$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: YukLundGkJ2dvjTKYvdGBBjh5V6VDpD+HHG7m/m63DY= Subject key identifier: 56:F4:AA:15:83:42:0C:73:59:2E:DA:BC:2E:A3:89:35:93:F7:0D:49 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 26A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2661 Signing time: Sat 18 May 2024 15:57:57 +0000 Manifest this update: Sat 18 May 2024 15:57:57 +0000 Manifest next update: Sat 25 May 2024 15:57:57 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: d7hvKj1rd8atu0+GaRqGXiMxpuN4SH02i/ldM2Ziweg=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: +C0H9iO1JZcp0c/y1sCnis/fXzlgXy3aSlCWjjfktW8=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: ypylJ892kUN6xUFILwG9fLQBDgZ/yIeuXrgwvy505ic=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: ECJvzVF/ddOKPZqPx88tl4BSL0nolv0vRY0MAsu/HPU=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: ganw9twfBoWLQ8FwFYzaHqAPHs/cs0Tt9VdziGAqXiE=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: qcgU/GCVfhlt8+6BT6YjpdZJPe73OmEnE25ObDmzrqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9894 (0x26a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: May 18 15:57:57 2024 GMT Not After : May 25 15:57:57 2024 GMT Subject: CN=6648d005-f4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:70:f8:c8:1e:2d:46:d3:66:6d:b5:35:1f: fb:c4:cb:3f:c3:45:66:8c:36:09:ec:97:8a:c8:1d: 96:86:42:a0:ae:ec:7f:9b:46:53:db:6b:b8:c8:31: e8:44:21:7f:ad:62:c5:71:75:fb:4f:a6:71:93:b5: 53:3b:28:69:7a:c6:b0:9d:8b:b6:bb:02:07:0f:ab: e4:0a:32:d8:11:47:4e:2d:e6:f7:8b:6d:9f:44:8c: 76:5f:23:b8:ce:b2:e9:78:2a:5d:e7:6b:31:cd:b6: f5:a3:7d:f7:63:37:01:87:f2:a3:14:31:67:0e:03: 12:f9:d3:c2:f6:39:a5:b0:e9:81:8a:11:03:52:b5: cd:8a:74:2c:92:3a:1e:8a:54:30:eb:7b:55:61:13: 3b:3d:ba:ad:13:aa:1c:2c:27:10:98:e7:0b:bf:ce: f7:c9:aa:79:c1:55:71:cd:37:bd:5c:f5:ea:32:a1: 6a:70:41:e9:28:4b:f9:35:01:d6:5d:13:73:4d:a0: 37:7f:6f:6e:54:a0:54:e1:a9:47:d0:7f:bf:f9:b4: 13:79:38:89:af:1d:81:e1:71:62:ad:34:29:a6:10: 4c:92:de:b9:ac:91:ee:2e:1f:69:64:fc:d9:3f:aa: 0a:86:ed:3e:7e:2c:61:2f:6f:c9:e3:8a:fb:fd:0b: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:AA:15:83:42:0C:73:59:2E:DA:BC:2E:A3:89:35:93:F7:0D:49 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ce:d1:5a:32:b3:77:f2:c9:ea:a9:f6:6b:6a:fb:89:15:4b: 24:69:a8:60:6e:5b:8e:72:41:88:91:f5:b2:96:04:5f:57:80: 53:c1:20:e4:5b:41:9a:0e:bb:99:41:a0:cf:65:89:ce:6b:66: c0:e4:90:8c:7d:17:6d:ec:4c:73:7b:0d:eb:84:63:1e:fd:f5: ce:0b:f0:30:93:c2:08:6f:08:75:e5:7e:9b:27:50:d9:50:42: 51:df:23:15:4f:41:64:1c:66:f7:3d:41:74:24:d4:df:20:ef: b4:9e:43:1f:ff:3c:38:77:a7:86:40:e0:8a:4f:3a:d1:4b:b8: 54:bf:a9:d4:60:bc:e0:ff:da:8d:89:d2:14:4e:c2:86:6f:89: fe:3e:37:41:e5:bb:29:f1:3c:3a:6c:d1:19:75:40:10:ec:bf: 8b:a6:01:fb:d6:e7:ed:a2:8e:28:d1:07:f3:75:1d:a6:f1:c2: 2a:b0:8b:1d:d8:0b:88:97:73:fa:63:19:19:50:dd:6e:f0:d0: 26:eb:21:87:e9:17:6d:6e:e0:f4:67:15:65:eb:fb:cf:82:13: b9:39:9d:4d:38:89:f3:fd:bd:04:9c:82:90:98:4f:93:69:03: 9c:06:85:7b:ca:0c:e6:ce:a3:8e:fe:17:f7:b0:eb:b5:6d:65: 4c:d4:9c:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjQwNTE4MTU1NzU3WhcNMjQwNTI1MTU1NzU3WjAYMRYwFAYD VQQDEw02NjQ4ZDAwNS1mNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HFw+MgeLUbTZm21NR/7xMs/w0VmjDYJ7JeKyB2WhkKgrux/m0ZT22u4yDHo RCF/rWLFcXX7T6Zxk7VTOyhpesawnYu2uwIHD6vkCjLYEUdOLeb3i22fRIx2XyO4 zrLpeCpd52sxzbb1o333YzcBh/KjFDFnDgMS+dPC9jmlsOmBihEDUrXNinQskjoe ilQw63tVYRM7PbqtE6ocLCcQmOcLv873yap5wVVxzTe9XPXqMqFqcEHpKEv5NQHW XRNzTaA3f29uVKBU4alH0H+/+bQTeTiJrx2B4XFirTQpphBMkt65rJHuLh9pZPzZ P6oKhu0+fixhL2/J44r7/QvZnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFb0qhWD QgxzWS7avC6jiTWT9w1JMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzztFaMrN38snqqfZravuJFUskaahgbluOckGIkfWylgRfV4BTwSDk W0GaDruZQaDPZYnOa2bA5JCMfRdt7Exzew3rhGMe/fXOC/Awk8IIbwh15X6bJ1DZ UEJR3yMVT0FkHGb3PUF0JNTfIO+0nkMf/zw4d6eGQOCKTzrRS7hUv6nUYLzg/9qN idIUTsKGb4n+PjdB5bsp8Tw6bNEZdUAQ7L+LpgH71uftoo4o0QfzdR2m8cIqsIsd 2AuIl3P6YxkZUN1u8NAm6yGH6RdtbuD0ZxVl6/vPghO5OZ1NOInz/b0EnIKQmE+T aQOcBoV7ygzmzqOO/hf3sOu1bWVM1Jxt -----END CERTIFICATE-----Generated at Sat May 18 16:57:55 2024 by rpki-client on console-fra.rpki-client.org