$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: UDO9lAt3WPhsz/bFgqrY9k8WInfCxvMhYz4TCis9Ycs= Subject key identifier: F4:58:5D:50:EA:E0:EF:38:11:D1:C7:45:F3:8B:75:2A:00:4A:EF:4F Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: C5 Signing time: Sun 19 May 2024 06:17:46 +0000 Manifest this update: Sun 19 May 2024 06:17:46 +0000 Manifest next update: Sun 26 May 2024 06:17:46 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: KiUbdok1N8hko1HuJAQGcGODzaSIvkVRkE7z1xhJDto=) 2: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: NwcAmb3qtzieVF3nFtWxzqVHGCVeqZBrpDbY94p+NYk=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: Fb+sAlO981Q8IszvJ9e3FZrhvTZMZ9fTATHnLpoxBL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: May 19 06:17:46 2024 GMT Not After : May 26 06:17:46 2024 GMT Subject: CN=6649998a-b378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:b0:ff:c1:b7:fa:f6:a5:d5:ab:5e:07:b9: e5:7e:51:5d:0f:5b:d9:71:6d:fa:90:92:6f:23:47: 8c:e6:74:d0:f3:0d:ff:65:f5:28:b7:92:9b:dc:49: 9c:6c:21:60:dc:a0:d9:36:1a:ca:2d:62:0a:ed:dd: 11:c3:d5:dc:8d:4a:9a:d1:fc:d8:a0:aa:f0:a7:80: 31:a3:60:5f:ea:d6:8a:1a:80:49:f8:ac:7c:81:c8: b6:b0:5b:ae:d5:02:9a:65:fe:03:71:b1:02:ad:7c: 6b:82:cd:82:a5:f5:0f:47:bc:b4:17:b0:26:ac:ef: 6f:fc:68:66:b9:b1:ac:1d:53:e0:52:b9:f4:43:16: a6:1a:59:ff:7b:df:de:8f:76:d1:d6:45:ef:5c:22: d7:7e:e5:3d:33:14:61:4c:e9:cd:26:4f:45:d4:92: 63:be:87:28:d2:75:4c:de:70:0c:8c:80:1f:35:58: 3d:86:e1:b4:8a:5c:c8:be:b2:ab:e4:01:64:8f:fc: de:7b:0f:5c:6b:38:ef:ce:7e:d8:d5:07:83:40:a8: 82:0e:08:a4:45:32:fc:99:c1:85:5b:2f:41:09:ca: 45:12:9d:15:e8:21:c5:d5:8c:71:29:69:8a:13:c9: 26:52:ff:b9:3a:70:59:43:ee:89:69:16:e5:91:b0: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:58:5D:50:EA:E0:EF:38:11:D1:C7:45:F3:8B:75:2A:00:4A:EF:4F X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1f:6b:d4:38:e3:c5:55:17:5b:4f:04:1d:af:5b:4e:2d:79: 66:89:07:52:98:d8:a0:c8:f7:15:d0:9e:55:fe:d0:34:1d:ac: 6f:93:e1:da:1b:ff:a6:a1:03:8b:ff:b2:32:d9:2c:c9:3d:47: cb:27:65:ba:df:ca:be:c6:83:cd:e3:7d:b2:a8:3b:aa:50:36: c3:38:b8:dc:08:22:5a:36:54:63:e4:75:74:9f:b5:86:d6:68: dc:41:4e:5a:4c:b2:1f:5a:93:5d:06:f7:e2:cd:98:f0:6d:dc: 07:49:14:e6:0b:d8:67:69:43:d3:b2:b0:b7:85:7e:23:73:12: 3c:64:02:b5:2c:54:92:d7:c2:e9:3e:38:be:fd:0d:72:6b:0b: 56:87:25:c3:01:7b:57:64:a3:4f:e8:73:2b:fe:9b:ab:a3:ed: ed:30:e6:2a:d6:4e:da:22:85:11:85:20:d9:d7:97:3e:3b:6e: 1c:ae:d0:01:7a:19:92:bc:b4:84:cf:08:61:55:ee:1e:39:90: 6e:cf:c2:b7:37:cd:89:b3:94:31:09:f6:a1:ee:be:60:fa:97: f5:22:52:6e:1a:70:62:07:1a:b3:61:c2:ca:a6:b2:cc:dd:eb: 40:cd:ab:07:af:c5:6b:65:d8:3c:e6:09:d7:e3:6b:3b:23:89: 74:99:8a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjQwNTE5MDYxNzQ2WhcNMjQwNTI2MDYxNzQ2WjAYMRYwFAYD VQQDEw02NjQ5OTk4YS1iMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA416w/8G3+val1ateB7nlflFdD1vZcW36kJJvI0eM5nTQ8w3/ZfUot5Kb3Emc bCFg3KDZNhrKLWIK7d0Rw9XcjUqa0fzYoKrwp4Axo2Bf6taKGoBJ+Kx8gci2sFuu 1QKaZf4DcbECrXxrgs2CpfUPR7y0F7AmrO9v/GhmubGsHVPgUrn0QxamGln/e9/e j3bR1kXvXCLXfuU9MxRhTOnNJk9F1JJjvoco0nVM3nAMjIAfNVg9huG0ilzIvrKr 5AFkj/zeew9cazjvzn7Y1QeDQKiCDgikRTL8mcGFWy9BCcpFEp0V6CHF1YxxKWmK E8kmUv+5OnBZQ+6JaRblkbDYnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRYXVDq 4O84EdHHRfOLdSoASu9PMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBH2vUOOPFVRdbTwQdr1tOLXlmiQdSmNigyPcV0J5V/tA0Haxvk+Ha G/+moQOL/7Iy2SzJPUfLJ2W638q+xoPN432yqDuqUDbDOLjcCCJaNlRj5HV0n7WG 1mjcQU5aTLIfWpNdBvfizZjwbdwHSRTmC9hnaUPTsrC3hX4jcxI8ZAK1LFSS18Lp Pji+/Q1yawtWhyXDAXtXZKNP6HMr/puro+3tMOYq1k7aIoURhSDZ15c+O24crtAB ehmSvLSEzwhhVe4eOZBuz8K3N82Js5QxCfah7r5g+pf1IlJuGnBiBxqzYcLKprLM 3etAzasHr8VrZdg85gnX42s7I4l0mYrq -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org