$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: i7WIVNv14lW1ff8RdWeXlJe13HUi38exQw42fimdmFM= Subject key identifier: 2D:4A:87:CF:5C:67:DC:1F:9D:7E:81:3F:AE:5D:24:63:6D:B8:F7:03 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 50 Signing time: Wed 15 May 2024 08:02:52 +0000 Manifest this update: Wed 15 May 2024 08:02:51 +0000 Manifest next update: Wed 22 May 2024 08:02:51 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: UxBgOWUcfWJgJ7jNigpG8ZvWZpnTT6PThulTvkpYK/0=) 2: FB4C89109B6011EEBD830E11C4F9AE02.roa (hash: a5qFtFKdSxdVlGp8/0f8359/gZ9YcaM4vKpWk0sgGCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: May 15 08:02:51 2024 GMT Not After : May 22 08:02:51 2024 GMT Subject: CN=66446c2c-cd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:9e:79:3a:08:0a:86:f7:de:da:79:25:fa: e3:61:d9:7b:aa:a6:1d:05:18:ca:c0:c5:af:52:81: ac:5a:f0:50:7e:df:1b:b0:be:48:e7:e2:8f:47:05: f6:ef:7d:da:c6:3f:7e:c6:95:8e:58:f9:1a:fb:4f: 92:b7:aa:5a:b1:3e:6e:19:9b:07:66:ff:25:b2:aa: 32:61:31:01:9d:c4:b1:51:64:a2:f6:01:3e:18:2a: c2:99:13:84:fd:a3:8d:71:0d:cc:40:4b:be:22:54: c2:7b:0b:b5:80:24:e3:02:65:e6:45:2a:2a:fc:25: 92:6a:f9:d1:fd:f7:82:d6:8e:54:44:28:96:0a:a1: 5d:de:fe:21:9e:a6:fd:e2:e3:c3:30:5f:d7:fe:56: e7:ec:63:24:5e:83:0e:4d:d2:9a:99:86:74:ef:8f: 26:91:1f:f5:eb:45:71:81:c3:9e:a2:7d:5e:cb:50: 54:12:ea:a5:04:03:d0:6a:b7:e0:23:62:c7:f7:1f: 52:0e:ce:cb:b6:30:d2:77:ec:72:51:bb:4a:bc:11: 94:58:f3:67:0c:c3:4c:1f:c0:3c:98:5f:e5:25:9c: c3:78:a7:7e:2c:bd:53:98:ba:fb:87:7f:f8:fe:02: 9a:9b:0a:de:67:3c:8a:5e:05:1c:96:f8:50:d6:fd: 41:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:87:CF:5C:67:DC:1F:9D:7E:81:3F:AE:5D:24:63:6D:B8:F7:03 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cc:60:06:3b:97:a5:d0:cf:6b:40:dd:36:54:fb:9f:d7:df: c4:75:f3:ae:c5:9e:eb:9d:67:cb:6f:c5:1b:ae:45:0b:d8:44: 73:e9:76:4a:8a:f4:c0:dc:77:48:fb:bd:3d:19:fe:ff:4c:79: 12:b1:6c:ff:fc:9b:e8:67:a9:ee:9c:1f:44:a7:bf:11:2f:02: 59:82:62:11:83:e4:f4:30:23:dc:e8:c3:6f:cd:97:5c:89:da: 65:7b:82:e1:ec:82:2b:73:38:bd:06:29:a7:3e:82:d3:60:15: 12:f4:ca:e3:d5:6b:90:4f:7b:82:e0:ec:0a:eb:9f:36:47:40: 8c:91:70:5c:93:bb:a9:f5:39:a2:2b:01:36:b7:f6:17:30:24: d4:2c:84:85:d2:a7:df:2f:d2:28:79:3f:85:2d:e7:65:9c:23: 4a:9f:56:18:c1:82:fb:cb:5d:15:bc:b6:b8:d7:de:0f:86:ce: c0:c5:b6:94:19:6e:d1:65:5c:f8:14:a2:f2:37:8f:a0:2b:c3: 0b:1c:07:56:f8:ac:d7:c0:82:91:76:ad:b8:42:0a:84:7a:5e: 38:19:bb:0f:9b:cd:87:3a:cf:cf:2f:f3:f0:eb:e1:68:1d:8e: f9:37:03:ef:c4:1d:c1:0f:f6:9a:bf:75:07:d9:f0:cd:e5:5a: 59:47:de:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTRBMTExMC8GA1UEBRMoMjQ3QjVENkU2MkU0QTQ5RTlERjREQzI0QzMxRUNBNkVE N0E0M0IyODAeFw0yNDA1MTUwODAyNTFaFw0yNDA1MjIwODAyNTFaMBgxFjAUBgNV BAMTDTY2NDQ2YzJjLWNkMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9dp55OggKhvfe2nkl+uNh2Xuqph0FGMrAxa9Sgaxa8FB+3xuwvkjn4o9HBfbv fdrGP37GlY5Y+Rr7T5K3qlqxPm4Zmwdm/yWyqjJhMQGdxLFRZKL2AT4YKsKZE4T9 o41xDcxAS74iVMJ7C7WAJOMCZeZFKir8JZJq+dH994LWjlREKJYKoV3e/iGepv3i 48MwX9f+VufsYyRegw5N0pqZhnTvjyaRH/XrRXGBw56ifV7LUFQS6qUEA9Bqt+Aj Ysf3H1IOzsu2MNJ37HJRu0q8EZRY82cMw0wfwDyYX+UlnMN4p34svVOYuvuHf/j+ ApqbCt5nPIpeBRyW+FDW/UFVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULUqHz1xn 3B+dfoE/rl0kY2249wMwHwYDVR0jBBgwFoAUJHtdbmLkpJ6d9Nwkwx7KbtekOygw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NEExLzc0MDJEOEQ4OUI2 MDExRUU4NkVFMUQxMEM0RjlBRTAyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkh0ZGJtTGtwSjZkOU53a3d4N0tidGVrT3lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NEExLzc0MDJEOEQ4OUI2MDExRUU4NkVFMUQxMEM0RjlBRTAyL0pIdGRibUxrcEo2 ZDlOd2t3eDdLYnRla095Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfMYAY7l6XQz2tA3TZU+5/X38R1867FnuudZ8tvxRuuRQvYRHPpdkqK 9MDcd0j7vT0Z/v9MeRKxbP/8m+hnqe6cH0SnvxEvAlmCYhGD5PQwI9zow2/Nl1yJ 2mV7guHsgitzOL0GKac+gtNgFRL0yuPVa5BPe4Lg7ArrnzZHQIyRcFyTu6n1OaIr ATa39hcwJNQshIXSp98v0ih5P4Ut52WcI0qfVhjBgvvLXRW8trjX3g+GzsDFtpQZ btFlXPgUovI3j6ArwwscB1b4rNfAgpF2rbhCCoR6XjgZuw+bzYc6z88v8/Dr4Wgd jvk3A+/EHcEP9pq/dQfZ8M3lWllH3uA= -----END CERTIFICATE-----Generated at Wed May 15 09:28:15 2024 by rpki-client on console-fra.rpki-client.org