$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: FYwyw94ClZUdlgBHQHjlhNM6TnzZv1s82CzSfvGobK0= Subject key identifier: A8:BF:F4:E8:48:02:C4:C3:0F:DD:34:C2:F2:0D:38:C3:33:1B:1A:F4 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 01A7 Signing time: Sun 19 May 2024 04:35:27 +0000 Manifest this update: Sun 19 May 2024 04:35:26 +0000 Manifest next update: Sun 26 May 2024 04:35:26 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: BrS3ZedkNsiT4nwuQJMwIZG/7eaiTyT5kLSA52x65+M=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: KsUPkgG8JXCSKIWSTTEQ4p7dlp8167y8KTewGqoAc3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: May 19 04:35:26 2024 GMT Not After : May 26 04:35:26 2024 GMT Subject: CN=6649818e-25ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:94:93:13:a4:56:30:b3:eb:e1:31:63:02: 72:82:b7:5b:5f:65:aa:a6:98:32:c4:c7:6c:1f:a7: 87:d5:59:d8:c0:89:b5:24:8f:94:8d:7f:2c:a8:a3: 58:62:4b:65:ae:93:1f:33:4e:4f:f8:99:d1:46:f8: ce:f4:44:e9:89:d8:4d:e0:3c:3b:67:36:f3:8c:6c: b3:a1:d4:26:1e:77:25:8a:84:dc:2c:28:73:fd:c7: cf:3e:af:de:15:82:ec:8f:6f:af:27:c7:3e:5f:4d: 40:ea:85:b8:a0:47:99:2f:fa:ca:60:43:fd:a3:e1: 89:a5:98:e1:3c:05:68:da:74:ca:d4:81:43:50:32: 92:6a:15:c4:a7:a4:8a:aa:cf:ef:76:c8:4f:aa:9f: 08:b9:9a:e9:60:93:2b:8e:46:d7:b2:32:41:d9:a9: fc:f4:5b:84:4d:df:82:f4:2e:30:49:47:48:de:8a: 5b:13:9f:72:cb:01:5c:e5:02:cc:40:b5:aa:43:76: 00:53:f1:33:21:ae:05:3f:28:6b:4b:ad:78:40:82: 28:5e:28:53:28:30:93:d0:a4:26:c1:4a:c2:4b:c8: e5:6f:09:a2:96:86:5e:ea:b1:3c:02:5b:c3:c5:24: c6:38:9c:bd:cd:64:9f:62:2b:4a:68:fc:6e:85:88: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BF:F4:E8:48:02:C4:C3:0F:DD:34:C2:F2:0D:38:C3:33:1B:1A:F4 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:63:22:82:e4:bf:12:cb:f2:62:fb:8a:b2:97:4a:b9:18:b0: 24:4a:e7:18:c5:4c:12:44:df:36:7d:cc:d3:d7:94:89:2c:60: fe:30:31:64:86:2c:bc:9b:02:44:5a:2f:56:02:14:e2:f4:33: bc:bd:ff:90:b3:14:6f:f9:f4:55:7a:6f:32:3f:c1:e8:a1:42: 0d:45:a1:c9:aa:09:19:bc:68:e1:5f:f1:6b:ba:3c:fc:02:4b: 3f:46:c4:11:1a:2e:58:4f:c4:25:d8:9e:51:bb:19:78:7d:37: 17:ec:ec:b5:0b:98:39:8e:b0:47:b2:5b:83:4b:73:5e:13:52: dc:0f:4f:33:e7:e0:1c:a2:15:56:f8:dd:c8:3f:bf:d7:6d:5f: dc:de:c6:a1:58:7d:86:7c:8e:7c:d2:96:e5:40:33:4e:3a:c3: 20:67:7f:82:0a:16:96:a2:d3:cb:7a:d1:d2:14:ca:df:b4:32: 6f:e4:4a:9f:d0:de:29:78:a6:d3:02:a5:07:44:55:d6:ae:49: b7:59:69:f8:f5:68:1c:c8:65:4b:f0:98:e9:2e:9c:7f:83:c5: 28:d6:7c:c2:6a:c9:1c:43:d6:a8:6e:1d:1a:8f:93:3c:fd:c0: aa:7e:9f:71:a7:39:fd:35:57:e2:f7:eb:89:65:33:b6:cb:c9: d3:bb:32:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjQwNTE5MDQzNTI2WhcNMjQwNTI2MDQzNTI2WjAYMRYwFAYD VQQDEw02NjQ5ODE4ZS0yNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTiUkxOkVjCz6+ExYwJygrdbX2WqppgyxMdsH6eH1VnYwIm1JI+UjX8sqKNY YktlrpMfM05P+JnRRvjO9ETpidhN4Dw7ZzbzjGyzodQmHnclioTcLChz/cfPPq/e FYLsj2+vJ8c+X01A6oW4oEeZL/rKYEP9o+GJpZjhPAVo2nTK1IFDUDKSahXEp6SK qs/vdshPqp8IuZrpYJMrjkbXsjJB2an89FuETd+C9C4wSUdI3opbE59yywFc5QLM QLWqQ3YAU/EzIa4FPyhrS614QIIoXihTKDCT0KQmwUrCS8jlbwmiloZe6rE8AlvD xSTGOJy9zWSfYitKaPxuhYjaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKi/9OhI AsTDD900wvINOMMzGxr0MB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANYyKC5L8Sy/Ji+4qyl0q5GLAkSucYxUwSRN82fczT15SJLGD+MDFk hiy8mwJEWi9WAhTi9DO8vf+QsxRv+fRVem8yP8HooUINRaHJqgkZvGjhX/Frujz8 Aks/RsQRGi5YT8Ql2J5Ruxl4fTcX7Oy1C5g5jrBHsluDS3NeE1LcD08z5+AcohVW +N3IP7/XbV/c3sahWH2GfI580pblQDNOOsMgZ3+CChaWotPLetHSFMrftDJv5Eqf 0N4peKbTAqUHRFXWrkm3WWn49WgcyGVL8JjpLpx/g8Uo1nzCaskcQ9aobh0aj5M8 /cCqfp9xpzn9NVfi9+uJZTO2y8nTuzIr -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org