$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: /RHxJeM9mDVSkgym4KGWF4bvelby6UkdTIq4+YZzdOM= Subject key identifier: B6:32:FA:7E:47:DB:75:92:08:0F:89:F8:58:AF:3D:EF:42:48:27:CA Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0CB2 Signing time: Sat 18 May 2024 18:50:42 +0000 Manifest this update: Sat 18 May 2024 18:50:42 +0000 Manifest next update: Sat 25 May 2024 18:50:42 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: d2bqMFjFLWfkKqxWDljCQoghfJbzwIk+HkBDsyYIeJo=) 2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: Cu6hCTIiriLRL3AdNLUgvpmGVO8zmcdh4GOgG+jh7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: May 18 18:50:42 2024 GMT Not After : May 25 18:50:42 2024 GMT Subject: CN=6648f882-053c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:65:e7:39:fb:eb:7d:e2:b0:95:6c:62:f1:ef: 58:81:ff:b3:c3:82:89:a1:9c:b2:3f:0d:99:6d:e3: ea:c5:25:0a:a7:e9:fe:0a:bd:05:6a:0c:da:f5:fd: 71:99:80:70:82:a9:42:40:69:81:4d:18:c1:dc:70: 79:58:a2:ac:d0:77:e0:2d:78:1d:3c:67:e6:31:6f: 94:9e:81:c8:bc:5d:dd:9b:93:ae:6c:39:75:2b:ff: 9c:18:2b:cf:a8:16:a5:76:60:2c:a2:99:6a:e4:7d: a0:72:4b:f9:ba:e6:00:69:d9:eb:7b:ea:a3:58:2c: 90:b5:ed:82:bc:3d:cf:b9:31:9f:14:f5:6c:8f:b9: 01:89:4a:8a:29:d2:4c:e5:e9:7b:8e:cd:c0:19:6e: 18:80:45:69:bd:22:cf:5c:b3:31:2e:7b:e0:9a:a0: 76:6c:96:4f:12:93:9b:ff:91:81:8c:ea:58:bf:12: 19:77:48:43:71:5a:e4:66:43:e4:ba:e9:49:bc:49: f7:de:c3:f3:57:f0:0d:4d:a3:d3:08:c5:d5:d1:b7: 8b:96:e2:f3:0d:2d:03:19:87:f1:a2:a9:9a:1e:8f: 92:a3:7f:fb:5e:33:ac:2c:0d:ce:b9:cc:fb:3a:78: 65:55:19:64:03:61:b3:65:a1:ec:d5:f1:f4:55:8c: 6e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:FA:7E:47:DB:75:92:08:0F:89:F8:58:AF:3D:EF:42:48:27:CA X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:12:6f:cf:3b:76:8e:b7:88:2c:ea:3b:de:6c:8b:2e:d4:d2: bf:3b:4b:15:18:30:ea:ee:7f:7d:79:00:c5:cb:29:49:d5:8e: e9:35:b7:20:42:a3:16:f9:48:94:94:3b:b5:2b:05:fb:a0:3c: a8:e7:2d:0b:11:ff:1c:c3:bd:51:aa:ef:06:59:9a:82:51:1c: 5c:81:cd:4d:0d:ba:20:65:1f:3b:42:fa:3a:5d:0c:25:91:16: b0:07:ea:af:f7:92:17:2d:cb:7c:bd:52:e7:be:40:e1:ba:d0: dc:6f:82:ae:cc:c7:d4:74:87:1c:77:e8:41:e7:50:9c:50:ac: 2e:8e:ee:11:2e:15:ab:db:06:0f:1f:ad:97:59:ef:51:3c:95: 45:c6:c3:82:02:12:4b:8c:f8:27:d6:93:8b:33:03:a5:4a:fe: 38:43:11:b7:a5:b5:93:d5:4d:06:59:78:69:d6:ef:b1:a4:28: 93:31:c7:13:25:23:f4:f0:07:a4:de:c5:d1:20:a5:a8:07:74: 9d:b4:00:87:29:10:44:f8:e0:e1:59:3d:e9:19:f1:61:a5:24: 4d:f9:a9:f0:12:87:cd:8c:31:0d:18:93:16:ae:af:e8:02:42: 1b:8f:80:13:f9:23:73:b1:1b:a8:86:68:19:8a:47:44:3f:f2: 8f:d5:0e:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjQwNTE4MTg1MDQyWhcNMjQwNTI1MTg1MDQyWjAYMRYwFAYD VQQDEw02NjQ4Zjg4Mi0wNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WXnOfvrfeKwlWxi8e9Ygf+zw4KJoZyyPw2ZbePqxSUKp+n+Cr0Fagza9f1x mYBwgqlCQGmBTRjB3HB5WKKs0HfgLXgdPGfmMW+UnoHIvF3dm5OubDl1K/+cGCvP qBaldmAsoplq5H2gckv5uuYAadnre+qjWCyQte2CvD3PuTGfFPVsj7kBiUqKKdJM 5el7js3AGW4YgEVpvSLPXLMxLnvgmqB2bJZPEpOb/5GBjOpYvxIZd0hDcVrkZkPk uulJvEn33sPzV/ANTaPTCMXV0beLluLzDS0DGYfxoqmaHo+So3/7XjOsLA3Oucz7 OnhlVRlkA2GzZaHs1fH0VYxuQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYy+n5H 23WSCA+J+FivPe9CSCfKMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQEm/PO3aOt4gs6jvebIsu1NK/O0sVGDDq7n99eQDFyylJ1Y7pNbcg QqMW+UiUlDu1KwX7oDyo5y0LEf8cw71Rqu8GWZqCURxcgc1NDbogZR87Qvo6XQwl kRawB+qv95IXLct8vVLnvkDhutDcb4KuzMfUdIccd+hB51CcUKwuju4RLhWr2wYP H62XWe9RPJVFxsOCAhJLjPgn1pOLMwOlSv44QxG3pbWT1U0GWXhp1u+xpCiTMccT JSP08Aek3sXRIKWoB3SdtACHKRBE+ODhWT3pGfFhpSRN+anwEofNjDENGJMWrq/o AkIbj4AT+SNzsRuohmgZikdEP/KP1Q6t -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org