$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: xkb2wo7QXtlfc0bAi1MIze4Qj8G8wmsdpjI0Lez9jG4= Subject key identifier: 10:EC:BC:08:CF:35:10:F4:8E:EE:49:3C:15:6C:B0:D6:07:2E:A8:98 Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 09FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 09F4 Signing time: Thu 02 May 2024 20:48:17 +0000 Manifest this update: Thu 02 May 2024 20:48:16 +0000 Manifest next update: Thu 09 May 2024 20:48:16 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: QvL2O4aXTT+z2fFsSm6LZfYFSoy1g0fBS/1AJvs/HHs=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: 0pOyw8LF7RGBw1qxoeNfF21Qn2Gqg0oqE4beQcmEP58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: May 2 20:48:16 2024 GMT Not After : May 9 20:48:16 2024 GMT Subject: CN=6633fc11-9207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:77:8b:64:d8:4f:54:db:38:62:a3:71:dc: 78:f9:33:7a:1e:7d:66:cc:1b:6f:8e:fd:b8:b7:df: ca:4f:70:ed:11:83:86:22:92:72:1a:e5:9f:55:da: 50:e9:6d:7b:d5:e1:84:b0:80:f1:f9:68:17:56:2b: db:73:e4:b3:12:99:dd:67:0b:bc:08:11:0b:3f:c7: cc:ed:3d:4a:3b:52:db:ee:9d:ff:e0:ab:06:d8:bd: 86:80:51:2b:9d:15:0e:0a:d9:80:0f:5c:c6:96:de: 05:97:06:a7:2e:55:44:fd:4e:18:c4:6b:4b:22:58: c2:19:a9:fd:5a:50:8f:20:7d:65:18:49:49:59:5d: f4:24:b4:2f:c4:1c:ca:02:95:fd:a4:27:61:f2:04: 81:b5:8c:17:b4:56:77:3e:b1:ed:7e:4f:3c:08:7d: 56:72:1f:40:f3:f5:a9:66:b3:ff:ab:94:17:84:9a: 59:de:ca:40:ec:81:9e:cf:17:a5:54:40:0e:eb:17: f2:80:ab:e0:dc:73:47:45:de:cf:ab:f4:2c:07:d7: 0f:ba:ba:8a:f4:e2:5f:41:de:e0:f4:67:8c:9a:66: ed:0d:ec:f6:ec:70:16:2c:b3:b5:e6:54:04:0d:ac: 4b:02:a9:35:fb:a5:23:f4:7c:6c:ad:b7:9a:6c:66: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EC:BC:08:CF:35:10:F4:8E:EE:49:3C:15:6C:B0:D6:07:2E:A8:98 X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:55:0b:30:58:26:94:8c:85:b4:1c:15:61:49:5c:ff:bc:29: a6:5c:10:cb:e7:05:48:05:7d:62:df:2e:90:ef:db:24:11:d4: 72:02:80:ff:72:53:73:fe:32:84:be:c9:eb:ba:ca:9c:ea:c0: a1:d2:8a:7f:48:b4:bc:a5:61:96:73:df:03:df:03:42:97:5b: b5:c5:50:db:2f:61:b9:5e:5f:41:76:93:d2:da:cc:ba:16:25: fa:0e:ac:06:f7:37:06:66:a7:13:9f:82:b4:5b:94:27:33:5d: 1a:97:ef:44:03:09:f3:c3:77:58:d7:da:2c:6a:08:3c:b9:35: 6a:48:be:c6:ac:cb:88:f1:87:43:c9:b1:ca:59:61:39:6a:d8: 95:32:d8:fb:51:86:4d:67:ae:94:01:10:99:d5:51:af:fd:27: 64:34:c3:91:7e:c9:ec:36:da:ca:e0:68:68:13:64:5a:a4:9e: aa:b2:07:db:e3:00:5e:f2:78:78:1e:34:16:c9:ed:f6:f3:f7: 49:5d:d0:e2:5a:9d:ac:da:e5:d8:6c:be:4a:81:b5:e7:47:20: eb:29:74:67:83:e4:24:52:39:75:f2:c6:3e:4b:06:fe:2f:c5: 90:db:82:98:69:84:33:5b:0d:be:26:f1:4c:d7:b8:a8:2d:a5: 77:79:7a:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjQwNTAyMjA0ODE2WhcNMjQwNTA5MjA0ODE2WjAYMRYwFAYD VQQDEw02NjMzZmMxMS05MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWx3i2TYT1TbOGKjcdx4+TN6Hn1mzBtvjv24t9/KT3DtEYOGIpJyGuWfVdpQ 6W171eGEsIDx+WgXVivbc+SzEpndZwu8CBELP8fM7T1KO1Lb7p3/4KsG2L2GgFEr nRUOCtmAD1zGlt4FlwanLlVE/U4YxGtLIljCGan9WlCPIH1lGElJWV30JLQvxBzK ApX9pCdh8gSBtYwXtFZ3PrHtfk88CH1Wch9A8/WpZrP/q5QXhJpZ3spA7IGezxel VEAO6xfygKvg3HNHRd7Pq/QsB9cPurqK9OJfQd7g9GeMmmbtDez27HAWLLO15lQE DaxLAqk1+6Uj9HxsrbeabGaCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDsvAjP NRD0ju5JPBVssNYHLqiYMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/VQswWCaUjIW0HBVhSVz/vCmmXBDL5wVIBX1i3y6Q79skEdRyAoD/ clNz/jKEvsnrusqc6sCh0op/SLS8pWGWc98D3wNCl1u1xVDbL2G5Xl9BdpPS2sy6 FiX6DqwG9zcGZqcTn4K0W5QnM10al+9EAwnzw3dY19osagg8uTVqSL7GrMuI8YdD ybHKWWE5atiVMtj7UYZNZ66UARCZ1VGv/SdkNMORfsnsNtrK4GhoE2RapJ6qsgfb 4wBe8nh4HjQWye328/dJXdDiWp2s2uXYbL5KgbXnRyDrKXRng+QkUjl18sY+Swb+ L8WQ24KYaYQzWw2+JvFM17ioLaV3eXoS -----END CERTIFICATE-----Generated at Thu May 2 22:13:25 2024 by rpki-client on console-fra.rpki-client.org