$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: tLPowFFt3lwfx8n48nzFsV1FbChq8xvOC+trwHTMpLM= Subject key identifier: 84:4E:8A:02:89:58:86:EB:74:93:39:EF:B2:39:3D:20:FB:1D:30:3E Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 051D Signing time: Sun 19 May 2024 02:03:30 +0000 Manifest this update: Sun 19 May 2024 02:03:29 +0000 Manifest next update: Sun 26 May 2024 02:03:29 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: QennFtqn6bESe/wWiThd6YlXMaXfcncdpTbCpKTADxM=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: Er/UNtkgc4K2xubRlL1RClLvC/mnL1xU/Bb7WH0Noi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: May 19 02:03:29 2024 GMT Not After : May 26 02:03:29 2024 GMT Subject: CN=66495df2-f02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:42:cf:1a:7e:14:2a:00:dc:32:46:0c:e9: 25:6e:30:3d:10:82:18:bc:59:9b:4d:f5:9b:21:71: 52:9c:3a:ff:6b:73:e8:0b:bb:62:f1:55:b1:fb:43: 74:c3:f7:38:85:92:b3:bf:2f:8c:2c:e4:01:8d:64: 2e:94:8d:d1:ac:28:ab:f3:bb:35:ee:5a:59:1e:a0: b6:4f:45:89:35:aa:a7:74:b3:15:65:82:26:a6:98: 9f:7d:3a:72:ab:69:a0:4b:e9:48:bf:7f:01:45:e9: 7c:b0:c9:27:d7:2e:a7:a8:0a:c0:b8:01:d7:6b:77: 14:e9:e4:20:52:be:5c:c8:a9:88:5c:01:e8:1e:5c: 3c:e2:30:97:32:c3:e6:eb:aa:e6:4b:84:74:8f:ce: 4a:79:0e:19:aa:dc:6c:a1:14:de:fc:3a:73:79:f5: b6:54:a9:71:da:25:1a:b8:ba:bb:9d:fd:ef:3b:7f: cb:40:15:29:e8:d3:13:a0:45:1f:12:d9:54:0b:d9: 4a:fb:98:67:3b:76:e1:e1:9f:27:a0:17:1e:c0:72: 22:2a:da:2d:1f:da:f3:3b:fb:30:76:2b:55:e8:d9: d4:88:38:57:4d:8c:af:38:61:13:10:a3:bb:9e:f5: 2a:40:58:1c:a9:dc:fb:52:5a:c6:54:bc:aa:de:ff: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4E:8A:02:89:58:86:EB:74:93:39:EF:B2:39:3D:20:FB:1D:30:3E X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:72:4b:09:ab:c8:57:2e:05:aa:6c:4d:41:6a:0d:5b:69:04: af:ae:c6:58:88:6c:ff:a2:23:2f:ed:9e:6d:00:89:3f:04:95: ee:49:f3:e6:12:28:b3:5e:3b:8c:a8:d3:b1:20:69:bf:04:5b: 21:4f:94:96:6e:40:10:47:8a:fa:0e:49:3c:e1:ad:01:ae:f8: dd:20:c8:0a:79:d9:4b:c8:82:ae:12:d2:68:e7:7b:47:b5:cb: f7:34:3c:3a:57:f9:85:86:d0:f4:0c:8a:7f:b1:c5:92:6f:62: fb:d0:f0:2e:9b:0b:f6:4a:0d:4d:bb:12:dd:06:2d:14:60:10: 60:5f:b1:f7:20:6c:33:dd:3d:7a:11:02:83:9c:85:b0:7f:7b: cf:80:4f:47:80:e8:1c:15:31:5b:e3:1d:4e:5e:d0:8b:04:1a: fa:7d:21:db:8a:74:1f:c9:e7:d1:62:b0:4b:38:0c:06:3f:1b: f4:46:9a:54:22:90:cf:9f:e5:e9:cb:b6:ff:ec:ca:58:47:8e: e3:e3:f3:00:83:99:03:e1:97:ca:3d:20:52:50:03:82:3d:0e: 9e:9f:bc:a2:cf:44:a6:c3:51:e8:4c:b5:c2:1c:5d:9e:db:a5: 5b:09:8e:d5:3f:09:30:97:5e:bb:06:dd:84:c4:cc:77:82:7f: 8a:d1:31:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjQwNTE5MDIwMzI5WhcNMjQwNTI2MDIwMzI5WjAYMRYwFAYD VQQDEw02NjQ5NWRmMi1mMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3y9Czxp+FCoA3DJGDOklbjA9EIIYvFmbTfWbIXFSnDr/a3PoC7ti8VWx+0N0 w/c4hZKzvy+MLOQBjWQulI3RrCir87s17lpZHqC2T0WJNaqndLMVZYImppiffTpy q2mgS+lIv38BRel8sMkn1y6nqArAuAHXa3cU6eQgUr5cyKmIXAHoHlw84jCXMsPm 66rmS4R0j85KeQ4ZqtxsoRTe/DpzefW2VKlx2iUauLq7nf3vO3/LQBUp6NMToEUf EtlUC9lK+5hnO3bh4Z8noBcewHIiKtotH9rzO/swditV6NnUiDhXTYyvOGETEKO7 nvUqQFgcqdz7UlrGVLyq3v9bBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIROigKJ WIbrdJM577I5PSD7HTA+MB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFcksJq8hXLgWqbE1Bag1baQSvrsZYiGz/oiMv7Z5tAIk/BJXuSfPm EiizXjuMqNOxIGm/BFshT5SWbkAQR4r6Dkk84a0BrvjdIMgKedlLyIKuEtJo53tH tcv3NDw6V/mFhtD0DIp/scWSb2L70PAumwv2Sg1NuxLdBi0UYBBgX7H3IGwz3T16 EQKDnIWwf3vPgE9HgOgcFTFb4x1OXtCLBBr6fSHbinQfyefRYrBLOAwGPxv0RppU IpDPn+Xpy7b/7MpYR47j4/MAg5kD4ZfKPSBSUAOCPQ6en7yiz0Smw1HoTLXCHF2e 26VbCY7VPwkwl167Bt2ExMx3gn+K0THm -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org