$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: 7S+1y1xvF6NGYg2OuGsE5iBpgw4dgCrwc7+/Yndjwec= Subject key identifier: E6:BD:69:CE:73:8A:B5:52:E7:9D:FE:B5:43:3E:8A:AB:5D:BF:25:BC Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 0477 Signing time: Sun 19 May 2024 01:41:57 +0000 Manifest this update: Sun 19 May 2024 01:41:57 +0000 Manifest next update: Sun 26 May 2024 01:41:57 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: rYOO4tLvLJmgBEOZGbwmDn2zLZ711oXUetg4D0+vONY=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: LzWsufD3jBLBFlEvCAE5s8+avOurxtPFYFkw78OGI9U=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: +wANWr6Rhur2r82M4CqDooSvlKXhXX0HZdtlwo87YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: May 19 01:41:57 2024 GMT Not After : May 26 01:41:57 2024 GMT Subject: CN=664958e5-ea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:89:53:3f:a7:22:28:6f:23:04:82:73:d8: b0:c0:24:e1:8e:84:e4:d8:94:cb:bb:9b:9e:90:e6: d5:b3:e7:f1:84:28:6b:b0:e6:b5:c6:7e:28:9a:e3: 16:2b:99:67:f9:b1:32:5c:24:7b:25:f5:14:3f:0f: d2:ca:13:71:58:c7:89:14:d7:93:be:41:8c:d3:0b: 1a:cb:a6:cd:20:d9:2a:9c:fe:77:e3:53:d6:f4:71: 28:9b:c2:66:91:77:8f:eb:2a:17:84:dd:b4:63:6c: 7d:e7:f6:d4:ec:b6:fd:8e:0b:ba:1c:ef:ba:4d:cb: 4d:34:ca:f4:6c:86:16:2b:bf:00:9e:bd:86:b3:88: b0:5b:db:fa:fe:b5:89:59:cb:17:63:dc:49:a3:a2: fb:82:6b:0f:69:6b:e8:b5:6f:41:e3:2a:c7:13:2b: 98:b3:50:ce:67:1e:de:31:18:2e:95:b9:c1:c4:0d: ba:a8:0c:f2:04:61:56:54:73:f7:6e:6f:2f:1f:02: 58:2b:a8:c2:ac:5a:87:2d:80:7e:6a:4d:2a:2b:fc: 08:9f:1f:35:ae:65:3e:bc:de:27:de:26:61:f9:f6: 4d:72:0a:b2:2a:6b:58:e9:50:aa:46:0a:a0:36:2b: 6f:55:70:2b:7e:da:ec:a1:24:70:1e:7d:ff:79:96: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BD:69:CE:73:8A:B5:52:E7:9D:FE:B5:43:3E:8A:AB:5D:BF:25:BC X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1b:72:47:e3:aa:96:a4:83:42:57:c4:0f:61:b3:af:c6:4b: 53:08:9c:cd:47:1a:0c:eb:9a:5d:12:f2:46:12:5b:f2:a9:39: 31:d8:fe:86:09:07:92:f1:62:62:5e:65:d4:0c:1e:c2:ff:47: 05:70:dd:b6:2b:7c:5d:c0:33:17:a9:7e:3c:44:51:6a:fe:da: c8:2c:ea:c8:84:c5:c9:e9:de:a5:bd:f8:aa:4a:8d:42:c7:73: 55:0f:ee:cb:a5:d8:9b:89:27:a5:15:fe:90:b0:50:89:69:44: 25:78:66:4e:3c:0c:5c:9e:73:88:23:18:d0:ea:eb:9b:f2:b1: 02:f3:ec:6b:56:86:6b:57:35:a1:0b:50:79:7d:79:6c:80:b0: f5:cb:66:57:b9:c6:97:42:7c:5c:80:3a:39:45:02:28:77:f0: 89:ac:c6:b9:7c:a8:3e:44:4e:ab:cc:ad:01:fb:46:a0:5b:68: 2b:94:d9:66:04:dd:c9:e0:4a:21:67:33:c9:01:39:84:1d:df: a0:93:45:e5:58:c7:b0:7a:96:bd:98:75:5d:01:96:c3:41:30: 6f:9b:f8:ad:e8:7f:17:ff:cb:d6:5b:c0:f9:07:c1:db:4b:8c: e0:c2:10:1a:45:35:19:72:23:fc:5c:7c:36:e2:e8:af:8d:47: 57:9a:f6:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjQwNTE5MDE0MTU3WhcNMjQwNTI2MDE0MTU3WjAYMRYwFAYD VQQDEw02NjQ5NThlNS1lYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW2JUz+nIihvIwSCc9iwwCThjoTk2JTLu5uekObVs+fxhChrsOa1xn4omuMW K5ln+bEyXCR7JfUUPw/SyhNxWMeJFNeTvkGM0wsay6bNINkqnP5341PW9HEom8Jm kXeP6yoXhN20Y2x95/bU7Lb9jgu6HO+6TctNNMr0bIYWK78Anr2Gs4iwW9v6/rWJ WcsXY9xJo6L7gmsPaWvotW9B4yrHEyuYs1DOZx7eMRgulbnBxA26qAzyBGFWVHP3 bm8vHwJYK6jCrFqHLYB+ak0qK/wInx81rmU+vN4n3iZh+fZNcgqyKmtY6VCqRgqg NitvVXArftrsoSRwHn3/eZYNJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOa9ac5z irVS553+tUM+iqtdvyW8MB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsG3JH46qWpINCV8QPYbOvxktTCJzNRxoM65pdEvJGElvyqTkx2P6G CQeS8WJiXmXUDB7C/0cFcN22K3xdwDMXqX48RFFq/trILOrIhMXJ6d6lvfiqSo1C x3NVD+7LpdibiSelFf6QsFCJaUQleGZOPAxcnnOIIxjQ6uub8rEC8+xrVoZrVzWh C1B5fXlsgLD1y2ZXucaXQnxcgDo5RQIod/CJrMa5fKg+RE6rzK0B+0agW2grlNlm BN3J4EohZzPJATmEHd+gk0XlWMewepa9mHVdAZbDQTBvm/it6H8X/8vWW8D5B8Hb S4zgwhAaRTUZciP8XHw24uivjUdXmvaA -----END CERTIFICATE-----Generated at Sun May 19 02:59:14 2024 by rpki-client on console-ams.rpki-client.org