$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: EUhn0m44VDKjwZjEmENtVRG2r1W2ICn+QuYY8L2C6FE= Subject key identifier: 1D:92:92:AB:C2:4D:3E:23:BB:D6:33:F2:F8:14:ED:24:B2:19:7E:55 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 02C8 Signing time: Tue 07 May 2024 03:26:41 +0000 Manifest this update: Tue 07 May 2024 03:26:41 +0000 Manifest next update: Tue 14 May 2024 03:26:41 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: lxdWE8IKfpTmfUWi6txWNNNJttT8FD0btTQArWPYLw8=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: Lg3+SpKwH3XIoG0VtCiPQf1LpTYqMFWp6MKCeL/5ahI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: May 7 03:26:41 2024 GMT Not After : May 14 03:26:41 2024 GMT Subject: CN=66399f71-1310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:ab:de:ce:c6:de:3a:ab:50:c7:98:b6:7b: 51:db:c1:6b:21:bd:22:bf:c9:69:b1:ab:2c:f1:3f: 3d:6e:91:9f:fd:1d:6c:24:0f:e8:34:d3:a0:54:2b: 92:86:75:ee:da:f6:1a:4c:d2:a7:ab:4e:0e:61:34: 37:0a:c7:8e:26:01:f4:b3:7c:05:ca:ed:dc:ba:f3: ea:5c:d7:cb:d5:72:2c:0a:33:4c:8a:e0:bf:fc:0d: a3:2e:c1:ad:86:3f:33:20:9c:d2:7d:7c:86:35:2c: c7:34:e5:45:fb:cf:2d:cb:7e:f8:2f:50:35:e7:96: d4:24:a6:33:54:c8:2e:2c:f7:6a:5e:4d:e2:51:3a: 84:fc:9a:c8:69:40:00:e6:67:96:86:5c:01:b6:1c: 60:74:37:bc:fc:23:3d:1b:71:e9:de:b3:2e:18:64: 6b:eb:c0:7f:10:8a:41:43:cb:d6:90:6f:fa:7e:bd: 10:5e:2b:f2:c1:82:75:cb:dc:78:6b:b5:6a:49:26: 2a:ef:51:c8:d4:e3:4d:be:d4:7a:c5:ee:e8:28:78: 31:57:34:fa:96:a6:c0:9a:97:a6:21:be:12:3b:e1: 77:0c:c0:5d:ba:00:c2:6f:d5:11:ad:be:61:b4:5a: 96:3f:57:4a:4a:0f:ce:d9:75:23:6d:b6:94:ea:3f: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:92:AB:C2:4D:3E:23:BB:D6:33:F2:F8:14:ED:24:B2:19:7E:55 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:24:e0:46:c0:6f:16:e3:f5:d9:d4:51:39:66:16:42:8e:2f: 29:54:15:0b:e6:a8:ef:79:05:6b:fb:b3:19:25:3a:43:c5:d2: 2e:4b:5e:51:02:4e:27:e8:f2:83:60:1e:3a:b2:49:d6:d6:c2: 9f:3e:92:55:5f:56:ec:25:a6:84:68:4c:f2:42:27:04:cc:c2: 1a:82:46:be:3f:4f:55:b8:e0:f3:79:ee:a2:65:3d:e4:75:be: 0e:20:36:46:e2:61:6b:df:e6:78:b1:21:a7:ed:55:d5:ce:e7: 73:26:6b:3c:ad:86:1a:f4:56:0c:22:6d:f0:76:1d:4c:26:f5: f2:a3:cc:fb:1d:0f:3d:4f:24:51:e8:53:25:af:77:33:e0:44: 92:4f:e5:90:8e:e5:18:40:a0:f9:ec:06:f3:6c:23:30:11:40: af:00:7c:3e:e5:67:84:5d:9c:13:18:93:b4:44:1c:77:f3:c0: 18:18:93:74:1e:d2:61:36:7d:4e:fa:9f:88:c5:82:7d:4b:74: 4a:53:8a:e9:9d:56:1b:6f:21:26:0e:d0:66:e8:9c:79:b7:e1: 4b:77:a3:cc:8e:e9:8a:df:85:0b:1c:86:a5:37:fd:0a:58:3a: 63:96:53:8b:83:c2:2f:67:78:f8:55:9c:be:f0:8d:2c:83:38: ae:0c:03:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjQwNTA3MDMyNjQxWhcNMjQwNTE0MDMyNjQxWjAYMRYwFAYD VQQDEw02NjM5OWY3MS0xMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjar3s7G3jqrUMeYtntR28FrIb0iv8lpsass8T89bpGf/R1sJA/oNNOgVCuS hnXu2vYaTNKnq04OYTQ3CseOJgH0s3wFyu3cuvPqXNfL1XIsCjNMiuC//A2jLsGt hj8zIJzSfXyGNSzHNOVF+88ty374L1A155bUJKYzVMguLPdqXk3iUTqE/JrIaUAA 5meWhlwBthxgdDe8/CM9G3Hp3rMuGGRr68B/EIpBQ8vWkG/6fr0QXivywYJ1y9x4 a7VqSSYq71HI1ONNvtR6xe7oKHgxVzT6lqbAmpemIb4SO+F3DMBdugDCb9URrb5h tFqWP1dKSg/O2XUjbbaU6j/wdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2SkqvC TT4ju9Yz8vgU7SSyGX5VMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHJOBGwG8W4/XZ1FE5ZhZCji8pVBUL5qjveQVr+7MZJTpDxdIuS15R Ak4n6PKDYB46sknW1sKfPpJVX1bsJaaEaEzyQicEzMIagka+P09VuODzee6iZT3k db4OIDZG4mFr3+Z4sSGn7VXVzudzJms8rYYa9FYMIm3wdh1MJvXyo8z7HQ89TyRR 6FMlr3cz4ESST+WQjuUYQKD57AbzbCMwEUCvAHw+5WeEXZwTGJO0RBx388AYGJN0 HtJhNn1O+p+IxYJ9S3RKU4rpnVYbbyEmDtBm6Jx5t+FLd6PMjumK34ULHIalN/0K WDpjllOLg8IvZ3j4VZy+8I0sgziuDANM -----END CERTIFICATE-----Generated at Tue May 7 04:34:52 2024 by rpki-client on console-fra.rpki-client.org