$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft File: ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json) Hash identifier: MISLtj+vVgw/EwKjSF8fcScRlw2CBs+JjNUX/AVk6z8= Subject key identifier: C0:8F:F8:5E:33:D8:56:33:01:ED:0F:D6:50:3B:64:16:F5:D7:E4:63 Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft Manifest number: 017B Signing time: Fri 31 May 2024 05:27:26 +0000 Manifest this update: Fri 31 May 2024 05:27:25 +0000 Manifest next update: Fri 07 Jun 2024 05:27:25 +0000 Files and hashes: 1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: YcIB/tb2LlJ1BKot69i9IDU8amORMYXbMB6IysOUDz0=) 2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: xmrbTGYxQ+6Hsi/Mo6+cYbticusMbIjvhK9kyxJGl5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Validity Not Before: May 31 05:27:25 2024 GMT Not After : Jun 7 05:27:25 2024 GMT Subject: CN=66595fbe-4919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:ff:6d:da:0c:46:6a:f1:74:62:dd:18:78: 50:b8:46:9b:19:ee:a3:f3:af:4f:b8:4f:b4:8a:df: 62:d3:17:7b:db:ff:5b:41:5e:d5:68:ec:bd:98:85: 6d:fe:05:71:54:e0:55:f1:4e:d9:34:ef:ac:e4:9a: 94:ac:c3:c6:53:06:1e:eb:6f:93:f2:4b:4c:0e:74: fa:b7:96:9a:6b:d9:b5:bd:81:2b:10:4d:40:e3:89: 64:dc:e2:75:ab:2a:a8:bd:b7:e8:e4:98:3b:13:19: e2:3d:45:18:58:d4:04:98:d7:b6:db:ce:86:16:ad: ab:f1:29:32:cc:02:c8:60:87:b7:60:7a:9e:3b:d1: 59:d8:42:5c:4d:0c:be:bd:54:d0:11:fd:e1:c5:c0: db:84:c4:84:03:79:f6:61:53:2b:2f:32:64:5e:72: c7:3a:49:4b:a2:b3:5a:17:a5:e3:64:18:29:9c:92: 1b:19:c5:d4:c6:7a:9d:1e:92:bd:d0:cb:8e:e5:97: 28:f5:28:f0:dd:cf:78:02:c1:85:82:7b:ae:2a:38: a9:81:12:d9:d6:de:cc:dd:24:30:4c:5d:8f:60:4c: 97:70:c5:1f:af:b0:3c:be:5b:0c:84:c2:32:4b:e7: 54:ff:f8:16:f3:00:a7:be:53:85:0e:e3:30:75:92: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8F:F8:5E:33:D8:56:33:01:ED:0F:D6:50:3B:64:16:F5:D7:E4:63 X509v3 Authority Key Identifier: keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:95:fb:4e:7d:11:37:fe:53:08:10:ad:37:66:c7:f0:69:cd: a4:26:2a:57:73:49:ae:e4:30:dd:c8:df:f8:83:22:8f:b1:79: b5:5f:d3:43:b4:37:a8:2c:2f:21:4f:bf:73:3d:be:06:97:e5: a8:0a:51:b0:99:d9:45:74:c8:7c:e7:ef:51:c5:9a:65:b8:df: f1:a3:a4:48:85:f5:b0:f6:4b:67:2f:59:20:21:61:aa:0f:43: a8:5e:15:7f:62:7c:d8:93:6e:de:5f:d1:24:c5:3b:83:ab:04: 71:b2:9c:5d:bb:8d:42:0e:6b:58:0e:b4:81:5d:73:18:97:66: d2:e6:f1:4c:36:a8:e6:92:90:0f:4e:61:d9:ea:03:d7:2f:01: ad:12:f7:85:eb:34:1c:7c:ed:85:19:cd:60:be:2a:45:f9:f7: 21:29:c4:89:8e:af:35:e7:b5:97:eb:a1:9e:c1:80:f1:a9:84: a3:9b:9b:cd:20:cc:aa:67:eb:ec:3e:1d:aa:06:dd:0c:a7:65: 3a:32:52:0f:ce:a4:53:2b:64:12:9e:0e:b2:a6:79:ac:9a:67: 4a:ba:8b:30:02:3d:a4:7d:34:57:f8:0b:aa:7c:6c:f7:6e:9d: 41:f1:9c:88:c6:84:4f:da:eb:67:b0:9e:50:e1:87:db:cb:34: 12:2b:a5:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3 N0JFOTM3QkMwHhcNMjQwNTMxMDUyNzI1WhcNMjQwNjA3MDUyNzI1WjAYMRYwFAYD VQQDEw02NjU5NWZiZS00OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0T/bdoMRmrxdGLdGHhQuEabGe6j869PuE+0it9i0xd72/9bQV7VaOy9mIVt /gVxVOBV8U7ZNO+s5JqUrMPGUwYe62+T8ktMDnT6t5aaa9m1vYErEE1A44lk3OJ1 qyqovbfo5Jg7ExniPUUYWNQEmNe2286GFq2r8SkyzALIYIe3YHqeO9FZ2EJcTQy+ vVTQEf3hxcDbhMSEA3n2YVMrLzJkXnLHOklLorNaF6XjZBgpnJIbGcXUxnqdHpK9 0MuO5Zco9Sjw3c94AsGFgnuuKjipgRLZ1t7M3SQwTF2PYEyXcMUfr7A8vlsMhMIy S+dU//gW8wCnvlOFDuMwdZL0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCP+F4z 2FYzAe0P1lA7ZBb11+RjMB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4 MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL b3NHWmUyTnZSUVYzdnBON3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+lftOfRE3/lMIEK03Zsfwac2kJipXc0mu5DDdyN/4gyKPsXm1X9ND tDeoLC8hT79zPb4Gl+WoClGwmdlFdMh85+9RxZpluN/xo6RIhfWw9ktnL1kgIWGq D0OoXhV/YnzYk27eX9EkxTuDqwRxspxdu41CDmtYDrSBXXMYl2bS5vFMNqjmkpAP TmHZ6gPXLwGtEveF6zQcfO2FGc1gvipF+fchKcSJjq8157WX66GewYDxqYSjm5vN IMyqZ+vsPh2qBt0Mp2U6MlIPzqRTK2QSng6ypnmsmmdKuoswAj2kfTRX+AuqfGz3 bp1B8ZyIxoRP2utnsJ5Q4YfbyzQSK6Ul -----END CERTIFICATE-----Generated at Fri May 31 06:49:30 2024 by rpki-client on console-ams.rpki-client.org