$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: 00fiX1UYZCXl9x74yONzMzJf/+zRvPovgWXIaXmZX40= Subject key identifier: 10:A3:93:81:1D:C3:AD:E4:7D:2E:E8:61:E9:6C:68:01:DF:54:8D:2E Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 12D4 Signing time: Sat 18 May 2024 17:35:54 +0000 Manifest this update: Sat 18 May 2024 17:35:53 +0000 Manifest next update: Sat 25 May 2024 17:35:53 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: GEQlSEZOk/SaIo3l4xPGmnjtLBbdNlq2ABj6eLcVPc8=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: 6c3OfbdlQja3hzdttFkCHz1g2QneRQ6AJCKu8c3JNW0=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Sh9ZEftSDUCNsonrPL5hdIuQ6kK6oBuLl7Au9KuBgaU=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: qSs7QVljBsGrP5H4M7LOXLUI5O3b+eyIfSUCsf7sAlE=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: hx51tu3BzE0Ovl4vomnYpy0oQpk07CS6QaPZ68JMslE=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: ZV/5no5yLR6f3lGoNEw7gCH+hQmzKRm3RpB9ZrjngFo=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: jDoCRBF6kiTj2dJwnWoV26m0sDgX4Eurt4HndOXvH2w=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: eb2cB1NyAI3fojRDEJ1cXYgoo9rBGtAnt/RNlzawDQw=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: jCSMxi5V4DvG7dONOcGap9wJ76BjQ4HDsVO1HunAywM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4897 (0x1321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: May 18 17:35:53 2024 GMT Not After : May 25 17:35:53 2024 GMT Subject: CN=6648e6f9-bb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:46:32:5f:e0:2c:d9:c0:17:78:6b:e1:7c: 19:79:d7:9f:98:15:dc:b6:7c:8d:10:f0:0f:7a:f7: 64:3d:4b:08:62:84:50:d0:fe:90:3d:be:e6:bd:22: 63:42:7e:a6:62:d8:42:71:d0:63:fb:99:64:9d:c9: d5:7c:9f:8d:d1:b1:4f:a7:0e:06:df:00:e5:9d:c0: c0:41:a7:4c:6b:6b:1b:2b:f3:6a:0f:37:f4:b4:75: 79:b4:e7:a4:3d:b7:8b:7c:a6:2b:9d:b9:c9:28:f5: 4b:05:44:14:56:a6:ed:af:cb:e5:f2:9d:15:a2:8e: 20:9b:f2:49:9b:5e:cc:69:c4:cd:7c:47:59:06:be: 69:37:6c:55:07:90:c8:e5:19:99:23:75:ed:81:be: c3:93:41:99:b6:f0:3e:bd:c5:68:39:da:18:72:ad: b3:df:6e:95:c7:f6:c1:b4:1e:bd:f6:3e:3a:3b:10: 00:c8:8b:d5:00:bb:ad:c1:10:e8:b8:72:17:cf:e2: 49:7f:03:07:ff:e1:ec:10:4a:92:52:e6:31:27:d1: 0f:32:0e:10:ae:cb:1a:60:ba:30:76:18:15:d6:29: e1:62:77:86:76:33:79:0a:29:c2:cb:8b:53:d2:7d: 35:e7:20:65:6e:69:c4:c4:54:e1:df:3c:ae:da:36: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:93:81:1D:C3:AD:E4:7D:2E:E8:61:E9:6C:68:01:DF:54:8D:2E X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a2:a5:91:58:ca:1d:fc:ea:b4:29:65:d1:fe:73:4a:4a:ec: 7f:81:c6:56:13:aa:5d:a5:0d:1f:60:1d:55:8e:14:59:d6:8f: 6b:57:89:f6:d1:bb:b7:04:09:37:b4:86:09:be:11:f9:7f:a3: b5:7b:83:02:ae:af:d0:38:af:78:d4:1b:61:9c:19:6f:d3:7d: 0d:34:7a:5b:b4:86:51:e2:f5:11:f0:01:28:e2:fa:a7:a0:61: af:68:7a:2b:a9:a3:25:9b:82:17:b9:a9:f4:a3:a4:1e:01:1f: e7:22:ee:a3:6f:b5:a6:f7:0c:57:b7:ab:99:df:5d:34:f6:97: f2:16:8b:7e:c6:ab:10:30:d9:a5:14:50:67:ba:b0:b3:ae:78: 78:06:60:76:d9:64:e0:4d:fe:d8:56:5c:09:92:4e:50:28:ca: 27:74:1c:8a:01:f4:5a:4b:8f:7c:86:05:59:a8:93:fb:6b:3b: f9:99:65:cc:56:00:74:5e:ac:c3:37:6d:77:e3:55:55:96:57: cc:a3:8b:5b:19:05:1e:c5:eb:95:b4:75:6b:33:73:4e:d3:03: 58:14:30:ef:d3:35:13:d5:87:3b:e3:be:1f:e1:52:c2:39:d5: eb:64:6a:0d:3b:dd:8a:0e:b7:ad:4b:2d:14:99:f3:26:b2:45: 01:a4:f3:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjQwNTE4MTczNTUzWhcNMjQwNTI1MTczNTUzWjAYMRYwFAYD VQQDEw02NjQ4ZTZmOS1iYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3lGMl/gLNnAF3hr4XwZedefmBXctnyNEPAPevdkPUsIYoRQ0P6QPb7mvSJj Qn6mYthCcdBj+5lkncnVfJ+N0bFPpw4G3wDlncDAQadMa2sbK/NqDzf0tHV5tOek PbeLfKYrnbnJKPVLBUQUVqbtr8vl8p0Voo4gm/JJm17MacTNfEdZBr5pN2xVB5DI 5RmZI3Xtgb7Dk0GZtvA+vcVoOdoYcq2z326Vx/bBtB699j46OxAAyIvVALutwRDo uHIXz+JJfwMH/+HsEEqSUuYxJ9EPMg4QrssaYLowdhgV1inhYneGdjN5CinCy4tT 0n015yBlbmnExFTh3zyu2jbTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCjk4Ed w63kfS7oYelsaAHfVI0uMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsoqWRWMod/Oq0KWXR/nNKSux/gcZWE6pdpQ0fYB1VjhRZ1o9rV4n2 0bu3BAk3tIYJvhH5f6O1e4MCrq/QOK941BthnBlv030NNHpbtIZR4vUR8AEo4vqn oGGvaHorqaMlm4IXuan0o6QeAR/nIu6jb7Wm9wxXt6uZ31009pfyFot+xqsQMNml FFBnurCzrnh4BmB22WTgTf7YVlwJkk5QKMondByKAfRaS498hgVZqJP7azv5mWXM VgB0XqzDN21341VVllfMo4tbGQUexeuVtHVrM3NO0wNYFDDv0zUT1Yc7474f4VLC OdXrZGoNO92KDretSy0UmfMmskUBpPN8 -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org