$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: vRcjYDaJQtpowk7JTX59s9hyv4kOuC7ON2TFiqHmIrY= Subject key identifier: BC:D6:87:C9:79:8B:C6:76:0E:91:C7:4A:EF:C0:56:01:3B:B0:B5:77 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 25 Signing time: Sun 19 May 2024 08:33:15 +0000 Manifest this update: Sun 19 May 2024 08:33:14 +0000 Manifest next update: Sun 26 May 2024 08:33:14 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: mSGvzidLqWIxesDkUvjfObmH8h4xd9/eszXBp4vDV7Y=) 2: EE89EF2AE1BE11EE9A5F7B27C4F9AE02.roa (hash: ip30g7o2ZwpnAzFePhjOVtzH3YUjGy23+nNsZaOiRmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: May 19 08:33:14 2024 GMT Not After : May 26 08:33:14 2024 GMT Subject: CN=6649b94b-ad07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:c3:2e:6e:69:b5:ae:82:ef:e1:89:a7:6e: bc:57:11:db:2e:bb:65:38:14:54:a8:61:af:99:36: 77:39:77:59:1f:99:93:eb:98:4c:20:cb:6e:89:f0: b8:bf:57:5c:13:96:ea:d4:5e:bc:3f:30:f3:7b:45: f9:aa:12:c0:b0:78:50:ca:02:34:08:a8:c1:6f:81: dc:ef:27:6b:5c:32:86:5b:63:0d:6e:75:cf:e8:ab: 82:e6:d4:ee:2b:bb:23:36:2c:93:9e:03:b3:d8:c6: 46:a0:2f:ae:64:60:c9:ec:5e:64:d6:e1:52:ff:4a: 1c:9a:a1:53:b2:63:09:56:8a:fa:c5:06:6d:a0:63: d7:2e:09:5e:2a:29:dd:e0:db:a1:e5:e8:9a:5d:d5: 59:cf:89:40:8c:9f:09:98:2b:35:67:ec:b9:52:60: f6:db:ee:b7:c8:07:55:b4:61:e2:98:0d:0b:1b:3f: e5:37:d2:fa:12:1b:c1:49:77:16:48:0e:7f:e6:53: 0c:25:c8:b3:14:4d:14:03:f3:d3:ee:8c:b0:0a:10: c1:58:42:0e:20:70:d4:4a:70:c3:81:a0:8a:2a:4b: 58:9d:fb:b8:0c:1e:ca:f1:e3:5e:9e:a1:da:67:d8: c5:6d:b9:38:79:5e:75:e7:4e:50:8a:cb:7e:f3:99: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D6:87:C9:79:8B:C6:76:0E:91:C7:4A:EF:C0:56:01:3B:B0:B5:77 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:29:f8:4c:38:b3:83:25:07:5e:4d:7d:61:74:d5:52:d9:3a: c3:09:ec:b4:95:6b:fa:f0:b6:49:f4:63:96:c9:73:82:73:c5: 25:54:c0:5f:75:c8:b2:ca:5d:20:79:87:1f:1b:33:4d:d5:0b: 5d:51:9f:0a:4e:ab:10:de:9a:b5:ce:ac:35:42:fc:b8:59:4f: a6:dc:2f:b5:1b:33:f7:88:37:23:e9:41:48:96:ce:13:b6:92: 1a:dd:bd:77:37:20:7f:95:7c:cd:df:0e:7e:11:ed:b1:5b:b0: 2e:dc:96:2f:83:dd:84:06:af:6f:0e:ea:e5:21:a5:7a:5e:a1: bc:52:5f:fb:a3:42:e5:cf:c9:05:b0:f1:b9:2c:ae:2d:1e:f1: 6f:e2:e8:68:b4:70:7c:b4:2b:c2:5f:7c:d9:eb:eb:22:c7:ea: 99:c0:70:51:2f:00:74:98:58:84:e4:9c:cc:a4:4c:0a:ab:34: 92:af:3f:0e:11:96:d8:10:d8:8e:44:8b:13:93:e3:c1:05:a5: 83:f7:ee:eb:d0:0e:22:47:96:cc:34:c2:c8:aa:32:13:ae:c0: 92:35:10:51:99:3e:0b:9b:85:87:ce:a8:ea:48:cb:c5:55:d9: 16:d0:b1:46:41:eb:fb:c6:65:c1:b8:23:cb:dc:a4:39:c3:df: e9:b4:40:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUYzMTExMC8GA1UEBRMoNjlBMzJENzNFMDM4QTMwRDQ3QUNBQ0VCODFDRDczMTJB Rjc1M0FCOTAeFw0yNDA1MTkwODMzMTRaFw0yNDA1MjYwODMzMTRaMBgxFjAUBgNV BAMTDTY2NDliOTRiLWFkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc+sMubmm1roLv4YmnbrxXEdsuu2U4FFSoYa+ZNnc5d1kfmZPrmEwgy26J8Li/ V1wTlurUXrw/MPN7RfmqEsCweFDKAjQIqMFvgdzvJ2tcMoZbYw1udc/oq4Lm1O4r uyM2LJOeA7PYxkagL65kYMnsXmTW4VL/ShyaoVOyYwlWivrFBm2gY9cuCV4qKd3g 26Hl6Jpd1VnPiUCMnwmYKzVn7LlSYPbb7rfIB1W0YeKYDQsbP+U30voSG8FJdxZI Dn/mUwwlyLMUTRQD89PujLAKEMFYQg4gcNRKcMOBoIoqS1id+7gMHsrx416eodpn 2MVtuTh5XnXnTlCKy37zma4/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvNaHyXmL xnYOkcdK78BWATuwtXcwHwYDVR0jBBgwFoAUaaMtc+A4ow1HrKzrgc1zEq91Orkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRjMxL0EwRjRFMEQwRTFC RTExRUVCMDQ1RUIyNkM0RjlBRTAyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9y ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWFNdGMtQTRvdzFIckt6cmdjMXpFcTkxT3JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RjMxL0EwRjRFMEQwRTFCRTExRUVCMDQ1RUIyNkM0RjlBRTAyL2FhTXRjLUE0b3cx SHJLenJnYzF6RXE5MU9yay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALop+Ew4s4MlB15NfWF01VLZOsMJ7LSVa/rwtkn0Y5bJc4JzxSVUwF91 yLLKXSB5hx8bM03VC11RnwpOqxDemrXOrDVC/LhZT6bcL7UbM/eINyPpQUiWzhO2 khrdvXc3IH+VfM3fDn4R7bFbsC7cli+D3YQGr28O6uUhpXpeobxSX/ujQuXPyQWw 8bksri0e8W/i6Gi0cHy0K8JffNnr6yLH6pnAcFEvAHSYWITknMykTAqrNJKvPw4R ltgQ2I5EixOT48EFpYP37uvQDiJHlsw0wsiqMhOuwJI1EFGZPgubhYfOqOpIy8VV 2RbQsUZB6/vGZcG4I8vcpDnD3+m0QMg= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org