$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json) Hash identifier: fo+iYuoWq+ay/2+mAugkuCF4l8toJ/aQgx0VCyNlh8w= Subject key identifier: E9:23:97:0B:23:D4:F8:3B:A0:78:CC:A8:CE:DF:40:81:72:6F:33:85 Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft Manifest number: 9D Signing time: Fri 31 May 2024 07:44:46 +0000 Manifest this update: Fri 31 May 2024 07:44:45 +0000 Manifest next update: Fri 07 Jun 2024 07:44:45 +0000 Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: xnA4MJEKhUqA4FEJL5KxBTb74v93AYbgEHRqfgtt58g=) 2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: wc/nP/I02P9mYhl99EomTi2ak69YgtTLrrtatE7njg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Validity Not Before: May 31 07:44:45 2024 GMT Not After : Jun 7 07:44:45 2024 GMT Subject: CN=66597fee-80d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:06:f5:ce:9d:fe:07:62:e5:22:af:84:cb: d2:c0:04:23:8d:e8:a3:f9:ca:4d:2b:4b:95:20:f1: ca:36:02:f5:5b:d8:2f:b4:66:39:f0:3e:c8:b8:02: 9f:27:6a:b0:1c:0d:5d:58:5f:db:eb:fb:f8:ae:66: d2:c5:db:9f:a3:dc:60:94:f3:26:0d:fd:c5:d5:56: 4d:74:79:0c:c4:e2:55:08:96:9d:ba:f0:1e:77:00: 66:05:29:05:1b:47:4c:2a:a6:ad:fc:29:46:c1:96: b3:e0:8e:59:3f:f2:f8:b3:3b:fe:17:4a:dc:51:66: 59:19:85:7b:72:e3:b4:39:32:7e:68:a8:70:e1:71: cc:f1:63:43:89:65:2a:4d:1d:33:e9:54:30:88:d5: c4:c9:93:e0:bf:e3:01:6b:cc:d7:db:68:0a:a7:a3: 49:8c:86:0d:a0:20:a2:13:07:98:f0:6c:ad:d9:19: 75:5b:8e:b2:4d:fe:21:a5:0f:ab:45:9b:42:82:54: 07:9b:33:20:47:01:25:be:c4:d1:d0:22:e8:61:15: 1a:0d:0e:3b:e9:ef:d5:a1:ef:be:eb:2b:cd:b8:17: 04:3e:b4:fd:4b:e4:27:c0:07:24:63:36:91:0e:6a: 49:db:27:69:cb:86:6e:e4:b2:cb:99:51:3f:3e:a0: 19:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:23:97:0B:23:D4:F8:3B:A0:78:CC:A8:CE:DF:40:81:72:6F:33:85 X509v3 Authority Key Identifier: keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c8:1b:bb:76:06:6a:71:4e:88:eb:b5:41:a6:83:50:59:84: ad:df:63:5a:10:1e:1a:33:0e:d9:f9:84:38:fe:7f:60:27:8d: 33:78:72:a7:31:96:c3:3c:83:e7:7c:b9:21:ca:74:3a:16:e5: db:f7:1a:46:48:7b:a4:01:1a:52:1c:17:87:96:90:30:07:23: ef:b3:f7:30:94:0f:41:c8:c6:82:72:58:2b:ca:cf:6c:1c:87: 0d:ab:57:24:65:0e:4a:1f:12:f1:33:cc:31:0d:9b:45:4b:a3: 34:2f:c1:f8:9e:cd:a8:47:0c:b4:d3:b2:56:f2:12:8c:aa:ef: c1:26:f2:b7:ad:47:65:9c:54:07:4b:cd:8a:23:22:58:b6:86: 42:f6:e3:7b:d1:df:6b:a4:af:dd:5a:ab:de:24:95:a7:3c:87: 7a:2c:9f:86:37:cd:96:50:10:d8:c1:7a:de:51:35:a4:7d:c4: d6:03:b7:e2:5e:39:d8:ab:0b:89:3b:bb:25:2a:e0:74:6d:5d: 05:e9:b2:c0:cd:59:8d:b0:ca:26:6a:2d:b1:f4:48:43:ae:99: 3a:60:03:57:5d:e7:3b:dc:c1:18:44:15:f1:31:f0:e9:28:30: 38:32:ca:64:9d:3c:5b:cd:fe:25:1d:78:95:36:ba:b0:98:fa: 7b:4d:fa:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNFNjIxMTAvBgNVBAUTKDg5MDI3ODkwMDMzRDVENjIzQkQ0RTQzOTg2RTg4MEY2 QUIxMzg0OTQwHhcNMjQwNTMxMDc0NDQ1WhcNMjQwNjA3MDc0NDQ1WjAYMRYwFAYD VQQDEw02NjU5N2ZlZS04MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XMG9c6d/gdi5SKvhMvSwAQjjeij+cpNK0uVIPHKNgL1W9gvtGY58D7IuAKf J2qwHA1dWF/b6/v4rmbSxdufo9xglPMmDf3F1VZNdHkMxOJVCJaduvAedwBmBSkF G0dMKqat/ClGwZaz4I5ZP/L4szv+F0rcUWZZGYV7cuO0OTJ+aKhw4XHM8WNDiWUq TR0z6VQwiNXEyZPgv+MBa8zX22gKp6NJjIYNoCCiEweY8Gyt2Rl1W46yTf4hpQ+r RZtCglQHmzMgRwElvsTR0CLoYRUaDQ476e/Voe++6yvNuBcEPrT9S+QnwAckYzaR DmpJ2ydpy4Zu5LLLmVE/PqAZwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkjlwsj 1Pg7oHjMqM7fQIFybzOFMB8GA1UdIwQYMBaAFIkCeJADPV1iO9TkOYbogParE4SU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0U2Mi8yMUQ1Q0NERTM0 MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhXSTcxT1E1aHVpQTlxc1Ro SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSjRrQU05WFdJNzFPUTVodWlBOXFzVGhKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0U2Mi8yMUQ1Q0NERTM0MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhX STcxT1E1aHVpQTlxc1RoSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzyBu7dgZqcU6I67VBpoNQWYSt32NaEB4aMw7Z+YQ4/n9gJ40zeHKn MZbDPIPnfLkhynQ6FuXb9xpGSHukARpSHBeHlpAwByPvs/cwlA9ByMaCclgrys9s HIcNq1ckZQ5KHxLxM8wxDZtFS6M0L8H4ns2oRwy007JW8hKMqu/BJvK3rUdlnFQH S82KIyJYtoZC9uN70d9rpK/dWqveJJWnPId6LJ+GN82WUBDYwXreUTWkfcTWA7fi XjnYqwuJO7slKuB0bV0F6bLAzVmNsMomai2x9EhDrpk6YANXXec73MEYRBXxMfDp KDA4MspknTxbzf4lHXiVNrqwmPp7Tfqd -----END CERTIFICATE-----Generated at Fri May 31 10:02:46 2024 by rpki-client on console-ams.rpki-client.org