$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft File: fH06qZRpRKT9iR5GspbjygcKOF4.mft (raw, json) Hash identifier: j7ctzfIePS2p8UHWtklZUfrAzU9cuyGiTidrUr/ua2k= Subject key identifier: C3:3B:63:DB:91:96:D0:E5:C0:8E:E3:38:E2:9C:09:57:65:0E:4F:BF Authority key identifier: 7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E Certificate issuer: /CN=A91FE449/serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft Manifest number: 056E Signing time: Wed 01 May 2024 00:58:29 +0000 Manifest this update: Wed 01 May 2024 00:58:28 +0000 Manifest next update: Wed 08 May 2024 00:58:28 +0000 Files and hashes: 1: fH06qZRpRKT9iR5GspbjygcKOF4.crl (hash: 0eD5+IN90vdB+Q3/bIXi8qW6gSw0CUoHoHMO3hTnXAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE449/serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Validity Not Before: May 1 00:58:28 2024 GMT Not After : May 8 00:58:28 2024 GMT Subject: CN=663193b5-15da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:57:ec:ba:ba:d6:d7:d8:b4:72:cc:c3:82: 97:2e:97:a7:34:dc:e7:d2:42:85:c9:9d:81:d0:98: 7e:65:f1:44:67:b5:15:20:3c:da:a9:55:fb:66:ac: fa:05:d2:62:60:33:6c:f2:9b:22:eb:31:20:95:d1: 59:4c:42:11:ce:47:c6:10:24:0a:af:1f:56:3b:10: 7d:01:04:2c:25:c8:b6:63:dc:d1:2e:c8:fa:79:02: ab:2e:b8:f9:3b:42:c9:4c:99:4e:30:25:c0:e2:e0: 91:3c:d0:cb:99:ae:85:4a:32:33:bd:00:a1:cb:74: 92:64:82:0b:e0:19:94:31:25:ba:98:62:37:85:19: 48:1e:7b:1b:a8:d7:91:96:09:ee:fb:ea:f6:49:5b: ac:4d:22:0e:cd:f0:15:9c:ec:c4:f7:6e:cd:4b:18: 7a:a3:41:03:d5:3c:67:64:da:7e:00:77:68:32:3e: a7:33:fd:5a:0c:5a:95:ad:83:5a:77:e9:ec:c5:38: 9f:72:43:c2:32:f3:27:a7:39:c5:55:0b:1b:8a:45: de:53:5f:64:55:b0:03:d4:91:5b:b1:32:a7:db:27: 4b:32:5a:40:92:fa:87:2e:6c:a8:e5:d7:52:3c:1e: 5e:bc:76:88:57:ee:f1:0e:23:6c:5b:d0:5b:14:a7: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3B:63:DB:91:96:D0:E5:C0:8E:E3:38:E2:9C:09:57:65:0E:4F:BF X509v3 Authority Key Identifier: keyid:7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1b:64:d5:0d:16:c4:15:48:0c:63:7b:b6:59:07:3f:ca:d7: c3:c3:21:33:ec:d2:55:e5:2c:0b:48:31:3b:77:c0:81:52:66: 4a:9c:79:f8:29:82:c6:ef:80:20:36:53:67:99:09:59:a4:99: 3f:58:8c:ae:09:95:6e:06:fd:ce:b7:51:0b:53:3e:c6:6d:5a: a8:2e:09:07:05:9f:ba:eb:2d:a6:e9:25:8c:9d:5b:7d:e8:e0: 6b:3c:ce:12:5b:37:98:5d:67:6a:4a:9a:64:fa:7a:e6:99:e8: 4e:8d:50:af:f2:f1:ce:7b:ae:20:5b:48:8f:89:93:b3:27:64: 77:fb:f3:26:1a:01:fd:90:bc:f1:44:d9:48:97:cc:76:36:b5: 8b:50:d8:2e:f5:23:73:ac:10:cf:b2:08:fe:92:ce:1f:7c:32: b7:6e:ff:8c:5e:44:e9:f5:87:8a:a6:8d:48:90:40:16:95:78: 90:40:f4:34:74:4a:22:f2:ed:a8:2e:7e:db:55:ba:9b:84:c6: 59:e3:77:1f:0e:3d:14:50:98:b9:11:36:96:21:a4:81:8f:4d: c2:e0:89:cb:2c:44:76:b0:6b:5b:76:f1:50:6e:d8:07:18:f3: 9f:50:78:df:a5:09:35:c3:d6:2f:51:09:f9:4d:6f:86:1d:a8: f7:5f:f8:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0NDkxMTAvBgNVBAUTKDdDN0QzQUE5OTQ2OTQ0QTRGRDg5MUU0NkIyOTZFM0NB MDcwQTM4NUUwHhcNMjQwNTAxMDA1ODI4WhcNMjQwNTA4MDA1ODI4WjAYMRYwFAYD VQQDEw02NjMxOTNiNS0xNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5ZX7Lq61tfYtHLMw4KXLpenNNzn0kKFyZ2B0Jh+ZfFEZ7UVIDzaqVX7Zqz6 BdJiYDNs8psi6zEgldFZTEIRzkfGECQKrx9WOxB9AQQsJci2Y9zRLsj6eQKrLrj5 O0LJTJlOMCXA4uCRPNDLma6FSjIzvQChy3SSZIIL4BmUMSW6mGI3hRlIHnsbqNeR lgnu++r2SVusTSIOzfAVnOzE927NSxh6o0ED1TxnZNp+AHdoMj6nM/1aDFqVrYNa d+nsxTifckPCMvMnpznFVQsbikXeU19kVbAD1JFbsTKn2ydLMlpAkvqHLmyo5ddS PB5evHaIV+7xDiNsW9BbFKc9rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM7Y9uR ltDlwI7jOOKcCVdlDk+/MB8GA1UdIwQYMBaAFHx9OqmUaUSk/YkeRrKW48oHCjhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQ0OS83M0NCOTMwNDkx MDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJLVDlpUjVHc3BianlnY0tP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIMDZxWlJwUktUOWlSNUdzcGJqeWdjS09GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQ0OS83M0NCOTMwNDkxMDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJL VDlpUjVHc3BianlnY0tPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaG2TVDRbEFUgMY3u2WQc/ytfDwyEz7NJV5SwLSDE7d8CBUmZKnHn4 KYLG74AgNlNnmQlZpJk/WIyuCZVuBv3Ot1ELUz7GbVqoLgkHBZ+66y2m6SWMnVt9 6OBrPM4SWzeYXWdqSppk+nrmmehOjVCv8vHOe64gW0iPiZOzJ2R3+/MmGgH9kLzx RNlIl8x2NrWLUNgu9SNzrBDPsgj+ks4ffDK3bv+MXkTp9YeKpo1IkEAWlXiQQPQ0 dEoi8u2oLn7bVbqbhMZZ43cfDj0UUJi5ETaWIaSBj03C4InLLER2sGtbdvFQbtgH GPOfUHjfpQk1w9YvUQn5TW+GHaj3X/jU -----END CERTIFICATE-----Generated at Wed May 1 01:38:32 2024 by rpki-client on console-ams.rpki-client.org