$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft File: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json) Hash identifier: oIokSHg2jNTtZOLIzwYw7ycIAnkc/bdg7HOXh/JVZoo= Subject key identifier: 8E:2B:6A:93:DC:46:76:4C:5E:27:C7:E6:AB:17:5E:CC:1C:D0:D0:82 Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 Certificate issuer: /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft Manifest number: 0718 Signing time: Thu 02 May 2024 23:42:58 +0000 Manifest this update: Thu 02 May 2024 23:42:57 +0000 Manifest next update: Thu 09 May 2024 23:42:57 +0000 Files and hashes: 1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: PhwdMxJBm//9EmO67E6k1EyAeakdjxPXkl2p8K1Z9Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Validity Not Before: May 2 23:42:57 2024 GMT Not After : May 9 23:42:57 2024 GMT Subject: CN=66342501-c940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:77:f7:4c:76:19:34:98:af:fe:b1:b3:f9:68: 96:5d:13:b4:13:34:68:fc:c2:4e:4f:c6:7e:76:85: ea:b9:df:aa:9a:ee:46:19:48:6d:89:da:2d:71:27: 3e:93:dd:4c:97:d3:2c:64:86:a5:85:90:48:e2:72: 78:0a:d7:c9:92:f5:c7:2b:9d:c3:32:ed:c4:4f:1e: 32:be:08:e0:48:11:db:56:1f:1e:20:05:84:7d:93: ad:07:c9:44:96:3b:9c:b2:e8:1a:35:2b:cd:12:d8: 64:79:32:05:91:50:22:5c:08:44:60:c5:d7:61:d4: a3:3d:af:fa:b2:c8:35:85:4b:25:98:95:60:61:3d: c7:8f:07:1f:3b:13:5c:71:a4:d0:a4:7a:97:c5:99: a0:bf:db:7a:4b:1d:5f:ca:80:b7:6d:7a:f9:38:1c: e2:42:aa:9d:59:22:15:46:7f:a2:0b:05:2f:90:f9: 21:cc:9c:ca:10:dc:65:df:27:69:be:2b:62:01:89: b1:b2:e5:7a:e8:11:3a:d2:1f:14:4a:70:4f:40:65: 21:53:64:89:a0:64:2d:b7:cb:a1:93:55:87:7f:72: 88:f3:5f:c8:27:8e:19:ba:d5:cf:7d:e6:fd:b8:34: 6e:e7:1d:4a:a3:0b:38:99:37:f4:89:f9:56:69:47: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2B:6A:93:DC:46:76:4C:5E:27:C7:E6:AB:17:5E:CC:1C:D0:D0:82 X509v3 Authority Key Identifier: keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:8b:f2:10:b6:9b:16:85:e4:9c:b7:40:10:9a:68:9b:be:19: 01:10:0b:3b:73:b8:6e:da:32:24:a5:f6:c2:66:74:bc:1b:36: c9:ae:31:8f:db:0c:bc:13:d5:7b:45:47:73:ac:3e:8e:6e:ae: 97:46:47:c5:80:fb:c9:08:58:5c:a4:9a:69:a4:9b:ab:11:ae: a3:2a:a0:32:c4:73:28:e8:83:1c:53:c0:3e:ac:b3:e8:8e:39: 79:23:dd:ba:d6:49:fa:7a:e1:f7:8f:3c:27:5a:29:96:85:88: ba:60:d7:9d:a5:06:67:be:4b:48:03:af:75:42:de:78:33:ff: 66:46:f3:23:bc:86:f1:ac:d7:47:e7:b1:f1:9d:4d:cb:16:e1: d8:a3:89:18:42:e7:4c:96:54:36:66:c6:4a:bd:36:50:90:9f: 7f:e2:4c:31:57:cc:11:ac:d7:e5:7e:f8:ca:c6:fc:7e:a3:b2: aa:b5:6a:56:72:35:50:81:a7:5e:a0:b9:2c:50:5d:f2:9f:f0: 30:25:a5:b6:8a:42:b9:42:4c:23:3f:bc:a3:55:02:0b:bf:48: 65:a7:1e:85:e3:4a:2e:a2:6f:6e:0e:ac:7f:1a:d1:ff:b8:8a: 18:0b:4e:12:84:b8:c2:0b:c8:f5:bf:11:24:19:8d:a0:82:4d: de:da:89:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1 QTI1OEExNTIwHhcNMjQwNTAyMjM0MjU3WhcNMjQwNTA5MjM0MjU3WjAYMRYwFAYD VQQDEw02NjM0MjUwMS1jOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Xf3THYZNJiv/rGz+WiWXRO0EzRo/MJOT8Z+doXqud+qmu5GGUhtidotcSc+ k91Ml9MsZIalhZBI4nJ4CtfJkvXHK53DMu3ETx4yvgjgSBHbVh8eIAWEfZOtB8lE ljucsugaNSvNEthkeTIFkVAiXAhEYMXXYdSjPa/6ssg1hUslmJVgYT3HjwcfOxNc caTQpHqXxZmgv9t6Sx1fyoC3bXr5OBziQqqdWSIVRn+iCwUvkPkhzJzKENxl3ydp vitiAYmxsuV66BE60h8USnBPQGUhU2SJoGQtt8uhk1WHf3KI81/IJ44ZutXPfeb9 uDRu5x1Kows4mTf0iflWaUe1aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4rapPc RnZMXifH5qsXXswc0NCCMB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV bzB4d1FOcTBkY05hSllvVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHi/IQtpsWheSct0AQmmibvhkBEAs7c7hu2jIkpfbCZnS8GzbJrjGP 2wy8E9V7RUdzrD6Obq6XRkfFgPvJCFhcpJpppJurEa6jKqAyxHMo6IMcU8A+rLPo jjl5I9261kn6euH3jzwnWimWhYi6YNedpQZnvktIA691Qt54M/9mRvMjvIbxrNdH 57HxnU3LFuHYo4kYQudMllQ2ZsZKvTZQkJ9/4kwxV8wRrNflfvjKxvx+o7KqtWpW cjVQgadeoLksUF3yn/AwJaW2ikK5QkwjP7yjVQILv0hlpx6F40ouom9uDqx/GtH/ uIoYC04ShLjCC8j1vxEkGY2ggk3e2onH -----END CERTIFICATE-----Generated at Fri May 3 00:48:30 2024 by rpki-client on console-ams.rpki-client.org