:9e:3a:33:67:a6:e7:15:bc:d6:6d:3a:7d:78:2c: 5a:89:67:9e:70:3e:b5:a3:eb:a1:eb:3e:12:44:19:d6:91:db: eb:50:fb:87:40:4f:1a:21:06:d0:25:1f:51:aa:f1:50:13:c3: 64:1f:f7:da:d7:72:c9:d9:64:3b:dd:7b:ca:6e:9f:6d:ae:bd: 2a:74:ed:27:4c:09:c9:ed:17:d1:f6:4a:1b:6c:c5:51:44:08: c6:51:0b:55:74:95:9c:c8:70:ec:f4:1a:3b:43:59:e9:6b:3c: 21:4e:45:c2:9a:e4:83:74:f1:9d:ea:9b:a9:a8:50:8e:b8:57: f6:53:83:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RTZENzExMC8GA1UEBRMoNzBDRDAyQjY2NDI0NzlBODc0NDYyNzE1NzA2RTZBQTlB ODlEQTJDOTAeFw0yNDA1MTcwODEwMTVaFw0yNDA1MjQwODEwMTVaMBgxFjAUBgNV BAMTDTY2NDcxMGU4LTY4NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfEhCiIcBebOjaJiEBdcBWr8R4qKxILNtSbKUbpz9/O8BPuREj5Yh57siHP9wl Y97zZ3VEBypiQ1CIw2x0ONm3rCQCASLuq0fG4SylslO5b42IBEdqaExV6j31+EkD 579L533VdvHPW7zbdYg42IsC80DpDhoRhJLcZXbRPuSv+0KFg0dMEJ9P4D8xsXp/ QzFFkonS6mznb6iEYs6xj45ADyOnSIkbOGwVNXIk7fCqdPx3m+LZ3fVA8kfDRNEL ZRWeP9CI0xIv6CrR0FcrLjqWeOnbZQBT6IxhkQAdml3Ar+9fJF1NAMydLUjNpg/W MGUSNhbLLL3LE8zl1f9DZ00BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkTks+LYI CA0j84FQ9Xqm+AfTfLYwHwYDVR0jBBgwFoAUcM0CtmQkeah0RicVcG5qqaidoskw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFNkQ3LzcxQTUxNTc0QUVG MjExRUVCMjkzQjQ4MEM0RjlBRTAyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9z ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY00wQ3RtUWtlYWgwUmljVmNHNXFxYWlkb3NrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF NkQ3LzcxQTUxNTc0QUVGMjExRUVCMjkzQjQ4MEM0RjlBRTAyL2NNMEN0bVFrZWFo MFJpY1ZjRzVxcWFpZG9zay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlxOAVtupYTI7LeQmJLA4OBZyoO22zT6RoGIm3TBbgayXjp/EMBTWEU xHzwBshKJBvkR7WRCmCKI6WRmJ3ZmgNXiCelcj1MXdwopAYSxvF0+tFdMSQzniKe LL7tnvLYMDXybY82Dq5Pb/vgMm9JZIBDecCE9MfVY+8GFTFKJjwTzQWeOjNnpucV vNZtOn14LFqJZ55wPrWj66HrPhJEGdaR2+tQ+4dATxohBtAlH1Gq8VATw2Qf99rX csnZZDvde8pun22uvSp07SdMCcntF9H2ShtsxVFECMZRC1V0lZzIcOz0GjtDWelr PCFORcKa5IN08Z3qm6moUI64V/ZTgxg= -----END CERTIFICATE-----Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org