$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: Rna9oH/K8skgs1MXis3VWXuQzkUJ9HNV7Wgl/saCIVc= Subject key identifier: 2D:54:3B:5E:19:E7:EB:CC:B3:27:A3:0F:78:81:B1:65:91:B0:C6:7C Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: D1 Signing time: Fri 03 May 2024 06:13:28 +0000 Manifest this update: Fri 03 May 2024 06:13:27 +0000 Manifest next update: Fri 10 May 2024 06:13:27 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: AXuB6BayJpYi5cnNeA4x5orm0jVjwyXWnNyijPbuWFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: May 3 06:13:27 2024 GMT Not After : May 10 06:13:27 2024 GMT Subject: CN=66348087-4f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:21:92:1c:07:e1:eb:25:cf:dd:cb:f0:bc: 1a:cf:47:1e:7e:e8:9e:47:56:20:b5:37:66:02:2e: e2:e9:0d:08:5d:07:37:10:73:a1:38:ec:eb:fb:e2: 4b:95:75:0f:b2:f4:3e:06:fe:d9:54:d8:55:d6:40: ba:98:db:e1:4a:a7:e5:d7:1d:10:68:18:77:ae:05: d9:a1:7b:0f:4e:b3:e7:1f:68:49:eb:da:48:a8:89: d4:a5:71:b0:69:4c:b1:11:43:d3:54:10:fb:a8:b8: 2e:c9:48:83:62:99:b1:20:74:ba:05:22:9a:aa:b7: 40:cf:01:31:fc:ca:2f:fe:30:f1:f1:be:7b:49:2d: b6:de:c1:80:87:04:18:36:b6:2e:cf:bb:f9:87:e4: c4:c1:d8:2e:49:8d:52:fe:c1:6a:55:6b:54:cd:78: c8:0b:38:76:17:1f:79:29:38:60:aa:44:d2:cf:2d: 8c:6c:f5:fb:af:25:c5:17:d9:f5:77:c5:f0:ac:62: 6a:e2:3e:b6:32:2c:f7:bd:28:11:e7:9b:1d:1c:c0: ee:66:5f:8a:03:31:ef:56:a8:1a:de:2a:79:ea:1f: 64:2e:0e:a9:1a:45:70:81:9e:83:c6:3c:b6:9f:28: eb:24:07:7e:1c:74:20:3c:96:00:88:04:bb:f3:d0: 98:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:54:3B:5E:19:E7:EB:CC:B3:27:A3:0F:78:81:B1:65:91:B0:C6:7C X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:07:82:61:20:9a:84:f7:ca:ba:a8:c6:0a:da:bc:63:63:6a: 3c:39:4e:69:79:ca:ec:09:d2:c6:02:b2:65:7f:f7:3c:61:84: db:bd:41:ba:04:45:bb:cd:10:cd:7b:8e:b4:30:27:e7:95:aa: 56:ab:75:54:a5:13:a1:93:25:2e:9b:ab:27:a4:00:21:3d:c4: 40:fd:23:3b:92:df:b5:17:ef:78:83:78:db:c8:74:cf:80:be: 47:d8:d1:f0:a1:b8:35:5c:d6:11:8b:08:7a:a0:a7:05:f6:d6: 0f:5e:32:66:00:3c:7e:88:86:d5:87:38:1b:ec:f7:34:fb:fd: 2b:6e:d8:e0:5a:7a:cf:36:ea:a3:a8:81:8f:c2:94:4b:ec:7b: 14:da:b6:4b:59:b4:e9:02:12:20:0d:98:35:0b:c7:03:ea:1c: 8f:e8:df:60:ba:de:4c:97:de:65:ba:e3:e8:ac:76:e4:78:39: 46:47:ae:3b:87:91:67:40:50:7a:7b:0d:01:19:34:25:8e:77: 56:c4:e2:d5:a7:85:c9:73:27:63:d2:72:79:43:6b:1c:36:cb: a7:f0:20:ba:34:3b:e9:94:54:63:8d:9c:5e:42:b8:3f:aa:98: 9e:78:43:e0:60:95:4a:24:b1:36:dd:53:33:25:f5:04:82:20: 85:66:17:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjQwNTAzMDYxMzI3WhcNMjQwNTEwMDYxMzI3WjAYMRYwFAYD VQQDEw02NjM0ODA4Ny00ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ashkhwH4eslz93L8Lwaz0cefuieR1YgtTdmAi7i6Q0IXQc3EHOhOOzr++JL lXUPsvQ+Bv7ZVNhV1kC6mNvhSqfl1x0QaBh3rgXZoXsPTrPnH2hJ69pIqInUpXGw aUyxEUPTVBD7qLguyUiDYpmxIHS6BSKaqrdAzwEx/Mov/jDx8b57SS223sGAhwQY NrYuz7v5h+TEwdguSY1S/sFqVWtUzXjICzh2Fx95KThgqkTSzy2MbPX7ryXFF9n1 d8XwrGJq4j62Miz3vSgR55sdHMDuZl+KAzHvVqga3ip56h9kLg6pGkVwgZ6Dxjy2 nyjrJAd+HHQgPJYAiAS789CYmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1UO14Z 5+vMsyejD3iBsWWRsMZ8MB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDB4JhIJqE98q6qMYK2rxjY2o8OU5pecrsCdLGArJlf/c8YYTbvUG6 BEW7zRDNe460MCfnlapWq3VUpROhkyUum6snpAAhPcRA/SM7kt+1F+94g3jbyHTP gL5H2NHwobg1XNYRiwh6oKcF9tYPXjJmADx+iIbVhzgb7Pc0+/0rbtjgWnrPNuqj qIGPwpRL7HsU2rZLWbTpAhIgDZg1C8cD6hyP6N9gut5Ml95luuPorHbkeDlGR647 h5FnQFB6ew0BGTQljndWxOLVp4XJcydj0nJ5Q2scNsun8CC6NDvplFRjjZxeQrg/ qpieeEPgYJVKJLE23VMzJfUEgiCFZhdP -----END CERTIFICATE-----Generated at Fri May 3 09:09:34 2024 by rpki-client on console-fra.rpki-client.org