$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: Dr5LT3H+zQmj5CHopaR4XfVloX8/Zfk2IjUJfCNCIF8= Subject key identifier: 39:FE:6F:E1:29:0B:AA:93:F5:2F:96:72:D5:D9:3F:9F:96:95:B1:35 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 74 Signing time: Sun 19 May 2024 07:27:42 +0000 Manifest this update: Sun 19 May 2024 07:27:41 +0000 Manifest next update: Sun 26 May 2024 07:27:41 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: ZgEik/uHYRuv0aF7yUBjldFOYBQUwN/jCWYmtwq8Wok=) 2: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: IUgNex4iPrWnmyVmO2Q5cbWe368R6s70Pzj5ggltF2A=) 3: 3802AF56829811EEB7C3F322C4F9AE02.roa (hash: oS3C+FSMz2H/XTjfURX211A08f5vVH7C1Pp3+rk3ejA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: May 19 07:27:41 2024 GMT Not After : May 26 07:27:41 2024 GMT Subject: CN=6649a9ed-89de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:07:ab:22:e8:14:64:17:ac:2d:f8:1b:9f: d8:37:69:9c:c9:b9:c6:57:05:28:48:33:10:ec:cd: cd:26:db:39:a6:f3:b5:fe:06:a8:28:52:9c:dc:0b: 26:30:df:48:e9:c7:32:3e:4b:50:48:d2:75:57:d0: 01:81:03:44:6e:8f:94:70:51:02:de:e5:47:fa:18: b9:85:28:36:87:9f:87:be:d6:c4:6f:2b:fc:6a:c9: 81:48:5b:98:58:e2:d7:5d:cc:1c:aa:82:0b:2f:15: 18:1f:91:52:bf:f5:e9:dd:53:82:0c:98:ce:1e:91: a4:7a:d3:c3:cc:94:a1:f6:e6:7b:dc:6d:75:55:3e: 82:45:0c:f7:56:17:89:11:81:6e:f3:e3:25:28:3a: 20:83:b6:e7:35:0f:1c:71:a7:7e:73:9d:b9:ac:a1: 04:20:a3:20:ae:9d:51:c7:0c:13:11:2e:2e:c7:b0: 45:11:d8:97:b1:02:69:a7:29:2c:aa:6e:70:c1:b0: 2d:a6:77:ef:a2:fd:88:84:96:e7:53:03:a8:0c:c8: a7:56:4b:b5:e5:aa:f6:3c:2a:04:5b:e2:bd:8f:76: c6:4d:2a:0c:d4:2b:d6:71:bf:39:32:80:14:6a:0e: 59:f7:a5:4c:52:37:7f:23:c6:ac:90:4a:5c:39:82: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FE:6F:E1:29:0B:AA:93:F5:2F:96:72:D5:D9:3F:9F:96:95:B1:35 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fc:b1:52:df:26:f3:8f:82:9e:aa:78:62:9f:3c:d9:8b:39: 34:41:f0:0d:73:a7:9a:7e:de:f0:af:ba:e5:bf:69:d2:e0:0c: 6f:db:5d:2d:c2:b5:56:f9:2d:22:b4:30:74:c5:ab:78:34:92: 0e:20:84:3e:83:f5:0f:ec:7e:e5:7b:bf:6f:34:c4:7c:77:a3: 25:7e:8a:30:90:25:58:91:ac:51:c5:3d:22:4e:67:0f:38:ca: 85:e1:b0:8f:8c:69:24:f5:51:e1:0a:11:5a:4e:0f:38:f8:c1: 40:e9:08:8f:7e:4a:9f:40:d6:f3:1a:cc:25:be:59:11:80:7c: 14:12:69:63:a0:6e:bc:da:1a:b3:aa:4f:ad:fd:8e:26:04:ec: 82:16:36:50:75:19:8f:77:9a:8b:78:a3:97:79:5f:91:b2:e2: 0c:74:ca:08:eb:21:a3:19:d9:f9:b5:e0:51:8a:50:76:2c:f8: 1d:24:f4:3e:5c:d9:b0:9c:e9:df:61:7a:09:de:57:7f:95:56: 97:8e:f2:fd:5d:72:06:ec:f5:6e:62:a0:33:3b:89:57:ac:88: e8:df:c2:5f:3b:3a:49:1d:d5:06:c6:ff:43:e8:04:aa:cc:5b: f1:4c:de:2c:6e:96:7b:92:c0:c1:bb:41:2a:db:a3:a0:ce:56: d6:80:91:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTdBMjExMC8GA1UEBRMoRTM5MDdCNDhFNjk4N0UyRkRGQ0VEMDFFRDAxRDQwQjNG NjNEQjExODAeFw0yNDA1MTkwNzI3NDFaFw0yNDA1MjYwNzI3NDFaMBgxFjAUBgNV BAMTDTY2NDlhOWVkLTg5ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIhQerIugUZBesLfgbn9g3aZzJucZXBShIMxDszc0m2zmm87X+BqgoUpzcCyYw 30jpxzI+S1BI0nVX0AGBA0Ruj5RwUQLe5Uf6GLmFKDaHn4e+1sRvK/xqyYFIW5hY 4tddzByqggsvFRgfkVK/9endU4IMmM4ekaR608PMlKH25nvcbXVVPoJFDPdWF4kR gW7z4yUoOiCDtuc1Dxxxp35znbmsoQQgoyCunVHHDBMRLi7HsEUR2JexAmmnKSyq bnDBsC2md++i/YiEludTA6gMyKdWS7XlqvY8KgRb4r2PdsZNKgzUK9ZxvzkygBRq Dln3pUxSN38jxqyQSlw5guN5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOf5v4SkL qpP1L5Zy1dk/n5aVsTUwHwYDVR0jBBgwFoAU45B7SOaYfi/fztAe0B1As/Y9sRgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5N0EyL0IzREZDODg0NkQ2 MjExRUVCMzA3Q0UxOUM0RjlBRTAyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNS Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDVCN1NPYVlmaV9menRBZTBCMUFzX1k5c1JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 N0EyL0IzREZDODg0NkQ2MjExRUVCMzA3Q0UxOUM0RjlBRTAyLzQ1QjdTT2FZZmlf Znp0QWUwQjFBc19ZOXNSZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABX8sVLfJvOPgp6qeGKfPNmLOTRB8A1zp5p+3vCvuuW/adLgDG/bXS3C tVb5LSK0MHTFq3g0kg4ghD6D9Q/sfuV7v280xHx3oyV+ijCQJViRrFHFPSJOZw84 yoXhsI+MaST1UeEKEVpODzj4wUDpCI9+Sp9A1vMazCW+WRGAfBQSaWOgbrzaGrOq T639jiYE7IIWNlB1GY93mot4o5d5X5Gy4gx0ygjrIaMZ2fm14FGKUHYs+B0k9D5c 2bCc6d9hegneV3+VVpeO8v1dcgbs9W5ioDM7iVesiOjfwl87Okkd1QbG/0PoBKrM W/FM3ixulnuSwMG7QSrbo6DOVtaAkVM= -----END CERTIFICATE-----Generated at Sun May 19 08:24:59 2024 by rpki-client on console-ams.rpki-client.org