$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: BI7XWiSMSulx5uubyqJ/yMevQj6bSBH5i6Y+sCji8jU= Subject key identifier: 41:8F:C6:86:D6:9B:0D:0A:62:08:9F:62:BE:9C:E2:6F:83:AD:1B:86 Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 15CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 15C1 Signing time: Tue 30 Apr 2024 17:24:36 +0000 Manifest this update: Tue 30 Apr 2024 17:24:36 +0000 Manifest next update: Tue 07 May 2024 17:24:36 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: X4rorjqrKbGyo/+/AQ5THj1eIZkkwCV5qVVMWbYq0Zc=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: jP6GIbinp3Nw7ptUURz/NryO9wh+K7IIfBQeKgw27k0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5580 (0x15cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Apr 30 17:24:36 2024 GMT Not After : May 7 17:24:36 2024 GMT Subject: CN=66312954-25a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:82:3e:a3:59:97:84:a5:47:3b:b1:98:8a: cf:68:2f:f1:f7:fe:5d:4f:01:fd:bc:05:94:cd:9b: b5:a4:4e:68:f2:fd:79:3c:71:05:dc:b3:66:69:2f: c2:4f:4a:a6:c0:1f:f3:c7:89:b2:6f:9a:7e:28:68: 2c:19:4d:ee:95:78:be:49:60:0c:ad:a4:56:4b:ea: 96:21:17:29:3c:6e:3e:54:01:ce:a0:60:bd:f8:2d: 40:9b:04:49:93:2e:70:1e:a9:7d:24:07:78:b5:04: e8:90:c6:e2:35:bb:54:38:7f:74:5c:e2:0c:0d:58: 6d:13:7f:e6:cc:d7:7c:e6:5e:48:c3:51:be:fc:59: c5:f8:d9:e0:a9:19:4f:bc:e6:bf:02:10:80:90:7e: 3f:07:70:93:09:8a:ac:79:8a:3c:06:dd:49:9c:31: d4:0a:f7:4a:4b:0a:18:57:95:8f:8c:cf:a6:05:d6: a4:bb:e7:c9:a3:b4:d6:ee:1e:2a:f3:02:11:2b:07: f4:cb:11:10:c6:1f:8b:bc:0a:16:ed:75:e7:d8:5f: 73:2c:cf:1b:a1:ef:d5:14:60:2d:8e:1c:21:e1:07: 2b:9f:85:c8:d0:ef:24:67:04:2e:8d:bf:28:28:9b: db:9a:de:c2:b8:a2:2c:1b:81:bf:10:dc:27:21:02: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8F:C6:86:D6:9B:0D:0A:62:08:9F:62:BE:9C:E2:6F:83:AD:1B:86 X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:79:05:23:ae:9c:7e:f7:a0:16:5e:59:f2:e1:52:a7:22:0f: 1e:5a:c1:9a:ea:c9:17:08:d8:87:16:c9:97:7a:97:48:2d:92: c4:c5:71:5b:3a:74:77:e0:a0:8a:a7:7d:09:0f:89:bd:4a:10: 88:94:80:7e:28:63:f0:15:c8:da:98:71:df:69:79:33:31:4f: bc:27:da:31:da:b3:1e:bd:4e:22:9f:8a:f1:c2:05:02:87:7c: e4:97:6a:85:3b:7d:90:09:dd:46:4b:25:d2:a6:fd:8f:15:9f: 84:fd:13:5a:ac:68:40:02:f7:a0:9c:d1:9f:88:a8:f5:aa:28: 7a:33:81:55:44:b7:a2:86:59:13:26:13:8d:1d:c0:41:49:9c: e7:ae:8c:95:11:d3:74:77:a6:98:a5:b7:c9:76:c4:d8:d2:46: b6:0a:0c:e4:77:f1:48:a1:e3:6c:db:aa:d6:87:1b:50:08:f3: 6c:a5:a8:ec:88:65:5e:1d:0f:70:06:ee:fe:63:37:c2:6e:b6: 4a:91:54:c6:56:7e:14:49:1a:43:f7:ac:09:96:13:ab:4a:3c: cd:2e:0a:6b:7e:84:00:0e:65:2c:f3:1f:73:44:9a:b5:be:08: c2:ef:2e:a2:40:22:1a:78:9c:54:d7:1e:b5:07:79:ec:07:e1: ec:12:ae:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjQwNDMwMTcyNDM2WhcNMjQwNTA3MTcyNDM2WjAYMRYwFAYD VQQDEw02NjMxMjk1NC0yNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl+CPqNZl4SlRzuxmIrPaC/x9/5dTwH9vAWUzZu1pE5o8v15PHEF3LNmaS/C T0qmwB/zx4myb5p+KGgsGU3ulXi+SWAMraRWS+qWIRcpPG4+VAHOoGC9+C1AmwRJ ky5wHql9JAd4tQTokMbiNbtUOH90XOIMDVhtE3/mzNd85l5Iw1G+/FnF+NngqRlP vOa/AhCAkH4/B3CTCYqseYo8Bt1JnDHUCvdKSwoYV5WPjM+mBdaku+fJo7TW7h4q 8wIRKwf0yxEQxh+LvAoW7XXn2F9zLM8boe/VFGAtjhwh4Qcrn4XI0O8kZwQujb8o KJvbmt7CuKIsG4G/ENwnIQKC2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGPxobW mw0KYgifYr6c4m+DrRuGMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAieQUjrpx+96AWXlny4VKnIg8eWsGa6skXCNiHFsmXepdILZLExXFb OnR34KCKp30JD4m9ShCIlIB+KGPwFcjamHHfaXkzMU+8J9ox2rMevU4in4rxwgUC h3zkl2qFO32QCd1GSyXSpv2PFZ+E/RNarGhAAvegnNGfiKj1qih6M4FVRLeihlkT JhONHcBBSZznroyVEdN0d6aYpbfJdsTY0ka2Cgzkd/FIoeNs26rWhxtQCPNspajs iGVeHQ9wBu7+YzfCbrZKkVTGVn4USRpD96wJlhOrSjzNLgprfoQADmUs8x9zRJq1 vgjC7y6iQCIaeJxU1x61B3nsB+HsEq7d -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:13 2024 by rpki-client on console-ams.rpki-client.org