$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: ZgTYrUVXoTYEY+ldJt00gEE1hfQKXLn7F/qfoNDxcwU= Subject key identifier: FD:D6:C3:13:FB:B2:5E:76:21:35:B4:C6:E5:F1:70:0B:66:BB:BC:CA Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0A76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0A6E Signing time: Sat 18 May 2024 20:17:46 +0000 Manifest this update: Sat 18 May 2024 20:17:45 +0000 Manifest next update: Sat 25 May 2024 20:17:45 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: FHBNJRbcpIHKg0aQuXNMN2KP8N+j3nJC5Em9CYTf2I0=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: TwxJnemh0iNdVKVtR3GahtsGerzIj0R9I0LA0/p1nqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2678 (0xa76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: May 18 20:17:45 2024 GMT Not After : May 25 20:17:45 2024 GMT Subject: CN=66490ce9-c440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:ed:a6:e5:f5:57:f6:68:c1:cb:3a:40:e5: 6e:28:eb:a9:54:c4:58:0c:6f:81:f3:d6:06:a0:20: f4:98:64:5d:c4:9e:06:fe:97:f1:64:f8:71:c3:48: 85:42:cf:f1:86:9d:b5:21:47:78:c6:43:13:ef:6b: 0b:54:88:a7:e3:05:c3:eb:ef:3a:f1:b8:7a:c6:ec: b6:fb:79:06:9b:35:c9:ba:d9:eb:3a:ae:54:5e:ae: 4a:b2:12:ab:6c:04:59:54:f2:99:4a:93:74:0e:86: d9:98:2a:e6:a0:72:d9:d2:00:af:78:b2:fd:a1:f0: a0:56:41:0a:c2:48:f5:08:a0:34:1c:64:85:df:e4: a3:74:39:53:d5:6d:24:47:b6:da:ec:2b:6b:ef:94: 09:65:d1:65:43:24:7e:84:88:8e:b1:b3:96:34:5e: aa:d3:d1:14:20:6a:80:a4:6b:66:cf:d5:67:44:4c: 5a:c5:72:21:15:f6:ec:74:98:e3:22:70:24:33:c0: 1c:f3:81:c4:f7:b5:07:07:0a:3e:1d:5b:6e:87:f6: ec:e8:d7:1f:cc:88:0b:3a:67:16:42:2f:59:e0:99: 93:75:d9:f9:a5:7d:ae:ac:5f:42:6b:c8:85:fa:37: 52:33:19:32:43:f0:f6:bf:63:84:f7:b8:68:32:7f: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D6:C3:13:FB:B2:5E:76:21:35:B4:C6:E5:F1:70:0B:66:BB:BC:CA X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:71:cc:09:2f:fc:81:22:14:40:2c:1b:e4:41:21:e4:16:d2: 26:da:08:ab:a3:ae:f1:20:f0:5d:42:1e:f9:5a:a6:b4:87:47: 29:b8:7a:f9:2b:fe:42:d4:7b:5c:7b:5d:f6:57:ea:96:5e:d7: fa:55:64:d5:0a:42:a1:c0:ea:b8:2f:c3:0a:d8:2f:a8:3b:75: 40:94:d6:4a:bd:ec:c0:0a:76:75:cc:43:ae:ee:51:f7:80:ce: 82:91:07:19:64:ed:e8:83:1e:73:b7:d0:c1:a0:ca:aa:6a:2e: aa:74:6b:f3:88:5b:dd:a6:13:1a:03:8a:69:76:2b:3a:57:c1: 7f:32:2e:75:ee:b1:7e:f0:c0:c9:97:80:d0:30:b8:5a:d7:39: 60:51:7d:a6:c7:5e:07:2d:50:d1:c0:b7:92:f9:7b:92:90:eb: 6b:13:22:87:31:16:17:8f:66:8f:35:93:f2:c0:84:32:6a:08: fa:ca:aa:c2:1f:18:dd:70:f9:77:58:76:81:3f:d5:d3:bd:61: 5e:70:ac:26:6b:84:bd:a4:60:e3:5a:2b:b8:c1:53:3a:b3:03: 43:51:22:ed:7f:5c:3d:ea:76:64:11:90:75:3a:d1:0a:1d:7c: 07:72:23:e6:d4:78:b0:3e:ee:cd:06:99:5b:01:84:a9:63:6f: ba:fc:54:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjQwNTE4MjAxNzQ1WhcNMjQwNTI1MjAxNzQ1WjAYMRYwFAYD VQQDEw02NjQ5MGNlOS1jNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKbtpuX1V/Zowcs6QOVuKOupVMRYDG+B89YGoCD0mGRdxJ4G/pfxZPhxw0iF Qs/xhp21IUd4xkMT72sLVIin4wXD6+868bh6xuy2+3kGmzXJutnrOq5UXq5KshKr bARZVPKZSpN0DobZmCrmoHLZ0gCveLL9ofCgVkEKwkj1CKA0HGSF3+SjdDlT1W0k R7ba7Ctr75QJZdFlQyR+hIiOsbOWNF6q09EUIGqApGtmz9VnRExaxXIhFfbsdJjj InAkM8Ac84HE97UHBwo+HVtuh/bs6NcfzIgLOmcWQi9Z4JmTddn5pX2urF9Ca8iF +jdSMxkyQ/D2v2OE97hoMn8zKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3WwxP7 sl52ITW0xuXxcAtmu7zKMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRccwJL/yBIhRALBvkQSHkFtIm2giro67xIPBdQh75Wqa0h0cpuHr5 K/5C1Htce132V+qWXtf6VWTVCkKhwOq4L8MK2C+oO3VAlNZKvezACnZ1zEOu7lH3 gM6CkQcZZO3ogx5zt9DBoMqqai6qdGvziFvdphMaA4ppdis6V8F/Mi517rF+8MDJ l4DQMLha1zlgUX2mx14HLVDRwLeS+XuSkOtrEyKHMRYXj2aPNZPywIQyagj6yqrC HxjdcPl3WHaBP9XTvWFecKwma4S9pGDjWiu4wVM6swNDUSLtf1w96nZkEZB1OtEK HXwHciPm1HiwPu7NBplbAYSpY2+6/FTN -----END CERTIFICATE-----Generated at Sat May 18 21:31:31 2024 by rpki-client on console-ams.rpki-client.org