$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: ZXkfkXueS/iWC5gUj+hhOkyXwdl+Xjon+B7Tthpwz8s= Subject key identifier: D8:CE:80:F1:28:B8:95:5E:AB:87:AE:D4:71:E3:FF:CA:B4:7B:A9:39 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0360 Signing time: Sun 05 May 2024 03:02:00 +0000 Manifest this update: Sun 05 May 2024 03:01:59 +0000 Manifest next update: Sun 12 May 2024 03:01:59 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: aqYRruMP98PsktVQ8rnlmQG5v1m/9ZE5E4eRCk9aDck=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: G5PTC5mR/M/6C4He79GPX1zDTZ+AVyhpusoSCKs7omI=) 3: 4D87ACF0C4C911EE9E405162C4F9AE02.roa (hash: pWNwLfsYpEMZbwqMhQZBrEi+YnwT/SrdeDb1+G/W2AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: May 5 03:01:59 2024 GMT Not After : May 12 03:01:59 2024 GMT Subject: CN=6636f6a8-8d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:75:24:36:4e:ce:a1:f0:cd:d6:bc:61:b7:a1: e5:2a:57:d1:27:fd:8e:37:f9:dc:b1:98:b9:14:e9: 77:c3:d5:2e:09:47:15:95:22:d7:4f:b9:04:21:e6: a1:25:84:8e:36:62:af:21:0d:10:f6:e8:37:42:a4: a3:b0:0e:f2:d4:9b:f7:84:7e:8d:9b:7f:16:86:e8: 14:8a:4a:28:61:d5:25:b4:17:18:fc:b9:87:17:56: 0a:4d:cb:0f:77:2c:7d:12:38:5a:ff:bb:07:f3:ce: db:18:53:63:68:60:9e:4a:9a:0e:d7:44:59:6d:72: 93:ed:d5:21:5f:2c:2b:46:f3:de:90:8f:80:fb:00: c4:e8:b7:aa:e0:31:2e:4c:d5:cc:62:d3:5a:2b:6c: 76:26:1a:5c:15:21:cf:a5:e2:42:2f:1b:cb:8c:41: c0:ba:50:f7:a4:92:85:e0:94:3d:46:bd:10:f6:93: 09:a3:1e:ff:3b:70:4f:48:16:b1:8a:72:b9:90:a3: f8:41:24:a2:28:f1:84:1a:1b:f9:bb:56:94:e0:67: 00:47:83:49:8f:da:32:83:1b:27:d8:24:ca:68:ea: 46:ae:5d:39:da:cf:e6:e2:d8:71:f1:b8:0f:c0:c2: d7:1c:a1:c4:fd:b8:e3:5c:bb:05:b9:11:64:ab:34: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CE:80:F1:28:B8:95:5E:AB:87:AE:D4:71:E3:FF:CA:B4:7B:A9:39 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:38:09:95:59:a4:0d:99:c6:f9:c1:aa:bb:f7:17:b7:ef:af: 8b:ae:78:9e:e6:7c:01:fa:e2:c4:b4:5c:88:a4:89:47:1c:3a: d0:3b:20:1e:d5:b8:53:14:f0:ba:b7:f9:f9:34:38:ff:a1:48: 5c:b7:5d:33:d6:01:b4:99:ac:c5:26:c5:a9:13:78:2d:b5:2f: e6:9f:0f:49:60:94:60:83:81:82:6f:70:2e:67:80:2a:21:5f: 5f:41:82:c4:be:b8:7c:52:d0:fe:18:7e:a4:e4:2e:c2:1e:b8: 19:6e:22:70:b3:42:b9:4e:40:9b:b5:be:b5:a4:f5:73:4e:3d: 9c:86:3f:70:15:b5:b3:37:f3:ac:81:77:34:bb:c3:5d:58:c2: 46:a0:95:1f:6f:19:ec:f5:f7:c6:33:38:c5:15:bd:10:cf:74: 69:cf:50:1e:87:a9:66:1e:1a:90:4e:b3:ef:8e:39:5c:98:3f: 44:0f:6f:5c:49:ad:3c:f0:63:06:5d:71:ac:9b:85:df:42:a3: c7:d7:36:84:52:82:a8:17:74:9b:1e:b3:b8:3b:82:4c:9d:e4: 6d:5b:d9:21:a2:ff:1a:a4:2f:e7:af:54:5a:f3:53:81:ef:13: 95:91:62:44:7c:72:b6:6c:27:1a:e4:46:27:ea:f8:9d:9a:71: a8:dd:e5:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjQwNTA1MDMwMTU5WhcNMjQwNTEyMDMwMTU5WjAYMRYwFAYD VQQDEw02NjM2ZjZhOC04ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HUkNk7OofDN1rxht6HlKlfRJ/2ON/ncsZi5FOl3w9UuCUcVlSLXT7kEIeah JYSONmKvIQ0Q9ug3QqSjsA7y1Jv3hH6Nm38WhugUikooYdUltBcY/LmHF1YKTcsP dyx9Ejha/7sH887bGFNjaGCeSpoO10RZbXKT7dUhXywrRvPekI+A+wDE6Leq4DEu TNXMYtNaK2x2JhpcFSHPpeJCLxvLjEHAulD3pJKF4JQ9Rr0Q9pMJox7/O3BPSBax inK5kKP4QSSiKPGEGhv5u1aU4GcAR4NJj9oygxsn2CTKaOpGrl052s/m4thx8bgP wMLXHKHE/bjjXLsFuRFkqzTF2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjOgPEo uJVeq4eu1HHj/8q0e6k5MB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgOAmVWaQNmcb5waq79xe376+Lrnie5nwB+uLEtFyIpIlHHDrQOyAe 1bhTFPC6t/n5NDj/oUhct10z1gG0mazFJsWpE3gttS/mnw9JYJRgg4GCb3AuZ4Aq IV9fQYLEvrh8UtD+GH6k5C7CHrgZbiJws0K5TkCbtb61pPVzTj2chj9wFbWzN/Os gXc0u8NdWMJGoJUfbxns9ffGMzjFFb0Qz3Rpz1Aeh6lmHhqQTrPvjjlcmD9ED29c Sa088GMGXXGsm4XfQqPH1zaEUoKoF3SbHrO4O4JMneRtW9khov8apC/nr1Ra81OB 7xOVkWJEfHK2bCca5EYn6vidmnGo3eXl -----END CERTIFICATE-----Generated at Sun May 5 03:47:50 2024 by rpki-client on console-fra.rpki-client.org