$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: MZY6Eg2iAIgpS0/esel69CDrp4zskQ3mrJfdaYxnmt4= Subject key identifier: 42:4F:28:19:9A:B3:AF:28:2A:EA:67:69:67:E7:26:CB:BD:FD:38:55 Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0129 Signing time: Sun 19 May 2024 05:16:18 +0000 Manifest this update: Sun 19 May 2024 05:16:18 +0000 Manifest next update: Sun 26 May 2024 05:16:18 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: +qkgo/L0/MNevkHOBCXhG0oy8C2FBX64uSnM9IDbUEI=) 2: 92B0DE0EE10811EE8117E548C4F9AE02.roa (hash: Fa326dB+IQfp8fAs2daFA4WusqLa1cIqQOmat0gGk5U=) 3: 5982C700E10811EE9C1E5D48C4F9AE02.roa (hash: x8OSftLAKsENNZpKvZOx5iVpmUg99SnJ4zJmyqJ0S34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: May 19 05:16:18 2024 GMT Not After : May 26 05:16:18 2024 GMT Subject: CN=66498b22-51bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:61:81:74:86:3a:e1:be:82:c5:39:2f:c8: d7:cc:93:71:94:26:92:c3:8f:20:8e:49:29:3e:e4: de:c2:1d:f5:4b:c5:bc:50:e5:77:38:ab:22:6e:4f: 2f:0e:81:16:de:28:b2:52:79:e8:a1:47:66:f5:70: 4e:b2:dd:ea:c3:f5:7b:4b:53:47:d1:df:27:0b:fd: f9:81:a6:60:78:62:25:ed:5a:e0:97:67:ee:cf:04: a6:90:f2:df:cb:20:34:2d:fe:8d:dc:5b:48:5a:e3: 4e:69:9b:6f:2e:e8:c8:44:ae:6b:ab:df:ec:7a:d5: 72:6e:6f:72:67:f9:ca:1a:66:e7:c3:fb:7c:b7:01: e7:63:a2:83:26:6e:bc:60:e2:d1:bb:64:56:79:89: 58:38:26:0a:46:52:44:0e:e3:87:31:63:67:c1:dc: 93:38:3d:24:87:6f:69:63:55:8f:c1:e7:fe:b3:d4: 45:81:6f:50:16:53:e5:55:bb:fd:a2:50:70:64:ae: 62:2f:8e:5e:2c:15:44:96:8c:00:21:b0:b8:fc:af: d5:55:50:5a:43:9e:65:02:5e:50:32:ec:d4:06:52: 4f:b3:7e:93:a4:8e:c6:3c:1f:0f:a6:16:77:30:6f: 64:e0:f5:7d:c2:a4:4e:3e:af:b3:95:bd:55:f0:a9: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:28:19:9A:B3:AF:28:2A:EA:67:69:67:E7:26:CB:BD:FD:38:55 X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:10:1f:59:a5:36:d7:eb:dc:6b:9a:44:31:2a:77:ad:ed:47: d8:1f:8d:02:76:b2:10:85:cc:03:f3:2c:da:16:6a:ec:b0:59: 7f:c2:a7:18:75:f7:c0:53:b8:bd:2e:d1:fe:90:ad:f5:79:29: f1:6b:76:25:3b:e2:c9:37:70:7d:8e:f2:b0:fb:c9:3e:c9:79: 9a:3b:48:f9:40:13:f2:dc:db:c9:63:8c:f1:ca:5b:37:04:6b: a1:56:08:a4:19:73:21:55:1a:e6:5d:77:46:cc:22:af:9c:cb: b1:e4:3a:df:94:fb:83:cb:e1:ef:dc:47:66:c4:33:6c:7c:2c: 5d:ff:e7:a0:a9:c8:80:fe:43:a2:ad:c1:9c:df:d7:28:72:f3: 8d:3e:b3:94:2a:ed:4d:77:04:92:e3:82:d2:37:45:80:2c:2f: 1e:ab:e6:4b:d7:03:7d:bf:fe:fb:06:c4:37:4f:7f:53:d3:55: 9b:a8:4b:e3:2a:97:1e:db:58:4b:68:b6:17:f7:da:83:30:bf: a6:93:31:fb:f5:18:88:cf:8c:e0:d8:09:83:07:59:da:50:e3: ef:ef:2b:bf:61:c6:ee:44:7a:e9:7f:ef:82:db:54:7a:d6:81: f3:93:31:c1:94:2f:14:03:7d:d3:81:24:73:bf:7b:7d:96:e2: 95:61:af:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjQwNTE5MDUxNjE4WhcNMjQwNTI2MDUxNjE4WjAYMRYwFAYD VQQDEw02NjQ5OGIyMi01MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXdhgXSGOuG+gsU5L8jXzJNxlCaSw48gjkkpPuTewh31S8W8UOV3OKsibk8v DoEW3iiyUnnooUdm9XBOst3qw/V7S1NH0d8nC/35gaZgeGIl7Vrgl2fuzwSmkPLf yyA0Lf6N3FtIWuNOaZtvLujIRK5rq9/setVybm9yZ/nKGmbnw/t8twHnY6KDJm68 YOLRu2RWeYlYOCYKRlJEDuOHMWNnwdyTOD0kh29pY1WPwef+s9RFgW9QFlPlVbv9 olBwZK5iL45eLBVElowAIbC4/K/VVVBaQ55lAl5QMuzUBlJPs36TpI7GPB8PphZ3 MG9k4PV9wqROPq+zlb1V8Km3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJPKBma s68oKupnaWfnJsu9/ThVMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfEB9ZpTbX69xrmkQxKnet7UfYH40CdrIQhcwD8yzaFmrssFl/wqcY dffAU7i9LtH+kK31eSnxa3YlO+LJN3B9jvKw+8k+yXmaO0j5QBPy3NvJY4zxyls3 BGuhVgikGXMhVRrmXXdGzCKvnMux5DrflPuDy+Hv3EdmxDNsfCxd/+egqciA/kOi rcGc39cocvONPrOUKu1NdwSS44LSN0WALC8eq+ZL1wN9v/77BsQ3T39T01WbqEvj Kpce21hLaLYX99qDML+mkzH79RiIz4zg2AmDB1naUOPv7yu/YcbuRHrpf++C21R6 1oHzkzHBlC8UA33TgSRzv3t9luKVYa8k -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org