$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: 2njVlBtvOooW5/kg0mIAsHHP5Grrzl58qFGN0rxAcmc= Subject key identifier: 86:81:72:EE:A6:03:C6:6A:2A:72:E7:81:2F:29:5C:23:E3:5F:7F:C1 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0117 Signing time: Tue 21 May 2024 05:21:21 +0000 Manifest this update: Tue 21 May 2024 05:21:20 +0000 Manifest next update: Tue 28 May 2024 05:21:20 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: olS0078YLQ3u6L8kKiTFFT+1uML3a+ayaFYa/+LIRkk=) 2: 4155ABCE725111ED82867F40C4F9AE02.roa (hash: oCKdsU3aoxN4ZJq4VlPybOXmRN+jsoto/3GeO2+L5/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 05:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: May 21 05:21:20 2024 GMT Not After : May 28 05:21:20 2024 GMT Subject: CN=664c2f51-be28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:90:95:20:af:7d:9d:c9:09:77:7e:24:7e: 7c:e8:fd:34:08:32:26:86:1f:f5:15:f5:84:87:8f: 93:36:b1:71:0b:d6:ae:23:1f:8d:64:87:c6:62:93: eb:2b:07:38:27:47:c1:4b:6e:f8:65:ff:4a:aa:70: 6b:2d:bf:a7:d4:e4:d7:75:90:e6:22:2a:e5:65:bf: b4:44:0c:17:78:5f:5f:9c:0f:6e:9e:55:a8:92:5c: 98:8e:2a:bf:59:a9:4b:57:24:2c:02:67:69:5a:09: 23:75:2c:9b:23:04:5a:98:ee:b6:48:5e:ab:15:62: b4:e7:d2:67:2c:34:fb:cb:bd:01:dc:df:cd:b0:47: c4:30:e5:b7:49:a6:ef:93:d9:37:c8:86:2f:e5:d1: 5d:69:0b:50:22:19:04:c9:a5:c2:a8:4b:50:af:e1: 7e:cd:a7:8e:e5:5f:f7:79:77:48:39:61:4d:e8:95: 0c:5f:29:d3:70:5e:77:7e:f2:c5:34:30:4f:92:0f: 74:28:3e:a3:af:a9:c8:19:ce:b2:21:b3:09:80:44: d3:6c:cf:e4:b9:87:d5:ca:e8:27:7b:70:0b:b4:f7: d3:ec:fc:15:53:67:6b:39:ea:60:09:08:c5:4f:68: d2:70:33:56:94:4c:67:15:d8:d0:1f:69:04:52:a3: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:72:EE:A6:03:C6:6A:2A:72:E7:81:2F:29:5C:23:E3:5F:7F:C1 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c0:05:0b:31:c8:77:9c:d4:a6:a9:e2:07:d0:1d:22:27:57: 2e:01:b9:15:34:f2:ef:04:12:28:91:10:11:5e:6f:5f:8c:21: 0d:29:e5:48:a2:be:ed:3f:95:5a:7b:f5:e3:e4:68:ae:67:a4: 53:f4:9c:fe:5b:45:ab:67:df:78:6f:71:64:23:6c:b8:99:45: 79:95:2f:d5:f5:5a:81:e4:1a:f6:28:51:89:4c:f3:26:ee:70: 0b:f3:1a:3a:b0:3f:0c:79:34:b6:7e:1a:cc:f7:f8:99:c6:07: f5:f1:19:f4:f3:35:ee:2d:98:a1:0c:a1:f2:e0:d7:0a:5b:67: dc:9f:cb:55:64:26:53:2c:3f:cd:6e:b9:b8:f3:88:1b:b3:03: 5c:f6:9e:45:61:50:3d:9e:c9:64:8c:50:c2:bd:ca:6a:2d:f4: 4e:50:9c:45:d3:dc:28:c6:0d:8a:96:a6:87:8d:7e:b3:f9:dc: cf:ea:69:f4:30:b5:6a:e2:9c:fc:fa:88:15:b2:eb:7b:6b:3e: e8:c7:54:1b:05:52:49:0f:24:26:42:39:a8:a6:d9:cf:88:8c: 20:fd:be:97:c9:d1:b0:fb:00:8e:63:a0:50:1c:d6:fb:c9:f1: 96:24:3f:9c:a4:0e:1d:f4:62:ab:4c:fb:8c:10:88:e4:39:a2: 61:e7:39:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjQwNTIxMDUyMTIwWhcNMjQwNTI4MDUyMTIwWjAYMRYwFAYD VQQDEw02NjRjMmY1MS1iZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZaQlSCvfZ3JCXd+JH586P00CDImhh/1FfWEh4+TNrFxC9auIx+NZIfGYpPr Kwc4J0fBS274Zf9KqnBrLb+n1OTXdZDmIirlZb+0RAwXeF9fnA9unlWoklyYjiq/ WalLVyQsAmdpWgkjdSybIwRamO62SF6rFWK059JnLDT7y70B3N/NsEfEMOW3Sabv k9k3yIYv5dFdaQtQIhkEyaXCqEtQr+F+zaeO5V/3eXdIOWFN6JUMXynTcF53fvLF NDBPkg90KD6jr6nIGc6yIbMJgETTbM/kuYfVyugne3ALtPfT7PwVU2drOepgCQjF T2jScDNWlExnFdjQH2kEUqN30QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaBcu6m A8ZqKnLngS8pXCPjX3/BMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8wAULMch3nNSmqeIH0B0iJ1cuAbkVNPLvBBIokRARXm9fjCENKeVI or7tP5Vae/Xj5GiuZ6RT9Jz+W0WrZ994b3FkI2y4mUV5lS/V9VqB5Br2KFGJTPMm 7nAL8xo6sD8MeTS2fhrM9/iZxgf18Rn08zXuLZihDKHy4NcKW2fcn8tVZCZTLD/N brm484gbswNc9p5FYVA9nslkjFDCvcpqLfROUJxF09woxg2KlqaHjX6z+dzP6mn0 MLVq4pz8+ogVsut7az7ox1QbBVJJDyQmQjmoptnPiIwg/b6XydGw+wCOY6BQHNb7 yfGWJD+cpA4d9GKrTPuMEIjkOaJh5znt -----END CERTIFICATE-----Generated at Tue May 21 05:59:36 2024 by rpki-client on console-fra.rpki-client.org