$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: 3M9xPv1NgE2K4TvCATXw59u7h3aNSvyJGKUU9p6CRME= Subject key identifier: 1E:02:A1:D7:B2:46:90:51:B9:58:F5:14:2E:23:BE:DD:F5:85:66:A8 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 0845 Signing time: Thu 16 May 2024 21:58:40 +0000 Manifest this update: Thu 16 May 2024 21:58:39 +0000 Manifest next update: Thu 23 May 2024 21:58:39 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: d3emZZ0cC2eYj6BiOUUHxQetlCkm5xp0U5ogAWRIpiQ=) 2: F1F41742F91711EEB4D4960FC4F9AE02.roa (hash: 4Wx5BAzgU3ePTAdMo6bGkUuV7+XCauHDkc2tE7IrGq8=) 3: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: Ch4IwynilG9jx0Sx/quBuThGvbd1Qgt6Rhk6sRSCvCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: May 16 21:58:39 2024 GMT Not After : May 23 21:58:39 2024 GMT Subject: CN=66468190-b1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:6b:d2:f6:97:3f:ea:02:f7:04:1a:42:ec: 2e:3d:c0:da:38:e7:d9:fa:bc:23:42:e2:d2:6a:33: d8:23:a6:a8:cc:28:19:51:5a:31:a1:7b:cc:b4:e4: 5e:76:d8:4f:85:27:60:41:7b:50:e9:de:11:92:d3: 75:a8:a8:b8:39:5f:5d:b9:78:1c:ea:93:35:73:bc: b8:63:ea:e7:57:68:1a:02:48:58:99:55:68:72:60: a5:7d:cd:09:dc:a0:e4:30:93:7e:15:be:7c:54:16: 9b:b4:55:4f:91:44:7f:d1:a7:20:8e:23:de:93:ae: a1:49:a2:a9:6d:8b:5b:c6:4a:bd:db:62:a2:b1:96: 19:71:e6:bb:5d:0f:9c:0c:25:87:63:ae:94:bc:d5: dc:19:bd:f5:1f:ca:c5:ce:31:cf:a3:1a:0b:05:4c: 78:43:30:43:2b:0a:1b:05:5f:9d:5b:17:80:62:6c: ae:9c:2b:8d:9d:37:ab:f4:b0:36:01:51:53:84:ec: a1:48:28:94:57:70:86:ac:07:5b:8d:e6:cc:37:18: 33:6c:ea:33:27:c0:63:fd:8b:89:a7:94:43:6b:ec: a4:f7:47:06:7e:cf:e0:fe:7b:3e:4d:95:fd:93:99: eb:02:e4:d6:7c:0f:15:88:78:bc:a3:c8:17:d3:3a: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:02:A1:D7:B2:46:90:51:B9:58:F5:14:2E:23:BE:DD:F5:85:66:A8 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e4:06:8c:83:50:85:b4:ed:f1:69:6d:72:c7:75:cc:de:cd: 11:19:69:f0:c8:c2:df:35:1a:05:00:1b:3d:46:ab:0b:75:07: b0:92:0e:2d:bd:aa:81:e2:5f:45:17:04:88:32:06:92:e9:90: dd:7a:10:d0:a5:9b:a4:98:bb:22:ea:ed:4c:2a:d9:16:13:07: 2b:5c:6c:b6:bf:1d:07:26:a2:3b:f3:ff:f6:0e:cf:fb:c3:a2: 11:10:0f:e7:ee:1c:5a:dd:88:43:ae:0e:2f:d4:3c:58:a8:74: 65:27:f3:18:d0:07:c8:f2:b9:be:06:da:da:c2:b1:95:d4:1f: 86:a1:1e:40:e9:e1:6d:39:0a:2d:f5:28:ce:27:a9:31:d1:0a: 3b:80:2c:c7:7a:c2:d3:9f:e2:03:5c:5a:b2:87:66:9d:08:23: fe:02:7b:fe:f9:61:19:94:9a:cf:75:af:ac:b6:bb:49:3e:47: 81:b2:cf:1f:28:23:d6:66:98:dd:53:da:30:bb:7d:07:10:6a: 67:ae:7f:2f:b4:ea:c9:47:49:2c:e6:0a:86:8c:9b:a3:9a:15: e3:25:3f:02:c0:be:38:2d:7f:2e:ed:c0:71:df:fc:56:7d:cc: 56:87:03:56:e9:84:bb:88:6e:ce:4c:08:e6:a9:1b:36:1b:08: 85:05:13:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0I2ODExMC8GA1UEBRMoOUFDQjgwNjY2M0ZCMEZDRjZFQkM0M0MwMTBCOTM1RTA1 MjE0RkM5RjAeFw0yNDA1MTYyMTU4MzlaFw0yNDA1MjMyMTU4MzlaMBgxFjAUBgNV BAMTDTY2NDY4MTkwLWIxYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRTmvS9pc/6gL3BBpC7C49wNo459n6vCNC4tJqM9gjpqjMKBlRWjGhe8y05F52 2E+FJ2BBe1Dp3hGS03WoqLg5X125eBzqkzVzvLhj6udXaBoCSFiZVWhyYKV9zQnc oOQwk34VvnxUFpu0VU+RRH/RpyCOI96TrqFJoqlti1vGSr3bYqKxlhlx5rtdD5wM JYdjrpS81dwZvfUfysXOMc+jGgsFTHhDMEMrChsFX51bF4BibK6cK42dN6v0sDYB UVOE7KFIKJRXcIasB1uN5sw3GDNs6jMnwGP9i4mnlENr7KT3RwZ+z+D+ez5Nlf2T mesC5NZ8DxWIeLyjyBfTOtKlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHgKh17JG kFG5WPUULiO+3fWFZqgwHwYDVR0jBBgwFoAUmsuAZmP7D89uvEPAELk14FIU/J8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QjY4LzUzQTdCOTJDQjBB NTExRUE4RjkyRUQxN0M0RjlBRTAyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9K OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXN1QVptUDdEODl1dkVQQUVMazE0RklVX0o4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 QjY4LzUzQTdCOTJDQjBBNTExRUE4RjkyRUQxN0M0RjlBRTAyL21zdUFabVA3RDg5 dXZFUEFFTGsxNEZJVV9KOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADkBoyDUIW07fFpbXLHdczezREZafDIwt81GgUAGz1Gqwt1B7CSDi29 qoHiX0UXBIgyBpLpkN16ENClm6SYuyLq7Uwq2RYTBytcbLa/HQcmojvz//YOz/vD ohEQD+fuHFrdiEOuDi/UPFiodGUn8xjQB8jyub4G2trCsZXUH4ahHkDp4W05Ci31 KM4nqTHRCjuALMd6wtOf4gNcWrKHZp0II/4Ce/75YRmUms91r6y2u0k+R4Gyzx8o I9ZmmN1T2jC7fQcQameufy+06slHSSzmCoaMm6OaFeMlPwLAvjgtfy7twHHf/FZ9 zFaHA1bphLuIbs5MCOapGzYbCIUFE8U= -----END CERTIFICATE-----Generated at Thu May 16 22:23:38 2024 by rpki-client on console-fra.rpki-client.org