$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft File: scWMB4UVntc2lq-zEtI1z0DzxEE.mft (raw, json) Hash identifier: /8n/sTm/6y+kxVZncCVUPj0RiueEQPURrIz1XifVZfY= Subject key identifier: CC:33:1A:52:5A:D1:13:4B:74:CE:38:82:5D:96:38:E4:F1:A5:41:BE Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 Certificate issuer: /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft Manifest number: 66 Signing time: Wed 15 May 2024 07:42:19 +0000 Manifest this update: Wed 15 May 2024 07:42:19 +0000 Manifest next update: Wed 22 May 2024 07:42:19 +0000 Files and hashes: 1: scWMB4UVntc2lq-zEtI1z0DzxEE.crl (hash: v8VGVGgyO3z1x71aMcqIYa4t8yNrajTlnpoNTu5rSd8=) 2: FA39CA70790E11EE86665E43C4F9AE02.roa (hash: FSbVou6g0ly8ZFCtnN84trCFPpoq9PbAT6B3VvQ6Zf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Validity Not Before: May 15 07:42:19 2024 GMT Not After : May 22 07:42:19 2024 GMT Subject: CN=6644675b-206e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:e1:c6:e3:ae:ed:30:48:37:f6:d9:99:ac: 38:66:dd:ae:87:a5:0d:67:cc:e0:e1:cd:13:70:37: 66:86:d9:94:28:9c:12:fe:a5:7f:61:9e:f2:69:d0: 3d:d2:62:92:78:11:de:6c:3e:28:5f:3b:54:1a:14: 44:a2:3b:dc:0f:b7:ac:3d:c2:5a:b3:54:cb:e3:d4: d3:0d:55:7d:3e:c3:15:42:11:33:76:55:34:31:25: a8:84:54:7a:c4:9c:81:7a:fc:da:f4:8c:fd:c5:97: c9:55:4d:cc:c0:99:9e:bb:38:89:58:84:d0:5b:14: af:d6:a5:06:35:fc:4b:66:09:03:7f:d9:b2:d6:92: 8b:e1:9e:ae:4e:be:aa:59:ea:68:75:2c:69:2b:e5: b2:0c:3f:22:c5:17:6e:a5:c1:da:f0:d1:d9:23:1b: 93:91:3d:56:fb:46:b3:0f:3b:ba:3d:f5:41:64:28: 2d:49:0d:04:d7:15:6c:ce:b8:9c:38:fa:a0:66:99: 81:75:8f:9e:c7:61:26:81:9a:d0:eb:a7:30:23:9e: b3:9e:93:4f:59:b3:06:46:3e:81:ea:a1:05:bc:54: 2a:3d:aa:d9:69:a6:7e:48:61:30:a6:01:02:8d:16: d0:6a:14:6e:61:23:d4:99:ff:af:e4:be:90:00:56: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:33:1A:52:5A:D1:13:4B:74:CE:38:82:5D:96:38:E4:F1:A5:41:BE X509v3 Authority Key Identifier: keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b1:bc:65:e2:d1:92:ea:d6:b6:82:e6:bf:bb:9d:ac:f9:7f: 19:92:5c:c3:c7:12:1f:81:cd:28:c3:47:4e:bf:48:b3:f2:e3: 8f:5c:36:04:5a:cc:94:0a:9a:4b:0e:d7:78:06:da:9e:f8:17: b7:30:5e:89:7a:49:10:50:80:8d:1a:69:ba:d6:e1:46:cb:c3: 06:04:7a:c6:bf:51:c4:c1:00:b6:78:17:f7:dc:8c:d2:d3:a2: 53:3a:f2:a8:d0:f1:8f:40:b3:20:0b:69:f6:07:9e:32:f8:2e: 79:6f:4a:0d:ff:83:6c:93:79:47:a1:c7:f2:7b:6b:a4:93:15: 3e:7c:6b:79:d0:69:55:04:32:dc:aa:91:a8:08:df:ef:5d:92: 6d:32:e3:ca:8f:e6:77:a5:16:e2:c3:e1:82:f8:9e:85:c4:ef: 47:c9:53:ff:33:f0:27:41:69:9c:0b:fd:85:99:06:60:05:0a: 1c:76:82:a6:56:20:fd:16:1b:c7:7b:f5:77:56:00:a1:b0:d0: 26:72:5b:9a:96:cd:d0:16:6b:a4:de:96:d9:1f:cf:dd:c4:46: 3a:04:be:29:f3:49:8e:4e:01:a7:c5:c5:19:45:68:3a:98:80: 3d:44:da:fb:00:6e:1b:7a:6e:a0:79:7e:93:24:71:b1:d4:4f: d6:ff:ff:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkRCRDExMC8GA1UEBRMoQjFDNThDMDc4NTE1OUVENzM2OTZBRkIzMTJEMjM1Q0Y0 MEYzQzQ0MTAeFw0yNDA1MTUwNzQyMTlaFw0yNDA1MjIwNzQyMTlaMBgxFjAUBgNV BAMTDTY2NDQ2NzViLTIwNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+fOHG467tMEg39tmZrDhm3a6HpQ1nzODhzRNwN2aG2ZQonBL+pX9hnvJp0D3S YpJ4Ed5sPihfO1QaFESiO9wPt6w9wlqzVMvj1NMNVX0+wxVCETN2VTQxJaiEVHrE nIF6/Nr0jP3Fl8lVTczAmZ67OIlYhNBbFK/WpQY1/EtmCQN/2bLWkovhnq5OvqpZ 6mh1LGkr5bIMPyLFF26lwdrw0dkjG5ORPVb7RrMPO7o99UFkKC1JDQTXFWzOuJw4 +qBmmYF1j57HYSaBmtDrpzAjnrOek09ZswZGPoHqoQW8VCo9qtlppn5IYTCmAQKN FtBqFG5hI9SZ/6/kvpAAVp7hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzDMaUlrR E0t0zjiCXZY45PGlQb4wHwYDVR0jBBgwFoAUscWMB4UVntc2lq+zEtI1z0DzxEEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2REJELzAyQUE0OTUwNzkw QTExRUU5OUVERDExRkM0RjlBRTAyL3NjV01CNFVWbnRjMmxxLXpFdEkxejBEenhF RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2NXTUI0VVZudGMybHEtekV0STF6MER6eEVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 REJELzAyQUE0OTUwNzkwQTExRUU5OUVERDExRkM0RjlBRTAyL3NjV01CNFVWbnRj MmxxLXpFdEkxejBEenhFRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCxvGXi0ZLq1raC5r+7naz5fxmSXMPHEh+BzSjDR06/SLPy449cNgRa zJQKmksO13gG2p74F7cwXol6SRBQgI0aabrW4UbLwwYEesa/UcTBALZ4F/fcjNLT olM68qjQ8Y9AsyALafYHnjL4LnlvSg3/g2yTeUehx/J7a6STFT58a3nQaVUEMtyq kagI3+9dkm0y48qP5nelFuLD4YL4noXE70fJU/8z8CdBaZwL/YWZBmAFChx2gqZW IP0WG8d79XdWAKGw0CZyW5qWzdAWa6Teltkfz93ERjoEvinzSY5OAafFxRlFaDqY gD1E2vsAbht6bqB5fpMkcbHUT9b//40= -----END CERTIFICATE-----Generated at Wed May 15 09:28:16 2024 by rpki-client on console-fra.rpki-client.org