$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json) Hash identifier: AsHMos85XArHMyzOvW/cQeRLN9EOPwY3VuVmdamnphE= Subject key identifier: 11:B3:6F:14:6B:2D:08:73:F3:BD:DE:37:C0:E0:AC:A4:66:CB:EA:7B Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Certificate serial: 071B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft Manifest number: 0714 Signing time: Sat 18 May 2024 22:34:45 +0000 Manifest this update: Sat 18 May 2024 22:34:44 +0000 Manifest next update: Sat 25 May 2024 22:34:44 +0000 Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: T5cF8tAx1GpLEKnQmxY9OesRCjMCDL5QZ7rFfH2vopY=) 2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: j0UnLWBGpCaeQYA5kWoEMvgya4WYOWhttnlu48+KRik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Validity Not Before: May 18 22:34:44 2024 GMT Not After : May 25 22:34:44 2024 GMT Subject: CN=66492d05-70aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:c9:2b:0d:92:5a:cf:08:02:fe:87:1b:2e: 7b:6b:f0:67:a9:1a:33:76:b8:7f:f3:d6:da:e8:ce: a8:9e:6a:fe:dc:23:9c:95:c1:dd:b0:44:ec:75:72: 24:8a:d4:0c:8b:02:2f:e3:76:2d:85:19:fa:64:3a: 44:69:8c:b7:f4:3c:67:05:46:e4:02:92:a3:fe:a6: 21:4e:ca:b8:0e:91:e5:07:7a:db:95:51:95:ed:91: ea:20:db:84:c5:8c:52:5a:25:be:19:98:60:e2:f5: ab:da:59:9a:1c:1e:c1:fd:4a:e5:5b:2e:68:d8:90: db:5c:e6:5b:f4:90:60:c7:09:d0:c8:93:89:09:43: 08:23:cd:a3:2c:90:31:a3:38:5e:1e:89:11:00:63: 8c:46:17:97:35:61:73:62:d9:94:fb:37:50:1f:c5: 39:e7:65:7f:f2:ba:66:90:af:ab:86:bc:c4:e7:53: a2:41:60:17:90:04:17:fa:e0:8b:53:4f:16:e7:89: e6:67:fd:ae:28:0b:3b:83:0a:09:1f:ac:0c:f0:92: 8e:66:73:b8:3e:0a:06:e3:e2:3f:00:7d:7f:1e:29: 97:86:41:e8:ec:ea:a3:21:c3:99:4a:8a:3c:f2:3d: 72:8b:65:a4:fa:16:f7:f1:e6:7b:3e:0c:16:7f:00: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B3:6F:14:6B:2D:08:73:F3:BD:DE:37:C0:E0:AC:A4:66:CB:EA:7B X509v3 Authority Key Identifier: keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9d:80:9d:83:08:29:58:5c:ef:2f:e0:96:45:e4:9e:69:c9: 67:99:f1:fa:aa:70:cb:b9:52:0e:a9:c7:7d:e8:fe:a7:23:9b: a2:0d:0f:19:65:d4:0e:cf:6a:ca:45:82:39:a6:08:3f:fc:69: cf:30:ee:5e:32:b1:ba:1c:fd:b5:7e:69:4b:9e:d6:0c:dc:78: 24:fe:71:27:b0:a5:17:1a:ae:cd:80:f3:13:c9:f9:33:ec:7f: 02:40:d2:8f:bf:81:21:d7:6a:6b:55:59:e0:18:fd:0c:3d:3e: f7:7b:04:bf:b1:1c:f8:f4:66:cf:4a:37:42:40:3e:62:e1:97: ca:d4:2b:91:7c:f5:14:8a:fa:42:8c:17:99:10:de:ec:b1:77: 8d:d5:04:3c:14:d2:e2:a4:17:3d:d5:83:55:a9:6b:36:ed:c7: cf:ac:d0:90:69:ff:dd:7f:8b:2b:78:65:e6:5f:a3:3b:5e:ff: 6c:9c:f9:60:5f:71:a0:4f:63:ff:c4:9d:2b:d4:2d:c6:e5:fd: 4f:4f:12:a4:57:34:f4:89:5f:a1:e3:dd:7d:bb:a4:f7:21:7d: c7:0f:10:e6:c1:ee:6a:08:13:84:ec:b7:ea:2b:60:e5:20:17: e5:6d:cc:73:83:b5:bf:4d:22:64:56:cb:13:d6:46:b3:86:d2: 66:ff:02:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD MTgzQTEyNjYwHhcNMjQwNTE4MjIzNDQ0WhcNMjQwNTI1MjIzNDQ0WjAYMRYwFAYD VQQDEw02NjQ5MmQwNS03MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0bJKw2SWs8IAv6HGy57a/BnqRozdrh/89ba6M6onmr+3COclcHdsETsdXIk itQMiwIv43YthRn6ZDpEaYy39DxnBUbkApKj/qYhTsq4DpHlB3rblVGV7ZHqINuE xYxSWiW+GZhg4vWr2lmaHB7B/UrlWy5o2JDbXOZb9JBgxwnQyJOJCUMII82jLJAx ozheHokRAGOMRheXNWFzYtmU+zdQH8U552V/8rpmkK+rhrzE51OiQWAXkAQX+uCL U08W54nmZ/2uKAs7gwoJH6wM8JKOZnO4PgoG4+I/AH1/HimXhkHo7OqjIcOZSoo8 8j1yi2Wk+hb38eZ7PgwWfwBTZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGzbxRr LQhz873eN8DgrKRmy+p7MB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH YThtOHB5M1lnd3ZCZzZFbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdnYCdgwgpWFzvL+CWReSeaclnmfH6qnDLuVIOqcd96P6nI5uiDQ8Z ZdQOz2rKRYI5pgg//GnPMO5eMrG6HP21fmlLntYM3Hgk/nEnsKUXGq7NgPMTyfkz 7H8CQNKPv4Eh12prVVngGP0MPT73ewS/sRz49GbPSjdCQD5i4ZfK1CuRfPUUivpC jBeZEN7ssXeN1QQ8FNLipBc91YNVqWs27cfPrNCQaf/df4sreGXmX6M7Xv9snPlg X3GgT2P/xJ0r1C3G5f1PTxKkVzT0iV+h4919u6T3IX3HDxDmwe5qCBOE7LfqK2Dl IBflbcxzg7W/TSJkVssT1kazhtJm/wI1 -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org