$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json) Hash identifier: U+HMoZ+bl0yNrstayStgWLiACzRoe9fSBF8D0aKQfxM= Subject key identifier: 2F:07:3E:77:0A:A6:C4:58:9E:12:45:4E:E8:62:78:1C:0B:B3:D1:A1 Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft Manifest number: 0115 Signing time: Sat 18 May 2024 16:29:47 +0000 Manifest this update: Sat 18 May 2024 16:29:46 +0000 Manifest next update: Sat 25 May 2024 16:29:46 +0000 Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: inruasJWBqY1fZYLkb9Gdi3h8rSKeIl9fLkDSw1Ra1Q=) 2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: 5lFgcyDbE0vFu9KIfC8bZV0EZn0X+DwTY3qN8a6qiYk=) 3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: L45BGsw9kntvdvochjJ1xkL7ueXbpNVN3LKrFmog0C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Validity Not Before: May 18 16:29:46 2024 GMT Not After : May 25 16:29:46 2024 GMT Subject: CN=6648d77b-37d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:12:c9:d1:71:8c:21:29:1b:39:19:ca:9e: ac:6f:90:9c:7d:40:ae:e9:f7:ae:11:8d:06:16:61: cf:fc:28:cd:35:55:2c:b2:2f:96:dc:39:ac:75:22: 1c:37:de:3a:16:df:f1:cd:7a:9d:6d:b1:52:08:26: 52:90:bd:fa:d8:da:ce:ef:54:87:fa:05:a8:c2:eb: 86:c4:1d:c0:bd:e1:73:37:44:60:7f:77:28:0c:37: 25:a7:da:f7:4a:ff:d4:9e:cb:02:3a:bc:28:9c:7b: 98:9c:1c:30:28:15:fe:8e:7c:d6:25:26:65:86:a6: cd:37:f9:b0:b1:16:9f:bb:dd:89:71:b1:34:d9:97: 9e:8f:ce:ba:64:e9:36:8c:86:27:e2:dd:c0:75:e3: 47:46:60:f8:f4:c1:fd:a0:b6:5f:7a:e0:52:30:47: ef:fe:d3:2f:49:bc:fb:79:72:20:d0:28:82:05:da: 35:91:d0:56:48:f3:58:fc:62:9b:5e:ec:20:49:94: 16:70:2c:a6:2d:ca:34:9a:e7:0a:48:69:78:b9:40: aa:da:00:4b:d8:f3:8a:c8:ae:cf:75:92:5b:03:7c: 3e:ea:bc:e6:87:cc:2e:e0:03:dd:0b:55:17:62:72: d9:f5:ee:42:46:37:b1:fc:b2:1b:66:92:1c:bd:a6: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:07:3E:77:0A:A6:C4:58:9E:12:45:4E:E8:62:78:1C:0B:B3:D1:A1 X509v3 Authority Key Identifier: keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:4a:8f:11:e3:36:9d:8a:95:a5:90:9c:d4:5a:7d:d9:d0: 13:d3:04:d2:27:71:3e:e1:35:bf:7b:0a:f7:42:41:4d:d9:36: cd:17:8b:b5:6c:eb:8a:0c:8b:fc:bc:86:b1:36:26:64:2c:5c: e0:4a:28:5c:9a:fb:da:68:c4:a0:5e:1b:f8:dd:b0:5b:fe:ae: 65:12:df:0d:35:80:76:01:f5:3b:6d:73:64:fa:9f:91:24:59: 01:f9:f8:8c:ce:64:e2:63:e7:d2:5c:8c:fe:ce:c7:0d:b3:b6: 25:87:f6:aa:cc:95:56:33:c2:5f:ab:cc:03:f5:ce:30:11:08: ac:63:e4:fa:f1:74:d8:2a:5f:94:86:f5:b2:31:be:af:93:b8: f3:36:c3:6b:52:22:90:9a:9a:38:60:dd:d3:20:f1:9a:2c:f5: c5:27:95:0f:ae:b8:1b:f1:57:b2:1d:95:d4:71:d0:de:24:97: 89:62:1c:35:6b:97:46:20:94:a4:85:74:da:00:26:49:22:86: fc:32:10:b1:ec:c0:5d:80:42:5d:11:a8:77:d9:2d:8e:52:9e: e7:c8:7a:da:7c:64:8f:e7:a5:8b:9b:c4:4e:bc:31:6f:ad:c5: 17:38:cd:ac:27:ab:2b:16:93:90:41:33:4c:df:f0:d9:b5:76: b7:63:f0:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5 MDg5NkFCRUIwHhcNMjQwNTE4MTYyOTQ2WhcNMjQwNTI1MTYyOTQ2WjAYMRYwFAYD VQQDEw02NjQ4ZDc3Yi0zN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApokSydFxjCEpGzkZyp6sb5CcfUCu6feuEY0GFmHP/CjNNVUssi+W3DmsdSIc N946Ft/xzXqdbbFSCCZSkL362NrO71SH+gWowuuGxB3AveFzN0Rgf3coDDclp9r3 Sv/UnssCOrwonHuYnBwwKBX+jnzWJSZlhqbNN/mwsRafu92JcbE02Zeej866ZOk2 jIYn4t3AdeNHRmD49MH9oLZfeuBSMEfv/tMvSbz7eXIg0CiCBdo1kdBWSPNY/GKb XuwgSZQWcCymLco0mucKSGl4uUCq2gBL2POKyK7PdZJbA3w+6rzmh8wu4APdC1UX YnLZ9e5CRjex/LIbZpIcvaZQEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8HPncK psRYnhJFTuhieBwLs9GhMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS9CNDVGM0ZDNDgxOUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExu Ym1hTVI5UkltTUNRaVdxLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCEqPEeM2nYqVpZCc1Fp92dAT0wTSJ3E+4TW/ewr3QkFN2TbNF4u1 bOuKDIv8vIaxNiZkLFzgSihcmvvaaMSgXhv43bBb/q5lEt8NNYB2AfU7bXNk+p+R JFkB+fiMzmTiY+fSXIz+zscNs7Ylh/aqzJVWM8Jfq8wD9c4wEQisY+T68XTYKl+U hvWyMb6vk7jzNsNrUiKQmpo4YN3TIPGaLPXFJ5UPrrgb8VeyHZXUcdDeJJeJYhw1 a5dGIJSkhXTaACZJIob8MhCx7MBdgEJdEah32S2OUp7nyHrafGSP56WLm8ROvDFv rcUXOM2sJ6srFpOQQTNM3/DZtXa3Y/Bn -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org