$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: lAN4JJMY9wBz+EUzaXq7q2VoKyrTGGKJc0rjNuORoBw= Subject key identifier: AA:6E:E2:75:E5:D5:2C:90:2C:73:EE:44:F1:CB:78:5B:51:85:9D:C5 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 56 Signing time: Wed 15 May 2024 07:59:26 +0000 Manifest this update: Wed 15 May 2024 07:59:25 +0000 Manifest next update: Wed 22 May 2024 07:59:25 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: D8DyJcI0PyAiB8259623vszXBHVyH3NnvAK5TO+zy6Y=) 2: 336C470E074A11EF89A6A085C4F9AE02.roa (hash: Imi9byHeBm1Hog3WDr0W33sW+jWDjdEMUDdnxw5YKXU=) 3: 060F7718074A11EFA1093E85C4F9AE02.roa (hash: cb1EPhkHJOzS9xUOUx71+Yw90w5i0ub1Gp2GX0RjukY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: May 15 07:59:25 2024 GMT Not After : May 22 07:59:25 2024 GMT Subject: CN=66446b5d-491b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:2d:a6:f3:c2:71:4c:2c:ec:47:59:66:87: 32:0b:95:66:78:da:a3:cc:c8:ea:08:0e:6e:81:c0: 8c:57:4d:47:7d:df:30:99:39:a1:8b:27:82:e4:ce: ff:60:63:04:5a:ec:ac:43:ed:45:31:15:f6:b7:d1: 03:5c:35:5f:02:95:63:47:7c:87:76:27:20:98:b5: 67:05:7b:a8:e0:78:a4:b3:da:eb:50:7a:aa:be:36: 1b:64:97:20:fd:ab:3c:e5:d2:cd:12:5f:ce:9a:73: dd:27:e5:67:04:5d:a3:46:8a:ec:4e:8e:e2:0c:36: 32:90:bf:c7:c3:fd:dc:9d:d3:9e:37:85:84:6a:cf: bb:2b:0c:e8:bd:a0:3d:9a:a6:14:60:08:91:2c:5d: 73:13:a7:5c:16:17:62:91:49:68:7c:54:e2:b4:8d: ec:c5:85:72:89:ea:6e:fa:a9:2f:7d:05:2a:d9:92: 6e:f2:28:96:54:68:25:ee:75:13:c2:3e:76:fb:58: 3e:49:55:32:65:21:7d:52:39:72:c5:8f:1d:48:21: 37:73:aa:a4:be:d9:cc:61:f0:6b:7a:ac:0a:3b:db: 1b:99:b0:a8:c0:06:a4:12:6e:d5:65:da:8a:e4:62: e1:73:19:e8:d8:10:1c:83:3f:61:08:c1:b0:ef:6b: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6E:E2:75:E5:D5:2C:90:2C:73:EE:44:F1:CB:78:5B:51:85:9D:C5 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ea:29:ae:9b:99:bb:f0:44:b3:87:9e:bc:96:7a:55:ca:b7: 8e:b9:89:fa:e1:a8:94:cc:27:37:29:7f:9f:e6:63:8a:b5:d5: 57:8c:10:1e:3a:fd:d5:a9:e9:a9:c5:df:25:6d:67:6e:f5:21: a4:e9:fb:99:70:ad:0d:7a:b4:e5:0b:73:6f:f3:e7:29:c4:54: 4d:e6:32:de:fc:fe:c1:45:62:8b:fb:04:59:1a:b4:f7:a4:c7: 67:98:db:35:d1:d1:ba:48:21:e7:70:ba:44:42:62:48:8a:b9: 1a:30:64:ee:ec:d9:80:75:88:d4:2d:f9:b3:62:7f:a3:92:41: bd:3b:d1:57:ad:c5:e2:6b:08:b3:06:ba:70:7f:9b:95:5a:4b: 5e:64:7d:00:58:97:55:e0:f4:40:bb:07:3e:e2:50:58:c9:5a: 36:1b:15:32:cb:41:e2:98:48:e5:bf:c0:bc:13:57:69:7f:66: a6:c1:f8:01:99:04:e1:85:f5:91:ec:26:a7:93:4a:13:c9:1d: 3f:20:50:6c:ab:57:b0:8e:7b:0a:31:31:a5:87:9c:a1:22:72: 66:d4:2a:34:4b:d2:33:98:c6:92:e6:35:1b:0c:ac:32:4c:2f: c5:64:98:4d:8b:c1:f4:fa:38:ec:5e:b6:5f:e4:a0:37:67:db: a4:3d:22:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjNFQTExMC8GA1UEBRMoNUU3REQwNUE5QzFCRTA0NDQ0QUNFMDNGRTRBOTIwMjY4 MDRENEIyQTAeFw0yNDA1MTUwNzU5MjVaFw0yNDA1MjIwNzU5MjVaMBgxFjAUBgNV BAMTDTY2NDQ2YjVkLTQ5MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAdy2m88JxTCzsR1lmhzILlWZ42qPMyOoIDm6BwIxXTUd93zCZOaGLJ4Lkzv9g YwRa7KxD7UUxFfa30QNcNV8ClWNHfId2JyCYtWcFe6jgeKSz2utQeqq+NhtklyD9 qzzl0s0SX86ac90n5WcEXaNGiuxOjuIMNjKQv8fD/dyd0543hYRqz7srDOi9oD2a phRgCJEsXXMTp1wWF2KRSWh8VOK0jezFhXKJ6m76qS99BSrZkm7yKJZUaCXudRPC Pnb7WD5JVTJlIX1SOXLFjx1IITdzqqS+2cxh8Gt6rAo72xuZsKjABqQSbtVl2ork YuFzGejYEByDP2EIwbDvawnHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqm7ideXV LJAsc+5E8ct4W1GFncUwHwYDVR0jBBgwFoAUXn3QWpwb4ERErOA/5KkgJoBNSyow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2M0VBLzUwQTQyODlFOTVG RjExRUVBNkE0RjcwQUM0RjlBRTAyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG4zUVdwd2I0RVJFck9BXzVLa2dKb0JOU3lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 M0VBLzUwQTQyODlFOTVGRjExRUVBNkE0RjcwQUM0RjlBRTAyL1huM1FXcHdiNEVS RXJPQV81S2tnSm9CTlN5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALPqKa6bmbvwRLOHnryWelXKt465ifrhqJTMJzcpf5/mY4q11VeMEB46 /dWp6anF3yVtZ271IaTp+5lwrQ16tOULc2/z5ynEVE3mMt78/sFFYov7BFkatPek x2eY2zXR0bpIIedwukRCYkiKuRowZO7s2YB1iNQt+bNif6OSQb070VetxeJrCLMG unB/m5VaS15kfQBYl1Xg9EC7Bz7iUFjJWjYbFTLLQeKYSOW/wLwTV2l/ZqbB+AGZ BOGF9ZHsJqeTShPJHT8gUGyrV7COewoxMaWHnKEicmbUKjRL0jOYxpLmNRsMrDJM L8VkmE2LwfT6OOxetl/koDdn26Q9Iv0= -----END CERTIFICATE-----Generated at Wed May 15 09:28:16 2024 by rpki-client on console-fra.rpki-client.org