$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: zbfSqxwfcYf7UWeiXLjjNpEuF/NTh+KS663upDG90VQ= Subject key identifier: A8:C6:F8:84:4A:3C:D3:D9:E4:F7:26:8D:6D:15:8E:11:D9:AE:41:1B Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 0608 Signing time: Fri 03 May 2024 00:01:49 +0000 Manifest this update: Fri 03 May 2024 00:01:49 +0000 Manifest next update: Fri 10 May 2024 00:01:49 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: qI8lrbEtBOHOK6TmwDvNXLTEWNAQr/8CJb9EuFxFerY=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: eZp0ZKgVDOfYu6Z9u1hdNjyGvm1tn8fssJQyWdAbSMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: May 3 00:01:49 2024 GMT Not After : May 10 00:01:49 2024 GMT Subject: CN=6634296d-aaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:cf:a4:e7:0e:ac:49:26:1e:2b:8c:69:e6: 31:9c:ce:74:62:fb:40:c8:42:02:b7:12:c8:81:92: 68:94:d7:9e:43:af:1d:d1:a4:dc:ea:29:4c:7d:fb: 6c:b3:f8:c7:f3:3c:11:27:81:95:17:77:d8:e0:33: 34:d4:50:e2:d0:31:48:fe:c9:3f:89:dc:ad:fd:15: bc:ce:28:08:05:50:06:c1:72:12:90:dd:77:6b:8a: 06:cd:bf:63:97:be:d7:f6:77:1d:3d:e5:c2:f3:b4: 71:0f:40:a7:79:72:5b:9f:04:c8:aa:d0:e1:5f:22: c1:3d:76:4f:fb:c9:e3:de:2a:8d:5d:4a:de:ce:71: 8f:9f:64:3e:dc:41:97:3e:ad:6b:57:7e:5b:b2:66: c0:b7:e2:92:67:e0:ad:0b:0e:d6:e3:48:da:ef:50: 74:7d:1b:1a:5b:c9:e0:29:d5:e7:45:1c:95:a8:30: 29:78:0e:1c:87:b5:69:20:c1:54:74:13:9c:87:d3: e3:d5:e4:85:b5:fa:2c:7f:1b:ba:ff:cd:1d:1a:7d: ad:26:2f:83:ab:3b:6b:43:0d:bd:2f:bc:5e:96:5b: b2:f3:75:fb:54:dc:49:0f:af:bf:e9:b3:d9:1b:c9: 45:20:dc:67:6f:dc:98:12:2d:cc:2f:0f:83:a9:e5: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C6:F8:84:4A:3C:D3:D9:E4:F7:26:8D:6D:15:8E:11:D9:AE:41:1B X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7f:28:5f:6e:12:32:44:35:3d:0e:64:90:02:03:c3:90:44: 66:ca:0c:fd:87:a3:f2:b5:41:03:9c:d5:55:30:35:95:ab:6f: 87:5c:b6:7d:bc:42:74:65:70:cb:68:be:83:76:44:28:91:16: 89:ce:2c:d0:0a:4d:21:12:36:bd:4e:54:ec:85:36:6a:f6:00: 59:be:5e:0c:e5:99:7b:f7:9d:45:57:bc:18:2e:96:82:ba:dc: 07:eb:92:2d:a7:c6:29:21:69:e8:2d:f8:25:36:43:48:9d:f9: 11:24:2a:f9:6e:67:42:97:8f:64:52:fe:ce:01:56:da:c0:e5: f1:f4:53:85:f6:18:b6:22:5b:b0:8d:60:a8:84:ac:5a:a2:0d: f4:2e:45:c4:b8:e9:13:c6:6e:4e:2f:03:c1:6a:30:5c:4d:87: 40:cf:d7:1c:74:e4:81:85:60:e7:6d:b8:9e:2c:e1:1d:1a:b3: b1:82:ae:b4:dc:87:5f:0e:b9:23:01:0a:dc:1c:9e:ce:04:17: c4:86:8a:a6:d4:59:28:93:fd:85:04:0d:d6:0b:a9:e1:e4:12: f6:e5:e8:8e:82:03:7f:c1:00:58:29:2a:70:4e:09:eb:98:ea: fa:8a:22:36:fe:7e:86:10:e1:69:8d:61:ba:5a:7e:8c:b3:7c: e5:a0:5f:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjQwNTAzMDAwMTQ5WhcNMjQwNTEwMDAwMTQ5WjAYMRYwFAYD VQQDEw02NjM0Mjk2ZC1hYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIzPpOcOrEkmHiuMaeYxnM50YvtAyEICtxLIgZJolNeeQ68d0aTc6ilMffts s/jH8zwRJ4GVF3fY4DM01FDi0DFI/sk/idyt/RW8zigIBVAGwXISkN13a4oGzb9j l77X9ncdPeXC87RxD0CneXJbnwTIqtDhXyLBPXZP+8nj3iqNXUreznGPn2Q+3EGX Pq1rV35bsmbAt+KSZ+CtCw7W40ja71B0fRsaW8ngKdXnRRyVqDApeA4ch7VpIMFU dBOch9Pj1eSFtfosfxu6/80dGn2tJi+DqztrQw29L7xelluy83X7VNxJD6+/6bPZ G8lFINxnb9yYEi3MLw+DqeXfxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjG+IRK PNPZ5PcmjW0VjhHZrkEbMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjfyhfbhIyRDU9DmSQAgPDkERmygz9h6PytUEDnNVVMDWVq2+HXLZ9 vEJ0ZXDLaL6DdkQokRaJzizQCk0hEja9TlTshTZq9gBZvl4M5Zl7951FV7wYLpaC utwH65Itp8YpIWnoLfglNkNInfkRJCr5bmdCl49kUv7OAVbawOXx9FOF9hi2Iluw jWCohKxaog30LkXEuOkTxm5OLwPBajBcTYdAz9ccdOSBhWDnbbieLOEdGrOxgq60 3IdfDrkjAQrcHJ7OBBfEhoqm1Fkok/2FBA3WC6nh5BL25eiOggN/wQBYKSpwTgnr mOr6iiI2/n6GEOFpjWG6Wn6Ms3zloF9R -----END CERTIFICATE-----Generated at Fri May 3 00:48:28 2024 by rpki-client on console-ams.rpki-client.org