$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: f3JlfDraOElhCNC+bhUXZOqbVrnmFOj9CLLQJkiuJTE= Subject key identifier: 89:E0:6F:F9:39:F1:A7:B0:DA:A2:CA:29:4B:E2:0A:2B:31:46:06:FC Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 011B Signing time: Sun 19 May 2024 05:26:05 +0000 Manifest this update: Sun 19 May 2024 05:26:05 +0000 Manifest next update: Sun 26 May 2024 05:26:05 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: GYZE/63yLAT/5AH8S02E9m1gjW773m+lDlQVaI8fmuI=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: 22JLLHDDivPS+exWd4wVWjMfX8Vk/x1LDA48sqpY1E8=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: 3kdta5Pi/N5KniM95Q0zJF7VC4SA3fQTqDL8ggYKjfQ=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: jnXfSHlWHW/O+hO/ieoSAiqyekCOz3/mZevuImwOi1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: May 19 05:26:05 2024 GMT Not After : May 26 05:26:05 2024 GMT Subject: CN=66498d6d-d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5a:9f:bb:54:56:b8:b2:dc:e0:8e:41:09:67: 05:34:1c:c9:20:77:54:f4:56:68:5c:38:f2:f6:2e: 81:fc:48:f9:33:40:a4:15:cd:b4:29:7f:7c:8f:56: 2f:c9:a1:94:29:bd:07:73:ee:8c:cd:53:2f:51:e5: d3:2b:f5:f9:39:0f:6e:4f:50:3e:a0:58:de:0d:4c: 67:a1:d8:02:e3:f9:d0:7e:84:ec:7c:ff:2e:f7:f9: d2:3c:61:e4:10:7d:cc:3a:35:4c:07:bf:6a:d1:4b: 88:eb:33:d5:fc:78:53:6b:b7:ff:8f:06:6c:b1:98: 0b:f2:69:29:a6:6e:bc:e0:c4:6c:94:0e:cc:5f:71: 7d:64:29:29:bf:cd:28:cb:2a:f6:71:47:8b:fd:62: a4:6f:e0:39:ff:54:f5:ab:e7:2e:e8:76:fc:a0:6c: 94:ca:cb:ef:74:82:77:70:8c:ad:a5:59:3e:05:35: 68:de:b5:66:86:d4:bd:4c:48:7e:2b:f5:ee:6a:0d: 5b:e2:51:a2:5e:84:ce:f1:20:67:f7:c9:cb:99:1f: 17:22:fd:66:1f:82:b5:00:bf:1a:7f:b6:ce:32:43: 6b:78:52:6b:78:5c:22:07:bc:fd:b7:5b:63:11:60: 3c:86:9d:8e:ab:4e:96:92:8a:4d:9d:14:c7:4b:83: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E0:6F:F9:39:F1:A7:B0:DA:A2:CA:29:4B:E2:0A:2B:31:46:06:FC X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ed:ac:23:f6:9d:57:8f:9e:3b:24:95:da:bc:07:e9:2b:55: cc:bb:a6:b4:36:73:db:51:8c:8b:b1:6f:26:8b:f2:dd:90:77: 11:18:9b:b4:73:c6:36:ab:29:30:c4:68:e2:2e:cf:f6:62:7e: cd:66:09:42:da:66:c5:4b:a6:99:7d:ad:ae:88:54:93:2d:34: 2f:47:30:5f:08:3d:60:ce:6d:ce:af:9d:73:b8:e9:e0:73:37: 04:18:e1:72:df:f0:8c:c8:88:73:62:43:ea:13:76:ac:38:fe: 3e:54:ea:34:b7:1a:75:4d:36:f3:fc:f6:fc:78:9e:d9:19:3e: c1:cb:d7:b6:8c:43:84:bb:e5:24:4c:18:30:8c:db:92:bc:ab: 26:c1:d1:b7:71:fb:10:ea:10:56:a9:97:c5:02:41:ea:ee:1d: fc:36:0c:89:a2:15:53:21:8e:96:87:61:74:35:71:c9:18:9d: bf:9d:6c:c1:98:94:e3:2c:2e:ba:28:7b:9e:a6:66:b1:a2:5b: c7:25:77:bd:f0:e0:74:e5:05:c0:cc:18:7d:b9:7b:ba:b7:82: c2:0b:d9:3c:08:81:3e:93:06:49:1a:40:04:c6:43:d2:8b:0e: c5:d9:26:39:23:38:ef:82:11:e8:2e:ef:a9:e6:ea:36:2e:8e: af:9b:4e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjQwNTE5MDUyNjA1WhcNMjQwNTI2MDUyNjA1WjAYMRYwFAYD VQQDEw02NjQ5OGQ2ZC1kNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVqfu1RWuLLc4I5BCWcFNBzJIHdU9FZoXDjy9i6B/Ej5M0CkFc20KX98j1Yv yaGUKb0Hc+6MzVMvUeXTK/X5OQ9uT1A+oFjeDUxnodgC4/nQfoTsfP8u9/nSPGHk EH3MOjVMB79q0UuI6zPV/HhTa7f/jwZssZgL8mkppm684MRslA7MX3F9ZCkpv80o yyr2cUeL/WKkb+A5/1T1q+cu6Hb8oGyUysvvdIJ3cIytpVk+BTVo3rVmhtS9TEh+ K/Xuag1b4lGiXoTO8SBn98nLmR8XIv1mH4K1AL8af7bOMkNreFJreFwiB7z9t1tj EWA8hp2Oq06WkopNnRTHS4PhFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIngb/k5 8aew2qLKKUviCisxRgb8MB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC7awj9p1Xj547JJXavAfpK1XMu6a0NnPbUYyLsW8mi/LdkHcRGJu0 c8Y2qykwxGjiLs/2Yn7NZglC2mbFS6aZfa2uiFSTLTQvRzBfCD1gzm3Or51zuOng czcEGOFy3/CMyIhzYkPqE3asOP4+VOo0txp1TTbz/Pb8eJ7ZGT7By9e2jEOEu+Uk TBgwjNuSvKsmwdG3cfsQ6hBWqZfFAkHq7h38NgyJohVTIY6Wh2F0NXHJGJ2/nWzB mJTjLC66KHuepmaxolvHJXe98OB05QXAzBh9uXu6t4LCC9k8CIE+kwZJGkAExkPS iw7F2SY5IzjvghHoLu+p5uo2Lo6vm04/ -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org