$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft File: 57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json) Hash identifier: LgZwFEcdLgYqOe14+j8UVKzZxru9agfADElGV7uRIpI= Subject key identifier: 06:FB:0A:2C:B4:DA:5E:7A:FF:48:AA:5B:19:A3:41:D0:34:44:1B:37 Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Certificate serial: 0D3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft Manifest number: 0D2E Signing time: Sat 18 May 2024 18:42:12 +0000 Manifest this update: Sat 18 May 2024 18:42:12 +0000 Manifest next update: Sat 25 May 2024 18:42:12 +0000 Files and hashes: 1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: 68XeaJT0W1tuNMo9VmabBr6MND93QINtpk37yoDeimo=) 2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: TXYafClgQVQeXJUBvNnLknPV2XqYxQCmJVpXmho0QT0=) 3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: mITwbrvKWowclf5I2rXkkctzGiZWQzeZoNrUMuqiu/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Validity Not Before: May 18 18:42:12 2024 GMT Not After : May 25 18:42:12 2024 GMT Subject: CN=6648f684-98e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:aa:5d:d9:c7:50:8e:6a:d1:b1:29:c3:ea: a7:0d:8f:6f:fa:e9:c7:da:b1:22:5e:29:6a:83:93: 01:a8:89:cd:ef:ec:6f:15:7b:54:e6:20:6a:ed:89: 6d:28:8f:4d:12:3f:93:a1:5e:66:5c:7f:dd:dd:3b: 0e:51:02:93:51:0e:72:65:66:8a:f0:2d:7d:b0:82: fd:4b:4d:15:b8:73:35:76:9d:59:a9:9a:d5:2a:3b: 20:05:1a:04:ac:35:03:c1:b3:6f:fa:ab:3d:a6:c5: 50:ec:6e:c1:e9:77:a2:70:8f:c8:d9:82:d8:76:88: 89:00:4f:bb:95:98:2e:fe:82:e6:8c:c2:8f:79:3d: 47:75:71:0e:a1:43:ce:99:df:a7:3c:6d:55:71:30: 84:fe:14:fe:82:d0:f0:25:ff:9e:64:4f:d7:5d:18: 62:12:3a:6f:61:a7:53:3f:b8:60:81:74:54:18:b2: 40:d3:4f:4a:a1:78:46:7e:1d:f4:91:ea:14:d1:b2: 63:65:96:d8:4e:f6:36:55:e2:e7:10:d6:7c:ed:fc: c7:c9:28:92:42:52:5a:c6:46:c0:a1:6f:c7:d4:dc: 62:99:c8:b8:56:05:a3:df:de:7f:a6:8e:63:c2:99: 2e:a5:f5:1d:3e:84:b1:cd:b6:c8:a1:70:b1:52:18: eb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FB:0A:2C:B4:DA:5E:7A:FF:48:AA:5B:19:A3:41:D0:34:44:1B:37 X509v3 Authority Key Identifier: keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ef:2f:fa:53:74:85:91:04:f0:92:bc:ee:41:36:7e:35:21: 34:88:cc:a4:a4:ac:4f:02:2b:f9:5e:44:30:a5:e1:55:76:60: 61:be:9b:dc:d9:e7:16:28:7c:75:69:e3:c9:ff:c8:08:e1:33: 8c:f3:23:84:85:27:1f:05:d8:bb:7b:4f:eb:c8:b8:62:c0:82: 20:7f:ad:76:d3:2f:88:d4:49:1d:18:23:2b:c5:8d:98:fd:28: e9:7e:f0:db:46:ab:12:57:d9:28:79:73:11:3a:16:08:fb:f8: 6d:45:1f:17:12:e2:0b:60:7e:fc:eb:9e:e0:6f:97:13:da:bd: c4:63:d7:ef:f8:4e:3d:51:67:2b:4b:d0:ff:84:0f:69:d8:cc: 8a:9e:bc:0d:a5:2a:d0:8d:72:70:d2:6e:51:4e:a6:cf:40:f6: 7f:74:cf:4d:46:b5:1b:ad:12:0b:9e:16:e4:ad:be:b5:be:8f: fc:d4:f8:57:2f:37:ad:3e:fb:b6:38:da:d0:79:99:b2:bd:33: 38:5c:9e:39:8b:de:26:8a:39:4d:d4:28:5b:51:20:42:15:bd: 71:1f:71:c3:d5:d6:40:84:31:f7:9d:5c:86:d2:be:77:e1:fa: 3e:78:2b:f1:b9:94:e9:d8:95:9c:cb:0e:f1:e0:da:c4:44:22: 71:6f:11:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0 MUI4MzVFNjEwHhcNMjQwNTE4MTg0MjEyWhcNMjQwNTI1MTg0MjEyWjAYMRYwFAYD VQQDEw02NjQ4ZjY4NC05OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruqqXdnHUI5q0bEpw+qnDY9v+unH2rEiXilqg5MBqInN7+xvFXtU5iBq7Ylt KI9NEj+ToV5mXH/d3TsOUQKTUQ5yZWaK8C19sIL9S00VuHM1dp1ZqZrVKjsgBRoE rDUDwbNv+qs9psVQ7G7B6XeicI/I2YLYdoiJAE+7lZgu/oLmjMKPeT1HdXEOoUPO md+nPG1VcTCE/hT+gtDwJf+eZE/XXRhiEjpvYadTP7hggXRUGLJA009KoXhGfh30 keoU0bJjZZbYTvY2VeLnENZ87fzHySiSQlJaxkbAoW/H1Nximci4VgWj395/po5j wpkupfUdPoSxzbbIoXCxUhjrRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb7Ciy0 2l56/0iqWxmjQdA0RBs3MB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzOS83MzBGMDBCMkIxQzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhy ME01eEliTncza2RCdURYbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe7y/6U3SFkQTwkrzuQTZ+NSE0iMykpKxPAiv5XkQwpeFVdmBhvpvc 2ecWKHx1aePJ/8gI4TOM8yOEhScfBdi7e0/ryLhiwIIgf6120y+I1EkdGCMrxY2Y /SjpfvDbRqsSV9koeXMROhYI+/htRR8XEuILYH78657gb5cT2r3EY9fv+E49UWcr S9D/hA9p2MyKnrwNpSrQjXJw0m5RTqbPQPZ/dM9NRrUbrRILnhbkrb61vo/81PhX LzetPvu2ONrQeZmyvTM4XJ45i94mijlN1ChbUSBCFb1xH3HD1dZAhDH3nVyG0r53 4fo+eCvxuZTp2JWcyw7x4NrERCJxbxGm -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org