$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: wR4wQNL/mup5hIGg91uz8rKvwyO0ahZKavLNc+Rj1UU= Subject key identifier: 0A:17:1D:BE:C2:BD:0E:59:B2:25:30:84:81:FA:C6:39:5D:FE:ED:2C Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 0392 Signing time: Wed 01 May 2024 02:55:56 +0000 Manifest this update: Wed 01 May 2024 02:55:56 +0000 Manifest next update: Wed 08 May 2024 02:55:56 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: 2Au8vo0eDdwbTNfcYJR9yKLItWOUHbg8RPgHKcwhg48=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: 1XjeHDQ66gK9l4CFDY2wsyvhO3mqIEjFkltw+gwNQXM=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: dSUbP0To+9LJFWpBicB2PCzASwn6qpJhInRJqpT56ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: May 1 02:55:56 2024 GMT Not After : May 8 02:55:56 2024 GMT Subject: CN=6631af3c-4ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:3b:1e:e4:b8:6c:7d:b7:b2:74:e7:6d:37: 57:15:32:54:76:e8:c5:7f:77:0c:fa:10:58:b6:ac: b0:28:0a:33:1f:1b:ca:9d:b7:f5:51:cf:62:86:54: 78:26:08:23:74:26:1a:03:5f:51:0f:b4:9a:29:38: 3b:4d:c4:75:63:1c:30:90:e0:b6:22:81:75:5c:5a: eb:d2:77:40:9e:58:85:dd:f6:bc:b9:48:3b:ea:1f: 76:c1:49:cf:44:e6:52:b2:57:e2:76:f4:72:96:31: ab:87:e3:54:08:51:37:29:b4:0d:81:93:c3:4d:b5: e7:b6:09:9f:06:3d:bb:13:34:65:71:27:cc:cd:d6: 81:9f:e7:56:11:f5:25:36:7b:c2:bd:d6:ae:fc:c8: 9b:54:50:3a:ad:c1:87:26:b9:34:48:46:18:96:a6: 97:69:5a:9f:ca:8b:1b:3d:74:76:70:07:d7:4a:d2: 20:aa:d2:a0:46:f6:c5:24:a9:2c:e3:79:56:a0:f2: 25:9c:04:9c:7a:c2:72:8e:19:0e:4e:ae:dc:61:6a: 4b:81:e6:be:37:3a:1c:29:e4:c3:f2:07:c2:c8:c4: 1b:35:da:bc:9d:c2:0d:d5:14:71:8b:0f:8c:c9:4a: b1:3d:46:35:c8:96:04:a8:cb:9d:9b:7a:ec:ba:00: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:1D:BE:C2:BD:0E:59:B2:25:30:84:81:FA:C6:39:5D:FE:ED:2C X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d5:43:dc:2f:3b:a1:64:3e:6e:01:2d:3d:65:05:2f:fd:4c: 45:c6:fa:f2:ca:17:9c:5f:8e:1d:5d:14:e1:0b:5e:a0:d0:06: 19:6e:ff:7b:be:9e:7f:71:a7:bf:fc:05:fa:3c:95:b1:3d:57: c2:2b:42:8d:0d:c3:ce:7c:88:dd:91:7c:e9:da:8e:69:bb:2f: 98:9d:8e:48:ae:c6:20:8d:12:22:bf:00:8a:ac:cf:48:6b:6f: 94:44:dd:cb:77:30:34:4a:b3:54:64:7b:79:b5:cc:55:04:ae: a2:68:87:ec:85:07:b9:7e:9d:8e:4a:a4:25:5c:07:98:a4:c5: 2b:20:43:a9:be:3d:1b:c1:7c:b9:91:a5:9f:b4:91:c4:56:57: d8:02:a8:3c:93:4a:22:0f:38:65:ae:48:a8:41:50:4b:0f:5a: 80:50:5d:db:45:58:ea:bf:55:c6:0f:0b:ea:69:90:86:3d:57: 8b:d4:32:39:9e:04:4c:6a:d9:ed:45:fe:9e:dc:19:8c:ba:c1: 3b:02:ac:07:dd:6c:07:44:42:3b:67:4c:36:73:a5:7c:89:24: 15:d3:37:e8:20:e8:69:88:e3:ce:6c:b5:d5:40:96:b7:6c:f8: f1:3a:1c:54:f8:cc:89:35:77:f3:41:00:8c:01:42:aa:2e:30: 33:8d:fa:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjQwNTAxMDI1NTU2WhcNMjQwNTA4MDI1NTU2WjAYMRYwFAYD VQQDEw02NjMxYWYzYy00ZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFg7HuS4bH23snTnbTdXFTJUdujFf3cM+hBYtqywKAozHxvKnbf1Uc9ihlR4 JggjdCYaA19RD7SaKTg7TcR1YxwwkOC2IoF1XFrr0ndAnliF3fa8uUg76h92wUnP ROZSslfidvRyljGrh+NUCFE3KbQNgZPDTbXntgmfBj27EzRlcSfMzdaBn+dWEfUl NnvCvdau/MibVFA6rcGHJrk0SEYYlqaXaVqfyosbPXR2cAfXStIgqtKgRvbFJKks 43lWoPIlnAScesJyjhkOTq7cYWpLgea+NzocKeTD8gfCyMQbNdq8ncIN1RRxiw+M yUqxPUY1yJYEqMudm3rsugCKNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoXHb7C vQ5ZsiUwhIH6xjld/u0sMB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA81UPcLzuhZD5uAS09ZQUv/UxFxvryyhecX44dXRThC16g0AYZbv97 vp5/cae//AX6PJWxPVfCK0KNDcPOfIjdkXzp2o5puy+YnY5IrsYgjRIivwCKrM9I a2+URN3LdzA0SrNUZHt5tcxVBK6iaIfshQe5fp2OSqQlXAeYpMUrIEOpvj0bwXy5 kaWftJHEVlfYAqg8k0oiDzhlrkioQVBLD1qAUF3bRVjqv1XGDwvqaZCGPVeL1DI5 ngRMatntRf6e3BmMusE7AqwH3WwHREI7Z0w2c6V8iSQV0zfoIOhpiOPObLXVQJa3 bPjxOhxU+MyJNXfzQQCMAUKqLjAzjfpl -----END CERTIFICATE-----Generated at Wed May 1 04:49:27 2024 by rpki-client on console-ams.rpki-client.org