$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: RODd8KY47IaB5I08ZCxYoVKX6xFiwp7cVhfkDmkeGIA= Subject key identifier: 6F:48:C6:49:7F:AC:A7:51:5A:C2:0B:79:AF:52:82:A4:C2:6C:BB:F9 Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 6A Signing time: Tue 21 May 2024 08:15:24 +0000 Manifest this update: Tue 21 May 2024 08:15:24 +0000 Manifest next update: Tue 28 May 2024 08:15:24 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: IN1FJg7vwJfUYA3DAZrVLzHUhsYSMPD31zmOSLFbm0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: May 21 08:15:24 2024 GMT Not After : May 28 08:15:24 2024 GMT Subject: CN=664c581c-e819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:ed:52:a8:3a:b3:5f:5f:86:e8:49:71:b8: e2:41:d0:6d:38:b9:fc:9e:98:1d:a5:78:a8:df:d3: e3:2c:70:d2:2f:55:f8:a2:9d:37:1b:b7:33:57:8b: a8:eb:34:e8:cd:dc:d9:c7:c7:72:8c:b5:b7:c8:c9: 0e:a8:af:ce:4c:98:00:90:0b:2b:ff:e7:a7:90:8d: 2c:5e:28:0b:8d:26:36:cf:41:f7:4c:70:30:97:da: 34:a7:2c:c8:16:62:ca:6f:40:53:88:65:f6:ef:f1: 65:ca:6d:6c:fb:5a:04:65:46:a0:5d:65:5c:4c:54: 31:54:29:f2:2c:be:34:c1:4e:62:f7:1f:84:89:7e: c7:3c:b7:f3:a8:b6:31:d4:d0:e8:48:44:9d:11:8e: 06:15:05:b0:72:04:ea:d5:af:8d:fa:6e:64:fa:f3: 5f:40:86:b2:13:a1:bd:bc:2f:37:a2:03:5a:53:5e: d7:0b:7d:bc:8c:4d:e4:ce:42:01:27:52:ec:ac:f1: 72:4a:29:5c:ab:9f:a2:71:c9:14:a4:b3:e1:fb:a5: bb:d2:59:2e:cd:bb:d8:a8:2f:78:1c:a4:d0:cb:5c: ce:91:a0:ec:b1:cb:40:f0:7e:30:5d:1b:7f:1e:25: fd:e0:7a:fc:1f:95:c4:ab:a3:7d:bb:e1:b9:59:eb: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:48:C6:49:7F:AC:A7:51:5A:C2:0B:79:AF:52:82:A4:C2:6C:BB:F9 X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:fc:d9:12:90:4b:c4:e4:e3:98:b9:ab:0a:14:3e:1a:93:82: f1:5a:90:2f:94:96:d2:84:98:f8:51:ef:2c:93:af:f5:df:92: d9:19:e0:56:e0:22:4b:cf:0a:f5:1f:66:63:d8:22:fe:2a:72: 24:f9:ef:71:9f:6e:41:1e:95:25:1f:a8:a5:87:83:9e:5d:fd: 63:b3:fa:bc:8d:2d:c6:ae:81:b2:65:22:22:bc:7d:09:53:83: c8:d2:a4:3d:be:ff:83:23:bb:63:3a:28:ac:da:c4:10:4b:91: 07:01:0a:d7:54:ef:db:62:12:33:20:aa:a9:f1:c0:27:34:0c: 70:49:4b:78:95:18:63:d4:51:27:12:61:b7:ac:b8:6b:f9:b5: 1e:4d:1e:16:8f:62:51:9e:93:4e:37:bc:ac:27:ff:39:3a:2d: 36:16:ba:e6:91:2a:38:f1:09:b4:ef:f6:c8:dd:45:f1:97:a2: 0f:fd:9d:f3:03:79:08:18:76:5b:15:8a:af:09:da:a6:ef:c2: 30:11:45:15:22:13:b7:b9:78:2c:98:a5:48:26:7c:a9:f4:8f: b4:85:c6:ec:97:a1:b6:1a:25:d7:8f:a4:02:0d:3c:86:5a:52: 5a:42:44:8e:d8:d7:5c:a8:22:5c:be:37:8a:90:a5:90:51:59: 06:3d:ba:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTUwMDExMC8GA1UEBRMoNzQzRTc4QzQ1OThFRkM3MkRBMDg0NjQ2NTBFQjhGOUNE QTE2Rjk4MDAeFw0yNDA1MjEwODE1MjRaFw0yNDA1MjgwODE1MjRaMBgxFjAUBgNV BAMTDTY2NGM1ODFjLWU4MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaRu1SqDqzX1+G6ElxuOJB0G04ufyemB2leKjf0+MscNIvVfiinTcbtzNXi6jr NOjN3NnHx3KMtbfIyQ6or85MmACQCyv/56eQjSxeKAuNJjbPQfdMcDCX2jSnLMgW YspvQFOIZfbv8WXKbWz7WgRlRqBdZVxMVDFUKfIsvjTBTmL3H4SJfsc8t/OotjHU 0OhIRJ0RjgYVBbByBOrVr436bmT6819AhrITob28LzeiA1pTXtcLfbyMTeTOQgEn Uuys8XJKKVyrn6JxyRSks+H7pbvSWS7Nu9ioL3gcpNDLXM6RoOyxy0DwfjBdG38e Jf3gevwflcSro3274blZ60eVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb0jGSX+s p1Fawgt5r1KCpMJsu/kwHwYDVR0jBBgwFoAUdD54xFmO/HLaCEZGUOuPnNoW+YAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFNTAwLzNGRkY1QzNFQzcy RDExRUU5QzdDMzUxREM0RjlBRTAyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1Z QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEQ1NHhGbU9fSExhQ0VaR1VPdVBuTm9XLVlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF NTAwLzNGRkY1QzNFQzcyRDExRUU5QzdDMzUxREM0RjlBRTAyL2RENTR4Rm1PX0hM YUNFWkdVT3VQbk5vVy1ZQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAID82RKQS8Tk45i5qwoUPhqTgvFakC+UltKEmPhR7yyTr/XfktkZ4Fbg IkvPCvUfZmPYIv4qciT573GfbkEelSUfqKWHg55d/WOz+ryNLcaugbJlIiK8fQlT g8jSpD2+/4Mju2M6KKzaxBBLkQcBCtdU79tiEjMgqqnxwCc0DHBJS3iVGGPUUScS YbesuGv5tR5NHhaPYlGek043vKwn/zk6LTYWuuaRKjjxCbTv9sjdRfGXog/9nfMD eQgYdlsViq8J2qbvwjARRRUiE7e5eCyYpUgmfKn0j7SFxuyXobYaJdePpAINPIZa UlpCRI7Y11yoIly+N4qQpZBRWQY9urc= -----END CERTIFICATE-----Generated at Tue May 21 10:37:10 2024 by rpki-client on console-fra.rpki-client.org