$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: cDXHPMowXeVk8RuvbF8h/ylIQZyoNKCdOFFY69Hp6qc= Subject key identifier: 4E:02:CD:1C:5B:2C:5F:0E:6B:F9:77:21:D5:CA:7D:9F:79:19:AE:DF Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0B87 Signing time: Fri 31 May 2024 19:57:55 +0000 Manifest this update: Fri 31 May 2024 19:57:54 +0000 Manifest next update: Fri 07 Jun 2024 19:57:54 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: 98muSkzPESvMQjkL8RPzb1HmD79i4C1rMt4Lrg2FtqM=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: Ey8ekaM4J2crEGLxgaKjmK3pxTQIHfbb3eEbz5HXzO4=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: UpGIQk8BsZLFwV7TMC1CS3ghrERTM72pXAJpFHbtOlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: May 31 19:57:54 2024 GMT Not After : Jun 7 19:57:54 2024 GMT Subject: CN=665a2bc2-8b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:c5:69:5b:ab:a5:52:8f:32:94:6e:0d:a0: 61:36:88:49:08:6e:59:da:ee:1c:86:9c:b3:f0:92: f1:15:c1:3a:86:01:5f:36:22:df:3d:be:18:a1:81: fd:bd:16:5d:c5:23:71:f7:04:33:04:25:36:bb:d6: ed:01:8c:90:c0:83:c1:e5:27:0a:50:5f:1e:7e:af: 62:a2:b7:88:dc:de:cf:3e:c6:82:dc:33:ea:e9:0d: 21:ae:9d:35:79:6b:71:79:17:9c:ca:0b:cd:f7:b9: eb:a1:ed:6d:26:31:42:c7:08:bb:28:04:f5:f2:ec: 44:7b:64:a6:dc:30:72:19:46:27:a3:37:0a:f8:50: 69:40:76:5e:7a:10:75:4e:df:95:ea:cc:ee:f9:59: 8d:5f:2c:4d:16:6b:b4:4e:d4:d7:36:25:78:2f:d8: 37:97:82:b2:ed:ad:39:72:e6:54:87:02:18:0f:43: 8e:03:e2:c8:6e:e4:e6:57:e2:41:6d:d2:b5:81:65: bc:96:7c:8f:f2:79:f3:51:e6:b6:53:aa:d3:73:34: 69:73:f1:a7:e8:6c:06:07:fb:e7:18:e0:81:67:fd: 6f:2e:be:5e:26:25:e3:25:8a:76:6a:57:93:d5:54: 28:ff:63:9e:4b:53:46:2e:65:d3:b0:64:f1:96:74: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:02:CD:1C:5B:2C:5F:0E:6B:F9:77:21:D5:CA:7D:9F:79:19:AE:DF X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:8b:9a:db:cd:92:d2:26:b5:9e:a4:f6:29:3c:7b:22:20:ca: 9f:de:54:98:2c:70:ac:f8:7d:7c:ca:bc:20:2a:5d:cc:83:6d: c5:b5:da:a9:ba:5e:f6:2b:6d:76:16:d7:97:78:96:8f:d4:3f: 65:0a:ed:98:44:c5:a4:32:9f:36:f5:26:39:52:89:61:89:a6: bd:85:3a:71:8d:47:d2:a3:96:9e:20:4b:78:12:53:16:49:4c: 15:79:2b:d9:cc:e2:30:79:ea:7f:9a:85:b5:41:93:3c:d4:c3: d5:9b:7e:d6:7a:a0:06:68:50:aa:dd:15:ce:6e:2d:74:a6:f1: 72:df:23:3a:df:f3:7b:c6:51:59:48:79:5f:f4:de:74:61:6f: cc:f0:f2:9c:f4:e1:ae:22:df:35:5a:35:ec:fc:f0:70:7e:32: 3d:3d:c9:85:33:f6:c6:94:59:f3:2e:8f:cb:5c:39:03:93:d1: e2:da:ab:96:5e:d7:7f:76:f4:e2:08:bf:d2:24:3b:79:3a:e5: 26:8c:5c:10:c1:26:59:4c:29:c9:a4:bf:b8:1b:9e:c1:59:bf: 6c:f3:2c:93:a8:55:85:6e:20:f0:b9:9b:32:3c:58:0f:98:44: 15:d7:f7:89:d5:0c:df:b5:d4:3c:3a:ba:21:19:56:a6:38:c9: bc:af:c7:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjQwNTMxMTk1NzU0WhcNMjQwNjA3MTk1NzU0WjAYMRYwFAYD VQQDEw02NjVhMmJjMi04YjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLnFaVurpVKPMpRuDaBhNohJCG5Z2u4chpyz8JLxFcE6hgFfNiLfPb4YoYH9 vRZdxSNx9wQzBCU2u9btAYyQwIPB5ScKUF8efq9ioreI3N7PPsaC3DPq6Q0hrp01 eWtxeRecygvN97nroe1tJjFCxwi7KAT18uxEe2Sm3DByGUYnozcK+FBpQHZeehB1 Tt+V6szu+VmNXyxNFmu0TtTXNiV4L9g3l4Ky7a05cuZUhwIYD0OOA+LIbuTmV+JB bdK1gWW8lnyP8nnzUea2U6rTczRpc/Gn6GwGB/vnGOCBZ/1vLr5eJiXjJYp2aleT 1VQo/2OeS1NGLmXTsGTxlnTZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4CzRxb LF8Oa/l3IdXKfZ95Ga7fMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwi5rbzZLSJrWepPYpPHsiIMqf3lSYLHCs+H18yrwgKl3Mg23Ftdqp ul72K212FteXeJaP1D9lCu2YRMWkMp829SY5Uolhiaa9hTpxjUfSo5aeIEt4ElMW SUwVeSvZzOIweep/moW1QZM81MPVm37WeqAGaFCq3RXObi10pvFy3yM63/N7xlFZ SHlf9N50YW/M8PKc9OGuIt81WjXs/PBwfjI9PcmFM/bGlFnzLo/LXDkDk9Hi2quW Xtd/dvTiCL/SJDt5OuUmjFwQwSZZTCnJpL+4G57BWb9s8yyTqFWFbiDwuZsyPFgP mEQV1/eJ1QzftdQ8OrohGVamOMm8r8fi -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:21 2024 by rpki-client on console-ams.rpki-client.org