$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: ZQyvI017MBah8T/j8q2st7+DGvzEHlSXk3EHABJhwxw= Subject key identifier: 9E:C4:3D:A5:F8:B9:57:5D:B0:87:36:C8:7E:F2:74:4E:12:8A:EF:1E Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 05CA Signing time: Fri 03 May 2024 00:16:10 +0000 Manifest this update: Fri 03 May 2024 00:16:10 +0000 Manifest next update: Fri 10 May 2024 00:16:09 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: KSrNa3BalDqE5NKpYVCPz8dvNU3OKrXVkCxq575BJW0=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: yItSFfthrvs4+kvxPXhcObukSW7A2Gjgx6MxObPc6GM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: May 3 00:16:10 2024 GMT Not After : May 10 00:16:09 2024 GMT Subject: CN=66342cca-da01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:85:82:c1:c7:79:12:2b:81:20:c9:a0:72: 3a:2d:2a:5b:cb:53:ab:b6:13:d4:70:e1:85:25:d1: fc:36:c9:ad:22:11:a1:03:e5:aa:f1:df:47:7a:cd: 7a:19:d4:82:65:8e:e3:49:ad:32:cf:ca:e0:d7:92: 8c:18:19:37:7d:54:47:4f:cc:e2:2b:8e:2c:33:11: 5a:ca:18:6a:fb:ae:1a:04:89:62:3f:15:3d:62:f8: 9f:8d:98:42:cb:5b:0b:b8:66:13:f3:0b:96:4d:a0: 07:b7:29:c9:12:1c:fe:45:1c:64:fb:f2:6d:56:2f: 9a:f2:78:84:56:c2:c1:c2:db:20:b0:60:3a:95:c0: d7:3f:f9:e8:69:c8:0d:1c:21:19:68:dd:6e:2e:b3: d6:62:3d:94:54:15:3a:b3:27:98:3d:7f:4c:53:db: 96:fe:02:a7:bc:4b:1a:a0:0c:4e:99:04:cc:8f:14: 44:a1:c6:0b:0b:69:58:04:ac:70:22:55:90:40:09: f6:8b:6d:ce:99:68:d6:23:da:79:ae:a3:05:85:45: 84:86:89:c0:72:c5:2b:47:21:38:55:4b:42:a5:4a: 33:dd:52:89:98:04:2c:39:19:f2:ae:f3:38:87:02: 84:74:6e:13:d4:71:f0:1d:53:d0:d4:33:88:eb:17: 04:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C4:3D:A5:F8:B9:57:5D:B0:87:36:C8:7E:F2:74:4E:12:8A:EF:1E X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:3b:dd:fc:a2:b9:bc:ec:46:68:0d:2b:36:00:cf:31:73:dc: 73:1c:fc:af:52:13:7c:63:2f:0f:9c:61:97:28:71:d2:95:3e: 85:6e:a2:7d:0f:11:fb:a2:0a:88:2a:76:19:8f:2a:2f:88:48: 06:63:69:61:3a:4c:cc:50:4a:f5:1e:d2:6f:21:ad:22:c3:a5: f1:c1:e7:9a:a8:fb:e8:5f:13:f5:61:8c:19:eb:10:3a:5e:1f: ac:a3:61:24:9f:a6:88:6a:9b:f8:16:c5:e8:25:a8:c0:77:5c: 95:40:39:ba:23:26:e5:af:af:e9:98:20:b4:a2:c7:1b:47:25: f6:de:4e:ae:43:2e:8f:26:4c:f3:ed:0f:0b:b6:32:d2:fb:c9: 1b:ca:86:4d:34:02:b6:e2:9b:ee:43:c2:7f:ff:63:91:8b:d6: 84:7a:90:19:50:8b:47:8f:c1:3f:bd:01:0b:83:42:dd:13:47: 5e:ba:ac:58:b3:9f:05:9f:67:aa:59:f2:94:66:1f:e6:b1:ef: 3f:36:89:1f:23:78:ee:3f:0a:9a:30:8c:02:3f:ab:2f:08:9a: 33:83:53:53:d5:2a:6d:5d:0b:19:f6:ee:9e:2e:ec:94:60:7c: c8:51:01:8d:4e:3e:b4:5c:10:21:73:44:0a:b4:de:cc:ec:d4: 53:53:e5:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjQwNTAzMDAxNjEwWhcNMjQwNTEwMDAxNjA5WjAYMRYwFAYD VQQDEw02NjM0MmNjYS1kYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgqFgsHHeRIrgSDJoHI6LSpby1OrthPUcOGFJdH8NsmtIhGhA+Wq8d9Hes16 GdSCZY7jSa0yz8rg15KMGBk3fVRHT8ziK44sMxFayhhq+64aBIliPxU9YvifjZhC y1sLuGYT8wuWTaAHtynJEhz+RRxk+/JtVi+a8niEVsLBwtsgsGA6lcDXP/noacgN HCEZaN1uLrPWYj2UVBU6syeYPX9MU9uW/gKnvEsaoAxOmQTMjxREocYLC2lYBKxw IlWQQAn2i23OmWjWI9p5rqMFhUWEhonAcsUrRyE4VUtCpUoz3VKJmAQsORnyrvM4 hwKEdG4T1HHwHVPQ1DOI6xcEYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7EPaX4 uVddsIc2yH7ydE4Siu8eMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJO938orm87EZoDSs2AM8xc9xzHPyvUhN8Yy8PnGGXKHHSlT6FbqJ9 DxH7ogqIKnYZjyoviEgGY2lhOkzMUEr1HtJvIa0iw6XxweeaqPvoXxP1YYwZ6xA6 Xh+so2Ekn6aIapv4FsXoJajAd1yVQDm6Iyblr6/pmCC0oscbRyX23k6uQy6PJkzz 7Q8LtjLS+8kbyoZNNAK24pvuQ8J//2ORi9aEepAZUItHj8E/vQELg0LdE0deuqxY s58Fn2eqWfKUZh/mse8/NokfI3juPwqaMIwCP6svCJozg1NT1SptXQsZ9u6eLuyU YHzIUQGNTj60XBAhc0QKtN7M7NRTU+Uu -----END CERTIFICATE-----Generated at Fri May 3 01:30:25 2024 by rpki-client on console-fra.rpki-client.org