$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: cAAVEQAe7OeyapA3rY0hsDcavt45CbyltpvAxmZTWZ0= Subject key identifier: D7:7A:FD:18:27:12:52:82:0E:CA:0E:A5:D2:A7:D8:87:30:3D:2C:C2 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 032F Signing time: Sun 19 May 2024 03:02:18 +0000 Manifest this update: Sun 19 May 2024 03:02:17 +0000 Manifest next update: Sun 26 May 2024 03:02:17 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: e6T+rczxeTwY1AFyquuz4OBUccqhYeRRGmqcFzgFzdk=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: XwKeJLskTB6Imr0S9o23k/3GveOx7qAiEQDWVAowUlY=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: fa+qO5xpgOgt/uE45uXILHD+EmZJYo5mycKYiXut9tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: May 19 03:02:17 2024 GMT Not After : May 26 03:02:17 2024 GMT Subject: CN=66496bba-4908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:7c:aa:4c:45:c0:0b:16:19:21:31:32:34: f1:4b:04:f0:3e:85:77:cc:c2:dd:c8:19:65:96:0d: 87:81:40:6c:68:48:02:8f:e7:95:61:55:8d:a4:0e: c1:48:a8:f6:9e:14:28:c4:61:8d:77:ec:da:ab:39: 5e:3d:ae:ab:68:3d:06:93:20:ae:6a:6d:79:93:86: a3:fc:6f:68:77:e8:1c:16:0a:5b:a7:d6:7e:bb:3c: 23:70:b5:a1:10:6e:f7:22:79:38:c8:2c:47:af:5b: e1:ab:f6:d4:d0:42:3a:39:11:88:bc:b6:42:29:a0: 86:b4:1b:9c:64:23:18:bf:ac:0b:2b:86:e3:24:10: ac:0b:7b:78:b2:de:24:d5:94:9e:35:ba:79:a4:29: dd:60:69:59:fc:40:1a:2e:d3:ef:f9:78:46:c4:d0: c0:bb:e3:fb:a9:41:55:ab:b4:8e:cb:d0:12:a4:0c: 38:fd:78:e0:aa:97:77:7c:5d:c4:de:b0:76:2c:83: fe:0b:d2:ce:c6:be:3c:c1:59:cd:43:a7:ad:0c:1e: b7:e3:1d:d6:23:48:c9:ea:8d:ff:b8:34:29:bd:b7: 4a:90:5f:42:8f:f1:f6:e2:a8:c1:2c:0c:7b:f1:08: 7a:e1:bf:40:50:31:22:a7:60:db:ef:bb:cb:1b:3d: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7A:FD:18:27:12:52:82:0E:CA:0E:A5:D2:A7:D8:87:30:3D:2C:C2 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d3:21:5d:31:a3:74:d7:20:e8:ac:c9:b8:33:8c:0a:72:1a: c2:4c:f5:67:5a:25:51:12:6a:74:85:93:e1:c1:f3:a4:c1:38: 00:f6:3a:58:ce:ad:2a:15:35:6c:b4:59:46:58:01:19:8e:a6: f8:af:ab:a4:fc:a1:7b:85:43:a2:f7:49:cf:47:92:dc:8c:d3: 16:f0:64:c5:15:d0:8e:ab:11:8d:a9:3b:6c:d4:8a:ea:51:76: d8:d5:18:64:e9:8d:a8:ed:4b:85:46:07:b8:79:67:99:9e:d3: 68:03:9e:c1:e0:6e:48:ec:8c:66:0e:6c:d3:1b:75:86:7d:ef: f6:49:2a:cc:e7:f9:cc:88:e6:55:ee:e2:34:c2:18:e4:3d:07: d0:52:ca:80:91:17:7d:9d:50:2f:a6:80:ed:29:b2:e6:f8:87: 24:8e:fc:be:04:1c:68:3a:9d:0d:c7:a3:17:00:3f:3f:a2:07: 19:d7:09:86:4b:0c:c8:f9:c3:08:d5:22:d7:f5:0b:44:f6:24: a4:90:e1:2d:36:df:66:34:c9:37:a1:d0:5f:b7:14:7c:d7:09: 8f:05:52:ff:96:97:0c:78:0a:20:37:c3:70:a5:ae:3f:c1:83: 0e:71:15:b0:7d:9a:ac:d6:56:03:d7:ad:d2:74:33:e0:0f:be: 3f:62:32:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjQwNTE5MDMwMjE3WhcNMjQwNTI2MDMwMjE3WjAYMRYwFAYD VQQDEw02NjQ5NmJiYS00OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOR8qkxFwAsWGSExMjTxSwTwPoV3zMLdyBlllg2HgUBsaEgCj+eVYVWNpA7B SKj2nhQoxGGNd+zaqzlePa6raD0GkyCuam15k4aj/G9od+gcFgpbp9Z+uzwjcLWh EG73Ink4yCxHr1vhq/bU0EI6ORGIvLZCKaCGtBucZCMYv6wLK4bjJBCsC3t4st4k 1ZSeNbp5pCndYGlZ/EAaLtPv+XhGxNDAu+P7qUFVq7SOy9ASpAw4/Xjgqpd3fF3E 3rB2LIP+C9LOxr48wVnNQ6etDB634x3WI0jJ6o3/uDQpvbdKkF9Cj/H24qjBLAx7 8Qh64b9AUDEip2Db77vLGz1xgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd6/Rgn ElKCDsoOpdKn2IcwPSzCMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI0yFdMaN01yDorMm4M4wKchrCTPVnWiVREmp0hZPhwfOkwTgA9jpY zq0qFTVstFlGWAEZjqb4r6uk/KF7hUOi90nPR5LcjNMW8GTFFdCOqxGNqTts1Irq UXbY1Rhk6Y2o7UuFRge4eWeZntNoA57B4G5I7IxmDmzTG3WGfe/2SSrM5/nMiOZV 7uI0whjkPQfQUsqAkRd9nVAvpoDtKbLm+Ickjvy+BBxoOp0Nx6MXAD8/ogcZ1wmG SwzI+cMI1SLX9QtE9iSkkOEtNt9mNMk3odBftxR81wmPBVL/lpcMeAogN8Nwpa4/ wYMOcRWwfZqs1lYD163SdDPgD74/YjLr -----END CERTIFICATE-----Generated at Sun May 19 03:38:17 2024 by rpki-client on console-ams.rpki-client.org