$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: mIrotW3EOxVSkTpvmI1pDv28gUhm9jdWyDHh8/CBmig= Subject key identifier: 11:AB:E0:2D:20:F4:62:9C:88:EB:81:B3:71:C5:D4:23:7F:F2:F8:85 Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 08B7 Signing time: Tue 30 Apr 2024 15:10:06 +0000 Manifest this update: Tue 30 Apr 2024 15:10:06 +0000 Manifest next update: Tue 07 May 2024 15:10:06 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: I3dTvOA+vapantRGpWl/Ug+hotMBthkcTfXtBFOqEoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Apr 30 15:10:06 2024 GMT Not After : May 7 15:10:06 2024 GMT Subject: CN=663109ce-7c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:d4:8e:51:10:16:15:a2:c3:12:55:43:42: d6:79:4f:62:eb:79:2a:d7:e4:e5:c2:d9:f3:7c:05: 2d:39:ab:97:04:17:e8:31:24:1e:1a:90:c3:a3:be: 0e:0f:9d:f9:f8:13:37:6f:b0:2a:78:b7:ee:f8:a3: e4:76:d4:9e:1b:1d:33:ba:6c:b1:85:9a:d7:9e:2a: 16:0a:d3:ad:d8:14:83:5b:1f:f1:50:f8:b3:23:a5: 07:9d:46:0f:81:db:94:d4:d0:e9:37:f0:38:b8:00: 3e:ce:bd:a5:98:9c:4a:8b:40:83:ee:d1:77:6f:10: 1a:35:8e:68:f3:4f:46:34:80:51:d1:1a:64:73:fd: 7c:14:51:f7:c8:92:a8:b8:67:5c:0d:ee:30:d2:40: 54:2e:dc:a2:f8:76:68:fa:93:a4:06:75:0e:2d:f8: 6a:08:cd:c7:21:3f:01:e9:71:1c:48:a0:ef:b1:48: b4:4f:fa:84:1d:37:4e:9c:09:27:c1:be:7d:d5:50: f5:7f:6a:53:0b:27:35:d6:da:2e:b8:f0:00:bd:4c: 7c:70:2d:3d:cd:06:9a:ba:e4:71:f6:43:2d:f2:3c: 23:e5:fd:79:48:23:02:24:04:4e:9b:ea:90:63:58: 7b:f3:be:32:a7:06:fd:59:e2:dd:7e:f1:07:ce:19: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AB:E0:2D:20:F4:62:9C:88:EB:81:B3:71:C5:D4:23:7F:F2:F8:85 X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9d:e4:52:a9:f5:5a:73:a7:a0:65:bc:f9:79:98:c7:36:28: 1e:5e:12:f2:28:48:e1:55:9a:f6:34:80:36:65:5c:c0:9a:8e: a1:5f:25:1c:af:71:30:c6:75:bd:fd:68:02:a4:7a:4e:ce:55: a0:8c:3f:45:54:a0:b2:ac:49:79:8c:6b:34:dd:57:d8:a0:cb: 77:39:c8:37:83:9f:8d:5b:ee:49:2e:45:60:e0:b7:e3:eb:f0: f0:9f:83:fd:cb:88:60:c8:de:6c:2c:1a:40:c7:ec:c0:0a:7f: 7b:b3:ff:22:d5:f3:2c:72:c3:e1:51:23:0f:10:cc:e4:8d:5c: 2c:d4:ed:e7:05:f2:20:ee:e1:bd:1e:f0:3b:54:45:f2:d9:98: eb:fd:31:75:0c:5e:d2:2d:f2:81:d0:df:57:0b:98:eb:85:0b: a0:4e:1e:bf:96:45:a6:a6:b0:0e:71:8a:76:9f:3c:f9:4e:2e: c1:14:03:75:3c:71:3a:79:ca:d6:7b:45:2f:0c:85:52:09:3c: 70:3a:c3:d3:73:24:d5:71:d1:ca:f6:ff:3f:c2:9a:77:e2:77: fe:5b:ad:02:e6:51:47:44:1f:09:c0:7c:ef:83:55:f8:19:cf: ff:66:75:54:d2:7d:df:cb:c8:28:76:ec:b5:e4:aa:de:df:d2: fd:16:d7:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjQwNDMwMTUxMDA2WhcNMjQwNTA3MTUxMDA2WjAYMRYwFAYD VQQDEw02NjMxMDljZS03YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJvUjlEQFhWiwxJVQ0LWeU9i63kq1+TlwtnzfAUtOauXBBfoMSQeGpDDo74O D535+BM3b7AqeLfu+KPkdtSeGx0zumyxhZrXnioWCtOt2BSDWx/xUPizI6UHnUYP gduU1NDpN/A4uAA+zr2lmJxKi0CD7tF3bxAaNY5o809GNIBR0Rpkc/18FFH3yJKo uGdcDe4w0kBULtyi+HZo+pOkBnUOLfhqCM3HIT8B6XEcSKDvsUi0T/qEHTdOnAkn wb591VD1f2pTCyc11touuPAAvUx8cC09zQaauuRx9kMt8jwj5f15SCMCJAROm+qQ Y1h7874ypwb9WeLdfvEHzhlMywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGr4C0g 9GKciOuBs3HF1CN/8viFMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBneRSqfVac6egZbz5eZjHNigeXhLyKEjhVZr2NIA2ZVzAmo6hXyUc r3EwxnW9/WgCpHpOzlWgjD9FVKCyrEl5jGs03VfYoMt3Ocg3g5+NW+5JLkVg4Lfj 6/Dwn4P9y4hgyN5sLBpAx+zACn97s/8i1fMscsPhUSMPEMzkjVws1O3nBfIg7uG9 HvA7VEXy2Zjr/TF1DF7SLfKB0N9XC5jrhQugTh6/lkWmprAOcYp2nzz5Ti7BFAN1 PHE6ecrWe0UvDIVSCTxwOsPTcyTVcdHK9v8/wpp34nf+W60C5lFHRB8JwHzvg1X4 Gc//ZnVU0n3fy8goduy15Kre39L9Ftfk -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:57 2024 by rpki-client on console-ams.rpki-client.org