$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: cOyW1JgR+pkVdwvGIyoz8v87C9TCToHOwRorX3wMbyI= Subject key identifier: 32:BF:83:61:AB:10:A6:02:59:95:68:89:A3:74:48:66:50:6C:D2:95 Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0BB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0BA0 Signing time: Thu 02 May 2024 19:20:18 +0000 Manifest this update: Thu 02 May 2024 19:20:18 +0000 Manifest next update: Thu 09 May 2024 19:20:18 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: bw8LvYLnpOYA4ZwfU57jtDlIYL76fX7IfBAyXLF345U=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 4IYIB01vfapV8uIVjZVvt9vfa/un9Di3AF5QTJRdC70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: May 2 19:20:18 2024 GMT Not After : May 9 19:20:18 2024 GMT Subject: CN=6633e772-93df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:df:6e:79:b8:c5:3a:c7:65:3a:9e:60:6a: 20:7f:ee:75:7e:bb:53:0b:99:db:a7:e5:e1:be:1a: d1:4c:e5:61:84:9b:62:8d:1c:2d:90:b5:ae:c9:7b: 80:da:67:e6:93:5b:5c:13:a6:1e:61:3f:d2:15:f2: ee:20:60:0d:9e:c2:e2:79:07:83:5b:fa:2f:84:76: c7:fc:bf:73:df:cc:0b:e1:75:43:3a:f4:ab:d1:aa: e5:16:62:90:7f:68:b3:7c:83:7c:c7:7c:30:f6:f3: 26:22:2a:42:22:6b:09:62:03:9b:76:de:3b:fa:06: 44:19:55:6c:6a:2d:a6:b3:78:a6:b1:d6:6e:74:57: d3:d8:83:ab:5d:c7:90:61:aa:66:52:c2:95:63:87: fe:65:2b:05:5e:c7:11:90:9e:a1:63:b7:d9:20:47: cf:d8:66:42:0a:81:bd:f6:a2:cb:1f:ac:5e:ca:b9: cf:36:24:00:e5:2f:d6:b3:d1:22:95:53:9a:dc:2f: 79:60:5f:17:a3:0c:5d:de:df:a9:48:78:8e:0d:11: 88:02:b7:61:51:5b:dd:68:e4:8d:9b:da:4b:7b:fb: 6e:ea:a3:76:2a:84:20:a8:99:f6:f3:aa:06:87:a1: 5c:c7:05:d3:eb:ab:27:59:3b:d4:b0:c6:7f:34:90: 06:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:83:61:AB:10:A6:02:59:95:68:89:A3:74:48:66:50:6C:D2:95 X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c1:38:60:37:a2:e3:92:ab:07:d8:9f:87:dc:3e:89:00:d0: 42:29:d0:a7:cf:0b:93:7b:7a:a2:c5:73:d8:39:76:e2:98:65: 12:1e:03:63:79:b0:b1:18:ef:e0:e4:a5:4a:89:84:ea:ee:92: 89:eb:c7:e9:26:91:bf:77:b5:14:b8:9d:72:02:fb:5a:39:e4: 9e:3c:42:d8:eb:e9:d5:ab:b8:6f:e3:6b:02:c2:5f:04:0b:c4: 92:77:1d:02:bd:7d:db:2e:36:6f:f0:25:ad:4c:3c:c4:07:46: ba:51:e1:0c:3e:55:05:a8:7f:75:e5:f2:34:92:13:41:96:54: 93:8e:33:ca:d5:0a:10:bc:d1:7e:c6:97:3c:68:4b:bb:06:42: c6:b6:58:48:70:6d:17:d4:7f:b0:85:6f:ce:fb:98:e2:02:c6: 60:00:6f:9a:34:5f:7f:ce:f3:cd:c3:0f:61:24:be:20:53:1a: 50:98:81:22:fc:7b:3d:30:3b:3b:73:5b:46:3f:b6:ef:21:0b: 16:a9:e5:c3:6a:9e:0e:1d:43:10:25:c0:ad:0f:f5:41:c5:92: 00:e9:9b:f2:3c:df:d2:2f:ce:b7:49:46:84:d6:33:22:ab:76: 9d:56:7e:58:07:7f:f6:43:ed:e4:6b:c8:50:ff:ad:59:55:2b: c2:23:ea:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjQwNTAyMTkyMDE4WhcNMjQwNTA5MTkyMDE4WjAYMRYwFAYD VQQDEw02NjMzZTc3Mi05M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLLfbnm4xTrHZTqeYGogf+51frtTC5nbp+XhvhrRTOVhhJtijRwtkLWuyXuA 2mfmk1tcE6YeYT/SFfLuIGANnsLieQeDW/ovhHbH/L9z38wL4XVDOvSr0arlFmKQ f2izfIN8x3ww9vMmIipCImsJYgObdt47+gZEGVVsai2ms3imsdZudFfT2IOrXceQ YapmUsKVY4f+ZSsFXscRkJ6hY7fZIEfP2GZCCoG99qLLH6xeyrnPNiQA5S/Ws9Ei lVOa3C95YF8Xowxd3t+pSHiODRGIArdhUVvdaOSNm9pLe/tu6qN2KoQgqJn286oG h6FcxwXT66snWTvUsMZ/NJAGiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK/g2Gr EKYCWZVoiaN0SGZQbNKVMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2wThgN6LjkqsH2J+H3D6JANBCKdCnzwuTe3qixXPYOXbimGUSHgNj ebCxGO/g5KVKiYTq7pKJ68fpJpG/d7UUuJ1yAvtaOeSePELY6+nVq7hv42sCwl8E C8SSdx0CvX3bLjZv8CWtTDzEB0a6UeEMPlUFqH915fI0khNBllSTjjPK1QoQvNF+ xpc8aEu7BkLGtlhIcG0X1H+whW/O+5jiAsZgAG+aNF9/zvPNww9hJL4gUxpQmIEi /Hs9MDs7c1tGP7bvIQsWqeXDap4OHUMQJcCtD/VBxZIA6ZvyPN/SL863SUaE1jMi q3adVn5YB3/2Q+3ka8hQ/61ZVSvCI+on -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org