$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json) Hash identifier: k9sWszfdmohzW9h6OH5XNsoQRJrC3hgy9kH9jNwgvTs= Subject key identifier: 54:C7:21:D3:47:6B:8F:77:D5:EC:97:4E:3C:BA:D3:94:F8:33:47:C0 Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft Manifest number: 0479 Signing time: Fri 31 May 2024 02:14:54 +0000 Manifest this update: Fri 31 May 2024 02:14:54 +0000 Manifest next update: Fri 07 Jun 2024 02:14:54 +0000 Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: ZL+inlk4kW713EX9zLbWv+TscmcTkQ9jLabcq+PlbZ0=) 2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: /7fGHA/VkZzbPKmsJOOx6n47amXspBWemua7509SvjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Validity Not Before: May 31 02:14:54 2024 GMT Not After : Jun 7 02:14:54 2024 GMT Subject: CN=6659329e-cbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:fe:26:23:67:1f:dd:ac:0a:bd:52:f3:9c: fe:7e:33:6e:8a:b0:86:07:24:6b:43:14:a0:a0:bf: 9b:43:cc:26:3e:80:71:11:7e:a1:b8:24:ca:93:53: ed:f1:19:f3:43:9e:ce:a9:52:02:43:4e:03:3f:2c: 38:98:2d:06:82:94:36:2c:7b:25:d3:31:57:cb:c3: f0:b9:5f:1b:3c:25:af:0b:6a:02:9d:69:d7:24:ec: c9:7a:99:09:4c:72:69:a8:1e:d5:25:a4:12:8c:e9: 34:19:22:3b:61:94:22:32:09:b3:80:44:71:e5:f9: 0d:97:14:08:b0:3a:03:f3:51:35:30:0f:1f:b3:af: c3:ca:c7:c8:cf:b3:b5:99:65:bf:d1:48:31:82:79: 0b:fc:f1:6f:3c:a9:9b:eb:ac:b8:b7:b2:5c:c7:98: 20:ec:49:dc:44:30:ca:72:a8:23:e1:3e:52:22:83: df:85:2c:33:60:b3:e5:5a:6e:9b:50:fd:3d:4e:b7: 91:0e:b8:ee:03:f7:9b:c7:f6:0d:8c:b9:7f:40:62: 47:98:28:0a:29:c9:d4:62:f5:86:ce:e9:01:f6:65: f3:a5:6c:f8:2e:dc:08:ee:16:db:a9:d9:a1:18:c5: 17:82:f0:8e:dd:98:80:c8:80:73:4b:e7:f6:b2:fd: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C7:21:D3:47:6B:8F:77:D5:EC:97:4E:3C:BA:D3:94:F8:33:47:C0 X509v3 Authority Key Identifier: keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ae:49:b9:a7:37:01:43:da:53:cd:dd:e1:e4:d7:e5:ba:d5: ce:07:87:99:97:31:2a:39:06:4e:5a:46:1a:66:29:7b:2b:ab: 0b:68:c5:57:97:6c:01:0f:d9:4f:0b:b8:ee:f5:b2:e3:5b:5d: ac:a7:83:3b:fd:75:78:e2:a4:35:cf:f9:30:79:0b:9c:f9:2b: ee:5a:81:e5:ec:b0:fe:4d:4a:37:4f:62:ae:f1:7b:09:2c:8c: 5e:77:9d:87:07:d6:e5:77:da:20:f6:e9:0b:49:25:9c:a2:df: 20:32:9b:a3:78:29:d6:af:17:3e:66:55:f3:53:dc:db:0b:ad: 2b:eb:cb:95:4c:9d:05:01:83:b9:fa:c9:af:af:cf:6c:56:19: fd:d5:9f:f6:4b:13:4d:98:7f:f4:26:43:c6:cd:3d:9e:8b:98: ed:ef:ba:44:61:15:8a:c5:22:ea:ac:45:70:3c:43:39:d1:c0: db:6b:94:31:94:ed:e2:eb:35:cc:32:f2:b6:23:a9:75:2d:75: 65:54:79:e3:73:8e:75:6b:a2:42:6f:84:9c:ae:82:40:46:5d: 7a:a2:2f:34:2e:e1:5a:44:91:79:01:c3:d9:d1:97:f7:dc:ac: 28:a1:59:04:23:b3:5d:22:1b:70:2c:8a:cd:3e:35:f6:10:46: d0:cf:24:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3QTM5NDQwMzcx QkM4RDA0MzcwHhcNMjQwNTMxMDIxNDU0WhcNMjQwNjA3MDIxNDU0WjAYMRYwFAYD VQQDEw02NjU5MzI5ZS1jYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlz+JiNnH92sCr1S85z+fjNuirCGByRrQxSgoL+bQ8wmPoBxEX6huCTKk1Pt 8RnzQ57OqVICQ04DPyw4mC0GgpQ2LHsl0zFXy8PwuV8bPCWvC2oCnWnXJOzJepkJ THJpqB7VJaQSjOk0GSI7YZQiMgmzgERx5fkNlxQIsDoD81E1MA8fs6/DysfIz7O1 mWW/0UgxgnkL/PFvPKmb66y4t7Jcx5gg7EncRDDKcqgj4T5SIoPfhSwzYLPlWm6b UP09TreRDrjuA/ebx/YNjLl/QGJHmCgKKcnUYvWGzukB9mXzpWz4LtwI7hbbqdmh GMUXgvCO3ZiAyIBzS+f2sv3IrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTHIdNH a4931eyXTjy605T4M0fAMB8GA1UdIwQYMBaAFPug+LTE0Fqpaqr1ejlEA3G8jQQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUVDQS9FMUVDRTBBMkY5 MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdxbHFxdlY2T1VRRGNieU5C RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02RDR0TVRRV3FscXF2VjZPVVFEY2J5TkJEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdx bHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTrkm5pzcBQ9pTzd3h5NflutXOB4eZlzEqOQZOWkYaZil7K6sLaMVX l2wBD9lPC7ju9bLjW12sp4M7/XV44qQ1z/kweQuc+SvuWoHl7LD+TUo3T2Ku8XsJ LIxed52HB9bld9og9ukLSSWcot8gMpujeCnWrxc+ZlXzU9zbC60r68uVTJ0FAYO5 +smvr89sVhn91Z/2SxNNmH/0JkPGzT2ei5jt77pEYRWKxSLqrEVwPEM50cDba5Qx lO3i6zXMMvK2I6l1LXVlVHnjc451a6JCb4ScroJARl16oi80LuFaRJF5AcPZ0Zf3 3KwooVkEI7NdIhtwLIrNPjX2EEbQzyQ/ -----END CERTIFICATE-----Generated at Fri May 31 03:15:06 2024 by rpki-client on console-ams.rpki-client.org