$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: KQkeZtYWubE0v4pfDX+PUH8iPHiSyuGgWXBOKfP8GUM= Subject key identifier: ED:38:19:CD:34:1E:91:D2:D4:D8:46:ED:5B:98:4A:98:48:22:2D:32 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 1A Signing time: Sun 19 May 2024 08:42:02 +0000 Manifest this update: Sun 19 May 2024 08:42:01 +0000 Manifest next update: Sun 26 May 2024 08:42:01 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: GyRXb/MK7+ZIPq8xPoQqei+TfCO7OrQ5bAyT4QSmxvs=) 2: 6804606CF00E11EE974DF92AC4F9AE02.roa (hash: 9xqP/kIAA2eRAvHEDJ/QmUB4PlLWr5iqM4l5LuloYIU=) 3: 392710CEEFFE11EEB55AD945C4F9AE02.roa (hash: WmcDzwAVXRQ3igKPV4qQQLFu9LxV+4dOdSVDSJP1tNU=) 4: 41DE7080F25C11EEB13CC667C4F9AE02.roa (hash: NjQSyZSwSRiop/YTvD9xs8kOEBuFte/xy5idxprrSuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: May 19 08:42:01 2024 GMT Not After : May 26 08:42:01 2024 GMT Subject: CN=6649bb5a-dc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:32:5f:ad:e8:ae:23:d0:0e:d9:2d:d2:c6: 1b:88:20:57:74:59:44:fe:56:82:38:95:fd:08:b2: c1:ff:57:35:c0:22:65:46:16:cc:54:ba:a0:1d:98: ba:9a:b3:35:68:ca:e8:b2:01:e5:26:bc:b0:0a:50: de:f8:72:19:11:b3:93:72:f8:9e:97:60:88:a8:92: bc:32:c2:c2:87:5a:d2:2a:6a:76:51:f6:85:ab:31: d0:63:ef:30:df:4a:ca:5f:22:7a:c8:91:27:c7:07: 6b:cd:bb:2e:f8:47:42:0c:87:2c:af:8f:bc:d6:b4: 84:31:93:66:db:a1:32:d2:23:02:85:f3:29:2a:5b: f6:4e:8f:76:c7:57:49:a9:04:bb:87:9d:83:c8:82: d1:91:dc:96:bc:d4:3f:96:b2:ad:ce:2d:3f:55:53: d8:4e:ae:90:f1:0b:67:c6:d4:00:cf:5b:86:be:8d: 03:28:1b:f6:56:78:56:45:6f:01:1d:fa:61:bf:99: ab:2b:a7:87:b8:ff:6e:07:03:54:8e:0d:03:84:e3: 80:6d:2f:ea:2b:74:4e:43:2e:d8:a2:d1:a4:21:c7: 83:91:83:13:09:d0:34:cc:7c:0d:9b:77:71:ed:10: c8:e7:e7:13:4d:77:64:30:04:35:2a:c0:52:17:71: 86:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:38:19:CD:34:1E:91:D2:D4:D8:46:ED:5B:98:4A:98:48:22:2D:32 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:84:b8:1e:c6:55:a8:dd:4c:f3:27:f7:4f:c3:d6:b4:ef:ee: ee:58:5d:01:72:b0:73:ba:ba:e1:2c:a3:b6:7b:ab:e1:51:44: fc:4c:bb:77:4c:3e:f0:44:20:92:4d:08:9a:57:65:d3:8a:3f: f7:1e:1f:5e:3d:6e:bc:f4:43:4c:b5:15:0f:39:13:a4:9d:64: a7:b6:d8:ce:da:18:47:da:17:b2:42:c2:44:79:91:84:cf:07: 85:74:6b:5b:c3:34:6e:68:3d:3e:aa:10:31:38:57:ef:f8:8b: 92:41:32:6b:e1:11:f3:f7:f6:f4:b0:84:d3:a4:73:da:aa:80: a7:a8:7c:38:07:4c:76:45:1f:34:ff:d2:ab:f6:8e:e6:32:38: 46:5b:a3:4d:af:23:7b:5b:d9:cf:f0:66:26:1a:4b:d9:37:d4: 6e:6c:d9:74:39:53:ef:6d:f1:19:c7:6d:91:5e:0a:f6:dc:62: 4d:73:07:f9:49:56:cf:10:3e:ad:a3:c8:81:fb:0d:d6:7b:7d: 90:c2:cf:ab:c4:74:0d:df:06:f6:28:b7:c6:5d:dc:95:2b:7c: 6f:1e:02:aa:df:56:39:f5:9d:bd:61:9c:a8:98:c5:50:df:42: 96:4b:14:78:c5:92:08:7d:a1:16:c6:7b:76:63:2b:56:0b:71: 27:20:ac:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTlEQzExMC8GA1UEBRMoMEY5RjcxNThEQkRGRkEyQTU3QUUwMjQ4N0M5ODIwNkI3 ODM4MDQ5NjAeFw0yNDA1MTkwODQyMDFaFw0yNDA1MjYwODQyMDFaMBgxFjAUBgNV BAMTDTY2NDliYjVhLWRjMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAdjJfreiuI9AO2S3SxhuIIFd0WUT+VoI4lf0IssH/VzXAImVGFsxUuqAdmLqa szVoyuiyAeUmvLAKUN74chkRs5Ny+J6XYIiokrwywsKHWtIqanZR9oWrMdBj7zDf SspfInrIkSfHB2vNuy74R0IMhyyvj7zWtIQxk2bboTLSIwKF8ykqW/ZOj3bHV0mp BLuHnYPIgtGR3Ja81D+Wsq3OLT9VU9hOrpDxC2fG1ADPW4a+jQMoG/ZWeFZFbwEd +mG/masrp4e4/24HA1SODQOE44BtL+ordE5DLtii0aQhx4ORgxMJ0DTMfA2bd3Ht EMjn5xNNd2QwBDUqwFIXcYbvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7TgZzTQe kdLU2EbtW5hKmEgiLTIwHwYDVR0jBBgwFoAUD59xWNvf+ipXrgJIfJgga3g4BJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFOURDLzZFRUMxRjVDRUZG RDExRUU5MDI4OEE3MkM0RjlBRTAyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJK WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDU5eFdOdmYtaXBYcmdKSWZKZ2dhM2c0QkpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF OURDLzZFRUMxRjVDRUZGRDExRUU5MDI4OEE3MkM0RjlBRTAyL0Q1OXhXTnZmLWlw WHJnSklmSmdnYTNnNEJKWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOEuB7GVajdTPMn90/D1rTv7u5YXQFysHO6uuEso7Z7q+FRRPxMu3dM PvBEIJJNCJpXZdOKP/ceH149brz0Q0y1FQ85E6SdZKe22M7aGEfaF7JCwkR5kYTP B4V0a1vDNG5oPT6qEDE4V+/4i5JBMmvhEfP39vSwhNOkc9qqgKeofDgHTHZFHzT/ 0qv2juYyOEZbo02vI3tb2c/wZiYaS9k31G5s2XQ5U+9t8RnHbZFeCvbcYk1zB/lJ Vs8QPq2jyIH7DdZ7fZDCz6vEdA3fBvYot8Zd3JUrfG8eAqrfVjn1nb1hnKiYxVDf QpZLFHjFkgh9oRbGe3ZjK1YLcScgrIQ= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org