$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: zOX5MnWGxCfmjhpfTmLzbLZDXFbLpIzp6XF8f29hb1o= Subject key identifier: D9:F8:C8:26:13:00:18:82:98:9B:6D:D0:4B:80:AE:91:EA:4B:62:1C Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 01E7 Signing time: Sun 19 May 2024 04:16:15 +0000 Manifest this update: Sun 19 May 2024 04:16:14 +0000 Manifest next update: Sun 26 May 2024 04:16:14 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: CEt+ibbbYiwC1vokJw4ycalSFdE4vPZ4aYKdDsWUQWc=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: V8vWxpZQHTe4bEgYXHGNOT4WbmjvJ2CQz2pLr1HqlCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: May 19 04:16:14 2024 GMT Not After : May 26 04:16:14 2024 GMT Subject: CN=66497d0f-bba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:32:b9:4f:65:fb:04:ff:f4:4e:dd:db:81:d3: d9:de:cb:14:fe:a6:5e:32:4b:0c:73:ee:07:2c:16: f2:db:07:5b:a7:c4:c0:39:a8:90:91:91:a4:9d:70: 03:a7:b4:f9:38:0f:03:9f:95:aa:2f:1f:24:49:10: 03:2c:e8:37:b7:31:2f:66:c7:34:f5:1f:91:46:40: b9:7d:ad:ca:5a:dd:bf:4b:a6:fe:04:ad:4e:2c:b2: 40:d1:23:4f:55:9d:6b:e3:dd:e6:84:90:07:a3:0a: 4f:1b:5a:ef:81:47:3b:ff:52:5b:df:33:ce:40:ca: 63:6e:0a:43:3d:50:1e:59:d7:f3:60:45:c4:76:f0: d3:e7:aa:8a:e9:81:1f:97:2b:92:bb:32:26:07:cc: 13:00:7f:20:9b:2c:1d:d3:a9:fc:8f:15:7b:f9:bd: 10:12:bf:fa:87:41:1c:26:29:e7:b8:81:14:20:41: 26:e0:e0:d2:84:ef:43:c6:8b:f6:92:a4:71:79:f4: 2e:8b:67:b7:02:b0:f3:a6:ff:da:b7:14:59:eb:58: 21:94:d4:35:45:c4:70:fd:c9:6d:23:c6:78:2a:cd: c0:44:41:d7:ec:5e:cf:ec:d5:73:8f:a2:6d:75:cd: 86:27:65:53:8a:6c:68:1c:c4:94:a8:d3:e7:cc:73: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:C8:26:13:00:18:82:98:9B:6D:D0:4B:80:AE:91:EA:4B:62:1C X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:33:5a:8b:f3:10:57:10:bf:e0:40:1b:2f:c2:f9:96:f8:7e: 25:95:f3:92:ea:c3:98:76:f9:3c:08:39:c3:65:65:1a:3a:64: 96:3a:97:e5:ee:23:bb:53:7c:33:44:89:f1:15:6e:04:55:5b: 3a:c6:39:3d:4f:1d:ef:71:82:92:8f:df:68:bc:b2:d9:50:d7: 61:fb:a1:aa:8f:98:e1:5f:a5:bf:f4:4e:a3:e7:8e:fc:e3:7f: 88:08:2b:e2:9c:e2:76:93:69:50:8e:9b:16:fa:59:24:d1:f8: 4e:b9:8d:23:5c:ca:3a:61:6a:dc:d7:d1:92:f8:24:7e:a2:8f: 12:3d:c5:1b:d0:08:cb:b6:4b:c6:91:a2:01:1a:f6:07:59:79: b7:fe:ea:ff:52:de:4d:70:99:fe:96:7d:78:2b:16:fe:aa:17: 60:24:26:36:e9:ae:54:14:82:72:1b:41:15:19:97:53:5d:3d: 9e:9c:4f:9b:c4:a7:b9:b0:99:25:1f:e5:be:11:68:1c:5d:db: 06:75:cf:f3:39:70:c6:9e:02:9c:da:9c:53:ca:a9:20:03:db: 7c:64:cf:39:37:a8:ad:78:31:94:91:d6:d4:61:26:03:f0:58: 4f:6a:da:bf:20:b3:8c:ff:f3:34:1e:52:67:6e:13:98:ce:2f: ec:2a:73:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjQwNTE5MDQxNjE0WhcNMjQwNTI2MDQxNjE0WjAYMRYwFAYD VQQDEw02NjQ5N2QwZi1iYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DK5T2X7BP/0Tt3bgdPZ3ssU/qZeMksMc+4HLBby2wdbp8TAOaiQkZGknXAD p7T5OA8Dn5WqLx8kSRADLOg3tzEvZsc09R+RRkC5fa3KWt2/S6b+BK1OLLJA0SNP VZ1r493mhJAHowpPG1rvgUc7/1Jb3zPOQMpjbgpDPVAeWdfzYEXEdvDT56qK6YEf lyuSuzImB8wTAH8gmywd06n8jxV7+b0QEr/6h0EcJinnuIEUIEEm4ODShO9Dxov2 kqRxefQui2e3ArDzpv/atxRZ61ghlNQ1RcRw/cltI8Z4Ks3AREHX7F7P7NVzj6Jt dc2GJ2VTimxoHMSUqNPnzHM6nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn4yCYT ABiCmJtt0EuArpHqS2IcMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBM1qL8xBXEL/gQBsvwvmW+H4llfOS6sOYdvk8CDnDZWUaOmSWOpfl 7iO7U3wzRInxFW4EVVs6xjk9Tx3vcYKSj99ovLLZUNdh+6Gqj5jhX6W/9E6j5478 43+ICCvinOJ2k2lQjpsW+lkk0fhOuY0jXMo6YWrc19GS+CR+oo8SPcUb0AjLtkvG kaIBGvYHWXm3/ur/Ut5NcJn+ln14Kxb+qhdgJCY26a5UFIJyG0EVGZdTXT2enE+b xKe5sJklH+W+EWgcXdsGdc/zOXDGngKc2pxTyqkgA9t8ZM85N6iteDGUkdbUYSYD 8FhPatq/ILOM//M0HlJnbhOYzi/sKnP6 -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org