$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft File: N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json) Hash identifier: ZWP5bsk1VMl18SSOuQMBhaLUjfWlkk5EMopeOBHljQ0= Subject key identifier: 05:D7:B4:4F:97:8E:B7:38:92:18:BD:E2:67:A5:B4:34:B5:18:86:83 Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C Certificate serial: 0D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft Manifest number: 0D1C Signing time: Wed 22 May 2024 18:46:59 +0000 Manifest this update: Wed 22 May 2024 18:46:59 +0000 Manifest next update: Wed 29 May 2024 18:46:59 +0000 Files and hashes: 1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: PGVoAXbcOo34rdlVnJ7r3uH3ACtakiXdQmkO9obDNDM=) 2: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: woJGchr3sms/3TKBOYfaJA98zIiFsx9zoHLLjklrxg4=) 3: 0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa (hash: xC+rsEZBpa06x2ovskS7diIy6ai6DQ/vSdDtj5lpXp8=) 4: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: FjV/7Jgy4MRnpL581ZM15MMaxaWvHQKjojVHtMPnsDg=) 5: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: WURUYtGrE36qaA+U3h7jPSYSVF0DMG2ykrYxAeCPNho=) 6: 2D6E9D74F5DA11EEA64D3F7DC4F9AE02.roa (hash: v45zKAz1jt5MNRizfUlzAeFDGJXQttTJA8xq1OWxPE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C Validity Not Before: May 22 18:46:59 2024 GMT Not After : May 29 18:46:59 2024 GMT Subject: CN=664e3da3-189e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:62:88:c3:86:8a:21:9e:0e:97:ea:b6:40: c7:62:84:36:f0:5c:4a:e0:5a:ea:0b:52:71:2e:fe: 8e:7c:cc:31:35:2d:f7:8f:dd:bd:a4:23:4b:60:62: 72:cf:82:4c:90:22:64:4f:df:1a:ba:77:04:21:1e: ba:22:02:b3:3c:78:e5:91:b8:e5:1b:44:98:14:e9: e0:69:d3:20:cf:8e:5f:46:e5:17:97:d8:aa:a8:9c: 2f:f9:61:ca:be:35:45:a0:92:e0:91:21:76:00:de: 24:63:6e:e3:1a:0a:4e:ee:c0:bc:2e:8e:09:7e:13: 9e:18:90:4a:41:5b:dc:0d:fa:86:e4:7e:24:96:a0: c5:bf:8d:87:07:f5:cb:48:5b:90:3b:fa:12:75:77: ce:fb:aa:1d:19:f3:9e:ea:41:f9:d2:35:78:1e:65: fd:2e:67:a9:b4:4b:e1:88:aa:76:1c:9c:1c:74:23: e0:0a:b5:eb:1d:7e:23:1f:be:99:12:00:7c:0c:7a: 6b:64:d0:2b:2b:20:dc:d4:84:67:58:49:2c:d8:92: b9:1d:3f:1d:72:cf:99:48:91:ba:e3:77:7c:6b:ed: 46:08:48:c1:6b:81:64:b1:9f:34:ac:55:5f:e2:1e: 7d:a9:b5:8f:c1:54:05:00:9d:4f:c7:bb:bf:5b:1b: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D7:B4:4F:97:8E:B7:38:92:18:BD:E2:67:A5:B4:34:B5:18:86:83 X509v3 Authority Key Identifier: keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1e:77:97:6c:bb:1c:1a:91:a1:94:7d:27:e3:a9:07:19:50: cf:16:a0:7b:53:b1:14:10:22:cc:42:f6:d5:a0:22:f7:5a:66: cf:82:cd:eb:fe:30:72:5c:0d:51:43:64:6a:79:16:1a:44:ed: 91:16:8c:2f:0a:4b:6a:c8:b3:3f:a1:74:2e:8e:eb:d1:c3:31: 4a:ef:32:6f:a5:a0:86:1e:4a:6f:f7:a1:d5:a5:a3:69:62:1a: 7c:4c:16:29:6b:b8:35:00:f3:7a:7c:10:91:b6:2a:7a:74:b5: 8a:7e:dc:dc:c7:e3:2e:7f:21:26:20:6a:6c:bc:49:10:f0:35: b1:e0:21:6d:39:8e:61:9d:fd:13:ef:bf:66:8a:70:48:f8:88: 52:de:ba:81:30:0b:f2:3f:39:e3:56:e1:ea:04:1c:7a:bb:27: 80:d0:5a:5f:ef:1e:bb:ef:36:d3:65:bb:04:5d:21:c9:95:25: da:d8:c2:c5:ed:10:b5:4f:40:ce:5f:a2:d6:eb:3a:2d:6b:e5: 9a:32:79:3e:44:2d:e3:37:7c:f8:1e:79:bb:92:0b:54:7a:1f: 1d:8e:4d:df:5f:47:d9:49:f8:25:fa:42:77:3e:12:39:5c:e1: 67:63:6e:8a:ab:16:cf:52:b3:a7:52:6f:c6:ee:1a:5b:2e:16: 55:04:cb:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA3NDExMTAvBgNVBAUTKDM3RUFFREE0MjQyRDUwOTYyQjg3QjRBMjA3QUM0QzM0 NEIzMzA2MEMwHhcNMjQwNTIyMTg0NjU5WhcNMjQwNTI5MTg0NjU5WjAYMRYwFAYD VQQDEw02NjRlM2RhMy0xODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz9iiMOGiiGeDpfqtkDHYoQ28FxK4FrqC1JxLv6OfMwxNS33j929pCNLYGJy z4JMkCJkT98auncEIR66IgKzPHjlkbjlG0SYFOngadMgz45fRuUXl9iqqJwv+WHK vjVFoJLgkSF2AN4kY27jGgpO7sC8Lo4JfhOeGJBKQVvcDfqG5H4klqDFv42HB/XL SFuQO/oSdXfO+6odGfOe6kH50jV4HmX9LmeptEvhiKp2HJwcdCPgCrXrHX4jH76Z EgB8DHprZNArKyDc1IRnWEks2JK5HT8dcs+ZSJG643d8a+1GCEjBa4FksZ80rFVf 4h59qbWPwVQFAJ1Px7u/WxufHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXXtE+X jrc4khi94meltDS1GIaDMB8GA1UdIwQYMBaAFDfq7aQkLVCWK4e0ogesTDRLMwYM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDc0MS83N0M5MTY4RUJE MTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVKWXJoN1NpQjZ4TU5Fc3pC Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tcnRwQ1F0VUpZcmg3U2lCNnhNTkVzekJndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDc0MS83N0M5MTY4RUJEMTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVK WXJoN1NpQjZ4TU5Fc3pCZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBHneXbLscGpGhlH0n46kHGVDPFqB7U7EUECLMQvbVoCL3WmbPgs3r /jByXA1RQ2RqeRYaRO2RFowvCktqyLM/oXQujuvRwzFK7zJvpaCGHkpv96HVpaNp Yhp8TBYpa7g1APN6fBCRtip6dLWKftzcx+MufyEmIGpsvEkQ8DWx4CFtOY5hnf0T 779minBI+IhS3rqBMAvyPznjVuHqBBx6uyeA0Fpf7x677zbTZbsEXSHJlSXa2MLF 7RC1T0DOX6LW6zota+WaMnk+RC3jN3z4Hnm7kgtUeh8djk3fX0fZSfgl+kJ3PhI5 XOFnY26KqxbPUrOnUm/G7hpbLhZVBMv/ -----END CERTIFICATE-----Generated at Wed May 22 20:42:51 2024 by rpki-client on console-fra.rpki-client.org