$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: ZHsghFygSHpXLNWKNGHfTtndTzwniWabKTmLo7lKp+I= Subject key identifier: 01:37:89:51:9C:3D:EC:2F:02:1C:93:08:39:1C:EC:D1:C1:67:85:B2 Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 3D Signing time: Sun 19 May 2024 08:14:59 +0000 Manifest this update: Sun 19 May 2024 08:14:59 +0000 Manifest next update: Sun 26 May 2024 08:14:59 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: Vth0EbEYcKoHnLzjFUE+K97r80KTtX3r8DxdK8jkzd0=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: cI170z2edUBV6NEFYs6fZhBBl9YkBW3UrisOF7mHZRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: May 19 08:14:59 2024 GMT Not After : May 26 08:14:59 2024 GMT Subject: CN=6649b503-b418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:60:77:bb:79:b0:fc:01:1e:9e:99:5f:e3: 47:f7:3b:17:c8:63:78:05:f8:57:32:4d:38:a9:cf: f1:44:27:02:6d:5c:46:02:8d:28:cd:dc:fd:d6:93: 05:73:f7:39:0a:50:e8:ae:01:8e:7e:4e:cf:63:3b: d7:5e:0c:24:59:48:b1:6c:12:d4:34:54:36:36:4e: 6c:df:5f:ff:37:71:71:70:e5:9a:0c:4d:91:64:c6: dd:c9:42:85:c5:40:2a:4f:47:5c:54:4d:86:bb:1c: 65:31:33:12:87:5b:f6:03:c1:33:8b:13:56:2d:98: 6d:96:51:c0:a3:9b:29:1f:55:6d:57:5f:59:43:0d: e5:11:e7:80:a7:03:4d:9a:d1:a5:1e:e9:cd:18:35: fc:8c:9d:86:a9:9b:1f:d1:5f:9e:ab:48:ad:75:2c: 5d:69:a6:b7:b0:cd:6c:2b:c2:e4:50:3d:3d:21:37: 8d:85:65:15:85:38:54:d3:c3:20:98:f0:df:32:29: 70:5b:45:c6:8d:8b:fd:09:c1:61:fb:f3:60:5d:63: 39:d1:1a:7a:d6:a1:4a:00:6d:14:25:27:3a:d5:59: f7:c2:3d:0d:19:6e:87:5c:70:41:80:67:9c:93:bf: 17:43:d8:2e:b8:68:27:ab:bf:0a:1f:64:63:74:63: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:89:51:9C:3D:EC:2F:02:1C:93:08:39:1C:EC:D1:C1:67:85:B2 X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1e:a0:67:5c:84:b4:fa:b2:6d:25:ea:bb:02:0d:b9:0e:cf: b7:53:63:a6:7d:51:30:f2:7e:4b:2f:79:fa:eb:35:d0:a2:31: e8:ff:07:52:d3:12:88:42:d3:bc:af:cc:e5:c8:a5:0d:f3:19: d9:92:51:28:c4:2d:4f:dc:9a:81:00:16:76:2c:ce:fb:c2:7c: 4f:01:47:9b:74:04:70:89:6c:25:ce:d9:73:38:ed:8e:e8:9d: 27:69:4d:c0:48:a4:1c:57:6d:d4:ce:1e:49:8f:40:d4:9e:4d: 1b:6b:ad:9a:55:64:93:9c:85:74:db:42:3b:ff:85:d2:9b:1f: 23:bf:e7:94:61:e2:e0:f3:15:7a:b6:f1:b7:ca:da:59:e7:9f: db:8a:cf:d5:d8:5b:7a:f8:ef:f1:27:2b:81:84:d7:50:b3:c6: 88:3f:d2:27:78:45:0c:3d:f1:ee:3f:91:05:75:db:57:0d:1a: 6f:1e:d7:f6:9a:14:68:56:e2:57:34:56:ef:a5:79:f1:0c:e1: 39:27:40:3d:70:82:22:51:69:f0:40:71:65:8f:77:f8:0e:55: bb:95:d2:a8:19:b7:64:b5:69:a2:83:41:ef:42:09:82:4e:ee: d5:ce:df:60:92:0e:37:7e:14:b8:f4:f0:fa:2a:d9:c1:81:3b: 07:a4:e6:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzZBRDExMC8GA1UEBRMoMTE1QTQxNjBDODU1NTQ3RDlFMzEwQzYwRDNEMDg4Q0JC QzlBOTkyQTAeFw0yNDA1MTkwODE0NTlaFw0yNDA1MjYwODE0NTlaMBgxFjAUBgNV BAMTDTY2NDliNTAzLWI0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR+GB3u3mw/AEenplf40f3OxfIY3gF+FcyTTipz/FEJwJtXEYCjSjN3P3WkwVz 9zkKUOiuAY5+Ts9jO9deDCRZSLFsEtQ0VDY2TmzfX/83cXFw5ZoMTZFkxt3JQoXF QCpPR1xUTYa7HGUxMxKHW/YDwTOLE1YtmG2WUcCjmykfVW1XX1lDDeUR54CnA02a 0aUe6c0YNfyMnYapmx/RX56rSK11LF1pprewzWwrwuRQPT0hN42FZRWFOFTTwyCY 8N8yKXBbRcaNi/0JwWH782BdYznRGnrWoUoAbRQlJzrVWffCPQ0ZbodccEGAZ5yT vxdD2C64aCervwofZGN0Yw8PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUATeJUZw9 7C8CHJMIORzs0cFnhbIwHwYDVR0jBBgwFoAUEVpBYMhVVH2eMQxg09CIy7yamSow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3NkFEL0ZFQ0E3NTA2QkU3 RjExRUU5Njc4NEQ2MkM0RjlBRTAyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1T by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRVZwQllNaFZWSDJlTVF4ZzA5Q0l5N3lhbVNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 NkFEL0ZFQ0E3NTA2QkU3RjExRUU5Njc4NEQ2MkM0RjlBRTAyL0VWcEJZTWhWVkgy ZU1ReGcwOUNJeTd5YW1Tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYeoGdchLT6sm0l6rsCDbkOz7dTY6Z9UTDyfksvefrrNdCiMej/B1LT EohC07yvzOXIpQ3zGdmSUSjELU/cmoEAFnYszvvCfE8BR5t0BHCJbCXO2XM47Y7o nSdpTcBIpBxXbdTOHkmPQNSeTRtrrZpVZJOchXTbQjv/hdKbHyO/55Rh4uDzFXq2 8bfK2lnnn9uKz9XYW3r47/EnK4GE11Czxog/0id4RQw98e4/kQV121cNGm8e1/aa FGhW4lc0Vu+lefEM4TknQD1wgiJRafBAcWWPd/gOVbuV0qgZt2S1aaKDQe9CCYJO 7tXO32CSDjd+FLj08Poq2cGBOwek5kI= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org