$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: yUJ3fyqlMj6A6orX13AFFFTvR3/T04li65XYisLimCg= Subject key identifier: E8:D2:19:0F:A5:47:E1:09:9B:80:CE:D4:D2:66:12:27:7A:01:B8:B4 Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 056D Signing time: Fri 03 May 2024 00:50:06 +0000 Manifest this update: Fri 03 May 2024 00:50:05 +0000 Manifest next update: Fri 10 May 2024 00:50:05 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: KgyXBZxp/UrmVKyilF6+9QxsCHOMUtEOMIfT2p2Jg4s=) 2: D78A16ECCAC311EC910B8C20C4F9AE02.roa (hash: 1VpdFmVoHs8SfyjIVyPMTxTz+cTxtSOLtD8z1+sQe1w=) 3: D6692528CAC311EC910B8C20C4F9AE02.roa (hash: 0smMMd57ya1+D2ELvTAbVnL7Xs2Zr6nql8mJb1/OO18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: May 3 00:50:05 2024 GMT Not After : May 10 00:50:05 2024 GMT Subject: CN=663434be-d873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:33:0c:58:31:06:16:52:be:0a:1b:3f:f5: 32:62:b0:b8:dd:e8:b8:3e:3d:9c:52:68:4a:52:26: af:a1:75:5c:33:da:c0:2c:bd:b2:9d:10:bb:f5:ad: 3e:79:c8:93:ea:ad:90:6c:71:98:20:6b:93:24:a5: 8c:28:29:df:b3:d1:cc:ac:35:4b:94:73:46:63:2b: 21:ea:bf:13:79:0f:30:84:a7:f7:59:66:4d:c6:a9: 8a:22:3d:e3:77:b9:0c:8d:d0:5f:05:f9:ee:03:60: c2:01:1a:e8:9d:73:66:ac:c9:b5:2f:50:eb:4b:05: 69:8b:fb:93:eb:38:f7:69:51:05:5d:99:bc:3a:3c: d0:1c:c0:c2:43:d7:3c:b7:38:f7:ac:a6:c4:07:cb: da:34:81:c5:1b:cb:f0:8f:a8:32:09:bd:f2:86:fc: b0:2c:80:c7:e8:d5:8b:a3:2d:b8:ed:01:36:1a:c4: 7a:7e:e6:46:83:12:c0:62:84:c9:8b:db:ac:0b:97: 23:9e:5a:d6:da:1a:dc:ee:e5:da:00:3d:41:44:89: d2:1e:28:1b:5a:1d:eb:a2:4e:90:f0:49:bb:40:8c: 35:99:c7:57:5b:84:95:f3:f8:a7:86:d5:53:48:54: d1:61:a4:45:b1:3a:88:5b:d6:60:a5:e7:30:8b:74: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:19:0F:A5:47:E1:09:9B:80:CE:D4:D2:66:12:27:7A:01:B8:B4 X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:39:b9:6d:c6:95:a7:16:83:32:9c:6f:04:64:36:ef:0f:fa: 4d:65:81:0d:c1:05:6c:b1:8b:52:95:2e:64:51:42:8c:f9:1b: 46:bd:5b:a1:11:11:ac:9e:e3:c4:b7:4c:fd:4b:f4:84:7e:ac: 77:d6:a8:80:d0:d3:eb:a4:20:33:9c:b6:3f:a9:e2:eb:e9:aa: 45:a7:ae:c1:65:10:31:bd:26:86:ae:97:18:9c:bf:59:27:83: c6:20:0f:97:a4:e1:3e:3b:ff:70:32:c8:45:93:95:dd:9c:07: 04:29:45:2e:34:1a:ad:2c:9f:65:7b:df:7b:4e:cc:16:2e:65: 81:f7:98:ca:e2:58:c6:4a:bd:a2:4e:bf:92:8d:aa:28:a3:f1: ce:7a:76:5e:e2:d2:24:b6:34:08:ad:b9:b4:6e:0c:97:fe:b8: cc:8c:9e:10:ba:91:8d:e2:03:17:e3:f2:ac:a6:5c:f1:5f:c6: 5a:e5:ec:99:8d:e0:3e:4e:f5:e6:f2:e2:08:ea:68:12:45:73: 9d:84:62:08:24:cd:ee:83:ca:99:c1:86:22:59:6c:92:53:90: ae:15:55:c8:14:ff:cc:6b:04:e9:05:91:c7:f1:dc:c7:89:c8: f1:96:59:47:eb:b7:83:16:24:bf:8d:f5:61:a6:84:2b:8b:ab: 59:53:89:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjQwNTAzMDA1MDA1WhcNMjQwNTEwMDA1MDA1WjAYMRYwFAYD VQQDEw02NjM0MzRiZS1kODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46QzDFgxBhZSvgobP/UyYrC43ei4Pj2cUmhKUiavoXVcM9rALL2ynRC79a0+ eciT6q2QbHGYIGuTJKWMKCnfs9HMrDVLlHNGYysh6r8TeQ8whKf3WWZNxqmKIj3j d7kMjdBfBfnuA2DCARronXNmrMm1L1DrSwVpi/uT6zj3aVEFXZm8OjzQHMDCQ9c8 tzj3rKbEB8vaNIHFG8vwj6gyCb3yhvywLIDH6NWLoy247QE2GsR6fuZGgxLAYoTJ i9usC5cjnlrW2hrc7uXaAD1BRInSHigbWh3rok6Q8Em7QIw1mcdXW4SV8/inhtVT SFTRYaRFsTqIW9Zgpecwi3Sd/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjSGQ+l R+EJm4DO1NJmEid6Abi0MB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGObltxpWnFoMynG8EZDbvD/pNZYENwQVssYtSlS5kUUKM+RtGvVuh ERGsnuPEt0z9S/SEfqx31qiA0NPrpCAznLY/qeLr6apFp67BZRAxvSaGrpcYnL9Z J4PGIA+XpOE+O/9wMshFk5XdnAcEKUUuNBqtLJ9le997TswWLmWB95jK4ljGSr2i Tr+Sjaooo/HOenZe4tIktjQIrbm0bgyX/rjMjJ4QupGN4gMX4/KsplzxX8Za5eyZ jeA+TvXm8uII6mgSRXOdhGIIJM3ug8qZwYYiWWySU5CuFVXIFP/MawTpBZHH8dzH icjxlllH67eDFiS/jfVhpoQri6tZU4lI -----END CERTIFICATE-----Generated at Fri May 3 03:10:54 2024 by rpki-client on console-ams.rpki-client.org