$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: CXE41HyfQjeaMqX1n2pgFe5HqrmDcKtBFRidcGQGtmk= Subject key identifier: 3F:C7:D2:C2:46:FE:F6:AD:1E:B7:B0:79:70:4E:6B:41:BB:73:F1:97 Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 03B7 Signing time: Sat 04 May 2024 22:33:02 +0000 Manifest this update: Sat 04 May 2024 22:33:02 +0000 Manifest next update: Sat 11 May 2024 22:33:02 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: Z83og8vDC8CbV/c7z0S5ebZHlTKc4n3zmb1TjD9mfRs=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: axSwHlgcuI8sZVvNhuBUNjuQg35Si8TyBu2d5MZVel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: May 4 22:33:02 2024 GMT Not After : May 11 22:33:02 2024 GMT Subject: CN=6636b79e-e48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:99:04:2f:af:02:58:64:02:8d:5a:67:8e: e5:30:a0:18:07:da:6c:6f:25:39:fb:25:1e:0e:3f: a1:a3:c4:c9:e0:65:34:b0:69:9b:65:18:4d:c5:48: 6a:45:2a:6b:00:a6:21:90:86:29:fb:39:c4:ec:8b: 3e:bf:69:d1:04:ca:a0:7b:a7:64:2c:52:dc:f0:80: f7:e3:a6:6b:66:fb:a7:80:20:36:47:02:60:21:c6: 58:6e:d8:a1:4c:d8:4d:2d:3f:02:e9:d8:af:ae:34: 4f:fe:a9:37:f8:db:6d:47:0e:e3:4b:2c:b5:87:06: e8:d4:82:d7:a8:94:0f:cf:64:2a:f6:cc:00:b1:67: dc:bf:a5:ec:3e:55:94:00:3a:7f:0e:82:74:45:6d: c6:31:c9:f3:b5:f8:f1:ba:c6:df:f2:0d:3f:ab:1a: 32:23:07:0d:95:6a:1e:60:8d:7e:7e:3e:a0:c7:ff: 16:e8:f8:e9:87:59:7b:e5:55:a9:da:54:1b:75:f9: e8:45:43:29:06:b1:b0:20:8c:cf:ca:35:ec:be:88: bc:80:a7:84:ca:2a:61:ee:42:c4:86:72:35:f8:35: 82:ae:29:c1:b7:7b:66:14:c2:3d:0d:a5:ef:ea:00: 42:d0:c7:e1:b2:b2:04:1c:a2:ad:19:10:b3:ab:0a: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C7:D2:C2:46:FE:F6:AD:1E:B7:B0:79:70:4E:6B:41:BB:73:F1:97 X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6b:e0:c2:db:bf:49:83:a2:92:1e:f9:75:87:6a:94:f4:81: 24:e0:26:42:85:70:41:0d:62:34:8d:8f:e0:a1:f7:83:48:31: 74:64:6c:51:40:c5:e1:1c:0f:79:cf:68:84:11:d9:90:28:12: 73:27:9a:a4:1d:58:0a:98:8f:64:96:2f:23:2d:85:ca:b8:f5: 41:ca:43:49:04:81:c9:0e:2b:be:2f:d9:ee:d1:62:b9:11:8b: dc:83:e9:7a:98:d3:67:a9:ef:f4:02:0d:a0:89:6b:f0:b3:d9: e4:6d:11:e4:17:16:6c:5b:8f:9c:a7:9d:73:2e:f0:cf:6c:c5: 72:ca:b0:9a:d8:cc:95:22:75:39:38:a5:7b:4c:86:67:d2:1e: d9:1a:0f:9e:6d:7d:2e:15:7d:b8:51:62:4a:e5:b8:4f:55:38: 28:1b:56:2d:07:21:52:81:c0:60:0f:a7:16:0a:46:b0:8c:37: 73:05:12:18:18:32:be:a1:88:0a:d3:6b:1c:7d:79:c2:09:96: 52:c5:90:5f:59:53:94:b0:d1:18:fe:66:ce:a1:2a:c2:51:9d: f3:de:d3:53:bf:79:3c:e8:c7:68:0b:a8:93:18:c5:20:a9:40: 6e:11:e7:f4:12:c9:8b:40:71:fe:8f:3c:ad:b4:52:59:48:43: 41:6f:48:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjQwNTA0MjIzMzAyWhcNMjQwNTExMjIzMzAyWjAYMRYwFAYD VQQDEw02NjM2Yjc5ZS1lNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8qZBC+vAlhkAo1aZ47lMKAYB9psbyU5+yUeDj+ho8TJ4GU0sGmbZRhNxUhq RSprAKYhkIYp+znE7Is+v2nRBMqge6dkLFLc8ID346ZrZvungCA2RwJgIcZYbtih TNhNLT8C6divrjRP/qk3+NttRw7jSyy1hwbo1ILXqJQPz2Qq9swAsWfcv6XsPlWU ADp/DoJ0RW3GMcnztfjxusbf8g0/qxoyIwcNlWoeYI1+fj6gx/8W6Pjph1l75VWp 2lQbdfnoRUMpBrGwIIzPyjXsvoi8gKeEyiph7kLEhnI1+DWCrinBt3tmFMI9DaXv 6gBC0MfhsrIEHKKtGRCzqwritQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/H0sJG /vatHreweXBOa0G7c/GXMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBta+DC279Jg6KSHvl1h2qU9IEk4CZChXBBDWI0jY/gofeDSDF0ZGxR QMXhHA95z2iEEdmQKBJzJ5qkHVgKmI9kli8jLYXKuPVBykNJBIHJDiu+L9nu0WK5 EYvcg+l6mNNnqe/0Ag2giWvws9nkbRHkFxZsW4+cp51zLvDPbMVyyrCa2MyVInU5 OKV7TIZn0h7ZGg+ebX0uFX24UWJK5bhPVTgoG1YtByFSgcBgD6cWCkawjDdzBRIY GDK+oYgK02scfXnCCZZSxZBfWVOUsNEY/mbOoSrCUZ3z3tNTv3k86MdoC6iTGMUg qUBuEef0EsmLQHH+jzyttFJZSENBb0jP -----END CERTIFICATE-----Generated at Sun May 5 00:14:42 2024 by rpki-client on console-ams.rpki-client.org