$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: OS3undMPmyRvFUUD7kdyzkVDeG6sR7SR1h8aZBcNpgQ= Subject key identifier: 51:B3:8C:44:2A:EE:B6:4A:85:DC:C8:28:FA:FA:BE:13:AC:49:3B:69 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: B8 Signing time: Wed 01 May 2024 06:52:42 +0000 Manifest this update: Wed 01 May 2024 06:52:42 +0000 Manifest next update: Wed 08 May 2024 06:52:42 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: 4ICgdd8bqCK4EjVTZuiCMzAunRH8Yc2cbOdsUBZQhMY=) 2: 3474AD64FAD311ED9CEE0E29C4F9AE02.roa (hash: Ij8n0A7jJx7QKOhE7hk56zcntIaXQI6rZH6/sGN7Fvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: May 1 06:52:42 2024 GMT Not After : May 8 06:52:42 2024 GMT Subject: CN=6631e6ba-31e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:3d:aa:59:32:dc:42:85:c0:55:e5:94:95: 76:d0:f3:ba:b4:16:f2:f9:5c:77:78:31:95:24:6b: 4a:82:ff:87:89:47:0d:71:98:d8:fb:03:a9:61:42: 90:c9:32:b5:67:07:e4:c3:e2:b8:01:f5:ee:41:d4: fb:31:c8:b2:41:26:b6:23:40:fb:5a:86:b5:4e:14: d7:a7:56:05:df:c3:14:42:e5:1e:38:c9:8c:a3:4f: b2:80:7f:e2:61:95:64:a7:33:52:29:49:bb:05:23: 86:e7:08:72:6b:d9:7f:e1:e6:b1:94:6e:57:cc:4f: 26:eb:27:92:51:9d:fd:e5:fa:ce:39:da:fc:c9:e4: 62:6c:4a:e1:35:3b:7a:07:b7:b7:58:f6:e4:49:58: 0b:24:b2:b1:ba:a5:6a:55:51:74:51:9b:06:06:34: cc:76:16:8e:ef:a2:74:b5:46:78:5c:f9:13:d7:9c: 64:ce:fa:13:a2:8b:b3:3a:54:cf:2f:40:e4:21:a0: 53:13:ef:7f:6d:8b:43:40:1c:4a:0d:0b:71:22:38: e3:3c:07:bb:c1:92:e7:e7:17:1b:22:2f:8f:5d:c2: d8:5e:88:fe:a1:e3:97:b0:2b:18:97:61:78:ab:44: fb:90:9a:99:5d:20:ba:9a:14:87:6e:09:6a:0b:71: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B3:8C:44:2A:EE:B6:4A:85:DC:C8:28:FA:FA:BE:13:AC:49:3B:69 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:44:bc:dc:4b:b3:f4:7e:92:8f:2c:b0:73:86:b1:03:7e: 5c:88:85:e1:be:6d:1d:d4:c5:76:03:11:2f:1c:13:1d:38:65: e5:40:ea:e2:0e:79:6d:a0:81:02:92:bb:fb:77:32:32:c0:f9: 82:7f:11:bd:51:1a:1b:88:cd:29:75:df:17:a4:c1:92:36:90: 12:03:96:3e:a7:d9:4f:0a:ee:0c:3e:7f:46:dc:5f:1a:0f:ad: ea:f9:33:88:06:5c:d4:10:91:30:49:4e:75:de:32:ca:3b:ee: 54:bc:20:91:c5:8b:39:e8:f9:d1:c4:27:34:19:fd:42:9e:c0: 19:04:7f:cd:99:38:68:eb:e1:66:1e:57:5f:e4:24:49:68:11: 4d:5b:bf:ec:03:55:f0:f6:5c:27:f9:37:d8:8a:25:65:ef:d9: 9d:26:56:17:1b:df:de:f4:9b:9e:b2:4e:44:dd:01:30:29:63: 96:da:2f:d7:b4:9c:a0:ca:31:6e:66:0d:77:a8:01:fe:0b:62: e2:0d:98:05:c6:db:39:be:ea:9d:a8:0a:4f:9c:73:59:42:d1: 20:7b:29:c2:e0:9c:f4:a5:f7:23:9f:d9:44:72:9f:5b:f6:08: 66:a4:24:23:49:5d:05:2d:c7:09:30:cc:a3:42:11:f9:f2:b8: f1:0f:55:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjQwNTAxMDY1MjQyWhcNMjQwNTA4MDY1MjQyWjAYMRYwFAYD VQQDEw02NjMxZTZiYS0zMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt09qlky3EKFwFXllJV20PO6tBby+Vx3eDGVJGtKgv+HiUcNcZjY+wOpYUKQ yTK1Zwfkw+K4AfXuQdT7MciyQSa2I0D7Woa1ThTXp1YF38MUQuUeOMmMo0+ygH/i YZVkpzNSKUm7BSOG5whya9l/4eaxlG5XzE8m6yeSUZ395frOOdr8yeRibErhNTt6 B7e3WPbkSVgLJLKxuqVqVVF0UZsGBjTMdhaO76J0tUZ4XPkT15xkzvoToouzOlTP L0DkIaBTE+9/bYtDQBxKDQtxIjjjPAe7wZLn5xcbIi+PXcLYXoj+oeOXsCsYl2F4 q0T7kJqZXSC6mhSHbglqC3E+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGzjEQq 7rZKhdzIKPr6vhOsSTtpMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxdkS83Euz9H6Sjyywc4axA35ciIXhvm0d1MV2AxEvHBMdOGXlQOri DnltoIECkrv7dzIywPmCfxG9URobiM0pdd8XpMGSNpASA5Y+p9lPCu4MPn9G3F8a D63q+TOIBlzUEJEwSU513jLKO+5UvCCRxYs56PnRxCc0Gf1CnsAZBH/NmTho6+Fm Hldf5CRJaBFNW7/sA1Xw9lwn+TfYiiVl79mdJlYXG9/e9Juesk5E3QEwKWOW2i/X tJygyjFuZg13qAH+C2LiDZgFxts5vuqdqApPnHNZQtEgeynC4Jz0pfcjn9lEcp9b 9ghmpCQjSV0FLccJMMyjQhH58rjxD1Xc -----END CERTIFICATE-----Generated at Wed May 1 07:23:56 2024 by rpki-client on console-ams.rpki-client.org