$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: z9j9hOe0yDxwvFKxvg6phfh51q9RwuOD1ivcyRQXOE8= Subject key identifier: 23:8B:72:FE:21:A2:66:98:C1:04:DC:40:B7:85:AE:B3:94:93:87:22 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 0568 Signing time: Fri 03 May 2024 00:51:19 +0000 Manifest this update: Fri 03 May 2024 00:51:18 +0000 Manifest next update: Fri 10 May 2024 00:51:18 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: +xtpXHjUreZa726T76vclLWt1ATh+4gWjGxnDnkLCLM=) 2: 1B4DA20CD46711ECA1A27035C4F9AE02.roa (hash: c+IcopvbSFKbNI/bK9N3IjS1UiK8CZ1Ykr32AtfiQkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: May 3 00:51:18 2024 GMT Not After : May 10 00:51:18 2024 GMT Subject: CN=66343506-9957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:24:72:0f:b3:b0:99:43:94:d0:39:bb:f8: 28:a6:00:df:59:4c:48:34:5a:8c:ea:33:ac:b3:54: 7e:57:24:e8:ad:a0:62:98:7c:df:17:5d:20:a3:b4: 53:7a:dd:a5:27:86:14:ae:a1:08:0f:46:4d:99:2a: d1:f1:9e:af:39:2d:c6:52:95:b9:e8:a2:46:a0:a9: 39:58:96:39:eb:15:df:e3:32:fd:5d:2a:20:3d:e5: bf:a6:8a:ea:16:da:dd:2a:7d:f3:c0:16:93:63:4e: 94:c7:da:80:a6:5e:a3:9c:39:fd:14:d7:b8:29:ec: 47:2a:6a:04:0c:3b:fc:f6:78:ed:86:ff:95:75:9a: bb:41:84:d2:48:b4:0e:ee:a0:61:f6:55:d6:56:ab: 1b:f4:7e:50:35:0c:37:d2:48:b3:2f:30:97:b7:33: 2b:1d:1f:4d:db:8b:dc:d0:5c:56:96:b5:20:7b:1f: c1:f8:b3:b8:fa:b0:6a:44:dc:fe:e7:d2:53:df:4d: b0:83:52:31:ef:f7:2b:d6:a4:b5:c5:c3:50:c4:05: 07:17:0a:3f:1c:c8:c4:8e:e6:71:7b:c1:07:1f:b4: 8c:da:dc:5b:9e:80:b6:fa:ff:1d:1f:67:92:bb:c5: c2:57:1c:cc:e4:c5:88:e5:74:51:c2:e6:7c:42:07: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:72:FE:21:A2:66:98:C1:04:DC:40:B7:85:AE:B3:94:93:87:22 X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ea:4d:8d:74:61:dd:e0:7f:b7:22:98:20:cb:81:28:84:97: 47:e6:c1:ef:9a:ff:37:7b:ba:fa:ed:50:29:cd:52:d8:4b:cf: c2:67:0d:54:9d:39:ea:0b:23:df:eb:aa:3c:64:ff:a4:21:56: 4b:a6:b1:54:05:de:c2:5b:e8:ba:71:7d:4a:df:12:ae:46:5c: 41:77:56:7b:f1:53:9b:01:f7:72:e7:59:1b:8d:ee:35:2e:5e: 01:0f:f7:19:47:2f:90:02:ae:ad:7e:7d:b9:5f:2d:d8:b3:bf: 4b:6b:c6:c0:c6:f3:3b:33:14:de:b6:c9:69:0a:d8:2a:16:2e: 9a:2b:91:d3:f3:a0:7c:6a:b2:f1:a1:d0:15:d0:18:4f:80:fb: 0f:2b:e8:aa:97:77:e6:84:98:28:59:78:d4:56:f0:0c:51:cc: e0:39:d4:a9:ba:a7:c5:c5:11:67:38:1b:df:95:03:62:6d:0b: 47:fc:71:03:75:7f:e6:f3:3a:92:7d:f4:62:eb:a2:55:3c:d4: a3:be:cf:b1:30:11:1a:61:72:79:75:d1:d1:26:2d:c7:9b:37: fb:a6:f5:01:36:82:d6:cc:f0:f3:b1:26:02:e0:f6:b4:76:8f: 02:5e:4c:bc:f7:61:8e:a7:fc:62:86:ad:ef:af:24:47:04:5a: 2e:79:47:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjQwNTAzMDA1MTE4WhcNMjQwNTEwMDA1MTE4WjAYMRYwFAYD VQQDEw02NjM0MzUwNi05OTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4Qkcg+zsJlDlNA5u/gopgDfWUxINFqM6jOss1R+VyToraBimHzfF10go7RT et2lJ4YUrqEID0ZNmSrR8Z6vOS3GUpW56KJGoKk5WJY56xXf4zL9XSogPeW/porq FtrdKn3zwBaTY06Ux9qApl6jnDn9FNe4KexHKmoEDDv89njthv+VdZq7QYTSSLQO 7qBh9lXWVqsb9H5QNQw30kizLzCXtzMrHR9N24vc0FxWlrUgex/B+LO4+rBqRNz+ 59JT302wg1Ix7/cr1qS1xcNQxAUHFwo/HMjEjuZxe8EHH7SM2txbnoC2+v8dH2eS u8XCVxzM5MWI5XRRwuZ8Qgej7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOLcv4h omaYwQTcQLeFrrOUk4ciMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ6k2NdGHd4H+3Ipggy4EohJdH5sHvmv83e7r67VApzVLYS8/CZw1U nTnqCyPf66o8ZP+kIVZLprFUBd7CW+i6cX1K3xKuRlxBd1Z78VObAfdy51kbje41 Ll4BD/cZRy+QAq6tfn25Xy3Ys79La8bAxvM7MxTetslpCtgqFi6aK5HT86B8arLx odAV0BhPgPsPK+iql3fmhJgoWXjUVvAMUczgOdSpuqfFxRFnOBvflQNibQtH/HED dX/m8zqSffRi66JVPNSjvs+xMBEaYXJ5ddHRJi3Hmzf7pvUBNoLWzPDzsSYC4Pa0 do8CXky892GOp/xihq3vryRHBFoueUeG -----END CERTIFICATE-----Generated at Fri May 3 01:30:28 2024 by rpki-client on console-fra.rpki-client.org