$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: pBMJqKVEWZh/BWi8ZgRs6Cx8IQXRs+tLHvMTcgw1fvQ= Subject key identifier: A1:45:DC:91:51:8B:4C:ED:54:D8:AF:14:0E:E2:6F:43:8A:9A:F2:6A Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: DC Signing time: Fri 03 May 2024 06:05:07 +0000 Manifest this update: Fri 03 May 2024 06:05:07 +0000 Manifest next update: Fri 10 May 2024 06:05:07 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: 9lcLeo58NjqBVl/x1DY2Z+fl2jKMBz38/fAqfaGffoY=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: rIojZvN+6LuwrQImXREvas11U+DY0c75UvVMYniRtPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: May 3 06:05:07 2024 GMT Not After : May 10 06:05:07 2024 GMT Subject: CN=66347e93-97e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:86:95:b4:81:d2:f3:9e:c0:3f:79:92:4c: e8:91:7a:f6:50:59:b7:dd:b4:f6:2a:9a:60:05:f6: 0b:af:92:75:dc:1f:56:9a:3f:a0:2d:3d:82:bf:66: 8d:df:f8:bb:53:49:5e:de:4a:ef:35:06:fe:a3:2a: f5:60:f6:96:8b:d2:cf:e0:3b:ab:5e:98:aa:93:d0: 9e:8e:be:4b:a1:bf:72:df:cb:e4:ed:ba:be:68:b5: 44:dc:90:f5:0f:d0:36:3c:96:8f:b6:12:f0:1d:13: 2d:29:11:3c:e6:5e:ab:23:62:58:73:a7:00:c2:b8: 1a:06:b1:44:19:2f:fc:e8:96:11:2d:77:6a:20:0f: d4:03:80:f1:3d:14:88:33:62:0c:80:1e:32:1e:58: 4b:0c:3d:27:36:50:70:29:74:55:ac:1c:19:e7:f0: d1:15:cd:81:35:65:28:3d:ae:14:bf:d5:85:4d:fd: 73:99:ef:08:1e:6c:42:ae:30:03:29:d4:21:b4:1c: 3e:34:85:27:df:fb:71:0e:16:5e:51:89:63:65:f8: ff:9f:09:63:25:1c:3e:6d:b6:96:24:0f:55:f9:87: 3e:9e:ea:9f:ab:40:9c:68:60:ec:4c:dc:61:27:f2: 9b:89:af:88:0b:47:78:41:f5:55:6a:a8:c7:37:0e: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:45:DC:91:51:8B:4C:ED:54:D8:AF:14:0E:E2:6F:43:8A:9A:F2:6A X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:27:e5:62:a5:7b:8d:39:f9:d7:2e:46:05:fc:55:22:12: 2e:81:f8:6c:0c:57:69:9c:68:76:3c:03:d5:05:9b:be:b1:97: 11:3d:97:39:b1:4f:44:57:e0:a3:23:85:b6:0e:41:32:2b:56: 51:11:af:79:7f:ff:66:f7:ce:9b:64:a0:3e:17:c3:68:64:03: 09:6d:78:03:f5:60:0a:37:f1:df:9e:27:37:fd:b4:57:c5:25: 70:93:ae:df:ef:83:75:bd:2b:00:e4:ca:1b:f1:0d:f9:98:85: ae:0c:6b:21:bd:4d:2d:06:c7:12:8f:69:aa:04:71:2e:c2:e5: b9:9b:eb:10:78:01:50:59:fa:38:31:81:f6:a0:48:bb:81:ea: 87:08:b7:a0:f8:5d:4d:c9:32:f3:22:f6:89:c9:53:33:33:bf: 71:39:7e:f2:0a:13:db:99:9d:71:6f:a4:61:87:45:87:0a:4b: 32:0e:4d:37:d1:f5:c4:1f:e4:8b:14:5f:70:78:c9:87:e2:56: 95:41:a2:51:94:93:7d:c1:1c:85:8e:a1:40:41:4e:ea:0c:ec: c1:61:a9:47:59:61:7f:8b:6a:d7:41:cd:a4:f9:ab:95:2d:fc: 93:e7:80:f4:f5:94:6e:78:e5:95:94:06:af:ae:47:db:21:2d: 56:a5:86:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjQwNTAzMDYwNTA3WhcNMjQwNTEwMDYwNTA3WjAYMRYwFAYD VQQDEw02NjM0N2U5My05N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOKGlbSB0vOewD95kkzokXr2UFm33bT2KppgBfYLr5J13B9Wmj+gLT2Cv2aN 3/i7U0le3krvNQb+oyr1YPaWi9LP4DurXpiqk9Cejr5Lob9y38vk7bq+aLVE3JD1 D9A2PJaPthLwHRMtKRE85l6rI2JYc6cAwrgaBrFEGS/86JYRLXdqIA/UA4DxPRSI M2IMgB4yHlhLDD0nNlBwKXRVrBwZ5/DRFc2BNWUoPa4Uv9WFTf1zme8IHmxCrjAD KdQhtBw+NIUn3/txDhZeUYljZfj/nwljJRw+bbaWJA9V+Yc+nuqfq0CcaGDsTNxh J/Kbia+IC0d4QfVVaqjHNw5OhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFF3JFR i0ztVNivFA7ib0OKmvJqMB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3JiflYqV7jTn51y5GBfxVIhIugfhsDFdpnGh2PAPVBZu+sZcRPZc5 sU9EV+CjI4W2DkEyK1ZREa95f/9m986bZKA+F8NoZAMJbXgD9WAKN/Hfnic3/bRX xSVwk67f74N1vSsA5Mob8Q35mIWuDGshvU0tBscSj2mqBHEuwuW5m+sQeAFQWfo4 MYH2oEi7geqHCLeg+F1NyTLzIvaJyVMzM79xOX7yChPbmZ1xb6Rhh0WHCksyDk03 0fXEH+SLFF9weMmH4laVQaJRlJN9wRyFjqFAQU7qDOzBYalHWWF/i2rXQc2k+auV LfyT54D09ZRueOWVlAavrkfbIS1WpYbH -----END CERTIFICATE-----Generated at Fri May 3 08:21:38 2024 by rpki-client on console-ams.rpki-client.org