$ rpki-client -vvf rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft File: Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft (raw, json) Hash identifier: uvnSYL2oyk4ddV9SyMOyshaFneU/XLZ2Tpo5Hl6DvpE= Subject key identifier: C0:31:D6:0F:43:31:2D:95:A9:85:60:C6:9A:C6:38:24:D0:13:21:D6 Authority key identifier: 51:DD:5E:7F:A6:C4:16:44:1C:B2:D8:AA:18:95:FC:49:F3:F9:6B:7A Certificate issuer: /CN=A91324F2/serialNumber=51DD5E7FA6C416441CB2D8AA1895FC49F3F96B7A Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ud1ef6bEFkQcstiqGJX8SfP5a3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft Manifest number: 01A6 Signing time: Tue 07 May 2024 04:36:08 +0000 Manifest this update: Tue 07 May 2024 04:36:08 +0000 Manifest next update: Tue 14 May 2024 04:36:08 +0000 Files and hashes: 1: Ud1ef6bEFkQcstiqGJX8SfP5a3o.crl (hash: pSvni2a7wxcI7+fd4fg7wZKO+Dfred0NhFllXJmEbmw=) 2: 832F9E96124E11ED95DC9111C4F9AE02.roa (hash: RFUAlgJKUO7+XNOjdgg1vjPinh29G8x0qKnRaBwGQg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.crl rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ud1ef6bEFkQcstiqGJX8SfP5a3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324F2/serialNumber=51DD5E7FA6C416441CB2D8AA1895FC49F3F96B7A Validity Not Before: May 7 04:36:08 2024 GMT Not After : May 14 04:36:08 2024 GMT Subject: CN=6639afb8-80d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:f5:25:39:9f:2c:71:c3:d7:b1:2b:4b:7d: 87:0a:19:30:89:2e:db:7c:3b:34:38:85:30:8d:09: b2:41:73:04:7f:7e:91:4f:7a:b0:f2:12:77:cd:94: ba:a4:c0:f9:ad:20:04:7d:d2:c9:5d:56:b1:ea:b5: d3:3a:f8:74:65:d3:37:72:79:11:6d:ce:99:41:9f: 25:a3:32:e9:bd:c1:59:80:f4:c2:8b:71:b0:16:28: aa:47:bf:a9:27:64:a1:a3:14:76:03:0a:99:43:50: 33:c5:14:aa:ad:39:87:8f:f8:77:16:3c:62:e4:64: ae:42:1c:c1:87:2f:fa:ca:28:40:3e:e8:23:06:82: 32:50:9d:2a:43:d5:34:2b:e0:93:8f:95:74:50:30: e8:23:c5:10:96:8b:f5:b9:e9:4c:67:53:82:3f:39: fe:1a:13:34:aa:54:10:d5:80:06:61:67:eb:8f:68: b0:e1:56:e2:57:d0:01:a7:cb:a5:e2:34:fc:24:a0: b0:83:86:d1:58:90:4f:d2:8f:99:29:ed:0b:11:39: e7:b4:28:02:24:4d:6d:7b:52:ac:b3:76:35:a2:c8: 1f:eb:63:3d:f7:57:52:09:6d:8d:8a:cd:c7:ca:b8: 53:de:cb:8a:d4:cf:e7:af:69:de:f2:8a:72:79:06: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:31:D6:0F:43:31:2D:95:A9:85:60:C6:9A:C6:38:24:D0:13:21:D6 X509v3 Authority Key Identifier: keyid:51:DD:5E:7F:A6:C4:16:44:1C:B2:D8:AA:18:95:FC:49:F3:F9:6B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ud1ef6bEFkQcstiqGJX8SfP5a3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:78:f4:39:6d:29:c6:dd:2d:8c:7e:9b:db:ba:9f:a6:50:3f: 2c:34:93:35:73:f5:10:da:8e:cd:36:3d:b6:61:f7:a4:b5:40: f7:28:72:a6:f5:00:49:bf:4d:06:ad:2c:c0:c9:14:36:76:db: ec:ce:6b:51:61:88:6b:01:ce:0f:d1:c1:f1:92:ac:6c:fb:f6: 32:ee:d0:72:7e:39:10:e2:20:e0:ed:0f:44:79:ad:4b:b3:e9: 09:64:dc:cd:df:e3:57:0c:3a:12:35:9c:92:78:e0:c7:97:96: 60:2e:2f:a7:8d:f2:24:78:ba:a7:1c:c5:39:27:7d:f1:02:71: 96:d3:49:3f:3a:1e:e3:d6:b5:35:f8:e1:9b:2c:a3:5e:00:19: 60:fd:9a:21:94:07:dc:e1:59:07:57:d2:78:0e:29:18:3d:ee: cb:55:79:5e:c2:77:07:00:e1:22:fe:55:6a:4b:ce:ec:4f:f7: 15:0b:cb:3d:b5:b2:8a:c1:f2:75:53:c0:12:33:88:dd:e6:bc: f8:a8:61:3a:56:70:f0:c7:59:15:e6:52:1e:0f:59:d9:9f:46: 3a:dc:01:c6:43:a6:99:24:46:04:04:f3:3e:03:db:b8:3c:92: c1:6d:15:10:75:75:c1:bb:a9:9f:26:1b:97:c2:5e:06:11:f5: e6:54:c8:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RjIxMTAvBgNVBAUTKDUxREQ1RTdGQTZDNDE2NDQxQ0IyRDhBQTE4OTVGQzQ5 RjNGOTZCN0EwHhcNMjQwNTA3MDQzNjA4WhcNMjQwNTE0MDQzNjA4WjAYMRYwFAYD VQQDEw02NjM5YWZiOC04MGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gH1JTmfLHHD17ErS32HChkwiS7bfDs0OIUwjQmyQXMEf36RT3qw8hJ3zZS6 pMD5rSAEfdLJXVax6rXTOvh0ZdM3cnkRbc6ZQZ8lozLpvcFZgPTCi3GwFiiqR7+p J2ShoxR2AwqZQ1AzxRSqrTmHj/h3Fjxi5GSuQhzBhy/6yihAPugjBoIyUJ0qQ9U0 K+CTj5V0UDDoI8UQlov1uelMZ1OCPzn+GhM0qlQQ1YAGYWfrj2iw4VbiV9ABp8ul 4jT8JKCwg4bRWJBP0o+ZKe0LETnntCgCJE1te1Kss3Y1osgf62M991dSCW2Nis3H yrhT3suK1M/nr2ne8opyeQaRfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAx1g9D MS2VqYVgxprGOCTQEyHWMB8GA1UdIwQYMBaAFFHdXn+mxBZEHLLYqhiV/Enz+Wt6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRGMi9GQTM3Qzg0NjEy NEExMUVEOUREMzBGNjJDNEY5QUUwMi9VZDFlZjZiRUZrUWNzdGlxR0pYOFNmUDVh M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkMWVmNmJFRmtRY3N0aXFHSlg4U2ZQNWEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRGMi9GQTM3Qzg0NjEyNEExMUVEOUREMzBGNjJDNEY5QUUwMi9VZDFlZjZiRUZr UWNzdGlxR0pYOFNmUDVhM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdePQ5bSnG3S2Mfpvbup+mUD8sNJM1c/UQ2o7NNj22YfektUD3KHKm 9QBJv00GrSzAyRQ2dtvszmtRYYhrAc4P0cHxkqxs+/Yy7tByfjkQ4iDg7Q9Eea1L s+kJZNzN3+NXDDoSNZySeODHl5ZgLi+njfIkeLqnHMU5J33xAnGW00k/Oh7j1rU1 +OGbLKNeABlg/ZohlAfc4VkHV9J4DikYPe7LVXlewncHAOEi/lVqS87sT/cVC8s9 tbKKwfJ1U8ASM4jd5rz4qGE6VnDwx1kV5lIeD1nZn0Y63AHGQ6aZJEYEBPM+A9u4 PJLBbRUQdXXBu6mfJhuXwl4GEfXmVMjp -----END CERTIFICATE-----Generated at Tue May 7 05:34:24 2024 by rpki-client on console-ams.rpki-client.org