$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json) Hash identifier: qfdryrOOq31A8SiRIGJC3L7Zvoz+XvnNwttxlpc28GA= Subject key identifier: 1C:61:06:D3:4B:6B:D1:67:8F:BB:A5:35:62:AE:AD:02:8F:BF:42:C8 Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft Manifest number: 41 Signing time: Fri 17 May 2024 08:32:07 +0000 Manifest this update: Fri 17 May 2024 08:32:07 +0000 Manifest next update: Fri 24 May 2024 08:32:07 +0000 Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: KbFCmnymTQPefnbtNOkaaKZNxFR/Xiv0OTku0GQbe1M=) 2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: tThNJYbUDEGX7l9BePqZBqRS3H5vx42AJaOXqIGJAP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Validity Not Before: May 17 08:32:07 2024 GMT Not After : May 24 08:32:07 2024 GMT Subject: CN=66471607-3493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:af:c1:ab:29:eb:6e:57:7e:29:d2:73:a2: c1:05:ea:0c:93:f7:76:42:ee:d7:92:21:17:b1:01: 69:bc:72:ff:54:af:a5:96:a9:9e:97:fb:7a:2c:08: 4d:ea:9f:ff:4c:3e:4b:b4:c0:ee:ec:42:22:dd:78: 54:f6:ab:ea:ec:3f:e7:6a:ea:06:bc:ae:aa:b5:90: 50:7b:30:a5:29:c3:b8:af:44:e2:a5:2b:8c:7a:48: 20:d4:44:ba:24:38:56:45:88:d6:e4:aa:08:ce:ae: d0:93:33:eb:6c:c0:a0:59:31:bf:5e:91:68:b3:da: eb:83:04:1e:62:9c:74:91:57:5f:c7:a9:fb:f6:c9: a5:65:03:48:9c:44:b3:86:4d:e2:4b:d0:0e:2f:35: 5d:13:03:5b:31:92:67:d2:89:1f:c4:5a:d1:f5:5d: 0b:5d:cd:9f:7b:66:a6:10:0f:6d:fe:a6:6c:3c:45: ef:1f:11:3e:bf:59:fe:11:a3:0b:ea:62:51:bc:f8: 77:bc:ea:99:41:67:16:d7:5a:9f:a9:1c:cc:d7:97: 73:00:26:bd:98:81:1c:2e:59:8f:13:d2:36:b1:f3: 68:60:6d:51:2c:6b:14:f7:2d:f8:e8:58:9a:ea:80: 67:85:19:e2:e8:08:fb:3d:f1:b2:fa:d2:53:fd:9d: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:61:06:D3:4B:6B:D1:67:8F:BB:A5:35:62:AE:AD:02:8F:BF:42:C8 X509v3 Authority Key Identifier: keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a0:10:34:32:22:46:25:19:bd:4b:6d:b4:e2:69:e1:d5:2d: e0:b9:cc:da:bb:72:28:17:f2:d6:af:b1:fa:51:e8:f0:1d:e8: 3b:71:3c:05:c1:97:f4:e1:7f:b1:fc:74:08:70:c7:f7:64:6e: fd:69:b0:32:f3:8f:ea:80:8d:bc:d0:d6:a1:e3:3d:78:28:38: c0:79:d4:9a:1f:ac:45:e5:42:c5:d2:31:4d:be:96:f4:5e:e2: e5:cc:c6:9a:75:4d:00:43:e2:c6:2a:af:8c:5f:2a:6d:12:ce: b0:21:ce:09:aa:8d:12:ae:30:e3:ea:12:d8:80:1c:ee:c2:d8: 1f:79:2d:3d:1c:33:44:e5:de:0a:0e:51:47:df:8c:e1:15:bb: 8e:14:dd:22:33:fd:e1:b4:7f:9f:55:69:bf:41:11:78:93:50: 8f:a5:fc:3c:c0:48:bf:b2:30:c8:f5:49:7e:04:aa:e5:88:1c: 01:8b:ce:b4:34:57:95:f3:39:c1:b6:8c:f9:7e:ee:4c:e6:09: ef:7c:93:8b:8e:1d:09:a1:f7:5d:04:36:8c:c4:4e:26:71:76: 8d:e2:ee:58:c6:a1:f1:df:cc:96:79:d7:0d:91:8e:2b:a4:37: 65:58:f6:78:d8:77:84:e4:46:d3:98:39:a9:d0:fa:b5:9b:38: b6:ae:69:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjczRDExMC8GA1UEBRMoOUE4OUJCMzdDNTQzODZEQTlBODdBNjRGRjAwOTQ0MjhB MzE3MUE0NzAeFw0yNDA1MTcwODMyMDdaFw0yNDA1MjQwODMyMDdaMBgxFjAUBgNV BAMTDTY2NDcxNjA3LTM0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEdq/Bqynrbld+KdJzosEF6gyT93ZC7teSIRexAWm8cv9Ur6WWqZ6X+3osCE3q n/9MPku0wO7sQiLdeFT2q+rsP+dq6ga8rqq1kFB7MKUpw7ivROKlK4x6SCDURLok OFZFiNbkqgjOrtCTM+tswKBZMb9ekWiz2uuDBB5inHSRV1/Hqfv2yaVlA0icRLOG TeJL0A4vNV0TA1sxkmfSiR/EWtH1XQtdzZ97ZqYQD23+pmw8Re8fET6/Wf4Rowvq YlG8+He86plBZxbXWp+pHMzXl3MAJr2YgRwuWY8T0jax82hgbVEsaxT3LfjoWJrq gGeFGeLoCPs98bL60lP9neCBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHGEG00tr 0WePu6U1Yq6tAo+/QsgwHwYDVR0jBBgwFoAUmom7N8VDhtqah6ZP8AlEKKMXGkcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNzNEL0M5MkIzMjMyQ0Ux RjExRUVBQzYyNjE3Q0M0RjlBRTAyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdr Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbW9tN044VkRodHFhaDZaUDhBbEVLS01YR2tjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NzNEL0M5MkIzMjMyQ0UxRjExRUVBQzYyNjE3Q0M0RjlBRTAyL21vbTdOOFZEaHRx YWg2WlA4QWxFS0tNWEdrYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADygEDQyIkYlGb1LbbTiaeHVLeC5zNq7cigX8tavsfpR6PAd6DtxPAXB l/Thf7H8dAhwx/dkbv1psDLzj+qAjbzQ1qHjPXgoOMB51JofrEXlQsXSMU2+lvRe 4uXMxpp1TQBD4sYqr4xfKm0SzrAhzgmqjRKuMOPqEtiAHO7C2B95LT0cM0Tl3goO UUffjOEVu44U3SIz/eG0f59Vab9BEXiTUI+l/DzASL+yMMj1SX4EquWIHAGLzrQ0 V5XzOcG2jPl+7kzmCe98k4uOHQmh910ENozETiZxdo3i7ljGofHfzJZ51w2Rjiuk N2VY9njYd4TkRtOYOanQ+rWbOLauacY= -----END CERTIFICATE-----Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org