$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json) Hash identifier: TR6qDJ8rPJv/QE+S8YCQmoegHRfXdB93yw6CQoKW3RQ= Subject key identifier: CC:25:03:F3:BA:7B:A9:83:E9:36:B3:32:99:88:01:5F:D1:F6:07:1D Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft Manifest number: 060C Signing time: Thu 02 May 2024 23:59:24 +0000 Manifest this update: Thu 02 May 2024 23:59:24 +0000 Manifest next update: Thu 09 May 2024 23:59:24 +0000 Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: RQl19iePdj0gQJW5KRCgShiFpEZOsQbp4uZjKeLip+U=) 2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: 9LWTdT6korXXocO8bu/tRSsNcQ9VUlAkcs47/vDh/E4=) 3: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: 4VDuXUaOtbUXD3VVEY+AukdhbFh0WueivxM0MnxtQzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: May 2 23:59:24 2024 GMT Not After : May 9 23:59:24 2024 GMT Subject: CN=663428dc-293c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:7c:6d:04:c6:b6:39:5a:0c:90:c2:ce:27: 6f:64:97:45:19:95:e6:e0:e8:31:97:0d:d0:dc:2b: 23:2e:04:14:d3:88:b8:40:34:a2:d5:40:10:a0:95: 77:96:aa:b2:c7:8f:11:f9:8d:cf:e1:ec:f9:27:c5: 5c:d7:ee:ad:d8:3c:49:48:36:5d:a6:ee:5d:84:0d: 33:52:ec:ee:aa:0d:e9:6c:69:d2:27:22:a7:84:f8: db:25:75:56:82:0c:35:73:4c:55:f0:bd:0f:3b:e1: d2:c9:32:1a:8f:e6:d6:ee:27:67:40:e8:d5:1a:ad: 19:40:51:aa:a4:6e:cf:fb:43:46:be:62:44:0c:1f: 6c:e9:74:60:e2:ed:06:0b:0a:46:dd:38:5e:bc:d5: 93:1a:6a:8f:28:20:57:af:56:1d:e5:4f:da:1c:c8: 78:9d:5d:8a:28:64:d2:6d:08:34:3c:6c:bb:24:d4: 41:ad:8d:52:61:be:35:20:23:a1:1c:19:a2:95:b1: d5:6f:55:5f:6b:5b:41:07:50:c4:ed:45:9a:da:77: c3:23:c9:47:d9:49:53:be:a5:5f:46:c1:18:fb:5b: b2:a4:7e:ff:8c:5f:79:5e:fe:91:e6:3c:9e:69:12: 81:20:e5:31:51:af:65:39:14:6e:0f:cd:41:28:00: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:25:03:F3:BA:7B:A9:83:E9:36:B3:32:99:88:01:5F:D1:F6:07:1D X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:2a:24:d3:8b:7b:b3:99:d8:b7:01:ce:2d:94:fe:cb:36:d2: 41:d6:ca:01:c0:bc:20:83:63:b8:5c:8f:6a:a0:15:c1:63:53: 16:e2:8a:ec:fe:25:ca:80:88:46:ca:24:d2:92:05:dc:6c:1b: 3d:37:0f:39:af:28:a7:b1:1a:ee:47:70:13:c4:57:d0:92:43: 75:eb:2b:4f:1d:8b:c3:04:8d:db:e1:fc:00:be:9f:2a:6f:90: 00:e7:8a:58:d6:b6:2f:03:69:d8:08:63:20:14:c5:c1:97:13: eb:5c:dd:c1:be:97:da:75:d6:9e:4c:b5:cb:47:5b:13:f0:72: 71:c6:92:05:62:d8:4f:1d:0e:be:22:4e:66:e3:43:0a:59:5c: 07:f4:e9:55:2d:cb:9c:91:38:a6:05:11:b5:9b:e3:ad:96:c2: 2b:94:be:f0:2b:c0:df:01:57:24:7e:fe:e4:cd:5b:fd:9e:4b: d1:a6:19:bb:f0:fa:51:15:67:08:24:0e:4a:26:df:d0:30:e0: 50:38:54:57:11:72:bf:df:0c:6c:73:fd:9a:6c:1e:1b:19:7f: 56:0f:c7:12:b3:b2:93:1a:90:a0:67:0f:7d:13:8e:dc:b5:2e: a2:7f:94:e2:22:42:b9:65:58:f6:e4:ef:79:b2:fe:f7:2e:81: 9a:7f:bc:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjQwNTAyMjM1OTI0WhcNMjQwNTA5MjM1OTI0WjAYMRYwFAYD VQQDEw02NjM0MjhkYy0yOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDt8bQTGtjlaDJDCzidvZJdFGZXm4Ogxlw3Q3CsjLgQU04i4QDSi1UAQoJV3 lqqyx48R+Y3P4ez5J8Vc1+6t2DxJSDZdpu5dhA0zUuzuqg3pbGnSJyKnhPjbJXVW ggw1c0xV8L0PO+HSyTIaj+bW7idnQOjVGq0ZQFGqpG7P+0NGvmJEDB9s6XRg4u0G CwpG3ThevNWTGmqPKCBXr1Yd5U/aHMh4nV2KKGTSbQg0PGy7JNRBrY1SYb41ICOh HBmilbHVb1Vfa1tBB1DE7UWa2nfDI8lH2UlTvqVfRsEY+1uypH7/jF95Xv6R5jye aRKBIOUxUa9lORRuD81BKAApoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwlA/O6 e6mD6TazMpmIAV/R9gcdMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3 SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxKiTTi3uzmdi3Ac4tlP7LNtJB1soBwLwgg2O4XI9qoBXBY1MW4ors /iXKgIhGyiTSkgXcbBs9Nw85ryinsRruR3ATxFfQkkN16ytPHYvDBI3b4fwAvp8q b5AA54pY1rYvA2nYCGMgFMXBlxPrXN3BvpfaddaeTLXLR1sT8HJxxpIFYthPHQ6+ Ik5m40MKWVwH9OlVLcuckTimBRG1m+OtlsIrlL7wK8DfAVckfv7kzVv9nkvRphm7 8PpRFWcIJA5KJt/QMOBQOFRXEXK/3wxsc/2abB4bGX9WD8cSs7KTGpCgZw99E47c tS6if5TiIkK5ZVj25O95sv73LoGaf7w9 -----END CERTIFICATE-----Generated at Fri May 3 00:48:30 2024 by rpki-client on console-ams.rpki-client.org