$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft File: CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft (raw, json) Hash identifier: 843HChHU3mvwBnZMF9r8JoOdryLLU1r5Sy8ZFiJEkro= Subject key identifier: 1C:9E:A4:C3:E0:A1:D2:B1:E5:BE:F4:4C:27:75:D5:63:12:C0:5B:03 Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 Certificate issuer: /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft Manifest number: 029F Signing time: Tue 07 May 2024 03:35:54 +0000 Manifest this update: Tue 07 May 2024 03:35:54 +0000 Manifest next update: Tue 14 May 2024 03:35:53 +0000 Files and hashes: 1: CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl (hash: XrPChdn2xbmUQItjiRlgn6cuzszujwdHE58Df6gSGnI=) 2: 97E05E58B15E11ECB6B31625C4F9AE02.roa (hash: JPPLZ0jLf80Pa/fkFTKlcPJGomY6hEWsl9bvPTHW8DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Validity Not Before: May 7 03:35:54 2024 GMT Not After : May 14 03:35:53 2024 GMT Subject: CN=6639a19a-2376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:55:cb:5c:03:94:b7:f1:3c:37:28:02:f5: 7d:f2:80:62:09:0c:ba:42:75:97:df:14:7f:1b:81: 37:fb:74:94:63:b1:a8:af:c5:a8:cf:69:f0:19:a9: 3e:99:62:be:d3:4a:48:a5:49:87:e6:02:7b:cb:95: d1:10:94:60:8e:32:c0:0e:5c:d9:02:03:c5:b2:5a: af:95:47:48:1c:29:61:53:90:0c:54:0c:45:b8:ef: 25:d0:24:97:ae:59:ae:0d:fa:d2:26:2c:8c:b7:5a: da:2d:1d:0d:91:29:02:0f:11:9a:15:47:f2:37:ff: 60:9c:7d:4a:be:74:67:68:23:e0:ea:e7:a3:cc:67: 77:44:32:51:e0:14:8d:1d:45:b5:fd:3a:a9:d4:dc: 06:d6:84:d8:29:69:04:ee:a8:b0:f5:96:26:7e:fc: bd:b4:32:a9:8a:e7:15:bd:f6:25:34:60:3d:a4:73: 62:8b:51:85:ce:3e:89:b0:00:bd:d2:fc:e2:f0:81: d3:88:ee:77:d0:12:b1:a7:64:99:fa:3b:6a:2c:a8: f7:2d:f4:85:b2:8a:ed:df:98:a0:a1:4e:70:5a:18: 28:45:52:88:4b:14:bc:8c:e8:2e:ad:7b:b0:68:87: ac:b3:23:cf:20:69:30:8e:c3:a2:9d:55:59:58:f1: 01:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9E:A4:C3:E0:A1:D2:B1:E5:BE:F4:4C:27:75:D5:63:12:C0:5B:03 X509v3 Authority Key Identifier: keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:1c:07:f8:e2:a6:ea:27:38:32:bc:b6:34:28:1f:8b:97:97: 5b:d8:de:7d:de:c2:76:5e:d5:72:be:c6:6f:5a:5e:31:ea:4e: e7:cc:a1:16:56:ee:35:f6:68:9a:bb:24:40:56:b9:55:27:0b: 9f:09:c8:36:e6:01:6e:88:6e:f8:fc:b9:5f:e0:8c:11:b4:a6: ef:6e:e5:ca:41:7b:ea:05:5e:3f:36:f3:23:cb:7d:91:3a:a2: 80:db:5e:39:f8:25:67:87:e1:55:43:0c:ff:ce:79:02:e3:b8: f5:35:4b:ee:7b:2f:d8:7d:b7:d1:ca:37:16:68:c9:7f:6f:77: 5d:05:4c:52:03:d5:c7:b6:4d:c5:d0:ef:63:8d:63:aa:95:e9: 48:e2:04:bf:9a:88:6c:af:b9:fa:df:f6:9a:df:85:fa:9e:60: 9b:7e:11:bb:78:b2:64:88:eb:cf:8c:02:8f:91:4c:a3:ed:72: 54:0f:f3:16:68:13:ad:6e:f8:53:e1:a8:25:f2:52:31:5d:f8: 38:c2:16:3d:89:7a:8f:b3:69:59:9b:1e:67:66:91:9a:89:70: e2:f8:d9:37:09:e8:cb:4e:fc:1b:dd:1e:d8:18:d6:66:a7:da: 73:e7:62:aa:0e:2d:b3:c5:7b:8c:eb:2c:17:10:a9:0f:e3:60: ac:b7:a9:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2RTgxMTAvBgNVBAUTKDA4NENGQTlFQkMwNkMwRDY4MTA1NDhCMEVEMUNDNDdD RjhFRTBGMzEwHhcNMjQwNTA3MDMzNTU0WhcNMjQwNTE0MDMzNTUzWjAYMRYwFAYD VQQDEw02NjM5YTE5YS0yMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXBVy1wDlLfxPDcoAvV98oBiCQy6QnWX3xR/G4E3+3SUY7Gor8Woz2nwGak+ mWK+00pIpUmH5gJ7y5XREJRgjjLADlzZAgPFslqvlUdIHClhU5AMVAxFuO8l0CSX rlmuDfrSJiyMt1raLR0NkSkCDxGaFUfyN/9gnH1KvnRnaCPg6uejzGd3RDJR4BSN HUW1/Tqp1NwG1oTYKWkE7qiw9ZYmfvy9tDKpiucVvfYlNGA9pHNii1GFzj6JsAC9 0vzi8IHTiO530BKxp2SZ+jtqLKj3LfSFsort35igoU5wWhgoRVKISxS8jOgurXuw aIessyPPIGkwjsOinVVZWPEB3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByepMPg odKx5b70TCd11WMSwFsDMB8GA1UdIwQYMBaAFAhM+p68BsDWgQVIsO0cxHz47g8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZFOC9ENEI4REExNkIx NUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dOYUJCVWl3N1J6RWZQanVE ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NFejZucndHd05hQkJVaXc3UnpFZlBqdUR6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZFOC9ENEI4REExNkIxNUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dO YUJCVWl3N1J6RWZQanVEekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCHAf44qbqJzgyvLY0KB+Ll5db2N593sJ2XtVyvsZvWl4x6k7nzKEW Vu419miauyRAVrlVJwufCcg25gFuiG74/Llf4IwRtKbvbuXKQXvqBV4/NvMjy32R OqKA2145+CVnh+FVQwz/znkC47j1NUvuey/YfbfRyjcWaMl/b3ddBUxSA9XHtk3F 0O9jjWOqlelI4gS/mohsr7n63/aa34X6nmCbfhG7eLJkiOvPjAKPkUyj7XJUD/MW aBOtbvhT4agl8lIxXfg4whY9iXqPs2lZmx5nZpGaiXDi+Nk3CejLTvwb3R7YGNZm p9pz52KqDi2zxXuM6ywXEKkP42Cst6k9 -----END CERTIFICATE-----Generated at Tue May 7 04:35:42 2024 by rpki-client on console-ams.rpki-client.org