$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: xKtQ3E8peUhOqdDC+fWSGVXzS+20qLOR//DIiSSEG40= Subject key identifier: 77:FA:47:B4:80:D2:E2:B0:9F:F1:C8:FF:F7:28:C3:F4:42:25:2A:48 Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 027D Signing time: Sun 19 May 2024 04:08:35 +0000 Manifest this update: Sun 19 May 2024 04:08:34 +0000 Manifest next update: Sun 26 May 2024 04:08:34 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: ugpxhRfAS6YVcucWOZV8dLEdDrLr4GWjJkaQYZHRSC4=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: 9q9oTcb4ioXwSsphGFckf19Bd13gyTER6v0uANu9tWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: May 19 04:08:34 2024 GMT Not After : May 26 04:08:34 2024 GMT Subject: CN=66497b42-a30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:90:27:af:b7:e9:f5:33:b0:62:9b:96:43: e9:81:c0:68:7f:3f:6f:10:d1:40:f6:57:54:96:3f: 5c:8f:36:0c:bf:c7:c2:d7:f5:7c:e2:bd:88:77:09: 22:c5:8a:c7:75:88:fc:c6:aa:a9:36:ba:c1:79:45: f5:ab:77:db:31:d8:d7:09:91:b9:c3:69:71:a9:b3: dc:52:96:e3:5a:ab:f9:4f:ee:3d:68:e4:da:31:54: f3:21:3e:50:a5:1b:02:8d:6c:f6:ca:b0:3f:84:7c: 9f:74:fa:b8:6a:a6:ff:bd:cf:1b:aa:c9:71:02:3b: ce:42:43:06:a5:ef:39:72:f2:15:f6:64:99:51:15: 34:9d:f7:94:93:70:a0:2d:5f:b9:07:05:0e:2f:ad: 00:2f:1c:95:a8:6b:63:eb:b0:e2:52:7e:18:66:78: ac:0f:d5:8a:44:fa:77:3e:24:b3:67:e9:78:91:81: 2c:30:ec:18:fa:20:24:ea:67:f9:2f:2a:fa:66:30: 60:43:60:79:f1:2f:24:e7:99:b7:f7:5c:92:2f:9d: 3e:78:b9:d4:08:d0:a3:91:51:7e:b4:9b:ca:66:50: 50:eb:be:cc:5e:58:a0:ca:6a:91:77:00:2e:9e:50: 92:e8:e5:4b:74:39:f3:c5:38:d0:c5:f3:36:bc:af: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FA:47:B4:80:D2:E2:B0:9F:F1:C8:FF:F7:28:C3:F4:42:25:2A:48 X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:bf:04:b0:b1:75:7c:5e:2b:80:52:e1:01:16:20:6d:7c:4a: 34:6c:37:4f:dd:ee:64:b2:ab:86:58:76:42:cf:64:06:ba:25: 35:20:ff:59:a2:13:6e:d3:a0:f5:7e:0a:f0:3e:94:4f:0c:c1: 70:12:6f:a4:37:2f:2e:ad:d5:9e:47:8e:06:19:aa:3f:c1:38: 4a:f1:74:fe:59:69:30:1e:39:d8:77:0b:e3:3c:8f:1e:3d:5d: fe:79:8d:e5:4f:4a:4d:1b:68:16:fc:a6:bb:63:91:68:8c:7f: f7:5f:b3:e7:f2:7d:88:07:df:05:e6:2f:c0:a2:3d:97:28:7e: 83:fc:aa:e7:e6:23:34:3f:87:e0:0e:23:35:b1:47:1d:dc:3b: ef:9f:47:0b:d3:80:78:e3:e7:e0:68:e1:48:a2:29:c9:d5:70: 09:a1:88:d2:a4:4b:c0:5f:84:dd:92:9e:1a:f9:ac:7c:0e:83: 0f:9b:34:34:e4:b8:59:1d:ef:5d:c9:a6:2c:a7:90:56:85:41: 9a:15:24:54:04:23:0b:9e:ee:29:03:26:aa:c3:bc:ba:fb:0c: 4c:93:19:7f:b7:42:30:a3:a4:9e:8f:45:b6:84:a4:9a:af:df: 5f:c0:09:6f:82:a9:3e:7d:68:ac:00:c5:bb:51:a2:69:5e:34: ac:3a:10:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTRFNjExMC8GA1UEBRMoQzc4RDFFNTk1OTFCRTBDNzUyNEQzNkJERjg1QzhBQzZF QTE5MEY4RTAeFw0yNDA1MTkwNDA4MzRaFw0yNDA1MjYwNDA4MzRaMBgxFjAUBgNV BAMTDTY2NDk3YjQyLWEzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiK5Anr7fp9TOwYpuWQ+mBwGh/P28Q0UD2V1SWP1yPNgy/x8LX9XzivYh3CSLF isd1iPzGqqk2usF5RfWrd9sx2NcJkbnDaXGps9xSluNaq/lP7j1o5NoxVPMhPlCl GwKNbPbKsD+EfJ90+rhqpv+9zxuqyXECO85CQwal7zly8hX2ZJlRFTSd95STcKAt X7kHBQ4vrQAvHJWoa2PrsOJSfhhmeKwP1YpE+nc+JLNn6XiRgSww7Bj6ICTqZ/kv KvpmMGBDYHnxLyTnmbf3XJIvnT54udQI0KORUX60m8pmUFDrvsxeWKDKapF3AC6e UJLo5Ut0OfPFONDF8za8r/oJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd/pHtIDS 4rCf8cj/9yjD9EIlKkgwHwYDVR0jBBgwFoAUx40eWVkb4MdSTTa9+FyKxuoZD44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NEU2LzlGMDY3NzQ4RUQ0 QjExRUNBQjhGQUE3N0M0RjlBRTAyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDQwZVdWa2I0TWRTVFRhOS1GeUt4dW9aRDQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NEU2LzlGMDY3NzQ4RUQ0QjExRUNBQjhGQUE3N0M0RjlBRTAyL3g0MGVXVmtiNE1k U1RUYTktRnlLeHVvWkQ0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAS/BLCxdXxeK4BS4QEWIG18SjRsN0/d7mSyq4ZYdkLPZAa6JTUg/1mi E27ToPV+CvA+lE8MwXASb6Q3Ly6t1Z5HjgYZqj/BOErxdP5ZaTAeOdh3C+M8jx49 Xf55jeVPSk0baBb8prtjkWiMf/dfs+fyfYgH3wXmL8CiPZcofoP8qufmIzQ/h+AO IzWxRx3cO++fRwvTgHjj5+Bo4UiiKcnVcAmhiNKkS8BfhN2Snhr5rHwOgw+bNDTk uFkd713JpiynkFaFQZoVJFQEIwue7ikDJqrDvLr7DEyTGX+3QjCjpJ6PRbaEpJqv 31/ACW+CqT59aKwAxbtRomleNKw6EM4= -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org