$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft File: V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json) Hash identifier: THfWGCAhGyDBPUreCjsJzV+ikH5jshANxL05NxG4Xts= Subject key identifier: C1:BB:C7:A9:AA:0A:FB:E4:E6:0E:A3:48:5C:03:CD:29:A7:29:16:B7 Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft Manifest number: 02F3 Signing time: Sun 19 May 2024 03:15:45 +0000 Manifest this update: Sun 19 May 2024 03:15:44 +0000 Manifest next update: Sun 26 May 2024 03:15:44 +0000 Files and hashes: 1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: Z72O0fzxiwenmceHi2lJjrbvmfi1jzlPtkZLSUxkx00=) 2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: HQbxIpWcedK5+bgfWJhbfwDuzgKpxhexN3JOo2oh/fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33 Validity Not Before: May 19 03:15:44 2024 GMT Not After : May 26 03:15:44 2024 GMT Subject: CN=66496ee1-f838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:98:ac:3b:66:10:33:31:1d:ba:bc:d2:89:67: 55:c7:7c:14:bb:69:10:27:d6:73:7c:1f:d1:5a:27: 42:bb:c4:f7:0c:dc:62:56:36:f9:f0:88:5e:73:1b: 10:3a:af:07:d0:0d:5f:21:1c:49:7e:cf:82:11:48: 18:be:66:68:1a:6d:fc:c2:4a:70:08:ca:98:6b:11: a7:c8:22:6a:27:6a:82:65:24:e4:e0:43:bf:08:24: 13:79:52:77:02:c1:b8:1e:f7:b3:20:d2:39:07:5a: 9b:33:c6:59:aa:43:7e:0c:f6:73:7c:8d:a2:5e:22: fd:fb:31:fb:7c:dc:9d:b4:21:97:92:06:a7:d3:26: 13:dc:c4:e9:e9:8a:ad:d3:51:50:7e:d7:49:d0:9d: 78:50:1c:f3:26:be:2b:82:79:01:9d:d4:d7:b7:13: 4d:49:c3:52:ca:4d:c8:77:bb:34:bd:d1:ff:4d:92: 2e:11:d6:0e:cb:87:8b:ed:8e:f4:4a:47:7a:1f:8d: 45:26:32:32:8a:06:ce:15:27:b5:60:f3:be:ab:7e: ae:42:48:71:45:bd:5f:34:92:a2:37:a3:38:83:8d: 82:b4:4d:de:5e:8b:bb:35:9c:9e:a3:a3:72:3e:32: ce:99:71:a9:06:5e:3c:98:9d:e4:5d:18:13:1d:f9: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BB:C7:A9:AA:0A:FB:E4:E6:0E:A3:48:5C:03:CD:29:A7:29:16:B7 X509v3 Authority Key Identifier: keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8e:d2:d0:4e:4d:99:52:a8:3a:b5:7c:01:9e:9e:35:66:77: ff:20:a1:1a:6e:5b:c1:e1:9b:17:1d:b7:13:b4:68:01:b9:ec: 79:88:66:1a:9a:58:c9:82:d9:f8:90:a2:54:3d:6a:fa:cf:0c: 1b:d5:db:8d:ff:1f:01:bc:16:7e:1c:91:03:75:80:30:39:88: d1:0b:eb:4a:a1:e5:bb:fa:2d:e7:bd:00:2c:62:0e:f9:8a:a7: 79:69:44:a4:87:02:6b:e4:77:e7:48:2d:47:57:08:00:90:5e: 43:db:4a:da:e6:ff:43:ea:dc:87:bc:b2:98:88:8e:1b:da:c3: ed:7c:85:a1:13:2f:3a:87:96:05:8a:28:6b:7d:47:16:49:8e: c0:e9:f9:48:80:ec:0d:27:bc:5e:ee:aa:3f:ef:94:17:59:b5: fd:8b:50:f6:fd:71:48:65:96:85:b9:8e:a6:df:c2:a1:f4:e0: 5c:04:0c:9a:38:27:7b:5d:f4:dd:b4:b8:9a:1c:85:6f:bb:2f: 6c:40:cb:9d:21:d4:47:e7:3f:b5:a4:36:e3:26:35:5a:3b:c5: 81:d0:2a:3f:8c:3b:02:4b:63:a4:12:b1:0f:b3:48:58:09:53: 3f:d6:01:16:05:26:97:f8:f0:1b:f7:8b:3b:2e:2f:25:45:53: 16:cf:6e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3 RjEwNUJEMzMwHhcNMjQwNTE5MDMxNTQ0WhcNMjQwNTI2MDMxNTQ0WjAYMRYwFAYD VQQDEw02NjQ5NmVlMS1mODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9pisO2YQMzEdurzSiWdVx3wUu2kQJ9ZzfB/RWidCu8T3DNxiVjb58IhecxsQ Oq8H0A1fIRxJfs+CEUgYvmZoGm38wkpwCMqYaxGnyCJqJ2qCZSTk4EO/CCQTeVJ3 AsG4HvezINI5B1qbM8ZZqkN+DPZzfI2iXiL9+zH7fNydtCGXkgan0yYT3MTp6Yqt 01FQftdJ0J14UBzzJr4rgnkBndTXtxNNScNSyk3Id7s0vdH/TZIuEdYOy4eL7Y70 Skd6H41FJjIyigbOFSe1YPO+q36uQkhxRb1fNJKiN6M4g42CtE3eXou7NZyeo6Ny PjLOmXGpBl48mJ3kXRgTHfkGtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG7x6mq Cvvk5g6jSFwDzSmnKRa3MB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EzRi82NEMzMzk0ODkyMzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldY RUh0M0RCQWNpVEpfRUZ2VE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBujtLQTk2ZUqg6tXwBnp41Znf/IKEablvB4ZsXHbcTtGgBuex5iGYa mljJgtn4kKJUPWr6zwwb1duN/x8BvBZ+HJEDdYAwOYjRC+tKoeW7+i3nvQAsYg75 iqd5aUSkhwJr5HfnSC1HVwgAkF5D20ra5v9D6tyHvLKYiI4b2sPtfIWhEy86h5YF iihrfUcWSY7A6flIgOwNJ7xe7qo/75QXWbX9i1D2/XFIZZaFuY6m38Kh9OBcBAya OCd7XfTdtLiaHIVvuy9sQMudIdRH5z+1pDbjJjVaO8WB0Co/jDsCS2OkErEPs0hY CVM/1gEWBSaX+PAb94s7Li8lRVMWz25e -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org