$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft File: woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json) Hash identifier: 43/Urcsol7hiHgF83qA3H2+2M4Wprw8kc3eoP46jFwM= Subject key identifier: CD:55:5B:62:BB:79:85:72:12:3F:E8:EC:73:4B:67:4A:D0:4E:C5:18 Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft Manifest number: 0838 Signing time: Thu 02 May 2024 21:59:36 +0000 Manifest this update: Thu 02 May 2024 21:59:36 +0000 Manifest next update: Thu 09 May 2024 21:59:36 +0000 Files and hashes: 1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: WOpusBaqYvGjFiwjo/caCQ3Ehn0/OicGOvTjanEnhm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Validity Not Before: May 2 21:59:36 2024 GMT Not After : May 9 21:59:36 2024 GMT Subject: CN=66340cc8-bbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:72:97:2b:21:06:b1:53:ee:78:7b:07:f2: 09:33:fe:f6:91:90:00:71:4a:61:58:0e:34:dc:17: fd:5f:e0:e6:5c:1f:cd:c2:6c:d5:f6:54:63:ae:3a: 0a:67:e1:31:b3:f1:e4:33:8c:7c:e4:09:48:b0:aa: 3d:af:cb:e5:b8:ae:43:07:6b:eb:6f:46:ef:36:dd: 90:b7:6d:fe:00:9f:19:b8:ff:0a:1b:dc:51:a4:80: 3c:a0:c3:28:f6:80:6a:5d:48:0f:22:52:bd:9f:98: 13:30:26:df:83:67:8c:73:1a:bf:e9:f5:a3:e0:cf: e8:35:82:d4:5d:e8:24:37:33:c1:cc:c1:f1:03:18: 03:7a:51:be:07:a2:1f:ee:07:94:a4:71:81:c8:8e: bc:b8:65:21:ea:79:6d:4e:ec:e6:c7:dc:18:89:7a: 2a:0a:ea:df:d7:5f:18:5c:7f:78:c8:ea:c2:47:73: 75:e5:05:a7:70:08:bf:63:ca:83:06:02:c6:34:f0: 65:2b:d7:b4:a7:08:c7:1e:5a:95:56:bb:37:ec:46: d9:99:82:5d:7b:d8:76:3d:17:4b:b1:10:0e:f9:ef: 2f:38:0a:4b:5b:f9:7d:69:88:b9:34:d3:c0:4a:b9: 93:17:57:ef:50:45:d9:0d:9f:98:7e:0a:fc:d2:d1: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:55:5B:62:BB:79:85:72:12:3F:E8:EC:73:4B:67:4A:D0:4E:C5:18 X509v3 Authority Key Identifier: keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b9:e4:01:94:a2:03:7c:e1:8d:27:71:7d:21:c3:04:38:e1: b8:74:05:e2:52:79:d2:0b:46:86:79:5a:f1:9d:c6:7a:69:1f: 15:eb:58:fc:0c:66:90:1c:22:0a:2a:69:4e:e1:8a:05:85:dd: b0:a1:9e:d5:39:f9:3b:d3:18:9d:24:9f:11:8d:4d:1d:0c:e3: b4:e3:58:e9:1d:b0:4f:94:90:41:59:63:c9:0f:50:12:d5:a1: 01:5b:48:a8:7d:1d:8b:8a:73:5d:73:cf:ef:d5:09:90:9b:b1: a6:16:8d:c3:4e:1d:50:ae:b7:84:be:5e:03:58:0d:92:2a:58: 86:8b:b6:8c:77:fd:6b:5a:89:e2:be:aa:de:7c:3e:8f:40:58: ce:fb:74:ca:b7:c1:bf:f2:42:45:7a:69:b9:8d:a4:1c:ff:36: 09:07:fd:b4:f7:7f:3e:c7:50:80:5c:c2:71:ab:7a:5c:24:0a: 9a:90:b7:2d:3b:5c:34:8f:6c:ba:35:bb:c7:64:f3:26:49:0e: b8:fc:2c:1c:fb:8e:d8:cc:7d:db:ef:22:ff:9e:66:01:4d:2d: 2d:74:db:bd:8c:ed:7c:c4:f3:a5:98:27:4f:e0:34:88:fd:06: fe:a3:b2:f4:2e:6b:2a:a3:c8:d2:36:e2:eb:8d:90:74:20:59: 1c:4a:69:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKEMyODRCQThBODhBMDIxMTZCRUU0MzQxMEUwMzlFOTA5 RTMwMjlEMEQwHhcNMjQwNTAyMjE1OTM2WhcNMjQwNTA5MjE1OTM2WjAYMRYwFAYD VQQDEw02NjM0MGNjOC1iYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7VylyshBrFT7nh7B/IJM/72kZAAcUphWA403Bf9X+DmXB/NwmzV9lRjrjoK Z+Exs/HkM4x85AlIsKo9r8vluK5DB2vrb0bvNt2Qt23+AJ8ZuP8KG9xRpIA8oMMo 9oBqXUgPIlK9n5gTMCbfg2eMcxq/6fWj4M/oNYLUXegkNzPBzMHxAxgDelG+B6If 7geUpHGByI68uGUh6nltTuzmx9wYiXoqCurf118YXH94yOrCR3N15QWncAi/Y8qD BgLGNPBlK9e0pwjHHlqVVrs37EbZmYJde9h2PRdLsRAO+e8vOApLW/l9aYi5NNPA SrmTF1fvUEXZDZ+Yfgr80tEERQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1VW2K7 eYVyEj/o7HNLZ0rQTsUYMB8GA1UdIwQYMBaAFMKEuoqIoCEWvuQ0EOA56QnjAp0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lSYS01RFFRNERucENlTUNu UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvUzZpb2lnSVJhLTVEUVE0RG5wQ2VNQ25RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lS YS01RFFRNERucENlTUNuUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrueQBlKIDfOGNJ3F9IcMEOOG4dAXiUnnSC0aGeVrxncZ6aR8V61j8 DGaQHCIKKmlO4YoFhd2woZ7VOfk70xidJJ8RjU0dDOO041jpHbBPlJBBWWPJD1AS 1aEBW0iofR2LinNdc8/v1QmQm7GmFo3DTh1QrreEvl4DWA2SKliGi7aMd/1rWoni vqrefD6PQFjO+3TKt8G/8kJFemm5jaQc/zYJB/20938+x1CAXMJxq3pcJAqakLct O1w0j2y6NbvHZPMmSQ64/Cwc+47YzH3b7yL/nmYBTS0tdNu9jO18xPOlmCdP4DSI /Qb+o7L0Lmsqo8jSNuLrjZB0IFkcSmkn -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org