$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: 5k2k/jMzBBpSniLO9V7c++FCPIZZ5L/SKxGLKTe/0F0= Subject key identifier: 42:80:AB:AF:71:EE:00:9B:B6:64:28:CE:54:5E:D0:D4:1B:02:C9:63 Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 69 Signing time: Fri 31 May 2024 08:38:24 +0000 Manifest this update: Fri 31 May 2024 08:38:24 +0000 Manifest next update: Fri 07 Jun 2024 08:38:24 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: jh6z90Pu64uEwVpWDMGmO/2sRGwo8of/pjkPwq2xEOw=) 2: 7898766C921111EEB27ADA0BC4F9AE02.roa (hash: PbFH0LW/eDc+RsqKHQh/Z9To2QMCAkbu+8IxiZlAMJc=) 3: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: 7q6dRt1PRPumvLOcxheCYVDUESOcIxgJ43UkEKxKC5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: May 31 08:38:24 2024 GMT Not After : Jun 7 08:38:24 2024 GMT Subject: CN=66598c80-de72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:70:34:d8:96:9f:c5:4b:ad:7f:89:7f:91: 1c:65:0a:e3:23:04:3f:e6:ec:d8:ad:c2:b3:f4:3a: 4d:92:3a:40:58:3d:0b:71:46:d0:0a:ed:78:67:9c: 20:4d:ff:18:ba:63:1b:2c:ed:96:0c:9a:1e:1b:00: a5:3f:1a:0b:06:31:ca:fb:6b:95:1d:ab:f4:df:f6: 09:6b:e7:12:00:5e:69:fe:bc:18:c0:c7:9d:c9:44: 6a:56:b0:63:bc:47:05:a1:67:fd:20:4d:7f:52:d4: 0c:13:51:b2:c4:20:ae:d4:6a:f4:83:c0:6d:bd:75: 8f:d4:57:37:50:b8:28:ea:65:e8:bf:17:22:5e:d1: 4d:c2:1a:bd:e5:b1:7f:ab:f2:b5:15:d1:f7:eb:da: d1:10:d9:ba:37:87:1e:cf:5e:47:e8:da:f9:58:71: 71:5d:c2:9a:00:61:81:a6:c0:57:44:ac:a5:d7:8e: 4a:c8:80:23:7e:45:a4:47:cb:de:ed:6f:a6:c7:b9: 51:a5:87:e2:1f:2e:fc:40:47:ad:27:4c:f5:f5:f7: 18:77:0f:ea:ef:c3:c5:a0:58:ba:f0:d5:fe:87:e4: ee:28:8d:1c:fb:6f:29:b9:2c:1b:a6:58:e1:d2:20: f0:7a:1e:79:f9:2c:75:30:b3:18:da:95:02:bc:f3: 0a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:AB:AF:71:EE:00:9B:B6:64:28:CE:54:5E:D0:D4:1B:02:C9:63 X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2b:3b:72:c4:fc:c0:f2:71:4d:65:55:7e:88:4c:a6:84:82: 4a:31:bf:7b:ec:c1:e8:32:41:cf:8c:3c:00:63:a7:43:e1:aa: 84:a5:d5:12:a4:75:24:5a:bf:3d:cd:a9:30:dd:fe:eb:12:54: 0e:7b:96:34:e0:e8:8e:f3:63:31:29:c7:09:f1:be:7a:0b:3b: fe:54:b7:1f:08:d5:5f:1c:e6:ff:ae:03:47:2b:33:d2:a1:7a: 67:e4:3e:d6:1e:64:5b:e3:0d:75:64:d2:42:5f:cf:3c:58:1d: 0d:8a:0d:3b:87:4e:b4:64:09:ea:8d:06:90:60:3f:8f:a9:09: 5f:d8:b9:70:57:25:bd:4c:32:8d:2d:61:5a:4f:2d:98:dd:02: 96:df:23:bc:12:ec:7b:ed:b3:3f:a3:63:08:21:29:a2:b1:ef: 7d:f3:7a:7c:ff:c2:bb:70:91:e1:53:42:11:2c:c1:d9:45:23: 20:4c:73:a4:c5:1f:16:2f:c5:18:a2:bf:24:ba:22:10:40:cb: 6d:e9:9f:30:2c:e3:83:cf:76:ec:12:ae:51:35:74:ee:e5:e1: aa:cc:06:5f:0d:c1:82:a3:55:70:8c:d4:43:4b:03:71:85:27: 1b:4c:69:ea:a6:bd:53:e1:ea:10:16:6b:fd:ce:c2:8f:58:f1: 42:b7:17:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjVEQjExMC8GA1UEBRMoN0JFMjMwMTUzQ0ZGOTAwMTY0MkRCQzlCMjRGODVEMEND MjgyMzY0RTAeFw0yNDA1MzEwODM4MjRaFw0yNDA2MDcwODM4MjRaMBgxFjAUBgNV BAMTDTY2NTk4YzgwLWRlNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7WnA02JafxUutf4l/kRxlCuMjBD/m7NitwrP0Ok2SOkBYPQtxRtAK7XhnnCBN /xi6Yxss7ZYMmh4bAKU/GgsGMcr7a5Udq/Tf9glr5xIAXmn+vBjAx53JRGpWsGO8 RwWhZ/0gTX9S1AwTUbLEIK7UavSDwG29dY/UVzdQuCjqZei/FyJe0U3CGr3lsX+r 8rUV0ffr2tEQ2bo3hx7PXkfo2vlYcXFdwpoAYYGmwFdErKXXjkrIgCN+RaRHy97t b6bHuVGlh+IfLvxAR60nTPX19xh3D+rvw8WgWLrw1f6H5O4ojRz7bym5LBumWOHS IPB6Hnn5LHUwsxjalQK88wpPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQoCrr3Hu AJu2ZCjOVF7Q1BsCyWMwHwYDVR0jBBgwFoAUe+IwFTz/kAFkLbybJPhdDMKCNk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyNURCLzExOTM5RDEwOTA2 OTExRUVCMjNENzQyNUM0RjlBRTAyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05r NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZS1Jd0ZUel9rQUZrTGJ5YkpQaGRETUtDTms0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy NURCLzExOTM5RDEwOTA2OTExRUVCMjNENzQyNUM0RjlBRTAyL2UtSXdGVHpfa0FG a0xieWJKUGhkRE1LQ05rNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEErO3LE/MDycU1lVX6ITKaEgkoxv3vswegyQc+MPABjp0PhqoSl1RKk dSRavz3NqTDd/usSVA57ljTg6I7zYzEpxwnxvnoLO/5Utx8I1V8c5v+uA0crM9Kh emfkPtYeZFvjDXVk0kJfzzxYHQ2KDTuHTrRkCeqNBpBgP4+pCV/YuXBXJb1MMo0t YVpPLZjdApbfI7wS7Hvtsz+jYwghKaKx733zenz/wrtwkeFTQhEswdlFIyBMc6TF HxYvxRiivyS6IhBAy23pnzAs44PPduwSrlE1dO7l4arMBl8NwYKjVXCM1ENLA3GF JxtMaeqmvVPh6hAWa/3Owo9Y8UK3F7Q= -----END CERTIFICATE-----Generated at Fri May 31 10:01:45 2024 by rpki-client on console-ams.rpki-client.org