$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: LE8cQHfFlaziDhfwznckfP/IjGA/NhO4gdLcvwTxcR8= Subject key identifier: 0F:09:0F:C1:BE:4F:13:42:8C:9A:77:5B:AA:3F:B4:7E:46:D0:65:2C Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0C70 Signing time: Sat 04 May 2024 19:11:09 +0000 Manifest this update: Sat 04 May 2024 19:11:08 +0000 Manifest next update: Sat 11 May 2024 19:11:08 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: DjYB7u44UE6bCTFm7Q6SHuub2d9IOY/wA445IUjsSEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: May 4 19:11:08 2024 GMT Not After : May 11 19:11:08 2024 GMT Subject: CN=6636884d-5899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:bb:d7:9c:a1:8b:06:ca:aa:87:1a:8d:ed: af:d9:a4:08:6f:6c:e7:bb:57:49:8e:1b:4b:ba:24: d8:0b:03:b0:3b:0f:81:4a:fb:d0:af:44:c8:23:eb: a9:14:eb:b3:5a:8c:a1:fb:bd:4e:a5:9f:7c:cf:cf: 73:60:66:8e:60:37:f0:21:ef:83:20:0a:ef:e1:c5: bf:7d:c0:81:f2:50:db:f3:8f:a4:e1:61:d8:23:53: 18:c3:1c:1e:94:80:4e:e6:70:0e:89:df:84:06:9e: a8:86:62:b0:85:d6:ac:45:e9:f1:9b:a5:63:c9:7a: 57:13:50:e3:f5:12:b8:d6:5c:98:97:db:61:6d:7c: 60:6c:31:03:fb:8b:f6:27:7d:11:4f:9b:2b:48:1d: bb:62:a2:a3:d2:01:58:00:5d:7a:30:42:5a:56:0e: 10:c0:fd:fa:46:6c:bc:75:d5:25:a2:de:c0:9f:29: 44:ae:1c:d1:d2:15:55:aa:77:17:1e:2b:c2:48:f5: 42:ad:01:db:cb:5a:f1:70:b8:ad:dd:17:ea:74:49: 7e:17:07:8c:f9:ef:09:0a:6a:25:55:ba:32:41:e4: b0:a5:0a:fc:a2:40:bb:b1:42:e6:47:81:7d:7b:2d: 95:04:93:11:dc:b1:22:84:1a:56:4f:c8:95:4f:cc: 31:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:09:0F:C1:BE:4F:13:42:8C:9A:77:5B:AA:3F:B4:7E:46:D0:65:2C X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d0:ac:04:93:c8:e9:b4:1d:30:14:68:45:03:a8:52:f7:56: 26:d2:1f:12:8f:88:01:e6:eb:17:c5:c8:7c:af:28:34:88:a6: 0b:8f:de:68:b2:26:4a:7b:83:17:11:4b:75:c9:ba:b8:27:02: 54:d1:93:9d:06:21:98:d3:77:da:cc:fc:48:cc:6f:10:2c:de: 75:c2:6c:f5:87:82:b4:a5:9d:3f:3a:a6:10:36:fb:63:9f:04: b0:7a:98:7f:a4:b7:55:b8:da:4e:da:c5:33:1e:0b:38:08:3c: fb:a9:22:84:bd:60:c1:ec:3e:66:44:b7:5f:9e:5f:e0:d3:14: ac:30:f0:e6:de:9a:7b:b4:ec:f7:45:48:55:d5:be:9f:b6:cc: f5:3e:76:e9:99:d7:d6:ca:b1:ff:b2:47:fb:87:8c:8b:94:bf: d2:bc:ba:ed:00:c3:de:d9:e3:1b:d1:a6:64:f2:c2:5e:28:fb: e6:67:13:c9:83:0e:ae:40:b9:cc:c0:58:b0:e2:8e:6e:9c:ca: ae:bd:f6:fe:93:be:5e:e2:c9:fe:b4:92:b5:a8:63:4e:28:10: 52:96:7f:13:f2:30:d3:d8:2f:34:bc:49:b7:de:46:b3:36:94: 1e:59:5b:be:2a:44:e2:5d:72:9a:35:bb:dd:6f:d1:ef:ae:b9: 29:ed:af:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjQwNTA0MTkxMTA4WhcNMjQwNTExMTkxMTA4WjAYMRYwFAYD VQQDEw02NjM2ODg0ZC01ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquC715yhiwbKqocaje2v2aQIb2znu1dJjhtLuiTYCwOwOw+BSvvQr0TII+up FOuzWoyh+71OpZ98z89zYGaOYDfwIe+DIArv4cW/fcCB8lDb84+k4WHYI1MYwxwe lIBO5nAOid+EBp6ohmKwhdasRenxm6VjyXpXE1Dj9RK41lyYl9thbXxgbDED+4v2 J30RT5srSB27YqKj0gFYAF16MEJaVg4QwP36Rmy8ddUlot7AnylErhzR0hVVqncX HivCSPVCrQHby1rxcLit3RfqdEl+FweM+e8JCmolVboyQeSwpQr8okC7sULmR4F9 ey2VBJMR3LEihBpWT8iVT8wxnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8JD8G+ TxNCjJp3W6o/tH5G0GUsMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp0KwEk8jptB0wFGhFA6hS91Ym0h8Sj4gB5usXxch8ryg0iKYLj95o siZKe4MXEUt1ybq4JwJU0ZOdBiGY03fazPxIzG8QLN51wmz1h4K0pZ0/OqYQNvtj nwSweph/pLdVuNpO2sUzHgs4CDz7qSKEvWDB7D5mRLdfnl/g0xSsMPDm3pp7tOz3 RUhV1b6ftsz1PnbpmdfWyrH/skf7h4yLlL/SvLrtAMPe2eMb0aZk8sJeKPvmZxPJ gw6uQLnMwFiw4o5unMquvfb+k75e4sn+tJK1qGNOKBBSln8T8jDT2C80vEm33kaz NpQeWVu+KkTiXXKaNbvdb9Hvrrkp7a9n -----END CERTIFICATE-----Generated at Sat May 4 20:37:19 2024 by rpki-client on console-fra.rpki-client.org