$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft File: 1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json) Hash identifier: XsoD4ZlnzQOJVohvFcTcPnWbQ/7F3z61Nslpy0WFlcw= Subject key identifier: 0E:E9:86:65:97:BE:42:08:B8:6A:11:EF:E3:9D:24:E3:AA:07:E1:10 Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 Certificate issuer: /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft Manifest number: 010C Signing time: Wed 01 May 2024 05:41:10 +0000 Manifest this update: Wed 01 May 2024 05:41:09 +0000 Manifest next update: Wed 08 May 2024 05:41:09 +0000 Files and hashes: 1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: ACfdhS4Iu+TlkhvHR9us+Cnjsu/9eR8adO5Q2Vxn5qE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 05:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Validity Not Before: May 1 05:41:09 2024 GMT Not After : May 8 05:41:09 2024 GMT Subject: CN=6631d5f6-2035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:b4:db:36:e0:af:b0:be:58:e9:7a:49:8e: d2:f2:e6:56:6c:d4:5a:f0:8d:f5:f6:38:32:69:00: dc:58:e3:51:3d:d5:a2:c6:51:89:8d:dd:87:fe:02: 48:02:c1:6f:0a:10:fb:47:7e:9e:4b:83:06:63:2d: 04:ab:36:f4:ed:9d:da:3a:76:e4:ef:30:fe:52:89: 9d:78:14:10:a3:4a:f9:de:cd:10:28:1b:55:af:d5: 13:4e:78:45:24:15:b3:c1:e2:8c:f3:71:89:46:ce: fd:12:3f:32:6d:64:55:b3:5a:c0:68:9b:2d:38:c8: 22:5a:48:a2:1b:27:d1:9c:25:af:95:64:fb:26:09: f8:5d:c9:62:a1:48:ac:d0:f0:16:90:ba:09:e0:e8: f4:34:f2:ff:66:88:80:32:aa:d6:95:de:72:8b:f4: 89:d5:43:2e:c5:bf:9d:e8:6a:ca:2d:ee:fe:1b:59: bb:06:3b:1a:a0:bc:f5:5d:99:c0:21:a9:89:ec:51: e6:aa:6c:3c:c8:9c:c1:d7:c6:59:c8:f7:3e:e3:55: bd:3f:80:c6:9f:d7:f5:cc:d1:16:1a:47:92:62:29: 9f:6a:7b:8d:67:0d:48:e7:45:af:b6:ed:72:ab:24: 9b:59:70:7b:ac:65:c9:8c:24:72:b9:a4:f7:7b:dc: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E9:86:65:97:BE:42:08:B8:6A:11:EF:E3:9D:24:E3:AA:07:E1:10 X509v3 Authority Key Identifier: keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:35:09:ba:4f:04:57:ff:a4:aa:50:cf:b8:0e:2b:75:15:bc: 89:a6:da:8e:10:02:ce:60:a1:a0:db:14:2b:53:8f:f0:fa:be: 6c:90:e5:c5:9f:ba:82:26:84:9a:ff:24:61:3f:be:20:54:51: e0:6a:2e:d6:2e:08:a5:52:99:8e:47:58:ac:60:33:8b:78:70: 21:79:11:7d:95:fe:d1:ff:3c:81:05:9d:30:a9:c4:39:86:da: 09:5a:68:9d:5d:39:7f:d5:6b:b0:39:f0:4f:aa:0e:f4:96:f7: 03:af:84:91:71:f0:97:4e:75:b3:4e:9b:e8:bf:7b:64:10:48: cb:dc:68:b7:a5:02:48:21:a6:54:b2:ba:ff:8d:60:d3:f9:e8: a6:e1:18:dc:f1:8a:57:0b:1f:bc:b6:46:1f:42:33:63:38:81: 33:9b:da:47:5b:34:ff:bc:b7:a1:61:f4:9e:7e:b8:ac:a3:c2: 74:88:4e:76:34:b1:be:43:84:7c:58:00:1f:04:a2:37:66:5f: 6e:46:c3:ef:e6:1b:a0:b0:ae:1e:9c:f2:e3:43:44:cd:05:cc: 6f:1a:3c:2a:33:5e:d2:2e:8d:85:d2:cd:e3:cf:a1:40:6b:73: f9:2e:a4:80:c3:ef:e8:5d:bd:87:35:76:94:5a:fc:6b:19:d6: 1c:9f:be:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEQ2RUQxNTA5REI4N0MzNEM0NjBBMjY0MUExOUI3RjQ4 NEU0REM0NDUwHhcNMjQwNTAxMDU0MTA5WhcNMjQwNTA4MDU0MTA5WjAYMRYwFAYD VQQDEw02NjMxZDVmNi0yMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36C02zbgr7C+WOl6SY7S8uZWbNRa8I319jgyaQDcWONRPdWixlGJjd2H/gJI AsFvChD7R36eS4MGYy0Eqzb07Z3aOnbk7zD+UomdeBQQo0r53s0QKBtVr9UTTnhF JBWzweKM83GJRs79Ej8ybWRVs1rAaJstOMgiWkiiGyfRnCWvlWT7Jgn4XclioUis 0PAWkLoJ4Oj0NPL/ZoiAMqrWld5yi/SJ1UMuxb+d6GrKLe7+G1m7BjsaoLz1XZnA IamJ7FHmqmw8yJzB18ZZyPc+41W9P4DGn9f1zNEWGkeSYimfanuNZw1I50Wvtu1y qySbWXB7rGXJjCRyuaT3e9xSSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7phmWX vkIIuGoR7+OdJOOqB+EQMB8GA1UdIwQYMBaAFNbtFQnbh8NMRgomQaGbf0hOTcRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi82NjQ1QUNBNjZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcweEdDaVpCb1p0X1NFNU54 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1MFZDZHVIdzB4R0NpWkJvWnRfU0U1TnhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi82NjQ1QUNBNjZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcw eEdDaVpCb1p0X1NFNU54RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHNQm6TwRX/6SqUM+4Dit1FbyJptqOEALOYKGg2xQrU4/w+r5skOXF n7qCJoSa/yRhP74gVFHgai7WLgilUpmOR1isYDOLeHAheRF9lf7R/zyBBZ0wqcQ5 htoJWmidXTl/1WuwOfBPqg70lvcDr4SRcfCXTnWzTpvov3tkEEjL3Gi3pQJIIaZU srr/jWDT+eim4Rjc8YpXCx+8tkYfQjNjOIEzm9pHWzT/vLehYfSefriso8J0iE52 NLG+Q4R8WAAfBKI3Zl9uRsPv5hugsK4enPLjQ0TNBcxvGjwqM17SLo2F0s3jz6FA a3P5LqSAw+/oXb2HNXaUWvxrGdYcn76q -----END CERTIFICATE-----Generated at Wed May 1 07:07:07 2024 by rpki-client on console-fra.rpki-client.org