$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: IGMu/g+k+X20yqS5BguY17saPqZfI2WPKJ7dxbulE8k= Subject key identifier: 30:F5:F1:07:0C:C6:4E:4E:B1:08:EE:9D:4C:D3:7A:04:73:CA:1A:5E Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 08A2 Signing time: Sat 18 May 2024 21:31:35 +0000 Manifest this update: Sat 18 May 2024 21:31:35 +0000 Manifest next update: Sat 25 May 2024 21:31:35 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: Q2he+P7MFQ1Oq5TOdrUAIwIphMEMNQjDZH7vFJwRdRc=) 2: 34E183809E5F11EB97709628C4F9AE02.roa (hash: 36c9Jg2qBuIJjOlQn8QxUqUYlMtF6lkxLHEe+aB1y+0=) 3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: lv6rNcma20xy/b/MklODIFLV5yeSNLVoi38X1XngcUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: May 18 21:31:35 2024 GMT Not After : May 25 21:31:35 2024 GMT Subject: CN=66491e37-4ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:fc:7b:47:b3:eb:a0:8f:ac:ce:47:70:80: 46:8b:08:e4:ec:70:6b:ff:c7:c4:b5:e7:73:a5:cc: ac:35:28:ec:e6:c1:d4:19:0b:b0:66:2b:2a:e2:7e: 4b:e3:cd:2c:5d:31:a2:21:2b:fb:94:78:57:a4:5f: 32:ce:ad:b4:bc:2f:62:1c:96:49:5f:b3:8a:c4:41: b6:67:e3:d6:52:47:9f:75:f2:d9:8d:df:8a:74:6d: 81:61:e5:00:c5:0a:23:57:b9:f7:85:0f:7f:7d:15: 57:d6:d2:a2:81:43:ec:d3:df:c4:0b:58:44:c8:c8: da:09:57:06:5a:62:56:d5:59:ff:43:84:c0:bf:cd: 0b:53:4c:e7:a0:59:61:3b:47:9f:5c:b0:0b:6c:04: ac:5b:e0:f6:66:35:c7:2d:14:78:05:e0:fc:93:ee: f3:1e:96:29:49:d3:13:b3:70:f6:bc:35:90:48:16: ab:7d:07:9e:47:9b:c7:92:a6:ce:5b:01:60:77:10: af:96:95:8b:b8:1e:de:7e:23:09:96:52:f3:ac:7c: 6a:38:e2:b1:26:0d:53:b8:12:ad:32:88:7a:53:ca: 2d:f3:7e:25:9e:d8:75:a1:e8:c2:c7:b5:48:25:1b: 07:39:49:0a:1c:d5:a3:3b:18:6b:9f:71:2d:0f:94: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F5:F1:07:0C:C6:4E:4E:B1:08:EE:9D:4C:D3:7A:04:73:CA:1A:5E X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:75:5c:35:55:ef:1d:9d:5a:9a:19:2a:62:c2:f2:c8:56:b1: 7e:3b:90:6c:e4:25:5a:38:03:d0:65:59:83:52:ad:bb:c8:35: ed:b1:98:a9:33:2d:1a:e1:6e:1c:54:07:90:ee:7d:56:7a:c7: 5f:d6:4b:8b:40:a0:a7:1e:8f:27:7e:56:9c:58:63:f2:ae:4a: 2c:80:51:98:29:e6:59:b6:ed:50:75:e4:55:be:7a:c0:60:2f: 8b:a4:23:9a:9e:85:19:f5:3c:90:cd:4e:32:1b:89:e8:10:05: e4:9a:31:9f:b4:d3:e6:d7:ba:d4:bd:cd:65:25:4a:7f:de:61: 5a:e9:15:a7:41:65:87:2b:82:7f:35:ac:55:03:f4:49:6c:5f: 47:e8:ab:25:2e:c4:6b:48:f6:dd:99:08:2d:e7:51:85:f1:08: 61:e3:ab:09:61:4d:9a:11:3f:57:49:3d:3d:83:db:a4:3f:69: e1:6b:4b:bd:4c:09:62:95:46:38:d3:6d:dc:d7:b2:92:62:ea: c2:ab:6f:dd:bb:86:75:90:7f:7d:81:28:55:1e:42:87:3b:cd: a6:4b:dd:3e:45:75:ef:01:2c:26:5a:59:bd:de:75:e8:71:44: a2:69:d2:78:42:88:62:ba:24:2e:21:92:2b:11:03:f6:43:93: 32:48:53:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjQwNTE4MjEzMTM1WhcNMjQwNTI1MjEzMTM1WjAYMRYwFAYD VQQDEw02NjQ5MWUzNy00ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIH8e0ez66CPrM5HcIBGiwjk7HBr/8fEtedzpcysNSjs5sHUGQuwZisq4n5L 480sXTGiISv7lHhXpF8yzq20vC9iHJZJX7OKxEG2Z+PWUkefdfLZjd+KdG2BYeUA xQojV7n3hQ9/fRVX1tKigUPs09/EC1hEyMjaCVcGWmJW1Vn/Q4TAv80LU0znoFlh O0efXLALbASsW+D2ZjXHLRR4BeD8k+7zHpYpSdMTs3D2vDWQSBarfQeeR5vHkqbO WwFgdxCvlpWLuB7efiMJllLzrHxqOOKxJg1TuBKtMoh6U8ot834lnth1oejCx7VI JRsHOUkKHNWjOxhrn3EtD5RqPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDD18QcM xk5OsQjunUzTegRzyhpeMB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPdVw1Ve8dnVqaGSpiwvLIVrF+O5Bs5CVaOAPQZVmDUq27yDXtsZip My0a4W4cVAeQ7n1Wesdf1kuLQKCnHo8nflacWGPyrkosgFGYKeZZtu1QdeRVvnrA YC+LpCOanoUZ9TyQzU4yG4noEAXkmjGftNPm17rUvc1lJUp/3mFa6RWnQWWHK4J/ NaxVA/RJbF9H6KslLsRrSPbdmQgt51GF8Qhh46sJYU2aET9XST09g9ukP2nha0u9 TAlilUY4023c17KSYurCq2/du4Z1kH99gShVHkKHO82mS90+RXXvASwmWlm93nXo cUSiadJ4QohiuiQuIZIrEQP2Q5MySFP+ -----END CERTIFICATE-----Generated at Sat May 18 22:14:05 2024 by rpki-client on console-fra.rpki-client.org