$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: mOeqxljygpxa+dVgfB5Hf20f59znlIcQLZjp3HZ3K4M= Subject key identifier: 09:7A:0D:56:C4:B7:C9:8A:CE:B3:4B:8C:4F:6F:11:07:50:E3:6A:C1 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 0FB8 Signing time: Sat 04 May 2024 21:02:23 +0000 Manifest this update: Sat 04 May 2024 21:02:22 +0000 Manifest next update: Sat 11 May 2024 21:02:22 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: zmaFjgkiynSFZpU512kvAEB8tWZavYTAXbjd2q+mzAY=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: l67TXmYzX11ydKu0rEHDmPeizjtCpkC5Dw8UPLRU3aU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: May 4 21:02:22 2024 GMT Not After : May 11 21:02:22 2024 GMT Subject: CN=6636a25f-c6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:5a:22:ef:84:76:0e:56:84:84:3c:c2:22: 01:12:0b:99:ce:8b:e7:6c:83:7e:04:20:b6:09:06: eb:cc:5f:9c:49:9d:e6:df:32:78:ca:c1:ff:e1:4d: 8c:a2:ae:a2:c9:14:7a:9d:d8:b0:8d:95:38:23:45: b9:0e:69:07:fd:7d:30:db:df:d2:85:1c:63:e3:f6: fb:3a:9e:93:d9:04:cb:17:f0:4f:05:6b:3d:43:7c: 17:e7:ab:68:89:14:7e:dc:81:32:3b:e5:00:3f:31: 55:37:97:2c:6b:f1:ee:2d:65:0a:04:fe:da:0b:ee: 14:3b:46:33:00:d5:eb:df:2c:98:43:0e:b8:0b:86: f1:c9:b2:98:ab:e1:13:21:99:1c:f1:7e:e8:fd:33: 9c:f3:19:2c:55:c3:65:1a:4b:cc:bf:60:74:e6:3c: f9:75:87:93:12:a6:3a:15:e9:18:ca:3c:41:a7:48: ab:d7:f9:ad:74:1a:4d:3c:cc:ad:b7:1d:cf:47:d9: 7a:00:a6:2e:86:e1:18:f7:f3:72:2f:2e:45:4b:d3: a3:9a:bd:f2:03:e3:de:12:95:eb:ee:dd:0f:f0:39: 2a:65:f4:44:31:93:79:d5:0e:d6:46:f0:44:71:e9: 97:45:7e:e8:73:9e:30:19:8e:c2:45:ca:98:ef:df: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:0D:56:C4:B7:C9:8A:CE:B3:4B:8C:4F:6F:11:07:50:E3:6A:C1 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:bb:5c:05:f6:36:21:44:ea:0a:df:a5:d7:a1:fb:66:c5:eb: 8f:14:5b:e9:e9:7b:89:60:d5:55:c8:d1:42:9e:4e:6e:e6:99: 50:4f:32:f5:85:6b:eb:55:5f:43:f9:72:29:07:12:8b:c1:32: 3d:c6:89:90:09:00:b0:24:41:2e:ae:2f:d4:63:9a:c4:8a:d1: 3e:95:49:6f:95:93:09:dc:d6:cd:55:de:1d:05:8f:4b:d1:10: 9b:4f:5c:e5:e0:80:73:de:9d:22:ba:92:b0:34:3c:a6:33:91: d5:0f:0c:5a:5e:99:d1:ac:0c:c3:7e:6b:05:3f:6a:d5:b2:4e: 3d:5b:bf:7a:54:b7:fe:2c:25:81:34:40:68:fb:bf:9f:72:97: bd:e5:35:86:e3:f2:c1:fd:24:45:27:90:75:78:14:80:9f:ae: f9:0f:2a:c5:32:b5:22:52:87:b1:c1:20:09:05:45:44:f9:dd: 4b:77:e9:eb:23:d5:06:3c:21:17:a7:e0:8b:d5:bd:79:70:8a: 89:5a:fa:9f:57:d6:4d:e9:38:16:ca:ce:f1:9b:2c:a7:5b:d2: 7c:c9:51:75:7a:a4:74:c5:48:70:5e:c7:0c:43:6d:5f:80:2c: 7b:84:98:b5:e5:c5:ac:fc:55:2d:be:d7:53:36:63:51:68:ca: d5:e8:07:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjQwNTA0MjEwMjIyWhcNMjQwNTExMjEwMjIyWjAYMRYwFAYD VQQDEw02NjM2YTI1Zi1jNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxZaIu+Edg5WhIQ8wiIBEguZzovnbIN+BCC2CQbrzF+cSZ3m3zJ4ysH/4U2M oq6iyRR6ndiwjZU4I0W5DmkH/X0w29/ShRxj4/b7Op6T2QTLF/BPBWs9Q3wX56to iRR+3IEyO+UAPzFVN5csa/HuLWUKBP7aC+4UO0YzANXr3yyYQw64C4bxybKYq+ET IZkc8X7o/TOc8xksVcNlGkvMv2B05jz5dYeTEqY6FekYyjxBp0ir1/mtdBpNPMyt tx3PR9l6AKYuhuEY9/NyLy5FS9Ojmr3yA+PeEpXr7t0P8DkqZfREMZN51Q7WRvBE cemXRX7oc54wGY7CRcqY79/RPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl6DVbE t8mKzrNLjE9vEQdQ42rBMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3u1wF9jYhROoK36XXoftmxeuPFFvp6XuJYNVVyNFCnk5u5plQTzL1 hWvrVV9D+XIpBxKLwTI9xomQCQCwJEEuri/UY5rEitE+lUlvlZMJ3NbNVd4dBY9L 0RCbT1zl4IBz3p0iupKwNDymM5HVDwxaXpnRrAzDfmsFP2rVsk49W796VLf+LCWB NEBo+7+fcpe95TWG4/LB/SRFJ5B1eBSAn675DyrFMrUiUoexwSAJBUVE+d1Ld+nr I9UGPCEXp+CL1b15cIqJWvqfV9ZN6TgWys7xmyynW9J8yVF1eqR0xUhwXscMQ21f gCx7hJi15cWs/FUtvtdTNmNRaMrV6Afr -----END CERTIFICATE-----Generated at Sat May 4 22:06:54 2024 by rpki-client on console-ams.rpki-client.org