$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: cKenFHrFU5hrHjpi8Qi1KKKeregywx60qM3mx3JOA5c= Subject key identifier: 58:92:3F:70:BE:68:9F:0D:AE:32:E8:E4:C7:60:EC:CB:B6:2B:0E:87 Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 024B Signing time: Fri 03 May 2024 04:03:02 +0000 Manifest this update: Fri 03 May 2024 04:03:01 +0000 Manifest next update: Fri 10 May 2024 04:03:01 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: BJiXhM8G7eS8HtkR/LKKgImFdXi80ej8u0c4tP6MUD8=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: cSKaNOP2pjKd327QhRYBF8AGbzqiuaYZiL9Zg1h+Iok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: May 3 04:03:01 2024 GMT Not After : May 10 04:03:01 2024 GMT Subject: CN=663461f6-e1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:05:8f:60:7d:b9:2a:49:32:e3:d6:6c:c1: 4b:fe:4c:ff:fa:cf:1e:05:f3:55:13:89:a5:ac:30: 55:ee:06:b8:c0:af:d3:95:17:19:31:41:ae:9b:be: e0:71:48:3c:ff:df:59:3d:8f:17:37:e1:f0:6d:5b: 25:25:e5:ea:42:68:66:92:1f:02:ed:1c:47:bb:4f: c5:d6:37:fa:d3:3b:c5:64:8b:04:dc:69:5c:03:01: ab:84:f5:e5:26:7e:08:df:80:07:26:f9:4c:89:95: 35:1c:83:f5:43:05:bb:8e:21:f4:2e:5c:bc:6f:46: 3c:6d:0b:23:66:72:63:d4:9d:92:e3:f1:85:2f:28: f1:a6:0a:bd:1c:5b:46:d8:00:bc:75:b9:f3:63:d0: 01:44:b4:54:62:d2:cc:97:4d:33:f9:b9:db:01:19: ea:b6:e7:df:ff:38:cd:51:dd:88:37:dc:e8:bb:7d: 29:00:1c:9c:64:9d:e2:2a:f8:95:7b:de:3e:26:8b: 03:da:86:6e:14:38:65:31:3f:1e:bf:9f:39:f4:71: 30:19:65:10:26:5f:78:20:f3:98:1a:cb:4d:4d:be: 74:79:87:b9:0e:47:75:ad:da:c2:a2:92:df:d2:ed: e3:e4:48:dd:91:ba:84:0a:8b:16:79:4c:fc:f0:1c: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:92:3F:70:BE:68:9F:0D:AE:32:E8:E4:C7:60:EC:CB:B6:2B:0E:87 X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:28:be:40:7e:ea:4d:51:54:fc:58:80:dc:2a:86:fd:6a:f1: 93:36:4f:49:6b:7f:72:35:31:65:a0:45:af:5b:ba:14:80:01: fc:3d:32:a2:2e:e7:3e:d8:08:5a:5a:9c:56:78:98:89:52:f8: a4:03:d6:6d:e7:9d:e3:88:5a:65:03:f8:89:85:e3:34:f2:f2: da:3a:d3:c8:44:8f:f4:30:3a:23:36:83:4b:6b:c6:65:e0:72: 67:d0:2d:be:ee:0a:95:21:5e:50:49:7f:18:55:57:ac:35:fb: f0:a0:42:c1:7a:2f:ab:20:29:71:2f:6f:48:f7:61:56:11:6a: 49:aa:2b:b3:ab:65:4c:3d:04:fe:98:7c:96:7e:88:f6:8f:31: f5:3e:35:58:3c:9a:d8:eb:cc:96:b2:4e:e9:23:f0:60:8a:c7: e2:6f:4f:4b:ba:95:c5:0b:85:68:cc:6c:62:45:7c:5f:72:70: ca:11:20:95:fb:4a:52:ba:23:ac:4c:63:e7:1c:7a:eb:08:30: df:fd:b3:df:42:f0:bb:97:70:e9:56:05:41:06:f3:3c:83:94: dc:7b:2b:6e:bb:e5:24:58:9f:6c:88:54:dc:5a:80:29:e2:f5: 6f:fe:ae:6d:78:d9:30:dd:ea:86:41:bf:e5:09:af:d3:90:f1: ef:90:1a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjQwNTAzMDQwMzAxWhcNMjQwNTEwMDQwMzAxWjAYMRYwFAYD VQQDEw02NjM0NjFmNi1lMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJEFj2B9uSpJMuPWbMFL/kz/+s8eBfNVE4mlrDBV7ga4wK/TlRcZMUGum77g cUg8/99ZPY8XN+HwbVslJeXqQmhmkh8C7RxHu0/F1jf60zvFZIsE3GlcAwGrhPXl Jn4I34AHJvlMiZU1HIP1QwW7jiH0Lly8b0Y8bQsjZnJj1J2S4/GFLyjxpgq9HFtG 2AC8dbnzY9ABRLRUYtLMl00z+bnbARnqtuff/zjNUd2IN9zou30pABycZJ3iKviV e94+JosD2oZuFDhlMT8ev5859HEwGWUQJl94IPOYGstNTb50eYe5Dkd1rdrCopLf 0u3j5EjdkbqECosWeUz88BwJ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiSP3C+ aJ8NrjLo5Mdg7Mu2Kw6HMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQKL5AfupNUVT8WIDcKob9avGTNk9Ja39yNTFloEWvW7oUgAH8PTKi Luc+2AhaWpxWeJiJUvikA9Zt553jiFplA/iJheM08vLaOtPIRI/0MDojNoNLa8Zl 4HJn0C2+7gqVIV5QSX8YVVesNfvwoELBei+rIClxL29I92FWEWpJqiuzq2VMPQT+ mHyWfoj2jzH1PjVYPJrY68yWsk7pI/Bgisfib09LupXFC4VozGxiRXxfcnDKESCV +0pSuiOsTGPnHHrrCDDf/bPfQvC7l3DpVgVBBvM8g5Tceytuu+UkWJ9siFTcWoAp 4vVv/q5teNkw3eqGQb/lCa/TkPHvkBqV -----END CERTIFICATE-----Generated at Fri May 3 05:32:35 2024 by rpki-client on console-ams.rpki-client.org