$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft File: rRAu0CidxOT63nCzTXZgyg0rvSs.mft (raw, json) Hash identifier: 27dI5q/eZ//rNkA/yjq8KaSaBt2MOSwpruhCK4UxW9Y= Subject key identifier: 3F:98:8F:72:F9:F4:65:80:0D:AE:48:23:E9:7F:F5:C3:51:01:91:23 Authority key identifier: AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B Certificate issuer: /CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft Manifest number: 03D1 Signing time: Sun 19 May 2024 02:24:50 +0000 Manifest this update: Sun 19 May 2024 02:24:49 +0000 Manifest next update: Sun 26 May 2024 02:24:49 +0000 Files and hashes: 1: rRAu0CidxOT63nCzTXZgyg0rvSs.crl (hash: eDLC58CXbmAQnZsaU8nWrHCAYroUI24rgBAWnNtB2tI=) 2: A82A33A6C0A711EE97A2E984C4F9AE02.roa (hash: SOn2/YoiOnQcCPNXa5HjTXOEZ/tUCYCahIULlvuRhw4=) 3: A71C6AA6C0A711EE97A2E984C4F9AE02.roa (hash: Fh/+vA6aajr1dkhgtc06wN1A4vHZYI5kkLjFn7c39SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.crl rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B Validity Not Before: May 19 02:24:49 2024 GMT Not After : May 26 02:24:49 2024 GMT Subject: CN=664962f2-caa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:22:39:17:4a:54:0a:1a:2a:74:eb:eb:52: 90:fc:e3:f7:c1:50:da:04:53:9f:2b:39:e6:82:e1: 82:79:4a:e1:21:22:71:4e:e8:c0:be:ae:0e:b1:b5: 4a:fc:75:ee:e4:ed:d3:36:85:6c:30:35:96:c1:5f: 03:20:7a:23:90:38:3a:5b:a1:05:0d:1d:02:8f:6b: f3:db:f9:7c:f5:6a:9d:44:10:dd:3e:fe:b1:9e:f3: b2:99:23:da:5f:ee:8d:d1:43:42:a7:2b:3e:7d:eb: 22:89:34:bd:ec:bf:2f:d4:18:46:29:b1:02:3a:d9: 39:42:e4:7e:92:f0:1a:58:0e:7f:9e:2e:07:64:24: 28:42:80:20:5d:f8:0c:4d:77:b0:90:b2:98:60:bb: e8:c5:60:e6:5b:a4:ab:09:e2:1c:08:d2:26:06:4b: fb:db:1c:13:68:29:f8:d7:f3:2d:e2:17:fa:81:40: 50:48:fe:0c:b2:20:8b:15:fd:82:7d:27:6f:c3:3a: 22:87:10:96:c7:c2:05:12:4f:6c:05:f4:f4:fb:b0: 8d:26:15:b1:07:10:55:e5:33:0f:f4:07:57:27:a3: 80:3c:10:4c:4b:23:16:7b:d7:e8:fc:39:a9:6e:ab: fa:15:68:6a:8d:09:01:55:3b:df:e1:48:39:c1:5d: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:98:8F:72:F9:F4:65:80:0D:AE:48:23:E9:7F:F5:C3:51:01:91:23 X509v3 Authority Key Identifier: keyid:AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:35:9a:6e:35:4c:6f:6d:bb:70:dc:93:f6:0f:6d:ba:74:70: 01:10:51:6d:d1:f2:7e:78:74:a5:eb:fe:df:4f:dd:d4:2e:b6: 2c:4c:ef:d8:2b:d7:d2:f3:25:3b:4f:50:30:c9:69:c3:71:19: 70:cb:3e:de:0c:7c:1e:9d:08:5f:6f:01:bf:a4:d8:07:d2:4f: 8c:73:10:2c:0a:46:84:28:09:25:e9:a8:00:c3:e0:ad:0e:bc: 2d:26:76:47:54:88:5a:78:1c:a9:c1:d1:28:a4:ae:ae:b0:06: da:9a:f8:fd:ee:de:c7:0b:c7:b7:05:ad:05:50:67:16:53:b2: 55:6d:2e:ce:0f:6c:1d:7a:3c:66:b0:dd:fc:94:05:94:1b:f8: 9d:73:cc:75:8f:e9:40:0f:ce:db:52:a6:1c:74:a1:a6:ca:5c: 40:62:5c:8d:4d:39:d9:81:61:e4:1d:bc:bd:04:a2:bc:cc:3f: a7:61:20:73:74:92:63:c5:25:fc:cf:2e:db:32:e4:5d:d3:19: 72:72:2d:67:15:a1:8b:4f:f5:2d:90:e1:66:76:f5:b0:a9:e5: 87:d3:ac:be:5f:e1:dc:3e:3c:4c:57:76:9e:9a:91:b7:1b:97: d5:db:fa:8b:43:6a:35:d5:81:ab:36:20:fb:99:fb:0f:ac:52: ca:9f:87:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNCOTExMTAvBgNVBAUTKEFEMTAyRUQwMjg5REM0RTRGQURFNzBCMzRENzY2MENB MEQyQkJEMkIwHhcNMjQwNTE5MDIyNDQ5WhcNMjQwNTI2MDIyNDQ5WjAYMRYwFAYD VQQDEw02NjQ5NjJmMi1jYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FsiORdKVAoaKnTr61KQ/OP3wVDaBFOfKznmguGCeUrhISJxTujAvq4OsbVK /HXu5O3TNoVsMDWWwV8DIHojkDg6W6EFDR0Cj2vz2/l89WqdRBDdPv6xnvOymSPa X+6N0UNCpys+fesiiTS97L8v1BhGKbECOtk5QuR+kvAaWA5/ni4HZCQoQoAgXfgM TXewkLKYYLvoxWDmW6SrCeIcCNImBkv72xwTaCn41/Mt4hf6gUBQSP4MsiCLFf2C fSdvwzoihxCWx8IFEk9sBfT0+7CNJhWxBxBV5TMP9AdXJ6OAPBBMSyMWe9fo/Dmp bqv6FWhqjQkBVTvf4Ug5wV2aDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+Yj3L5 9GWADa5II+l/9cNRAZEjMB8GA1UdIwQYMBaAFK0QLtAoncTk+t5ws012YMoNK70r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0I5MS9BMzY1MzM2RTNF MjQxMUVDOUI1NUUxNTJDNEY5QUUwMi9yUkF1MENpZHhPVDYzbkN6VFhaZ3lnMHJ2 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JSQXUwQ2lkeE9UNjNuQ3pUWFpneWcwcnZTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0I5MS9BMzY1MzM2RTNFMjQxMUVDOUI1NUUxNTJDNEY5QUUwMi9yUkF1MENpZHhP VDYzbkN6VFhaZ3lnMHJ2U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiNZpuNUxvbbtw3JP2D226dHABEFFt0fJ+eHSl6/7fT93ULrYsTO/Y K9fS8yU7T1AwyWnDcRlwyz7eDHwenQhfbwG/pNgH0k+McxAsCkaEKAkl6agAw+Ct DrwtJnZHVIhaeBypwdEopK6usAbamvj97t7HC8e3Ba0FUGcWU7JVbS7OD2wdejxm sN38lAWUG/idc8x1j+lAD87bUqYcdKGmylxAYlyNTTnZgWHkHby9BKK8zD+nYSBz dJJjxSX8zy7bMuRd0xlyci1nFaGLT/UtkOFmdvWwqeWH06y+X+HcPjxMV3aempG3 G5fV2/qLQ2o11YGrNiD7mfsPrFLKn4dm -----END CERTIFICATE-----Generated at Sun May 19 02:59:11 2024 by rpki-client on console-ams.rpki-client.org