$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: FQLxId8xKXbKfhJWqBL8g+3Q/Nr420tCDwXx6U0DiJY= Subject key identifier: 39:F2:4F:F2:4E:EA:CE:6B:63:A4:C4:B5:35:F9:2A:1C:F7:80:00:A7 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: F4 Signing time: Mon 03 Jun 2024 02:25:26 +0000 Manifest this update: Mon 03 Jun 2024 02:25:26 +0000 Manifest next update: Mon 10 Jun 2024 02:25:26 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: 8U3JrOr0OB61SFjuT2msLkbTnajGuu0LJJBkat2xVZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 02:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Jun 3 02:25:26 2024 GMT Not After : Jun 10 02:25:26 2024 GMT Subject: CN=665d2996-533a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:83:94:b5:68:21:bf:46:9c:84:b4:06:cf: 3a:6b:a8:60:a3:5b:2e:f5:dd:c1:96:9d:7e:58:c2: df:c1:9d:e2:3f:d2:f3:63:4d:08:13:0a:eb:42:95: 48:54:c5:b5:1e:b4:c6:e9:04:d7:8c:82:5f:f1:96: f7:e9:9d:14:c8:00:d1:3a:ff:3a:00:61:e0:61:69: 7f:ef:61:cb:f8:ee:22:7d:ca:1e:1c:98:40:0f:fb: aa:ce:fc:34:1f:a0:00:c3:90:2f:13:09:eb:e5:75: f8:f1:e3:5a:c6:cb:2a:9e:3d:2e:43:7b:da:15:8b: fc:4d:0b:3b:56:6a:41:62:ca:24:cc:e5:da:d7:07: fc:2d:7c:fd:b6:87:17:44:67:77:54:56:32:96:1e: 0d:d3:c1:b0:e0:51:d5:5b:1d:23:0f:c9:44:92:af: 29:a3:7f:e4:2e:18:01:39:a5:e3:c1:76:26:d9:ce: d1:b0:72:d7:4b:f2:3c:58:3d:2c:02:f3:b5:f8:cf: c4:68:1d:55:c8:15:2d:7a:ed:54:36:8a:a2:d4:b6: e9:a9:d1:84:9b:bf:15:cd:81:50:8e:fa:91:18:63: 8d:8a:5a:80:83:11:ef:69:aa:30:60:50:ea:21:ca: 01:61:75:13:f5:2a:c2:5a:0c:da:51:4e:29:e8:30: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F2:4F:F2:4E:EA:CE:6B:63:A4:C4:B5:35:F9:2A:1C:F7:80:00:A7 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:49:80:08:e8:81:8f:d9:ff:b6:0f:88:c9:8e:98:f1:df:d4: 5a:12:71:a4:59:9b:3b:a4:06:13:25:68:71:28:08:4b:27:d9: d8:2d:d2:66:81:57:37:3a:ea:01:d3:42:0b:21:07:06:8d:28: ba:bb:32:aa:c9:b7:b7:07:ea:8e:ab:6a:77:35:83:5d:69:76: d0:08:5f:ab:6c:e8:50:b3:3d:c9:ee:a2:54:32:1b:a0:75:14: 34:8f:2d:da:11:27:02:86:89:be:0e:a4:69:9c:07:cc:ac:46: 93:db:74:83:87:b2:18:f2:51:2a:11:39:a6:71:c3:76:e8:c2: 91:1e:73:da:4a:4f:6c:65:c7:a3:ef:78:12:3b:eb:f5:62:7d: f6:69:15:6c:4c:2e:b8:76:a8:64:09:85:7e:a7:fa:81:58:0d: 9e:70:f1:f4:57:c3:86:d1:c8:1b:f9:14:27:14:ae:d8:cc:b7: 89:77:01:fb:83:9b:50:0e:69:97:63:5f:67:41:97:11:a6:b2: 5d:e2:02:dd:6e:bf:5b:c3:fb:15:d8:0d:16:62:ab:b9:f2:0f: ee:8f:bc:36:f3:01:c0:e6:7c:da:37:c3:c7:69:3e:28:58:00: fa:f2:cd:87:73:3f:77:04:f1:5d:d3:16:f3:89:46:92:72:ca: f5:b5:a1:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjQwNjAzMDIyNTI2WhcNMjQwNjEwMDIyNTI2WjAYMRYwFAYD VQQDEw02NjVkMjk5Ni01MzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3muDlLVoIb9GnIS0Bs86a6hgo1su9d3Blp1+WMLfwZ3iP9LzY00IEwrrQpVI VMW1HrTG6QTXjIJf8Zb36Z0UyADROv86AGHgYWl/72HL+O4ifcoeHJhAD/uqzvw0 H6AAw5AvEwnr5XX48eNaxssqnj0uQ3vaFYv8TQs7VmpBYsokzOXa1wf8LXz9tocX RGd3VFYylh4N08Gw4FHVWx0jD8lEkq8po3/kLhgBOaXjwXYm2c7RsHLXS/I8WD0s AvO1+M/EaB1VyBUteu1UNoqi1LbpqdGEm78VzYFQjvqRGGONilqAgxHvaaowYFDq IcoBYXUT9SrCWgzaUU4p6DCQ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnyT/JO 6s5rY6TEtTX5Khz3gACnMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFSYAI6IGP2f+2D4jJjpjx39RaEnGkWZs7pAYTJWhxKAhLJ9nYLdJm gVc3OuoB00ILIQcGjSi6uzKqybe3B+qOq2p3NYNdaXbQCF+rbOhQsz3J7qJUMhug dRQ0jy3aEScChom+DqRpnAfMrEaT23SDh7IY8lEqETmmccN26MKRHnPaSk9sZcej 73gSO+v1Yn32aRVsTC64dqhkCYV+p/qBWA2ecPH0V8OG0cgb+RQnFK7YzLeJdwH7 g5tQDmmXY19nQZcRprJd4gLdbr9bw/sV2A0WYqu58g/uj7w28wHA5nzaN8PHaT4o WAD68s2Hcz93BPFd0xbziUaScsr1taFl -----END CERTIFICATE-----Generated at Mon Jun 3 04:15:29 2024 by rpki-client on console-ams.rpki-client.org