$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: 5x/UR3qttXp1CCbjLGgm45IC0GlAKrAin0OiYD4XlGo= Subject key identifier: F8:3D:71:44:76:34:7B:05:88:34:2B:05:15:E4:7C:00:77:DF:4C:32 Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 6D Signing time: Tue 21 May 2024 07:31:45 +0000 Manifest this update: Tue 21 May 2024 07:31:44 +0000 Manifest next update: Tue 28 May 2024 07:31:44 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: DiyWRMqyrVoedxNLvRaRFvsEsqDJzh29QuDaq3ndhXM=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: 4OHTgWMqDaKbWvbjhMGgKM171kYymbCgqMQEk3oimig=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: M5okbmPskJKDVlJwduPye0T0WluK6gpVPBIELGmRiL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: May 21 07:31:44 2024 GMT Not After : May 28 07:31:44 2024 GMT Subject: CN=664c4de1-95b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:ea:e9:df:16:eb:7b:70:30:0a:37:f2:0d: 91:bc:a2:5d:67:b8:09:4f:6b:76:15:a1:d7:3c:bb: bb:6d:2d:36:16:df:a7:30:bd:7d:84:fa:27:31:cb: 41:c5:57:dc:c2:fd:cb:29:fc:99:64:de:95:4a:2e: fa:b3:fa:7d:fe:0b:2c:fe:0c:f1:da:94:d1:16:57: 03:1d:e6:75:c4:44:40:4e:39:54:0e:a5:26:04:96: b0:d3:fb:cc:d6:ce:d3:ba:a9:20:6a:32:d7:b5:83: 4e:83:e3:02:de:ce:27:ff:02:f5:9e:93:0f:cb:eb: 02:27:2e:93:f3:59:65:18:b0:55:ab:eb:81:94:09: 2d:9d:71:3c:a6:2e:4e:92:7b:48:10:1e:a8:2c:ae: c2:45:1d:2c:7d:4b:70:04:93:8c:b8:c7:f3:c0:22: d7:41:75:e3:53:78:02:06:e0:1d:98:f1:13:93:aa: 74:58:18:e9:60:ae:65:8e:b9:ec:b1:92:3e:d3:1a: 6d:60:c7:b2:90:f0:0d:4a:9a:28:23:9f:ed:8e:fd: b0:4e:d1:3c:f6:a4:7f:d5:e3:a8:04:ce:5f:ea:42: f5:4c:03:2d:32:36:44:0c:2e:03:0b:ce:3e:43:e0: d6:d8:4a:2f:e2:d7:e4:56:9e:3c:0f:f3:5d:ee:bd: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:71:44:76:34:7B:05:88:34:2B:05:15:E4:7C:00:77:DF:4C:32 X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:76:97:05:3f:c6:17:03:97:e4:7c:14:bb:c0:10:f7:1c:df: 5d:08:90:c8:58:c9:5a:95:7c:fd:2f:2e:f6:a5:db:9e:71:20: b5:aa:bc:ab:2d:16:ab:61:b9:ca:00:34:1e:4c:6e:19:13:8c: d0:02:3e:51:de:c6:e6:fc:ae:09:ef:2a:f5:ca:56:ee:73:24: b4:50:a9:81:bf:60:dc:2a:53:ec:0e:fc:fb:05:7a:71:b2:5a: c0:50:b1:dd:14:7b:07:a9:7a:48:9e:06:fb:37:60:c2:ad:53: 9a:3e:e9:07:27:a1:0b:9e:66:45:b7:7a:45:10:44:61:4d:ad: c8:d5:48:56:3d:cc:ad:5f:7e:dc:2d:53:7f:79:24:1d:71:4a: 2e:b5:49:16:92:5a:ad:d4:10:71:16:91:3e:25:4e:ca:39:23: 82:e2:4d:37:e5:34:7e:63:c8:8b:90:48:72:1c:24:c3:0b:c7: b9:44:d3:95:64:35:fe:81:f2:39:55:f0:ca:03:80:3b:2a:6c: 83:a3:9e:59:a7:63:74:01:7a:66:88:66:57:e1:b5:e6:6e:64: 1a:ff:6d:6e:4b:46:69:e0:9d:66:06:d5:d6:2c:ba:fd:b7:79: ca:df:ba:07:3a:12:57:5c:da:a8:43:1c:8b:42:6c:71:3c:85: c1:f8:68:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkRCRDExMC8GA1UEBRMoMjcyRDcxQUQ2MjY0NTc3NUNDREZCQjU3NzA0NzhFNTk0 M0VBNjU5NTAeFw0yNDA1MjEwNzMxNDRaFw0yNDA1MjgwNzMxNDRaMBgxFjAUBgNV BAMTDTY2NGM0ZGUxLTk1YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6XOrp3xbre3AwCjfyDZG8ol1nuAlPa3YVodc8u7ttLTYW36cwvX2E+icxy0HF V9zC/csp/Jlk3pVKLvqz+n3+Cyz+DPHalNEWVwMd5nXEREBOOVQOpSYElrDT+8zW ztO6qSBqMte1g06D4wLezif/AvWekw/L6wInLpPzWWUYsFWr64GUCS2dcTymLk6S e0gQHqgsrsJFHSx9S3AEk4y4x/PAItdBdeNTeAIG4B2Y8ROTqnRYGOlgrmWOueyx kj7TGm1gx7KQ8A1Kmigjn+2O/bBO0Tz2pH/V46gEzl/qQvVMAy0yNkQMLgMLzj5D 4NbYSi/i1+RWnjwP813uvUbBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+D1xRHY0 ewWINCsFFeR8AHffTDIwHwYDVR0jBBgwFoAUJy1xrWJkV3XM37tXcEeOWUPqZZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2REJEL0Y5QzBFMTFFNzkw OTExRUU5OUVERDExRkM0RjlBRTAyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpa VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnkxeHJXSmtWM1hNMzd0WGNFZU9XVVBxWlpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 REJEL0Y5QzBFMTFFNzkwOTExRUU5OUVERDExRkM0RjlBRTAyL0p5MXhyV0prVjNY TTM3dFhjRWVPV1VQcVpaVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHt2lwU/xhcDl+R8FLvAEPcc310IkMhYyVqVfP0vLval255xILWqvKst FqthucoANB5MbhkTjNACPlHexub8rgnvKvXKVu5zJLRQqYG/YNwqU+wO/PsFenGy WsBQsd0UewepekieBvs3YMKtU5o+6QcnoQueZkW3ekUQRGFNrcjVSFY9zK1fftwt U395JB1xSi61SRaSWq3UEHEWkT4lTso5I4LiTTflNH5jyIuQSHIcJMMLx7lE05Vk Nf6B8jlV8MoDgDsqbIOjnlmnY3QBemaIZlfhteZuZBr/bW5LRmngnWYG1dYsuv23 ecrfugc6Eldc2qhDHItCbHE8hcH4aNE= -----END CERTIFICATE-----Generated at Tue May 21 08:39:02 2024 by rpki-client on console-fra.rpki-client.org