$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: gtjqUMz80BHVNCLGLQ4oKmpvSOiB/ZwdIUs4d2Sk6ko= Subject key identifier: D8:C7:80:25:78:D9:E6:3E:DE:51:8F:AD:CA:9A:54:C1:85:A4:6A:D0 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 97 Signing time: Fri 17 May 2024 07:03:13 +0000 Manifest this update: Fri 17 May 2024 07:03:13 +0000 Manifest next update: Fri 24 May 2024 07:03:12 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: bljSMbiqsEr+LTuT2/lrjlx9K87PP1GgTB5TPwx1pAg=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: 8ZQF99ttZOTUWn8RGxYCMJjT/UlHEgzr991KGflkzBs=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: 99Zxb7vaD5skm/Wji+NgKYTp+kFQviV/tRwO1/z8ZWo=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: 4sja2KDglOPHlvxXAIDl6uJIrNWYcv3i/9rsdXyO1/U=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: z8PyZSKkqE0OPDhgFdw2+5u40wblB/EVRusySHA4vow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: May 17 07:03:13 2024 GMT Not After : May 24 07:03:12 2024 GMT Subject: CN=66470131-4356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:d9:69:c7:a8:96:0a:33:7c:86:af:6f:48: 49:ec:86:01:7e:3e:50:b7:39:32:6e:fe:20:38:96: 03:9c:b0:6e:ac:4b:ba:bc:c0:2a:b3:97:77:4a:ad: ec:6f:7d:28:b1:9c:05:a5:dd:5e:52:aa:75:96:a3: 2d:fc:0b:89:69:92:35:2f:e1:e4:7f:14:6c:d5:c8: 11:5d:dc:88:2e:31:28:6c:10:31:b9:c4:76:35:b1: 93:82:5e:b9:13:18:3e:54:a2:cc:35:ae:bf:85:79: d8:4d:42:0d:fa:7f:34:85:c1:65:84:93:0b:1c:27: 97:ea:71:b1:94:00:11:42:f8:26:90:60:a2:37:83: 7c:d8:12:88:61:6b:af:82:ce:d6:e8:78:63:e0:3c: 93:87:43:90:74:2b:72:fe:2c:93:d4:6f:ca:44:91: 3f:34:53:4c:e5:b9:b4:71:14:ac:31:08:dc:a9:9c: ab:de:07:6b:6b:41:6a:a6:dd:93:0d:7c:65:8f:ef: 78:bc:0d:ef:e8:ce:a1:55:33:dc:ba:6c:9a:bc:78: 26:95:51:6b:66:44:6d:47:e3:1e:66:b5:48:d9:43: 68:18:10:61:ea:08:01:20:96:ac:fc:47:28:c1:3e: 3f:bf:db:08:6e:61:76:11:ad:c3:24:c0:ea:6d:8c: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:80:25:78:D9:E6:3E:DE:51:8F:AD:CA:9A:54:C1:85:A4:6A:D0 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:89:ad:a2:3e:72:4e:bc:ea:55:37:5f:7f:7e:fe:8a:4d:7c: 1d:c1:81:93:5d:30:5d:74:44:0c:ed:af:7b:cf:5b:e6:93:fb: f8:96:c3:16:a5:82:5d:be:78:38:6c:01:09:92:38:54:84:74: c2:be:b8:50:74:07:76:61:f3:97:21:0d:67:da:cd:ff:e7:aa: 18:1d:cf:c0:c4:9c:23:ad:a8:59:35:5a:20:98:26:53:fa:54: 54:36:93:f9:e5:35:11:ab:62:55:e2:8c:90:b0:74:ee:2f:fd: c8:9a:f0:ac:01:3e:a5:b4:a5:3a:43:b0:bc:2e:f3:af:bf:65: a6:77:8c:1d:bf:77:2f:c8:08:50:ad:2c:4b:eb:d8:21:92:13: f4:c8:34:38:bf:32:a1:81:db:a9:38:5c:1b:12:d8:89:a3:a5: 47:03:9e:7b:78:07:e2:eb:c6:b5:f2:5b:81:ba:6a:6f:70:c8: 40:57:fd:ac:79:b7:83:4c:56:1c:fa:44:8d:9d:e8:74:0b:5a: e4:14:53:89:b6:61:ef:17:3e:bc:59:a7:be:9d:1e:ee:f9:df: 60:76:43:16:a2:27:85:52:bd:6e:40:74:1c:bb:e4:bb:8a:6e: 10:3c:e6:61:fe:a0:fb:f4:45:4d:1d:06:c7:8f:06:5e:64:37: 15:df:34:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjQwNTE3MDcwMzEzWhcNMjQwNTI0MDcwMzEyWjAYMRYwFAYD VQQDEw02NjQ3MDEzMS00MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr3ZaceolgozfIavb0hJ7IYBfj5Qtzkybv4gOJYDnLBurEu6vMAqs5d3Sq3s b30osZwFpd1eUqp1lqMt/AuJaZI1L+HkfxRs1cgRXdyILjEobBAxucR2NbGTgl65 Exg+VKLMNa6/hXnYTUIN+n80hcFlhJMLHCeX6nGxlAARQvgmkGCiN4N82BKIYWuv gs7W6Hhj4DyTh0OQdCty/iyT1G/KRJE/NFNM5bm0cRSsMQjcqZyr3gdra0Fqpt2T DXxlj+94vA3v6M6hVTPcumyavHgmlVFrZkRtR+MeZrVI2UNoGBBh6ggBIJas/Eco wT4/v9sIbmF2Ea3DJMDqbYySZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjHgCV4 2eY+3lGPrcqaVMGFpGrQMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ia2iPnJOvOpVN19/fv6KTXwdwYGTXTBddEQM7a97z1vmk/v4lsMW pYJdvng4bAEJkjhUhHTCvrhQdAd2YfOXIQ1n2s3/56oYHc/AxJwjrahZNVogmCZT +lRUNpP55TURq2JV4oyQsHTuL/3ImvCsAT6ltKU6Q7C8LvOvv2Wmd4wdv3cvyAhQ rSxL69ghkhP0yDQ4vzKhgdupOFwbEtiJo6VHA557eAfi68a18luBumpvcMhAV/2s ebeDTFYc+kSNneh0C1rkFFOJtmHvFz68Wae+nR7u+d9gdkMWoieFUr1uQHQcu+S7 im4QPOZh/qD79EVNHQbHjwZeZDcV3zTT -----END CERTIFICATE-----Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org