$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json) Hash identifier: LDejWkP94J9WZv/nH8OObtU8n+zKMgFLdF5HbeLZJIg= Subject key identifier: 01:76:16:7D:CC:65:9F:4A:75:41:D8:C0:6B:71:12:36:C5:C9:E1:81 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft Manifest number: 0562 Signing time: Fri 03 May 2024 00:53:16 +0000 Manifest this update: Fri 03 May 2024 00:53:16 +0000 Manifest next update: Fri 10 May 2024 00:53:16 +0000 Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: yqbzDasUflUiqReydBzludENxjbHkxpWaHDMHn7b6hE=) 2: 2F320256981611EB904AF150C4F9AE02.roa (hash: gCiU8YlaJGLiEr5b4Nj+bWgj4KNBno5w8aPLsmGD5U4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: May 3 00:53:16 2024 GMT Not After : May 10 00:53:16 2024 GMT Subject: CN=6634357c-8acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:ef:2e:f7:ee:a5:df:87:27:c9:32:b0:65: 77:9f:e5:d1:06:89:f2:55:a7:ec:11:75:91:fd:54: ae:ee:a0:8d:9b:71:30:7b:01:6e:92:f9:42:ef:ff: 4e:05:45:15:a0:b0:b8:c9:a7:f2:b2:47:e5:22:3b: e0:a3:3f:dd:64:3f:77:40:65:b8:fa:c7:b1:fb:02: 98:f4:2d:81:4d:2d:a1:a3:17:ac:a0:16:c6:cd:7a: 7b:c6:45:9a:1a:6a:26:c2:5f:77:06:4e:eb:45:8d: 59:e6:bd:74:07:67:ee:10:d4:31:93:04:8c:9f:7b: c5:9c:ae:a6:9d:ac:a6:e6:01:09:e8:13:82:f6:4b: f8:45:f6:cf:7f:37:33:ba:01:e7:a9:b0:ff:bb:04: 3d:aa:15:9a:ea:05:68:37:ed:93:76:c9:ac:b5:27: f1:e8:6f:c6:59:9c:d1:66:16:17:50:72:9a:8e:db: a4:65:20:3a:bc:e8:a4:b6:fb:5f:fc:e7:e7:a2:57: f2:b9:b1:73:6a:28:fb:43:95:74:20:92:66:35:1b: 27:a9:b1:bb:ef:1e:c5:54:a9:8f:27:a3:77:5c:e6: 34:36:52:6a:a6:7b:59:dc:80:2b:51:4c:bf:f2:81: 3c:6c:2d:9c:97:60:8f:3f:6c:9c:d5:a6:67:58:af: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:76:16:7D:CC:65:9F:4A:75:41:D8:C0:6B:71:12:36:C5:C9:E1:81 X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cb:61:9f:f4:53:27:79:4e:05:6b:86:39:d8:50:1e:e7:dc: 6f:52:3f:3d:37:84:7d:dc:6f:26:4c:1d:67:a1:c3:fd:0f:aa: f1:0b:da:b1:36:52:ee:d3:7d:16:b1:ea:d9:80:ba:44:fd:d8: 73:5b:34:aa:ed:e7:db:83:02:2c:73:60:66:db:17:0f:1d:02: 9b:72:6e:e8:83:a8:11:5f:ce:d6:9f:05:2e:71:41:cb:9a:36: 43:6b:95:c1:a9:b9:0d:aa:d1:b9:4b:1f:83:57:f1:9d:44:d7: 89:06:d6:d7:5a:61:18:57:a6:4d:43:8f:aa:b3:ec:75:f5:0e: 90:66:61:09:e9:df:84:96:47:93:73:44:22:fc:56:b4:1f:c0: 1b:9e:57:e6:d0:22:59:ee:66:82:ab:b0:7b:88:7a:bd:d1:33: aa:07:51:b4:6b:b7:04:4d:f7:45:ab:b9:2f:f1:4a:13:59:81: dc:ee:60:bb:69:f7:ba:35:8a:b5:c5:03:c5:b9:75:0e:07:2b: 44:18:96:a3:3e:9f:52:06:66:cf:dc:03:5a:e8:65:31:f9:d8: ad:06:60:0c:2c:81:a3:52:56:38:c0:ea:98:67:b5:97:e8:b2: 4a:21:2b:a8:a5:66:1b:ec:ef:4b:b1:b1:8d:76:ca:a7:56:5a: d2:f3:14:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjQwNTAzMDA1MzE2WhcNMjQwNTEwMDA1MzE2WjAYMRYwFAYD VQQDEw02NjM0MzU3Yy04YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzXvLvfupd+HJ8kysGV3n+XRBonyVafsEXWR/VSu7qCNm3EwewFukvlC7/9O BUUVoLC4yafyskflIjvgoz/dZD93QGW4+sex+wKY9C2BTS2hoxesoBbGzXp7xkWa Gmomwl93Bk7rRY1Z5r10B2fuENQxkwSMn3vFnK6mnaym5gEJ6BOC9kv4RfbPfzcz ugHnqbD/uwQ9qhWa6gVoN+2TdsmstSfx6G/GWZzRZhYXUHKajtukZSA6vOiktvtf /OfnolfyubFzaij7Q5V0IJJmNRsnqbG77x7FVKmPJ6N3XOY0NlJqpntZ3IArUUy/ 8oE8bC2cl2CPP2yc1aZnWK8shwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAF2Fn3M ZZ9KdUHYwGtxEjbFyeGBMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg0Ri9ERDQ4N0E1Qzk4MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3 emVNNEt6dTJrU1pmbGRNSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcy2Gf9FMneU4Fa4Y52FAe59xvUj89N4R93G8mTB1nocP9D6rxC9qx NlLu030WserZgLpE/dhzWzSq7efbgwIsc2Bm2xcPHQKbcm7og6gRX87WnwUucUHL mjZDa5XBqbkNqtG5Sx+DV/GdRNeJBtbXWmEYV6ZNQ4+qs+x19Q6QZmEJ6d+ElkeT c0Qi/Fa0H8Abnlfm0CJZ7maCq7B7iHq90TOqB1G0a7cETfdFq7kv8UoTWYHc7mC7 afe6NYq1xQPFuXUOBytEGJajPp9SBmbP3ANa6GUx+ditBmAMLIGjUlY4wOqYZ7WX 6LJKISuopWYb7O9LsbGNdsqnVlrS8xRF -----END CERTIFICATE-----Generated at Fri May 3 01:30:29 2024 by rpki-client on console-fra.rpki-client.org