$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: 45yw7n5UkEdtTq3VhaWcje8CxEfXjpQOYKMigaixswY= Subject key identifier: 7E:43:C0:D2:04:CA:A6:0F:6C:5E:40:EE:CD:63:16:D0:C2:EE:E3:27 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 0116 Signing time: Sun 19 May 2024 05:19:16 +0000 Manifest this update: Sun 19 May 2024 05:19:15 +0000 Manifest next update: Sun 26 May 2024 05:19:15 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: rx1TrruN2Fkb0ncDTjNcfqo4kKLDlmtB2COKI0eHYfc=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: J+yh8yVkYkkax3iKoT/YJBGRKT6fUNLJo0pPJ2kGDgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: May 19 05:19:15 2024 GMT Not After : May 26 05:19:15 2024 GMT Subject: CN=66498bd3-4cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:09:e7:a2:31:76:a8:99:db:02:e8:28:ce: 77:1b:c6:09:a6:37:82:5f:0e:d8:c3:20:ae:05:30: 24:8d:cc:ca:37:04:ee:56:eb:1b:30:db:14:5d:15: 87:45:93:79:18:06:74:da:61:90:b4:e1:a1:fd:49: 7a:d7:bb:e7:13:73:97:85:1a:3c:98:1c:cb:90:77: bb:aa:ea:a4:8e:e8:20:e7:f9:f9:7d:75:64:fb:3a: cd:1a:84:86:16:a0:66:d2:26:56:4d:c0:ee:98:c5: 35:bc:55:dd:c4:d3:d2:54:df:3b:60:a2:30:33:90: 82:db:3b:03:75:c5:49:d2:32:09:6c:55:d0:90:fe: 92:2b:af:bb:8c:84:0d:96:e1:a9:98:57:93:af:38: 91:ee:53:ee:7b:ff:7f:aa:3e:94:a9:c1:3f:02:a5: d3:bc:eb:15:69:42:bb:1e:d1:34:e5:60:de:8e:11: 7a:0b:b3:2a:26:db:7c:ce:75:5e:6b:cc:3c:36:f1: 1b:e4:21:73:3a:1b:40:ac:3b:fd:4b:e6:11:c9:28: 5b:0d:8f:24:1d:f4:cf:46:79:00:7c:a3:1e:b6:0e: 18:7d:d5:aa:3b:85:ab:dd:52:0e:55:de:68:0b:31: 97:37:51:11:24:ec:42:21:e2:6c:ad:7d:51:ad:32: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:43:C0:D2:04:CA:A6:0F:6C:5E:40:EE:CD:63:16:D0:C2:EE:E3:27 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:0d:44:e8:fe:50:b9:db:3d:27:58:f5:df:96:4f:a0:79:dd: 67:63:ac:10:46:b8:ae:ec:f6:b8:02:35:f4:d7:68:f6:ca:a7: 45:0c:57:00:7c:93:c8:29:0d:3d:82:64:bd:2e:da:32:bc:74: e7:cb:49:3e:5f:80:30:d0:7b:4e:10:94:0a:0d:f4:75:5e:99: 93:9c:1d:02:e2:fb:0b:c2:9f:e3:bd:b1:71:f6:28:a7:be:91: 08:ed:2b:a7:81:14:1a:c6:31:7d:d9:19:df:21:77:ff:1a:bd: 20:d3:64:20:fb:03:fd:1e:21:ac:71:38:c7:e6:40:e5:b8:ef: e7:a1:92:50:7d:43:81:c3:e2:01:3f:57:1b:91:38:0d:3d:ef: a6:b8:da:ca:e7:15:9f:4e:62:95:75:dd:2f:0e:64:12:08:d0: 22:e6:84:e7:64:45:f5:d4:dd:63:7d:f6:28:4f:58:85:c5:e2: a4:49:17:76:3d:d4:f2:e6:09:a1:98:2a:eb:6a:84:0d:36:a0: 0e:56:83:cc:dd:21:60:ac:5e:30:c4:5b:f3:3a:8e:b2:a3:b5: f5:94:b4:07:a5:c4:71:36:64:63:8f:e8:fa:cc:aa:b7:55:a8: 6d:b4:84:c9:aa:f0:a7:a0:ba:f5:e5:a3:e6:22:ce:16:da:22: 27:bb:70:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjQwNTE5MDUxOTE1WhcNMjQwNTI2MDUxOTE1WjAYMRYwFAYD VQQDEw02NjQ5OGJkMy00Y2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFEJ56IxdqiZ2wLoKM53G8YJpjeCXw7YwyCuBTAkjczKNwTuVusbMNsUXRWH RZN5GAZ02mGQtOGh/Ul617vnE3OXhRo8mBzLkHe7quqkjugg5/n5fXVk+zrNGoSG FqBm0iZWTcDumMU1vFXdxNPSVN87YKIwM5CC2zsDdcVJ0jIJbFXQkP6SK6+7jIQN luGpmFeTrziR7lPue/9/qj6UqcE/AqXTvOsVaUK7HtE05WDejhF6C7MqJtt8znVe a8w8NvEb5CFzOhtArDv9S+YRyShbDY8kHfTPRnkAfKMetg4YfdWqO4Wr3VIOVd5o CzGXN1ERJOxCIeJsrX1RrTJtHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5DwNIE yqYPbF5A7s1jFtDC7uMnMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyDUTo/lC52z0nWPXflk+ged1nY6wQRriu7Pa4AjX012j2yqdFDFcA fJPIKQ09gmS9LtoyvHTny0k+X4Aw0HtOEJQKDfR1XpmTnB0C4vsLwp/jvbFx9iin vpEI7SungRQaxjF92RnfIXf/Gr0g02Qg+wP9HiGscTjH5kDluO/noZJQfUOBw+IB P1cbkTgNPe+muNrK5xWfTmKVdd0vDmQSCNAi5oTnZEX11N1jffYoT1iFxeKkSRd2 PdTy5gmhmCrraoQNNqAOVoPM3SFgrF4wxFvzOo6yo7X1lLQHpcRxNmRjj+j6zKq3 VahttITJqvCnoLr15aPmIs4W2iInu3BG -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org