$ rpki-client -vvf rpki.apnic.net/member_repository/A91B795B/124A539A01C511ED9E2C1055C4F9AE02/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.mft File: m7aVjPAGHU7w_YuYR9ntJ_yiHiE.mft (raw, json) Hash identifier: NQGZK+iNxr6pv1a6EwpFRm98djQjU/L+Y5iPcZyFTmU= Subject key identifier: 6A:E3:C7:C9:7C:62:8B:7F:A2:0C:64:6C:61:05:A5:2C:26:23:E9:19 Authority key identifier: 9B:B6:95:8C:F0:06:1D:4E:F0:FD:8B:98:47:D9:ED:27:FC:A2:1E:21 Certificate issuer: /CN=A91B795B/serialNumber=9BB6958CF0061D4EF0FD8B9847D9ED27FCA21E21 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B795B/124A539A01C511ED9E2C1055C4F9AE02/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.mft Manifest number: 01CF Signing time: Sun 05 May 2024 04:28:08 +0000 Manifest this update: Sun 05 May 2024 04:28:08 +0000 Manifest next update: Sun 12 May 2024 04:28:08 +0000 Files and hashes: 1: m7aVjPAGHU7w_YuYR9ntJ_yiHiE.crl (hash: cP/HTqgrr+QCPf/MLMj+lnh626N0lMiK+Rf8yN639/Y=) 2: 898B947001C811EDAE70396DC4F9AE02.roa (hash: g2YKPFntVFXFEQZhDDwvooZpDQzbLt7HcaBMli3wxJk=) 3: 8876968E01C811EDAE70396DC4F9AE02.roa (hash: ljAMEz2pXnAVbzRXsAzBdU+YjTvBW0A2MI2taDkC/uU=) 4: 890319F601C811EDAE70396DC4F9AE02.roa (hash: M+/gDcNMaK/lfKtt54mGDv/4IrId0AG/eZWAhERblaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B795B/124A539A01C511ED9E2C1055C4F9AE02/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.crl rsync://rpki.apnic.net/member_repository/A91B795B/124A539A01C511ED9E2C1055C4F9AE02/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B795B/serialNumber=9BB6958CF0061D4EF0FD8B9847D9ED27FCA21E21 Validity Not Before: May 5 04:28:08 2024 GMT Not After : May 12 04:28:08 2024 GMT Subject: CN=66370ad8-dfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:f9:73:aa:e8:3d:bd:a2:04:63:fb:b5:ea: 0b:35:87:27:c0:8a:cd:61:e9:5d:16:aa:79:62:8d: 09:29:18:31:bb:08:81:2c:3e:ed:91:fa:0c:cd:67: 6b:db:7b:6d:08:ea:64:0b:4d:c4:1d:0f:94:43:72: 24:c6:03:25:71:86:32:0e:22:7a:1e:20:8d:e7:45: 3d:93:82:4e:af:0f:21:ba:fc:bc:6d:48:d6:90:61: f4:5d:9f:5e:b5:fd:54:81:ef:5d:bb:aa:ac:16:c1: f0:7e:b6:86:92:a9:31:60:de:7e:d5:e3:af:54:c0: b6:4b:72:c1:1f:ce:2f:ae:95:ab:31:8c:f9:4e:45: a5:65:50:14:7e:34:ed:32:57:9b:99:d2:cc:42:58: 55:62:2f:e4:5c:08:7b:f6:90:8a:94:b8:e6:f9:e2: b7:ac:e2:bb:a5:36:b7:ba:77:b9:39:e0:e4:34:d4: 1e:21:64:e4:57:bc:3b:ea:ec:cc:30:b4:24:92:78: c7:38:04:a4:10:49:6e:eb:d7:02:42:a4:46:39:f8: f2:51:ae:6b:56:0c:3a:9c:35:15:a2:1f:68:11:75: d3:9b:3c:cb:9b:22:1b:53:47:b1:06:79:48:6f:b1: d3:a6:f8:8f:07:4b:e4:42:fe:f3:65:3e:28:79:d3: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E3:C7:C9:7C:62:8B:7F:A2:0C:64:6C:61:05:A5:2C:26:23:E9:19 X509v3 Authority Key Identifier: keyid:9B:B6:95:8C:F0:06:1D:4E:F0:FD:8B:98:47:D9:ED:27:FC:A2:1E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B795B/124A539A01C511ED9E2C1055C4F9AE02/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B795B/124A539A01C511ED9E2C1055C4F9AE02/m7aVjPAGHU7w_YuYR9ntJ_yiHiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:0f:3c:86:e9:3d:b0:53:0c:f2:8d:90:1f:aa:a7:45:1b: 36:0e:e2:9e:93:fb:48:23:5b:32:4f:26:64:df:cf:ef:26:31: 4e:3f:d2:36:50:01:d1:6e:25:da:3d:99:a6:28:35:2a:87:d2: e2:87:50:2c:27:3d:84:f4:14:d9:11:c4:66:84:40:d2:0c:05: 3e:97:2a:8b:5c:6a:ff:41:67:6c:50:83:18:3f:09:38:9a:8a: c9:6f:bb:81:a7:69:71:e6:72:6c:68:6e:ce:2d:5b:e0:06:e1: a8:37:51:06:61:1f:c3:75:94:28:14:26:cd:cb:58:37:4e:a5: 00:51:71:7a:10:1f:89:d9:08:c1:47:a0:ea:8f:38:2b:a9:b5: 78:1e:55:4e:d0:71:0b:a5:e0:8f:d6:dd:c6:25:45:7d:92:f0: 56:40:0f:41:7f:96:63:7e:6b:ba:73:07:a8:d1:24:57:ad:83: a7:48:7d:4a:28:5a:39:71:b3:17:9f:1b:3e:1e:6f:e6:22:15: 43:0b:ef:b5:c7:64:62:e1:fa:15:9b:bf:32:8f:dc:2f:ee:69: b7:59:a0:c7:d2:bf:92:35:90:9b:70:5a:f4:bd:b5:09:3a:25: 26:be:6c:c3:40:db:66:a9:4b:d6:04:48:84:15:b1:02:97:b5: 54:bd:ab:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NUIxMTAvBgNVBAUTKDlCQjY5NThDRjAwNjFENEVGMEZEOEI5ODQ3RDlFRDI3 RkNBMjFFMjEwHhcNMjQwNTA1MDQyODA4WhcNMjQwNTEyMDQyODA4WjAYMRYwFAYD VQQDEw02NjM3MGFkOC1kZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZT5c6roPb2iBGP7teoLNYcnwIrNYeldFqp5Yo0JKRgxuwiBLD7tkfoMzWdr 23ttCOpkC03EHQ+UQ3IkxgMlcYYyDiJ6HiCN50U9k4JOrw8huvy8bUjWkGH0XZ9e tf1Uge9du6qsFsHwfraGkqkxYN5+1eOvVMC2S3LBH84vrpWrMYz5TkWlZVAUfjTt MlebmdLMQlhVYi/kXAh79pCKlLjm+eK3rOK7pTa3une5OeDkNNQeIWTkV7w76uzM MLQkknjHOASkEElu69cCQqRGOfjyUa5rVgw6nDUVoh9oEXXTmzzLmyIbU0exBnlI b7HTpviPB0vkQv7zZT4oedNhVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrjx8l8 Yot/ogxkbGEFpSwmI+kZMB8GA1UdIwQYMBaAFJu2lYzwBh1O8P2LmEfZ7Sf8oh4h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk1Qi8xMjRBNTM5QTAx QzUxMUVEOUUyQzEwNTVDNEY5QUUwMi9tN2FWalBBR0hVN3dfWXVZUjludEpfeWlI aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203YVZqUEFHSFU3d19ZdVlSOW50Sl95aUhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk1Qi8xMjRBNTM5QTAxQzUxMUVEOUUyQzEwNTVDNEY5QUUwMi9tN2FWalBBR0hV N3dfWXVZUjludEpfeWlIaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQqQ88huk9sFMM8o2QH6qnRRs2DuKek/tII1syTyZk38/vJjFOP9I2 UAHRbiXaPZmmKDUqh9Lih1AsJz2E9BTZEcRmhEDSDAU+lyqLXGr/QWdsUIMYPwk4 morJb7uBp2lx5nJsaG7OLVvgBuGoN1EGYR/DdZQoFCbNy1g3TqUAUXF6EB+J2QjB R6DqjzgrqbV4HlVO0HELpeCP1t3GJUV9kvBWQA9Bf5Zjfmu6cweo0SRXrYOnSH1K KFo5cbMXnxs+Hm/mIhVDC++1x2Ri4foVm78yj9wv7mm3WaDH0r+SNZCbcFr0vbUJ OiUmvmzDQNtmqUvWBEiEFbECl7VUvasH -----END CERTIFICATE-----Generated at Sun May 5 05:21:59 2024 by rpki-client on console-fra.rpki-client.org