$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: OvvRmxBlbniVSJjIvfBJU+rsCChh+S8c99PoCF6RpQw= Subject key identifier: 4C:F1:9A:33:95:0E:34:AC:64:63:E6:D7:2B:4A:D8:77:03:80:CF:EB Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 03D6 Signing time: Sat 18 May 2024 16:13:55 +0000 Manifest this update: Sat 18 May 2024 16:13:55 +0000 Manifest next update: Sat 25 May 2024 16:13:55 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: yB5gM5im420nTzng/sXzlCjMjWsxDOHksfVgjHLxYxw=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: rIHf5i83E1p5Ri/ttyh1R45twa+CCKGykvEfpC6f2Dg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: May 18 16:13:55 2024 GMT Not After : May 25 16:13:55 2024 GMT Subject: CN=6648d3c3-5f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:48:aa:69:0d:5b:e1:89:39:23:e6:fc:3e:c8: 56:69:b0:92:d9:70:18:9d:fb:25:5d:1b:76:73:4d: d6:30:16:16:8f:85:22:ee:3c:3b:63:f3:b2:5f:5a: 0e:0d:41:b0:f8:c6:b2:e7:1b:fe:fd:7b:e4:d1:e0: 6e:b4:84:a3:3f:01:46:86:30:18:93:51:6a:b0:fc: d5:4c:2c:80:f5:f1:a6:7a:83:e8:6e:d9:4a:8f:23: 00:43:80:9c:b6:0a:c6:ad:c4:60:6a:85:9b:8e:3c: 99:84:57:74:87:d0:95:a5:23:0a:36:02:44:3f:64: e0:74:10:4c:8b:23:3f:97:ad:5c:e2:4b:17:5b:7a: b2:f9:5e:26:12:11:28:37:7f:27:46:f4:45:6a:03: 69:49:e4:d9:35:af:4a:e5:d3:a7:db:01:00:64:4f: 33:d7:90:a2:1d:55:7a:63:25:d6:2e:88:00:61:dc: 53:45:a2:18:60:18:75:1b:32:ba:fb:c6:5e:1c:55: ff:db:03:d4:ee:88:13:eb:79:cd:63:53:37:62:30: 41:4a:9d:44:08:77:2a:f3:c4:21:83:28:5c:f2:8f: 5b:62:67:bd:89:f4:5b:28:09:34:6a:59:f3:af:6f: ef:d6:86:6e:3c:67:18:b9:3d:45:28:b0:3f:d8:30: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F1:9A:33:95:0E:34:AC:64:63:E6:D7:2B:4A:D8:77:03:80:CF:EB X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6d:72:f0:7c:55:32:64:26:54:0b:0f:a4:01:58:ed:f9:cb: 05:80:cd:76:48:ed:b7:72:e9:cb:31:95:aa:bb:dd:43:32:42: 33:bd:c9:8d:a3:08:4f:88:c3:55:29:30:49:71:2f:76:4d:1e: 69:f0:ca:b4:10:1c:d9:2c:66:c4:89:84:47:d7:90:c8:da:2d: 3d:7f:7e:f1:da:8d:10:23:f7:f0:24:9d:80:05:e8:97:e2:85: 98:0f:38:67:c9:b8:ec:67:9e:9a:9c:6c:05:06:9e:6c:fd:08: bd:6a:d2:ce:41:2e:13:8f:66:9b:d0:36:76:1b:03:6d:09:d2: f6:db:5b:8f:58:cb:5b:4e:fa:f3:ce:46:4e:aa:43:d9:c7:e3: 10:e6:e6:5b:28:93:7b:87:e9:03:2d:b3:dc:52:66:aa:df:b4: 2c:ea:74:c2:cd:2d:70:05:2c:52:81:2a:04:d2:dd:9c:08:51: da:c5:29:d2:71:0f:2c:16:6d:a4:06:31:e8:11:af:80:00:f1: 70:bd:79:29:9e:21:05:cc:a8:3c:5a:6e:a8:da:dc:b1:2d:5d: 9b:2f:bc:d7:58:3e:fc:b9:60:e9:ce:32:c0:b0:20:1c:69:ed: bc:48:af:84:d1:8e:51:dd:21:54:31:33:a2:04:c8:57:8c:60: d2:0f:18:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjQwNTE4MTYxMzU1WhcNMjQwNTI1MTYxMzU1WjAYMRYwFAYD VQQDEw02NjQ4ZDNjMy01ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50iqaQ1b4Yk5I+b8PshWabCS2XAYnfslXRt2c03WMBYWj4Ui7jw7Y/OyX1oO DUGw+May5xv+/Xvk0eButISjPwFGhjAYk1FqsPzVTCyA9fGmeoPobtlKjyMAQ4Cc tgrGrcRgaoWbjjyZhFd0h9CVpSMKNgJEP2TgdBBMiyM/l61c4ksXW3qy+V4mEhEo N38nRvRFagNpSeTZNa9K5dOn2wEAZE8z15CiHVV6YyXWLogAYdxTRaIYYBh1GzK6 +8ZeHFX/2wPU7ogT63nNY1M3YjBBSp1ECHcq88Qhgyhc8o9bYme9ifRbKAk0alnz r2/v1oZuPGcYuT1FKLA/2DCnBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzxmjOV DjSsZGPm1ytK2HcDgM/rMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQbXLwfFUyZCZUCw+kAVjt+csFgM12SO23cunLMZWqu91DMkIzvcmN owhPiMNVKTBJcS92TR5p8Mq0EBzZLGbEiYRH15DI2i09f37x2o0QI/fwJJ2ABeiX 4oWYDzhnybjsZ56anGwFBp5s/Qi9atLOQS4Tj2ab0DZ2GwNtCdL221uPWMtbTvrz zkZOqkPZx+MQ5uZbKJN7h+kDLbPcUmaq37Qs6nTCzS1wBSxSgSoE0t2cCFHaxSnS cQ8sFm2kBjHoEa+AAPFwvXkpniEFzKg8Wm6o2tyxLV2bL7zXWD78uWDpzjLAsCAc ae28SK+E0Y5R3SFUMTOiBMhXjGDSDxie -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org