$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft File: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json) Hash identifier: 48YT7WsqItXJUu5d0HP76WSSF+hJqklJcMpl/t6gHQw= Subject key identifier: CA:87:18:D5:EA:37:BE:42:BD:AA:CF:08:61:89:D6:6A:1D:DE:1E:6F Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 Certificate issuer: /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft Manifest number: 3F Signing time: Sat 25 May 2024 08:27:57 +0000 Manifest this update: Sat 25 May 2024 08:27:57 +0000 Manifest next update: Sat 01 Jun 2024 08:27:57 +0000 Files and hashes: 1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: RruxuDt2YqWKotHf/XUTf2QXO5Sq49ikvkGvkDqZcLg=) 2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: 6tdKeRRJNQp3+06ZA3uoftMwACFXYVeU4vtZzC1cRtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 06:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Validity Not Before: May 25 08:27:57 2024 GMT Not After : Jun 1 08:27:57 2024 GMT Subject: CN=6651a10d-cbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:a6:97:ac:03:f8:6c:8b:0b:4b:ed:6b:50: 58:de:d4:60:ad:b1:e0:6f:05:5c:80:e2:19:f8:6c: 3e:2f:22:75:55:4f:95:ae:a9:ab:50:43:43:d6:bf: aa:30:47:4c:fa:29:bb:ad:ff:ae:bc:37:47:c5:5d: 17:4b:dd:85:2c:7d:31:3d:ce:13:9c:10:e2:d5:05: eb:b9:e0:88:0c:93:f7:71:3c:68:26:84:dc:70:ee: d1:d2:4e:13:0f:d8:93:b5:68:4b:c7:ea:e1:3e:67: d5:12:a1:e4:06:2d:a9:37:ef:ea:ed:18:9f:18:bc: 42:c4:97:6b:d7:c6:a8:68:3a:11:e2:23:1d:a9:d8: d6:67:11:9d:6e:af:0a:e4:35:92:31:d0:8e:7d:6f: 9c:7a:93:68:b6:e6:ae:63:87:9e:6d:29:b6:8e:14: 55:8a:c0:4c:b0:03:2d:dc:e0:43:8d:8c:76:72:93: b8:71:fa:01:65:0b:76:31:c5:3b:fa:cb:fb:f0:33: 3e:9e:0c:39:24:02:e1:39:79:60:40:6f:22:38:1e: d5:1a:6d:9b:da:32:85:37:15:a8:d4:de:ab:0f:a2: f3:3d:e9:4b:b1:0e:72:da:c7:e7:32:99:72:7e:ef: ba:16:b8:99:f7:fe:6a:38:ae:5c:c1:c2:30:ba:87: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:87:18:D5:EA:37:BE:42:BD:AA:CF:08:61:89:D6:6A:1D:DE:1E:6F X509v3 Authority Key Identifier: keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0e:fd:0f:ce:8d:e4:67:a6:9f:de:78:af:63:ad:96:36:bc: d0:32:a7:ec:46:8a:59:23:97:35:5f:9b:6b:cb:7d:1d:27:6b: ea:51:41:46:02:88:7b:2d:a4:32:8f:53:22:4e:91:0d:85:ac: 32:96:9b:a9:55:60:47:d6:99:37:91:16:42:c2:aa:45:b0:70: 14:7b:ce:7e:c4:6a:af:e1:a4:b4:83:74:e5:43:ee:a6:72:08: 85:10:aa:fc:0b:c8:20:e7:b5:f3:15:a1:12:6a:4b:93:e2:d5: f0:1d:c9:70:9b:ff:c4:3e:11:cb:78:21:47:b9:c8:2a:11:7d: 24:71:6f:6e:c3:57:d3:c6:b6:85:c5:fd:44:47:9a:f1:20:47: 6f:69:87:a5:84:dd:1a:f1:15:5a:50:b5:9b:3f:a5:7a:d6:56: a0:d2:e7:2c:9f:49:5f:b4:a6:73:91:27:0f:d2:d7:58:16:b3: d5:bb:0c:ca:88:54:61:90:8f:4b:4f:c4:59:73:f3:d7:85:16: ba:38:51:20:2d:b8:36:44:ea:0c:b1:b4:f2:e3:ab:dc:fd:81: c0:f3:f8:46:b4:02:88:b8:8b:04:3a:fd:f3:96:40:09:2e:86: 58:51:a6:a6:80:12:1c:7c:42:3a:85:f0:b5:2b:6d:06:f0:b0: 52:31:04:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REI3NTExMC8GA1UEBRMoN0JFOThDN0FBQUQ4N0M5RjI1OTI5NjMwMTY0M0EzNjEw QTdCNTE4ODAeFw0yNDA1MjUwODI3NTdaFw0yNDA2MDEwODI3NTdaMBgxFjAUBgNV BAMTDTY2NTFhMTBkLWNiYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjmKaXrAP4bIsLS+1rUFje1GCtseBvBVyA4hn4bD4vInVVT5WuqatQQ0PWv6ow R0z6Kbut/668N0fFXRdL3YUsfTE9zhOcEOLVBeu54IgMk/dxPGgmhNxw7tHSThMP 2JO1aEvH6uE+Z9USoeQGLak37+rtGJ8YvELEl2vXxqhoOhHiIx2p2NZnEZ1urwrk NZIx0I59b5x6k2i25q5jh55tKbaOFFWKwEywAy3c4EONjHZyk7hx+gFlC3YxxTv6 y/vwMz6eDDkkAuE5eWBAbyI4HtUabZvaMoU3FajU3qsPovM96UuxDnLax+cymXJ+ 77oWuJn3/mo4rlzBwjC6h1vhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyocY1eo3 vkK9qs8IYYnWah3eHm8wHwYDVR0jBBgwFoAUe+mMeqrYfJ8lkpYwFkOjYQp7UYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQjc1L0U2NTE5QTE0QkI3 NzExRUVBQUQ3QjI0MUM0RjlBRTAyL2UtbU1lcXJZZko4bGtwWXdGa09qWVFwN1VZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZS1tTWVxcllmSjhsa3BZd0ZrT2pZUXA3VVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Qjc1L0U2NTE5QTE0QkI3NzExRUVBQUQ3QjI0MUM0RjlBRTAyL2UtbU1lcXJZZko4 bGtwWXdGa09qWVFwN1VZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAO/Q/OjeRnpp/eeK9jrZY2vNAyp+xGilkjlzVfm2vLfR0na+pRQUYC iHstpDKPUyJOkQ2FrDKWm6lVYEfWmTeRFkLCqkWwcBR7zn7Eaq/hpLSDdOVD7qZy CIUQqvwLyCDntfMVoRJqS5Pi1fAdyXCb/8Q+Ect4IUe5yCoRfSRxb27DV9PGtoXF /URHmvEgR29ph6WE3RrxFVpQtZs/pXrWVqDS5yyfSV+0pnORJw/S11gWs9W7DMqI VGGQj0tPxFlz89eFFro4USAtuDZE6gyxtPLjq9z9gcDz+Ea0Aoi4iwQ6/fOWQAku hlhRpqaAEhx8QjqF8LUrbQbwsFIxBPo= -----END CERTIFICATE-----Generated at Sat May 25 10:21:17 2024 by rpki-client on console-ams.rpki-client.org