$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: DiCC8wyzeN6UAmLPByrGCnebl+UkBYCXZH4iT/OmvnQ= Subject key identifier: E8:F5:14:F2:98:E0:D3:7B:6B:C9:0A:05:80:33:48:30:B3:7E:E9:21 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 06C7 Signing time: Sat 18 May 2024 23:00:52 +0000 Manifest this update: Sat 18 May 2024 23:00:52 +0000 Manifest next update: Sat 25 May 2024 23:00:52 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: pe/+EUiQHZw+HHY/KzIHZZeIGsJjOF+naCHIfULd6TI=) 2: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: xPnEnJeGzLeOXDrkpck5isOdzEyahQAWsF3Idu1uvuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: May 18 23:00:52 2024 GMT Not After : May 25 23:00:52 2024 GMT Subject: CN=66493324-db35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:e9:a2:41:b7:29:87:94:8f:ea:08:6d:7e: bc:40:04:16:6a:99:03:74:38:0e:5f:fc:2d:77:c8: df:64:c2:bf:fa:d0:bd:bf:95:bc:aa:36:05:02:c9: 92:a2:a9:2c:f9:ae:39:fd:a8:b3:03:f2:5c:5c:4a: 78:08:5d:f9:ec:fb:2c:b0:c1:10:64:73:79:03:f4: 8e:a1:e1:95:66:1f:63:2d:04:5f:05:d9:ed:bc:a0: 4e:0e:4f:de:da:4a:3e:31:24:5e:9b:34:d6:2c:d9: fa:1b:d0:a9:4c:52:2c:84:7c:0e:ef:ee:d2:34:9a: ff:76:79:1b:b6:92:40:6c:e7:1d:5a:7a:8c:df:7c: 79:b2:a7:a4:c0:2c:12:93:2c:8e:53:64:62:3d:12: 6c:71:bd:e6:c8:d8:27:77:d8:84:b2:89:ff:79:b5: 53:d2:ae:2b:a8:36:d7:53:8f:f4:19:35:fa:0f:ae: e8:0a:c9:c3:91:b8:6d:31:15:49:4c:00:b8:53:ce: 56:94:a8:a2:fa:19:78:f3:27:d5:b0:12:65:03:23: 24:f1:74:e7:1e:c8:43:d7:7e:35:71:70:69:91:c4: f6:19:16:5b:dc:9b:fa:0d:6e:0d:a0:db:c4:f9:d3: d9:3a:2c:8d:78:33:bc:fa:e2:c2:b8:be:a7:ab:1d: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F5:14:F2:98:E0:D3:7B:6B:C9:0A:05:80:33:48:30:B3:7E:E9:21 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:e5:f1:2d:38:1f:b0:78:fe:76:32:7a:5c:c7:ef:aa:49: e4:22:79:fc:f1:93:86:83:a5:10:86:26:aa:f4:a4:cd:f4:c2: 66:51:7c:4c:fa:17:95:09:37:3f:96:84:44:3b:15:9c:c3:d8: f9:79:36:e6:a9:35:c7:8b:6b:c3:22:5a:43:df:bf:be:a8:81: 08:0d:fc:dc:6f:d7:1b:db:27:5c:79:21:97:ca:a1:85:4e:fb: d5:9f:17:99:82:b0:fa:88:2c:94:15:68:40:3a:b7:92:a3:8a: e4:0d:5b:35:cd:3b:e2:55:4c:81:33:b3:e1:37:ff:c3:c5:bd: ea:5f:e5:09:70:87:bd:d0:c6:23:36:c3:54:e8:1a:ac:43:4f: 94:53:08:33:07:42:43:57:86:31:bb:ff:12:9f:5f:5d:c9:95: c6:cd:f2:1e:b8:8d:03:95:cb:35:a8:54:94:cc:0f:dc:40:3d: 3c:fc:0f:ca:23:47:97:9a:c9:84:28:8f:82:40:f7:0b:90:02: 9b:f9:73:21:9c:e2:cd:b4:d5:77:c8:02:e9:8a:7b:b8:3a:c9: 71:92:6b:26:e4:25:46:7b:ce:e3:fb:cf:16:b3:52:33:b3:d9: 35:ad:73:f0:1e:b1:23:52:bf:d5:47:c5:da:9a:83:bc:13:65: 48:28:5e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjQwNTE4MjMwMDUyWhcNMjQwNTI1MjMwMDUyWjAYMRYwFAYD VQQDEw02NjQ5MzMyNC1kYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriLpokG3KYeUj+oIbX68QAQWapkDdDgOX/wtd8jfZMK/+tC9v5W8qjYFAsmS oqks+a45/aizA/JcXEp4CF357PsssMEQZHN5A/SOoeGVZh9jLQRfBdntvKBODk/e 2ko+MSRemzTWLNn6G9CpTFIshHwO7+7SNJr/dnkbtpJAbOcdWnqM33x5sqekwCwS kyyOU2RiPRJscb3myNgnd9iEson/ebVT0q4rqDbXU4/0GTX6D67oCsnDkbhtMRVJ TAC4U85WlKii+hl48yfVsBJlAyMk8XTnHshD1341cXBpkcT2GRZb3Jv6DW4NoNvE +dPZOiyNeDO8+uLCuL6nqx3UTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj1FPKY 4NN7a8kKBYAzSDCzfukhMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ9+XxLTgfsHj+djJ6XMfvqknkInn88ZOGg6UQhiaq9KTN9MJmUXxM +heVCTc/loREOxWcw9j5eTbmqTXHi2vDIlpD37++qIEIDfzcb9cb2ydceSGXyqGF TvvVnxeZgrD6iCyUFWhAOreSo4rkDVs1zTviVUyBM7PhN//Dxb3qX+UJcIe90MYj NsNU6BqsQ0+UUwgzB0JDV4Yxu/8Sn19dyZXGzfIeuI0Dlcs1qFSUzA/cQD08/A/K I0eXmsmEKI+CQPcLkAKb+XMhnOLNtNV3yALpinu4Oslxkmsm5CVGe87j+88Ws1Iz s9k1rXPwHrEjUr/VR8XamoO8E2VIKF7r -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org