$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: W12Sv3Qymr+zk2mYsKNT7PnSqIucI3NNePWgQ7WQf8Y= Subject key identifier: E3:29:F9:46:AC:9F:AA:AC:1E:CC:CE:54:F7:A8:0E:B5:18:45:A4:8F Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 01FF Signing time: Sun 19 May 2024 04:11:45 +0000 Manifest this update: Sun 19 May 2024 04:11:44 +0000 Manifest next update: Sun 26 May 2024 04:11:44 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: flL/UhdULy0JzCr+s0V84mWODSNGqEQPDbcsVtlTlkc=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: 93C3ip8IAc66vxePjOVcSjubt03Yf9sEjcjXT+Nlxb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: May 19 04:11:44 2024 GMT Not After : May 26 04:11:44 2024 GMT Subject: CN=66497c01-4977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:e6:f1:a8:1e:9c:dd:05:b2:74:5e:22:0b: 75:4e:54:70:cd:e8:94:5c:fa:a8:7b:d0:12:ce:eb: 4c:c4:e5:1a:b4:ae:81:e3:d4:aa:1b:fc:dd:2c:a2: a5:3c:9a:1d:29:9e:c1:06:03:7e:dd:53:78:d6:c0: 3b:cc:1a:a9:5c:95:b1:00:ca:d4:29:78:16:a2:f7: f0:66:75:64:ee:50:60:b9:f0:b6:78:3e:0a:78:c3: c8:f3:f6:8b:df:b5:db:71:74:93:02:ab:20:07:ae: c5:10:1b:95:7a:00:d1:5c:0c:4c:d0:a4:84:24:6f: 76:af:10:f1:be:11:b1:92:e5:ec:77:70:99:7d:04: 70:2d:fa:cb:ea:82:7a:1f:bb:ae:51:9e:e3:90:b5: ec:f4:7a:57:4f:f7:65:26:c6:27:cd:a6:36:cf:42: a0:31:6f:cc:ab:a6:2c:1c:92:dc:b5:09:47:3d:2b: 6a:d9:9f:51:f9:e9:6b:9a:c4:31:fd:09:a1:fd:87: 4a:c3:dd:b1:50:2a:ff:0a:b6:19:52:ce:52:b8:10: e9:f3:21:4f:a7:84:9e:c5:9c:cc:e8:4e:76:29:81: 6d:c0:b5:f4:f6:99:a3:df:5b:92:2b:c2:62:46:85: 75:d3:a9:73:6f:77:dd:dd:c6:3d:ef:8e:82:56:9a: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:29:F9:46:AC:9F:AA:AC:1E:CC:CE:54:F7:A8:0E:B5:18:45:A4:8F X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b3:df:c4:c1:86:5d:9b:2c:74:13:c6:1d:db:55:af:6a:b5: 33:5a:47:27:79:bb:77:1d:ff:c8:0c:8f:33:0d:ea:b7:65:b3: 17:4f:f2:a2:dd:ed:46:97:e8:91:b1:e0:f7:6c:cb:bd:90:2b: 57:f1:af:c8:45:62:49:da:ea:99:91:43:84:22:6d:46:3d:5a: 0f:a5:9c:75:f2:cc:bc:5f:35:00:06:88:ac:80:dc:49:67:da: bf:d5:69:24:22:e4:80:46:26:11:51:cc:70:78:62:83:d9:dc: 26:a1:63:b5:b8:0e:55:38:f0:0b:46:43:8e:f7:93:a3:dd:bb: 97:70:34:4f:b7:c0:ec:55:1f:de:46:26:4f:3d:6e:41:19:d5: 0d:a0:3d:6f:93:b5:eb:8f:8c:25:5a:29:f3:69:ae:37:60:b7: 35:5b:ca:ba:81:40:c1:f3:24:54:da:b8:e0:5d:83:ce:8a:81: f4:47:49:91:c8:ee:e3:3c:bd:4e:a8:59:3a:3e:c0:e7:f9:25: e5:32:49:81:36:56:c4:1a:1f:1d:00:44:5b:c6:dd:3b:25:be: 96:ec:a3:fd:54:00:21:ae:e3:ac:83:0c:6d:9e:d5:39:e1:1b: 7b:38:16:27:31:bc:ee:c6:92:7c:e0:c8:d8:48:f7:fd:99:c7: 9f:2a:54:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjQwNTE5MDQxMTQ0WhcNMjQwNTI2MDQxMTQ0WjAYMRYwFAYD VQQDEw02NjQ5N2MwMS00OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYHm8agenN0FsnReIgt1TlRwzeiUXPqoe9ASzutMxOUatK6B49SqG/zdLKKl PJodKZ7BBgN+3VN41sA7zBqpXJWxAMrUKXgWovfwZnVk7lBgufC2eD4KeMPI8/aL 37XbcXSTAqsgB67FEBuVegDRXAxM0KSEJG92rxDxvhGxkuXsd3CZfQRwLfrL6oJ6 H7uuUZ7jkLXs9HpXT/dlJsYnzaY2z0KgMW/Mq6YsHJLctQlHPStq2Z9R+elrmsQx /Qmh/YdKw92xUCr/CrYZUs5SuBDp8yFPp4SexZzM6E52KYFtwLX09pmj31uSK8Ji RoV106lzb3fd3cY9746CVpqwOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMp+Uas n6qsHszOVPeoDrUYRaSPMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0s9/EwYZdmyx0E8Yd21WvarUzWkcnebt3Hf/IDI8zDeq3ZbMXT/Ki 3e1Gl+iRseD3bMu9kCtX8a/IRWJJ2uqZkUOEIm1GPVoPpZx18sy8XzUABoisgNxJ Z9q/1WkkIuSARiYRUcxweGKD2dwmoWO1uA5VOPALRkOO95Oj3buXcDRPt8DsVR/e RiZPPW5BGdUNoD1vk7Xrj4wlWinzaa43YLc1W8q6gUDB8yRU2rjgXYPOioH0R0mR yO7jPL1OqFk6PsDn+SXlMkmBNlbEGh8dAERbxt07Jb6W7KP9VAAhruOsgwxtntU5 4Rt7OBYnMbzuxpJ84MjYSPf9mcefKlTd -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org