$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: lLIS5qC1j8phLh/B5MPacRyZKdocvw9a+qPGroxw3dU= Subject key identifier: 4B:3A:55:D8:AF:53:BF:A4:FD:C9:38:58:29:75:5E:B9:84:3E:28:38 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 1144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 1128 Signing time: Sat 04 May 2024 17:59:10 +0000 Manifest this update: Sat 04 May 2024 17:59:09 +0000 Manifest next update: Sat 11 May 2024 17:59:09 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: SmyNb1H8SMiCyHE5ETi6QGcd5GQtZpbFy3pEY1ZJIRM=) 2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: XtPZc43LcNddLgZeOf9NK4ZrrcvhqyG22Dj6LiPpNtE=) 3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: xcxRZivsLcCkVUktyewe/XyH0UGaw784MWqTbGphmYk=) 4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: 0v9M1/doReV6RjOB27laEEC7Y4U/Hc1DGCSbqCo/5MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4420 (0x1144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: May 4 17:59:09 2024 GMT Not After : May 11 17:59:09 2024 GMT Subject: CN=6636776e-8a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:98:b6:59:70:f9:79:04:33:eb:20:2a:cb: 0a:58:d4:43:59:34:c0:85:4f:31:eb:eb:cc:41:e9: 95:a9:3f:bb:27:27:c5:4f:cf:5c:18:d0:85:fb:d0: ea:c4:03:aa:33:20:36:df:67:ba:75:da:57:b3:19: 6e:81:63:28:5f:b8:40:28:f8:6e:70:7e:03:ae:51: 85:4b:ca:2d:fc:95:7c:1a:8a:e5:4f:c6:29:cb:94: 6a:ee:2a:02:21:72:78:d5:2a:1c:cb:4e:27:58:1d: 1e:f2:04:2c:95:07:df:cd:f9:c4:ef:c7:7b:23:1a: 53:1c:bb:ca:4d:97:cd:48:a5:89:46:ed:0f:c7:d3: a0:e7:69:97:e3:8d:ea:07:84:fd:bc:c1:a5:84:0e: ca:67:ab:c3:f3:68:76:5c:50:74:db:7b:e0:11:4e: 82:7c:a1:24:e3:b8:27:3f:a8:6e:c0:86:42:25:bb: 13:83:a2:67:24:39:ef:3b:00:d7:54:90:30:99:7a: dd:2b:1e:60:6e:26:f7:27:4a:20:5d:7b:83:2c:aa: ff:5e:07:a3:d8:cc:b6:92:34:49:52:87:bd:38:84: 40:85:72:24:da:48:79:7e:96:a5:fe:b2:ea:14:74: 57:ea:45:d0:78:f6:90:0d:12:fd:8f:ab:34:16:29: 6c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:55:D8:AF:53:BF:A4:FD:C9:38:58:29:75:5E:B9:84:3E:28:38 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:80:30:7c:81:38:2f:52:8d:c5:41:aa:a3:bc:45:07:a2:b4: eb:05:10:d2:63:48:d1:b4:b8:5a:1c:6d:e8:c8:1e:7f:ac:7f: 7f:f1:a5:1c:42:06:94:c1:64:ee:5d:52:f1:d9:53:cc:3f:3e: 9b:02:3d:80:d3:7b:83:d7:79:07:9b:0e:9c:d6:68:2a:28:e4: 93:a8:c9:31:37:73:33:f5:99:50:48:e3:57:3e:91:2a:40:fd: 6a:62:fd:87:63:c4:9d:4a:d0:9a:46:4c:4a:94:53:5e:67:78: f5:e4:51:03:f7:44:68:ea:e2:f4:5c:73:c3:64:83:6e:c0:83: bf:10:e0:c6:d3:0a:2d:25:dc:d6:e6:bf:9a:52:3d:19:c7:e9: 9f:ed:da:10:8e:34:e1:f0:3f:c9:b7:10:89:10:6a:52:d5:80: 82:8a:f6:d2:b3:0f:80:3b:2e:3b:bc:b6:48:31:cd:aa:5c:78: a0:bb:27:ce:50:d5:58:75:cf:e2:24:7d:9c:85:bd:be:8b:ab: 3c:5a:f4:64:28:65:fe:d3:fa:1f:bc:15:44:da:8a:50:02:33: 17:f5:42:27:1c:6d:f9:d5:c9:0a:cc:4a:a2:60:89:31:12:3c: df:85:81:62:7a:af:f3:b5:d7:5b:4e:34:d1:fa:ac:5b:60:e4: f3:50:45:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjQwNTA0MTc1OTA5WhcNMjQwNTExMTc1OTA5WjAYMRYwFAYD VQQDEw02NjM2Nzc2ZS04YTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2+Ytllw+XkEM+sgKssKWNRDWTTAhU8x6+vMQemVqT+7JyfFT89cGNCF+9Dq xAOqMyA232e6ddpXsxlugWMoX7hAKPhucH4DrlGFS8ot/JV8GorlT8Ypy5Rq7ioC IXJ41Socy04nWB0e8gQslQffzfnE78d7IxpTHLvKTZfNSKWJRu0Px9Og52mX443q B4T9vMGlhA7KZ6vD82h2XFB023vgEU6CfKEk47gnP6huwIZCJbsTg6JnJDnvOwDX VJAwmXrdKx5gbib3J0ogXXuDLKr/Xgej2My2kjRJUoe9OIRAhXIk2kh5fpal/rLq FHRX6kXQePaQDRL9j6s0FilsWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs6Vdiv U7+k/ck4WCl1XrmEPig4MB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3gDB8gTgvUo3FQaqjvEUHorTrBRDSY0jRtLhaHG3oyB5/rH9/8aUc QgaUwWTuXVLx2VPMPz6bAj2A03uD13kHmw6c1mgqKOSTqMkxN3Mz9ZlQSONXPpEq QP1qYv2HY8SdStCaRkxKlFNeZ3j15FED90Ro6uL0XHPDZINuwIO/EODG0wotJdzW 5r+aUj0Zx+mf7doQjjTh8D/JtxCJEGpS1YCCivbSsw+AOy47vLZIMc2qXHiguyfO UNVYdc/iJH2chb2+i6s8WvRkKGX+0/ofvBVE2opQAjMX9UInHG351ckKzEqiYIkx EjzfhYFieq/ztddbTjTR+qxbYOTzUEUe -----END CERTIFICATE-----Generated at Sat May 4 20:37:19 2024 by rpki-client on console-fra.rpki-client.org