$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: DYhOp9JPbcZCOGzVhIV5K656ZAO32wPpe76zNX32EkM= Subject key identifier: DA:73:AE:B7:99:6D:67:33:22:6D:F8:41:D6:74:E1:D6:EC:7F:FE:E7 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 025C Signing time: Fri 31 May 2024 04:32:09 +0000 Manifest this update: Fri 31 May 2024 04:32:08 +0000 Manifest next update: Fri 07 Jun 2024 04:32:08 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: XBHzVkBnE981YRW4o9iocRpn4v9YDSr0SR9B74UXK9Q=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: M3PzSROQRjKAL+kwNDxhkvHBkl4aI2qgVUbL7InyJVo=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: cO8jFcBIw78UFhLzmH1tbggMtAXv+rY30GeLNAx0yfk=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: G4VXW6vDMBEED4R1MSQ7McJNectJ6DVXEAqaeW3eyU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: May 31 04:32:08 2024 GMT Not After : Jun 7 04:32:08 2024 GMT Subject: CN=665952c9-d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:5f:56:35:47:2e:73:4c:b3:f1:36:c3:ff: 83:48:64:48:60:d9:70:14:0d:f6:dc:cb:13:b9:50: 98:62:5e:90:32:ee:82:6d:06:e8:dd:57:5d:e0:b2: e9:c9:92:d6:3c:f5:ec:52:e0:5b:b8:c4:01:fa:40: a3:c3:74:7a:b3:54:6a:f5:6f:0c:8b:0b:66:ca:4e: 8a:80:54:15:6f:0a:11:4e:af:18:c6:c1:ba:53:78: cb:e5:2a:1e:2f:51:3f:ff:db:7d:f7:38:2e:a5:30: b5:97:dc:2e:ac:04:ce:01:1f:f2:92:eb:36:f5:c9: f9:4e:7d:b3:55:af:c4:f4:2e:ba:2e:2d:5f:46:8c: 2b:cc:20:4d:8a:bc:54:d3:bc:dc:11:f1:d8:c1:5e: 50:41:7c:2f:59:4d:2e:87:7c:1b:d1:33:43:1c:de: 71:75:cd:1a:fd:87:3c:20:e9:ab:19:5c:1f:23:19: dc:a6:2b:d9:5c:5e:1a:73:16:a3:09:f1:68:0b:ba: 35:cc:dc:56:f6:ba:2f:c7:d8:94:46:d2:62:17:69: 7e:d8:57:c8:aa:e5:e6:7d:68:ef:e6:05:97:7d:2e: 7c:b3:2d:a2:f5:bf:85:b9:32:e4:10:8c:12:ec:58: b6:36:75:9e:9d:a0:73:d4:7c:eb:c1:d7:ae:f4:17: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:73:AE:B7:99:6D:67:33:22:6D:F8:41:D6:74:E1:D6:EC:7F:FE:E7 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4d:b5:ce:8f:00:c7:d6:1d:47:98:bd:32:05:c3:5a:a0:89: 6f:c2:47:05:dc:d1:e0:8f:91:bd:3c:f2:a5:f6:dd:55:8d:68: c5:60:d3:36:17:a5:26:d0:ec:ab:ef:25:9b:e4:b2:59:e5:c3: 14:b8:c5:71:1c:7f:ab:86:9c:95:43:9b:b8:a5:3c:9f:e0:56: 8a:e0:c9:8c:d5:5d:39:ec:b2:b6:e3:ba:20:39:bc:35:0e:1c: e9:38:b6:16:90:db:91:82:cb:3f:8b:ee:1f:f5:c1:b8:11:dc: 66:18:7a:a1:fe:1c:27:e2:1d:91:4f:41:3d:2e:7f:a2:ab:15: f3:f7:ad:d3:57:d3:e9:00:01:c4:e5:d4:b7:b2:bb:f9:47:0a: 56:bc:0c:32:f4:5a:7b:78:66:83:48:3e:f0:34:7b:f4:36:bb: 5b:b2:f0:9f:9f:f9:7c:9c:98:1f:8b:b4:9f:80:7c:a2:87:0e: 3f:50:ed:85:ba:ef:0f:d0:de:90:80:25:c0:a7:f5:be:70:5c: 64:41:3c:4b:6f:79:fc:c8:ad:61:26:ac:17:fa:f3:fd:24:90: 67:a6:2b:e3:c1:c5:19:e4:9e:f2:0e:a8:bf:21:94:4f:49:af: 54:9a:b5:de:83:7b:70:05:93:1c:8d:80:a5:bb:c9:e7:ad:1c: 82:cf:9e:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjQwNTMxMDQzMjA4WhcNMjQwNjA3MDQzMjA4WjAYMRYwFAYD VQQDEw02NjU5NTJjOS1kMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPRfVjVHLnNMs/E2w/+DSGRIYNlwFA323MsTuVCYYl6QMu6CbQbo3Vdd4LLp yZLWPPXsUuBbuMQB+kCjw3R6s1Rq9W8Miwtmyk6KgFQVbwoRTq8YxsG6U3jL5Soe L1E//9t99zgupTC1l9wurATOAR/ykus29cn5Tn2zVa/E9C66Li1fRowrzCBNirxU 07zcEfHYwV5QQXwvWU0uh3wb0TNDHN5xdc0a/Yc8IOmrGVwfIxncpivZXF4acxaj CfFoC7o1zNxW9rovx9iURtJiF2l+2FfIquXmfWjv5gWXfS58sy2i9b+FuTLkEIwS 7Fi2NnWenaBz1Hzrwdeu9Bdt3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpzrreZ bWczIm34QdZ04dbsf/7nMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMTbXOjwDH1h1HmL0yBcNaoIlvwkcF3NHgj5G9PPKl9t1VjWjFYNM2 F6Um0Oyr7yWb5LJZ5cMUuMVxHH+rhpyVQ5u4pTyf4FaK4MmM1V057LK247ogObw1 DhzpOLYWkNuRgss/i+4f9cG4EdxmGHqh/hwn4h2RT0E9Ln+iqxXz963TV9PpAAHE 5dS3srv5RwpWvAwy9Fp7eGaDSD7wNHv0NrtbsvCfn/l8nJgfi7SfgHyihw4/UO2F uu8P0N6QgCXAp/W+cFxkQTxLb3n8yK1hJqwX+vP9JJBnpivjwcUZ5J7yDqi/IZRP Sa9UmrXeg3twBZMcjYClu8nnrRyCz55g -----END CERTIFICATE-----Generated at Fri May 31 06:49:30 2024 by rpki-client on console-ams.rpki-client.org