$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: 557d7344csRGBC+I73uYPUwqj+tdnskLmdPuxk1RA+A= Subject key identifier: 58:8A:74:C2:7F:33:25:0C:E1:E7:F1:56:48:61:FC:C3:1E:DA:53:99 Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: E2 Signing time: Sun 19 May 2024 05:57:59 +0000 Manifest this update: Sun 19 May 2024 05:57:59 +0000 Manifest next update: Sun 26 May 2024 05:57:59 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: BtoCjXLGNdEw82FfUHDoq8MHYsofs1xRvwNFDqziumE=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: qbMXYGmGBXCQU/LDnYPVYWq6qwCJyfwTqXecOU2YUsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: May 19 05:57:59 2024 GMT Not After : May 26 05:57:59 2024 GMT Subject: CN=664994e7-e6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:7c:52:89:3c:0a:21:d8:6d:c1:6f:97:0f: 83:5a:5d:06:72:09:87:4b:97:6a:ce:1c:04:0d:ed: f2:a4:38:14:2d:e7:71:54:12:08:24:d0:48:6b:6d: e7:d6:0f:87:e7:27:b1:ff:11:3e:37:13:9f:b5:6d: 50:c2:e4:80:75:10:fd:a9:cc:f6:2e:c9:24:49:c8: 5e:be:2e:f2:5e:e5:73:9c:e5:85:0b:f4:a3:18:57: f3:09:09:8a:1d:48:ea:ce:42:12:e9:c8:46:72:d6: 6e:14:81:27:a9:b5:5c:d2:d3:e1:d9:c3:6c:ea:46: 61:71:55:ae:c7:30:30:2e:a7:7d:e6:5d:8f:14:06: 41:86:32:23:8c:03:19:0c:4b:de:57:37:ea:3a:94: 99:65:5a:09:26:99:e7:d4:62:8f:d2:50:82:0f:38: 1c:5c:af:a2:08:c2:99:71:40:e4:ec:5b:4b:3d:43: aa:0f:d9:f9:c5:be:9f:42:bf:58:22:5f:32:aa:f5: a3:8b:ab:57:fa:13:6e:03:6a:f5:d4:99:25:76:fb: 90:e6:35:88:2e:3b:fd:9d:14:2b:3d:24:02:85:72: 9f:ff:32:aa:33:12:65:96:94:96:ac:9d:f1:9c:2e: 5f:15:f5:ed:89:d0:01:87:10:13:be:98:a6:c6:05: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8A:74:C2:7F:33:25:0C:E1:E7:F1:56:48:61:FC:C3:1E:DA:53:99 X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4c:d1:36:ce:8c:09:df:dd:5b:9a:f3:de:9b:97:24:4c:5d: 2d:02:79:ab:41:12:07:57:17:2c:0b:ee:e9:2f:1f:59:47:ea: 1b:44:7b:e8:37:45:a9:e0:74:c3:7b:58:1d:f4:7c:02:b4:16: c6:05:ff:35:41:7c:47:57:2e:ea:9a:e5:01:f5:17:7e:4d:14: 3a:8b:d5:12:15:ff:c7:5a:79:09:c5:ec:ae:1c:99:83:80:96: ba:ac:d8:f8:5a:f4:ae:30:d6:43:d0:a6:9a:b9:26:cc:ee:69: cc:f1:84:69:d5:b1:e3:7e:8f:f3:2a:f0:0f:e1:e9:6d:dd:39: 64:1b:25:84:87:b8:5d:6e:0a:da:56:1d:90:bf:a5:71:25:f5: 03:b8:d0:18:c5:08:4d:4f:ff:f5:e0:ae:49:c3:a7:cc:b2:a2: 34:60:f6:96:80:e9:9f:9e:30:b5:ca:d4:b7:d7:2c:01:73:14: 43:95:85:5f:7b:8e:40:15:1d:2e:e9:2f:3d:48:46:7b:b2:1a: 99:4b:1d:29:77:d6:ea:ce:04:8c:d9:b9:66:90:77:8d:82:36: b2:9a:a5:39:27:62:f1:63:5d:31:2e:1c:68:96:a9:56:6b:6f: 5c:f5:dd:19:29:18:ba:73:8b:be:9c:9b:39:ee:f4:ba:b1:f0: b5:87:98:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjQwNTE5MDU1NzU5WhcNMjQwNTI2MDU1NzU5WjAYMRYwFAYD VQQDEw02NjQ5OTRlNy1lNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMt8Uok8CiHYbcFvlw+DWl0GcgmHS5dqzhwEDe3ypDgULedxVBIIJNBIa23n 1g+H5yex/xE+NxOftW1QwuSAdRD9qcz2LskkSchevi7yXuVznOWFC/SjGFfzCQmK HUjqzkIS6chGctZuFIEnqbVc0tPh2cNs6kZhcVWuxzAwLqd95l2PFAZBhjIjjAMZ DEveVzfqOpSZZVoJJpnn1GKP0lCCDzgcXK+iCMKZcUDk7FtLPUOqD9n5xb6fQr9Y Il8yqvWji6tX+hNuA2r11JkldvuQ5jWILjv9nRQrPSQChXKf/zKqMxJllpSWrJ3x nC5fFfXtidABhxATvpimxgXBWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiKdMJ/ MyUM4efxVkhh/MMe2lOZMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiTNE2zowJ391bmvPem5ckTF0tAnmrQRIHVxcsC+7pLx9ZR+obRHvo N0Wp4HTDe1gd9HwCtBbGBf81QXxHVy7qmuUB9Rd+TRQ6i9USFf/HWnkJxeyuHJmD gJa6rNj4WvSuMNZD0KaauSbM7mnM8YRp1bHjfo/zKvAP4elt3TlkGyWEh7hdbgra Vh2Qv6VxJfUDuNAYxQhNT//14K5Jw6fMsqI0YPaWgOmfnjC1ytS31ywBcxRDlYVf e45AFR0u6S89SEZ7shqZSx0pd9bqzgSM2blmkHeNgjaymqU5J2LxY10xLhxolqlW a29c9d0ZKRi6c4u+nJs57vS6sfC1h5iU -----END CERTIFICATE-----Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org