$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: f4Y2mMHj6lUkKrvXuSV4kbKtEhwPt/0/rpOm5F3BcxM= Subject key identifier: B5:FA:1B:06:21:8C:2F:AE:62:05:7B:6A:19:BB:9F:4E:8E:53:30:EE Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 06E1 Signing time: Sat 18 May 2024 23:04:13 +0000 Manifest this update: Sat 18 May 2024 23:04:12 +0000 Manifest next update: Sat 25 May 2024 23:04:12 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: qEiRkuXtbnPFmAkrJP75P8DX9IyN9oiprrKky2bJESY=) 2: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: gC4gg1ZUgwHjwNJbB1fuTyNn+hrI+gW04vRuOq62AhY=) 3: B512A570109211ECA693D74EC4F9AE02.roa (hash: zSLVaMnv97qHamJ0WOGYJsbXoYtsqWtc7A25JCnQOyU=) 4: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: 97+DWqEvvBTMnoirWEv7FrDIZLCIY0Mvz53N6ZTzVt8=) 5: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: VGanLk9J+N24GnOulQcLQ4d0WNLJf41HZcV62EIvpNc=) 6: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: 2dctB5QBtj79ZZUeTvzMi2oR0YTk/D1gf5LLN6hSYbg=) 7: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: v+PWzJgXc4iOcMO+HLBQvAjbF+2vNU91oAxZApqu0vg=) 8: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: BDgQiYzIlixZHJsANiY+RU+NwL919JEvWQsJArg8sd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: May 18 23:04:12 2024 GMT Not After : May 25 23:04:12 2024 GMT Subject: CN=664933ed-ec72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:0c:c1:de:fb:c8:19:8b:0a:09:ef:b5:2b: 49:49:c4:ab:a8:f9:0d:bc:27:1b:41:17:77:c3:03: b6:59:dc:81:5f:ca:e3:3d:35:ec:4a:1e:da:e2:f8: 2f:85:db:6c:8f:ac:75:03:aa:a1:76:51:e6:7a:23: 52:84:86:cc:a7:00:43:ce:54:89:fe:75:c4:c0:e9: 3d:93:17:80:c9:00:39:1d:c1:f7:8d:ee:a1:42:dc: 8d:05:09:11:d6:8f:2d:40:0f:10:03:cf:2c:3a:58: 12:cc:d0:57:58:b2:b5:36:c1:fb:ca:c1:8e:dc:c1: 17:73:35:67:34:89:1b:34:c9:ba:e9:22:91:2d:d4: 68:53:60:a0:bb:de:d9:fa:b5:7f:b0:b4:81:46:88: c4:04:8b:46:5e:a7:58:38:11:e7:0b:57:e0:fd:df: 8b:9e:8b:db:27:f1:74:eb:30:b5:5b:e4:9e:cc:a5: 53:76:be:45:8b:d8:7a:9a:9d:6b:10:9d:e6:50:f9: 2a:ba:28:e5:19:a3:89:81:e1:5f:27:f8:53:82:a2: 78:6e:f1:63:d0:c9:c4:80:4c:8e:27:b7:3c:21:8d: 0a:dd:95:19:da:68:ef:26:e7:69:ef:2f:fa:28:e9: 5d:78:bc:b5:b2:2d:e9:9c:90:05:70:b1:50:30:81: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FA:1B:06:21:8C:2F:AE:62:05:7B:6A:19:BB:9F:4E:8E:53:30:EE X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5e:11:c9:bc:88:d4:79:27:49:aa:dd:6e:da:8c:87:66:a2: ef:16:82:e7:c1:59:af:22:23:50:90:cd:42:4a:32:f2:d9:9e: a8:9e:83:51:56:54:42:c7:f9:4b:28:37:5a:4b:4e:78:b0:af: c8:b1:f8:5b:72:00:53:ab:c3:e3:0d:96:5b:23:5a:f8:0b:67: d5:4d:36:fa:57:0c:b0:2a:d6:f2:05:fe:29:26:3a:87:64:39: 38:5c:78:0f:3b:a5:de:f0:49:8c:a5:6f:dc:a0:1f:67:6f:b1: 74:e0:d6:04:28:96:c8:fd:0f:ab:04:5c:f3:a3:52:86:9e:80: 6e:5b:67:14:30:13:a7:95:5b:59:da:2b:46:42:6e:46:27:f9: 9e:72:6f:ab:c3:19:dc:32:01:b2:17:0c:97:12:3d:d0:ee:ce: f2:93:49:8a:65:f1:52:7a:31:ec:68:e9:2a:80:df:0d:ad:4d: dd:a0:82:f3:1d:ed:90:2c:4d:59:74:c9:b3:09:9c:1d:f8:d7: 57:b3:c5:3a:92:db:5d:0a:f5:0f:e8:74:aa:69:f5:55:d0:fa: 03:63:22:7a:ed:1d:3e:c2:65:43:59:96:9d:84:42:a9:c6:70: d9:f0:ae:09:6b:bc:12:15:9b:f7:01:57:8b:cc:90:bb:dc:67: 75:0e:05:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjQwNTE4MjMwNDEyWhcNMjQwNTI1MjMwNDEyWjAYMRYwFAYD VQQDEw02NjQ5MzNlZC1lYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9gMwd77yBmLCgnvtStJScSrqPkNvCcbQRd3wwO2WdyBX8rjPTXsSh7a4vgv hdtsj6x1A6qhdlHmeiNShIbMpwBDzlSJ/nXEwOk9kxeAyQA5HcH3je6hQtyNBQkR 1o8tQA8QA88sOlgSzNBXWLK1NsH7ysGO3MEXczVnNIkbNMm66SKRLdRoU2Cgu97Z +rV/sLSBRojEBItGXqdYOBHnC1fg/d+LnovbJ/F06zC1W+SezKVTdr5Fi9h6mp1r EJ3mUPkquijlGaOJgeFfJ/hTgqJ4bvFj0MnEgEyOJ7c8IY0K3ZUZ2mjvJudp7y/6 KOldeLy1si3pnJAFcLFQMIFZnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX6GwYh jC+uYgV7ahm7n06OUzDuMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9XhHJvIjUeSdJqt1u2oyHZqLvFoLnwVmvIiNQkM1CSjLy2Z6onoNR VlRCx/lLKDdaS054sK/IsfhbcgBTq8PjDZZbI1r4C2fVTTb6VwywKtbyBf4pJjqH ZDk4XHgPO6Xe8EmMpW/coB9nb7F04NYEKJbI/Q+rBFzzo1KGnoBuW2cUMBOnlVtZ 2itGQm5GJ/mecm+rwxncMgGyFwyXEj3Q7s7yk0mKZfFSejHsaOkqgN8NrU3doILz He2QLE1ZdMmzCZwd+NdXs8U6kttdCvUP6HSqafVV0PoDYyJ67R0+wmVDWZadhEKp xnDZ8K4Ja7wSFZv3AVeLzJC73Gd1DgWk -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org