$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: bhTE8bRuo0vZ7V7nnm65pvHnliYiO9TycKXEjC/SpeM= Subject key identifier: 6D:AD:E3:A1:3F:78:B2:EF:EB:39:6F:18:E0:13:1D:BB:3E:9F:1C:71 Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 04FC Signing time: Sun 05 May 2024 01:22:58 +0000 Manifest this update: Sun 05 May 2024 01:22:58 +0000 Manifest next update: Sun 12 May 2024 01:22:58 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: S7iw07sx8Oa4JoYV6t+OBsxvgWG5aUuETM9SLQjr98s=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: ECB274MOoOkaSPhsZQsqFUYWVyXvfCfLcdsH/dpaSfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Validity Not Before: May 5 01:22:58 2024 GMT Not After : May 12 01:22:58 2024 GMT Subject: CN=6636df72-31c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:34:d9:4c:b1:0b:2b:26:38:3a:ee:fb:8b: 39:a5:2c:f4:28:99:23:c0:0d:2f:81:e4:e4:73:0f: 6a:be:d6:e4:65:d2:48:45:18:1b:ba:21:3a:7e:c9: 07:9b:9e:34:e9:13:90:e7:e4:f8:b2:88:8d:11:99: 89:4a:42:ae:ee:d4:d5:10:1c:0b:13:85:12:0c:bb: 4c:b5:45:a1:09:c6:58:58:a7:88:c5:45:27:1b:47: 77:99:dc:dc:da:fd:68:d4:8a:e5:d9:c3:ed:04:66: 87:ad:1c:33:45:18:75:c2:69:0a:9d:f1:d6:9d:7b: c8:79:43:c2:cd:f0:8d:08:0c:25:43:4b:7c:0b:ed: 1d:ee:a7:cc:49:2d:76:fe:ad:3e:58:1f:bc:86:6c: 78:35:07:a2:38:83:28:ff:aa:d7:07:05:36:31:40: 2c:1c:4e:da:2d:b4:71:5f:25:a7:b1:b8:ce:2d:75: cd:d4:51:68:c5:90:12:79:41:b2:1e:41:7b:59:78: e7:65:ed:65:38:f6:e8:03:18:2e:5b:d1:21:21:7b: 86:61:d3:a0:fd:30:79:a1:37:d3:c9:45:73:cf:cd: 20:7c:8e:25:d3:df:13:66:0a:6a:8c:78:d1:bb:65: d7:88:5f:70:ad:3b:ae:64:6a:be:d5:b1:3c:88:e8: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AD:E3:A1:3F:78:B2:EF:EB:39:6F:18:E0:13:1D:BB:3E:9F:1C:71 X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:08:0c:94:b8:e6:b6:71:a5:96:cd:44:d2:ff:1d:a0:fb:ac: 9e:ac:37:96:6a:44:7b:9a:09:3f:19:86:c4:c3:64:c9:ec:ff: 89:df:ab:db:ae:de:99:5c:a2:aa:48:95:dc:3e:e9:bc:4b:bb: f2:f4:70:03:f9:9a:da:9a:27:b6:12:6b:0a:6f:fa:7d:bd:ac: a4:cf:fd:ed:50:56:ca:07:83:84:6c:54:a2:ca:57:83:51:55: 9e:39:0b:91:53:10:37:2b:89:5d:16:54:bd:0a:b5:7c:50:c5: 15:c5:c5:2c:85:7a:71:68:cd:6a:b9:ac:11:24:81:28:23:a0: 3a:cd:68:56:b1:92:0b:b2:88:49:db:75:a2:29:c5:cc:63:43: 1e:0b:ce:b6:68:2e:c0:a5:ac:ad:6f:c4:3c:af:8c:23:aa:8a: 5c:d7:36:dd:83:b5:05:64:8d:45:67:cb:ad:ed:71:16:a8:39: 62:9e:40:a9:b7:84:15:83:72:0f:bd:a4:a7:2f:c7:d3:c3:de: f0:15:1b:3f:03:cf:ae:79:27:51:98:62:53:70:4e:1e:3b:eb: 91:07:e0:ab:8e:86:57:77:82:0f:d4:b0:cb:11:d2:1b:ab:de: 91:ab:1b:cf:48:df:54:63:5d:e1:06:a5:f0:78:db:b4:46:91: 56:5d:25:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjQwNTA1MDEyMjU4WhcNMjQwNTEyMDEyMjU4WjAYMRYwFAYD VQQDEw02NjM2ZGY3Mi0zMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRY02UyxCysmODru+4s5pSz0KJkjwA0vgeTkcw9qvtbkZdJIRRgbuiE6fskH m5406ROQ5+T4soiNEZmJSkKu7tTVEBwLE4USDLtMtUWhCcZYWKeIxUUnG0d3mdzc 2v1o1Irl2cPtBGaHrRwzRRh1wmkKnfHWnXvIeUPCzfCNCAwlQ0t8C+0d7qfMSS12 /q0+WB+8hmx4NQeiOIMo/6rXBwU2MUAsHE7aLbRxXyWnsbjOLXXN1FFoxZASeUGy HkF7WXjnZe1lOPboAxguW9EhIXuGYdOg/TB5oTfTyUVzz80gfI4l098TZgpqjHjR u2XXiF9wrTuuZGq+1bE8iOhKiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2t46E/ eLLv6zlvGOATHbs+nxxxMB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcCAyUuOa2caWWzUTS/x2g+6yerDeWakR7mgk/GYbEw2TJ7P+J36vb rt6ZXKKqSJXcPum8S7vy9HAD+Zramie2EmsKb/p9vaykz/3tUFbKB4OEbFSiyleD UVWeOQuRUxA3K4ldFlS9CrV8UMUVxcUshXpxaM1quawRJIEoI6A6zWhWsZILsohJ 23WiKcXMY0MeC862aC7Apaytb8Q8r4wjqopc1zbdg7UFZI1FZ8ut7XEWqDlinkCp t4QVg3IPvaSnL8fTw97wFRs/A8+ueSdRmGJTcE4eO+uRB+CrjoZXd4IP1LDLEdIb q96RqxvPSN9UY13hBqXweNu0RpFWXSUb -----END CERTIFICATE-----Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org