$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: nK0JXPVu/JdjxdOYG/uv7mN9El3zzO/DQvQlTpgOnLk= Subject key identifier: 36:90:CB:65:FD:E7:3F:7D:09:D4:FB:F7:1A:8F:32:8D:D3:D9:89:7D Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 0101 Signing time: Sun 19 May 2024 05:39:36 +0000 Manifest this update: Sun 19 May 2024 05:39:35 +0000 Manifest next update: Sun 26 May 2024 05:39:35 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: 4U+03Xr2Th/NKIrBY0LoM8KgxruaLspLTEmGJrVJZx0=) 2: A070F93091F311EDB5268923C4F9AE02.roa (hash: uYZ7KxB+HpKC09pE9mVGMNWgVak7LLuvq+9xq7mvNt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: May 19 05:39:35 2024 GMT Not After : May 26 05:39:35 2024 GMT Subject: CN=66499098-3402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:60:42:23:7f:e3:40:9a:cf:94:a2:6a:5a: 52:d3:44:3c:56:df:33:92:0e:d4:a3:e6:9f:48:f2: 8c:56:62:33:b8:8a:02:27:44:5f:18:a2:6e:e8:a2: 61:19:28:a6:c7:5a:ea:0d:66:e0:bf:af:e9:ae:6e: ea:26:ed:84:b2:5a:0b:59:82:44:fc:56:d4:3b:09: 39:e6:b4:2f:90:57:8d:37:03:c8:b9:86:bc:b0:62: 3c:3c:44:b9:aa:5e:82:46:d1:b0:ce:38:7e:ef:9c: de:3a:75:37:e8:c5:1f:27:ed:af:16:87:57:47:12: 69:fc:b2:f3:db:e7:ed:99:ee:95:2d:df:88:5e:05: c3:ef:c5:05:76:e2:aa:3e:2e:a5:6c:cf:35:98:49: 25:86:57:df:df:fb:90:a6:1b:26:6e:e5:33:33:db: a3:00:dd:c1:4c:41:71:1f:dc:20:40:78:cf:f2:69: ee:68:cd:87:51:25:77:cf:d0:94:43:9a:f7:92:11: 1e:6e:2b:37:83:82:21:00:4f:8e:31:31:48:9c:a6: ea:f9:1b:1a:f6:17:cf:11:42:79:03:ba:ea:61:bb: 5f:71:b4:64:bf:ca:dc:2b:88:06:86:e5:b5:7a:4b: c5:75:42:d5:77:ae:5a:a6:39:65:eb:48:4f:b8:f7: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:90:CB:65:FD:E7:3F:7D:09:D4:FB:F7:1A:8F:32:8D:D3:D9:89:7D X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:0a:19:6d:ca:f2:04:cd:10:17:af:aa:c4:e5:d4:88:7f:da: 51:87:eb:dd:f8:94:e0:0f:2e:d1:d2:7a:fd:da:35:d8:25:ff: b7:55:e9:ad:92:2f:1f:28:76:ca:38:6a:16:e1:99:b5:dd:19: c7:ec:4f:b5:19:e8:5e:94:6d:bc:f5:f9:9a:31:21:19:86:96: 68:51:ff:aa:15:57:f5:84:2b:28:04:88:e1:42:7f:4f:82:58: 1c:6b:d4:5e:53:9c:2f:64:dc:06:15:8e:e5:67:20:5e:fa:4f: 14:f8:2c:df:c4:14:54:96:ae:fc:6d:c1:8f:95:04:d3:50:b0: 70:37:4f:12:f7:7f:84:71:86:45:18:66:17:a6:c5:33:9f:a3: 3b:e1:42:b7:0d:a2:1d:f4:20:64:40:6c:e6:40:06:00:4d:52: 03:9d:39:26:43:df:59:47:cc:21:fe:0b:be:af:fb:7f:54:52: 83:e4:2a:ad:6a:54:81:3d:ea:3a:42:19:d6:94:df:e3:dc:17: e6:26:e6:81:03:4c:f6:97:f9:21:d6:94:d0:51:cd:80:9e:b5: 59:38:03:08:0b:83:7d:bb:30:b5:b6:ef:91:04:55:9c:94:6b: 0e:ef:04:4b:95:f4:af:96:ae:49:ca:c8:53:fd:98:4d:f8:0a: 0e:b4:f5:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjQwNTE5MDUzOTM1WhcNMjQwNTI2MDUzOTM1WjAYMRYwFAYD VQQDEw02NjQ5OTA5OC0zNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UlgQiN/40Caz5SialpS00Q8Vt8zkg7Uo+afSPKMVmIzuIoCJ0RfGKJu6KJh GSimx1rqDWbgv6/prm7qJu2EsloLWYJE/FbUOwk55rQvkFeNNwPIuYa8sGI8PES5 ql6CRtGwzjh+75zeOnU36MUfJ+2vFodXRxJp/LLz2+ftme6VLd+IXgXD78UFduKq Pi6lbM81mEklhlff3/uQphsmbuUzM9ujAN3BTEFxH9wgQHjP8mnuaM2HUSV3z9CU Q5r3khEebis3g4IhAE+OMTFInKbq+Rsa9hfPEUJ5A7rqYbtfcbRkv8rcK4gGhuW1 ekvFdULVd65apjll60hPuPfoCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaQy2X9 5z99CdT79xqPMo3T2Yl9MB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ChltyvIEzRAXr6rE5dSIf9pRh+vd+JTgDy7R0nr92jXYJf+3Vemt ki8fKHbKOGoW4Zm13RnH7E+1GehelG289fmaMSEZhpZoUf+qFVf1hCsoBIjhQn9P glgca9ReU5wvZNwGFY7lZyBe+k8U+CzfxBRUlq78bcGPlQTTULBwN08S93+EcYZF GGYXpsUzn6M74UK3DaId9CBkQGzmQAYATVIDnTkmQ99ZR8wh/gu+r/t/VFKD5Cqt alSBPeo6QhnWlN/j3BfmJuaBA0z2l/kh1pTQUc2AnrVZOAMIC4N9uzC1tu+RBFWc lGsO7wRLlfSvlq5JyshT/ZhN+AoOtPVF -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org