$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft File: mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json) Hash identifier: qo0axAW8VOExNNsw++YjMiwpg2j6DMhzmjbCU8IWY14= Subject key identifier: 66:47:BE:1E:B2:A4:3A:66:FD:5A:A6:DA:66:18:43:AC:DA:7E:5A:41 Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07 Certificate issuer: /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807 Certificate serial: 1671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft Manifest number: 1DFC Signing time: Thu 02 May 2024 17:12:10 +0000 Manifest this update: Thu 02 May 2024 17:12:09 +0000 Manifest next update: Thu 09 May 2024 17:12:09 +0000 Files and hashes: 1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: N2PGtbtJodm6zA/TKHzHrLbjbtLqvovVpqf33PHIpvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5745 (0x1671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807 Validity Not Before: May 2 17:12:09 2024 GMT Not After : May 9 17:12:09 2024 GMT Subject: CN=6633c96a-8061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:49:51:13:5e:62:b7:b9:46:d6:96:bd:e9: f1:ff:ca:e2:dd:26:2e:ef:1c:5c:69:71:af:a4:78: 2a:ba:81:9e:0c:b3:d8:df:8e:6d:c8:36:e3:c2:a7: 28:6f:ad:bd:38:ef:00:bf:8a:78:ea:64:30:c6:19: 83:ec:f6:95:3f:b6:f3:7b:90:f5:7b:ca:82:17:6e: 5f:4c:db:5e:fa:4f:1c:00:73:ea:d3:aa:5b:23:53: 9c:4e:45:42:3b:db:b4:17:e9:42:cf:12:18:a8:3e: 4b:3c:19:24:f5:fe:98:fe:62:4d:91:78:96:85:34: 52:fd:0c:ce:fe:5b:70:ec:18:26:ce:12:66:35:b8: b0:8c:fc:08:23:55:4c:e0:03:64:29:53:28:4a:15: 75:83:2e:fa:5c:9c:0f:6d:20:13:28:07:1f:1d:43: e8:de:97:15:30:ff:6c:32:7b:8a:3a:95:22:e0:4d: 93:13:d5:90:a5:49:65:bc:90:43:a1:46:8f:8c:6d: 09:8d:46:db:4f:30:a2:1f:28:6b:18:6e:bd:1a:03: 24:c0:e5:49:50:93:4a:ba:cf:4b:6f:bf:0b:20:1d: ea:d0:fe:1a:f1:88:cc:ea:b1:74:8c:6f:ca:aa:a1: e6:67:49:78:2b:68:a6:2a:77:31:07:7e:a8:49:23: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:47:BE:1E:B2:A4:3A:66:FD:5A:A6:DA:66:18:43:AC:DA:7E:5A:41 X509v3 Authority Key Identifier: keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:10:96:47:68:8c:22:cc:c8:33:45:e2:7d:b5:ee:d5:5f:b7: 21:fe:52:0c:5a:3f:6b:4a:13:e8:32:99:96:16:92:b7:e0:69: be:f3:03:d3:bf:dc:4c:0e:24:4b:dd:c8:f2:1f:cf:09:03:64: fa:28:e9:59:35:5d:be:5e:32:58:59:b8:07:c4:a9:1b:69:ce: 18:30:31:2d:40:81:8a:75:ab:d3:6c:b5:12:98:55:01:9a:c1: 0c:d1:3b:27:a3:d7:cd:bd:f8:33:b2:3b:4b:67:f1:b0:f9:6d: 16:f7:31:c7:be:20:f9:ba:47:54:cf:62:59:5b:ab:54:3d:9e: 86:78:87:f4:73:b4:ed:19:9d:12:17:1a:c2:3e:8c:f5:14:38: e7:8c:9e:55:a8:1f:02:84:31:c3:7d:e7:8f:7b:75:92:43:8a: bc:17:55:8b:8c:20:ff:6a:ed:b5:d7:d9:ef:81:e8:c1:2e:5b: 41:39:65:0c:63:5c:2b:c9:e2:b0:a5:a0:c2:f8:4b:fa:ff:c3: 79:15:84:f3:7c:00:7b:a3:5b:9b:14:15:e2:f7:08:3a:17:2f: b8:42:12:10:ac:69:f6:9a:69:70:40:55:9c:54:71:90:e5:42: 68:e1:e8:02:02:58:6b:27:82:2e:76:88:1d:97:1a:39:ba:01: 2e:11:ae:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDk5ODU5QjFFRjAyMTRCQjlGQ0U4RTVCRjE1MjZGM0JE MTFFQzI4MDcwHhcNMjQwNTAyMTcxMjA5WhcNMjQwNTA5MTcxMjA5WjAYMRYwFAYD VQQDEw02NjMzYzk2YS04MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY1JURNeYre5RtaWvenx/8ri3SYu7xxcaXGvpHgquoGeDLPY345tyDbjwqco b629OO8Av4p46mQwxhmD7PaVP7bze5D1e8qCF25fTNte+k8cAHPq06pbI1OcTkVC O9u0F+lCzxIYqD5LPBkk9f6Y/mJNkXiWhTRS/QzO/ltw7BgmzhJmNbiwjPwII1VM 4ANkKVMoShV1gy76XJwPbSATKAcfHUPo3pcVMP9sMnuKOpUi4E2TE9WQpUllvJBD oUaPjG0JjUbbTzCiHyhrGG69GgMkwOVJUJNKus9Lb78LIB3q0P4a8YjM6rF0jG/K qqHmZ0l4K2imKncxB36oSSMYxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZHvh6y pDpm/Vqm2mYYQ6zaflpBMB8GA1UdIwQYMBaAFJmFmx7wIUu5/OjlvxUm870R7CgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3bjg2T1dfRlNienZSSHNL QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ZV2JIdkFoUzduODZPV19GU2J6dlJIc0tBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3 bjg2T1dfRlNienZSSHNLQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzEJZHaIwizMgzReJ9te7VX7ch/lIMWj9rShPoMpmWFpK34Gm+8wPT v9xMDiRL3cjyH88JA2T6KOlZNV2+XjJYWbgHxKkbac4YMDEtQIGKdavTbLUSmFUB msEM0Tsno9fNvfgzsjtLZ/Gw+W0W9zHHviD5ukdUz2JZW6tUPZ6GeIf0c7TtGZ0S FxrCPoz1FDjnjJ5VqB8ChDHDfeePe3WSQ4q8F1WLjCD/au2119nvgejBLltBOWUM Y1wryeKwpaDC+Ev6/8N5FYTzfAB7o1ubFBXi9wg6Fy+4QhIQrGn2mmlwQFWcVHGQ 5UJo4egCAlhrJ4Iudogdlxo5ugEuEa5F -----END CERTIFICATE-----Generated at Thu May 2 20:50:35 2024 by rpki-client on console-fra.rpki-client.org