$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: kKa17aSh3MFeOrzZ3DdLankmQSAiW6kiadq2bpTLjoU= Subject key identifier: F0:47:86:55:DE:CB:0D:13:88:0F:5A:C0:A5:D7:00:26:F8:C7:6D:01 Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 0849 Signing time: Sat 18 May 2024 21:41:40 +0000 Manifest this update: Sat 18 May 2024 21:41:40 +0000 Manifest next update: Sat 25 May 2024 21:41:40 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: YudNT9A6rivicyZ4GRzMdbSZ+K1LJDJhZFZeU25XT+8=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: YrnpZi3m8PFhcPzx8yyJW6kEGkbxejrCHTaF/Tb14LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: May 18 21:41:40 2024 GMT Not After : May 25 21:41:40 2024 GMT Subject: CN=66492094-f7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:86:1c:d7:cc:a8:62:86:ed:dc:1c:af:ed: 1a:39:e9:91:a4:01:a1:5f:5f:fe:67:e8:1a:bd:df: 43:d5:82:d2:1d:cd:29:12:3a:d8:8a:e4:0c:43:6d: 31:6f:73:2a:af:ff:43:42:5c:f9:38:ac:8d:8d:d2: 1b:56:30:bc:b7:64:33:38:0b:fd:1c:5a:38:11:2a: 89:db:af:ad:99:74:1d:a3:40:e2:4e:27:a4:24:08: 5f:6d:98:8c:90:df:b8:20:7f:a5:94:55:11:e2:8f: 11:08:d4:d2:8f:f2:37:14:88:2a:26:58:b9:d5:76: 2f:a1:4d:8e:32:1b:38:ce:db:8e:7a:76:2d:61:2b: 65:c2:f4:da:c3:f8:10:24:c1:01:74:b4:65:e7:01: 31:59:1f:97:68:ac:83:3e:52:57:97:8e:c9:44:16: d3:07:3c:29:a4:53:6b:e1:e7:ef:7c:21:5b:77:78: 25:43:4e:a3:14:b9:f0:83:e6:4d:61:fc:8d:6f:bf: 34:c6:42:e3:0f:67:7f:b1:73:f9:97:23:68:b8:e0: 8a:97:b1:be:03:2d:42:4b:85:09:ed:0c:59:f8:4d: a0:54:85:38:15:43:04:55:6b:07:f8:ef:c3:fd:30: 79:46:3d:d0:25:87:1c:04:8e:f9:78:36:ec:35:7f: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:47:86:55:DE:CB:0D:13:88:0F:5A:C0:A5:D7:00:26:F8:C7:6D:01 X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c8:0e:03:d4:48:60:45:cb:66:f5:50:52:5e:ea:72:32:27: 15:34:91:96:3c:e9:6e:5a:55:36:a6:ee:a4:b8:ba:94:e9:53: e8:a4:79:f7:1b:a3:9f:31:44:26:03:b3:4f:c9:4e:69:85:9a: 1c:25:24:21:fd:80:31:e6:c2:02:fe:59:f5:65:d4:ab:a1:ba: a0:a7:7d:16:d1:e2:a2:1f:6d:10:6f:6d:ae:3c:c0:6f:99:aa: 5c:7d:e3:db:c8:92:eb:45:96:85:dc:7e:72:cb:10:a9:56:89: 46:9d:23:0f:fd:f5:02:cf:a8:33:03:6c:01:1b:52:40:04:3e: 1f:94:62:46:6a:8b:1b:72:a1:24:fc:c0:43:8f:c3:12:e5:44: 0d:19:ce:64:1d:85:a6:b2:ba:b5:4b:24:56:fc:b6:45:d9:fb: a9:ed:c8:1e:89:58:b2:0a:e5:32:08:45:c9:cb:c3:14:bc:29: 7f:90:41:e6:73:81:80:2f:97:18:bd:c0:10:87:7c:07:0b:84: 84:c7:84:7d:de:ff:d8:ef:20:bc:9e:42:de:35:50:c5:61:a4: f0:ef:02:fa:90:8e:9d:b5:54:5e:bf:4d:37:cf:63:57:74:7a: 88:6c:f1:e3:4f:54:90:c6:fa:9e:da:c1:75:20:2f:d0:61:f5: ec:15:6f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjQwNTE4MjE0MTQwWhcNMjQwNTI1MjE0MTQwWjAYMRYwFAYD VQQDEw02NjQ5MjA5NC1mN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bGGHNfMqGKG7dwcr+0aOemRpAGhX1/+Z+gavd9D1YLSHc0pEjrYiuQMQ20x b3Mqr/9DQlz5OKyNjdIbVjC8t2QzOAv9HFo4ESqJ26+tmXQdo0DiTiekJAhfbZiM kN+4IH+llFUR4o8RCNTSj/I3FIgqJli51XYvoU2OMhs4ztuOenYtYStlwvTaw/gQ JMEBdLRl5wExWR+XaKyDPlJXl47JRBbTBzwppFNr4efvfCFbd3glQ06jFLnwg+ZN YfyNb780xkLjD2d/sXP5lyNouOCKl7G+Ay1CS4UJ7QxZ+E2gVIU4FUMEVWsH+O/D /TB5Rj3QJYccBI75eDbsNX8/SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBHhlXe yw0TiA9awKXXACb4x20BMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEyA4D1EhgRctm9VBSXupyMicVNJGWPOluWlU2pu6kuLqU6VPopHn3 G6OfMUQmA7NPyU5phZocJSQh/YAx5sIC/ln1ZdSrobqgp30W0eKiH20Qb22uPMBv mapcfePbyJLrRZaF3H5yyxCpVolGnSMP/fUCz6gzA2wBG1JABD4flGJGaosbcqEk /MBDj8MS5UQNGc5kHYWmsrq1SyRW/LZF2fup7cgeiViyCuUyCEXJy8MUvCl/kEHm c4GAL5cYvcAQh3wHC4SEx4R93v/Y7yC8nkLeNVDFYaTw7wL6kI6dtVRev003z2NX dHqIbPHjT1SQxvqe2sF1IC/QYfXsFW9m -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org