$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: aWs0MM1SUxZfGL9UNqahHqOu3ddj3V+EwLVAb522Ulg= Subject key identifier: 4D:8F:76:55:BF:EF:0F:8B:CB:A3:0F:89:A7:B9:D2:1B:49:23:2E:D2 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 33DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 33CA Signing time: Sat 04 May 2024 15:33:42 +0000 Manifest this update: Sat 04 May 2024 15:33:42 +0000 Manifest next update: Sat 11 May 2024 15:33:42 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: Sg5lVam+Rkb0ErgqKPeHPmV7qqnrfGDDuFOjAU/NUz4=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: Uiye7cqZlanXJWgI4AXX+yyZ4vhsuuEZPw69WEAiEn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 15:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13277 (0x33dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: May 4 15:33:42 2024 GMT Not After : May 11 15:33:42 2024 GMT Subject: CN=66365556-b016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:c2:ad:33:09:cf:10:3e:b0:69:2a:e2:a0: 81:13:5c:1e:d1:88:06:b7:23:b8:82:c6:c0:ae:84: c2:21:e5:76:55:ee:42:df:89:51:48:95:a5:84:48: e0:68:6d:ba:e4:d5:0f:a2:a8:14:e8:fe:35:73:41: 11:32:90:f3:58:42:6a:93:a2:ef:57:cb:4f:1c:d0: 88:60:55:e4:0e:97:c5:24:0b:eb:e1:78:e0:57:82: 96:ed:05:44:9a:87:e4:b8:b5:dc:1d:da:fa:38:1a: 9d:3e:af:a1:60:b5:31:b8:3e:7d:72:6d:8e:a6:30: 42:11:3d:8d:c6:1b:cc:a0:8d:a7:df:fc:70:09:f6: 78:91:e2:db:ca:fd:95:d4:f3:89:8e:6c:56:b8:10: 9a:5b:b5:50:56:74:ef:08:9f:6e:48:4a:44:fb:7b: fc:15:9e:a6:7e:90:58:63:47:eb:d0:df:8d:1e:10: 0d:11:53:63:07:2e:fd:22:59:5d:c1:91:65:79:1b: 14:b3:9c:79:d3:9a:8c:33:40:46:75:25:0b:13:59: 25:48:06:e2:c9:e4:e4:d3:a2:d4:db:48:17:49:f6: 1f:fe:0b:f1:85:15:b4:27:ba:e0:c7:f9:58:b9:8b: 8a:e8:76:8a:00:69:db:04:37:97:c7:7f:e5:6b:5d: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8F:76:55:BF:EF:0F:8B:CB:A3:0F:89:A7:B9:D2:1B:49:23:2E:D2 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:af:19:01:4b:d5:00:9a:69:32:c2:28:01:1f:a2:b9:72:9f: ef:ea:20:05:40:57:7d:8f:61:79:98:d0:15:e5:8e:92:83:4c: 74:85:55:28:b2:a5:54:f2:e7:75:76:35:64:97:af:eb:8c:67: 15:48:26:14:ab:ff:34:37:fc:4c:d2:95:6f:61:87:e9:29:ac: 1d:9c:93:f4:e1:e0:51:2f:88:5f:21:67:5c:86:32:3a:33:e6: 16:a7:31:06:e5:86:c4:95:39:8c:a7:1c:41:77:63:6c:33:8a: b5:7d:87:a4:d5:d8:7e:6b:d9:88:11:fa:74:03:35:79:f2:3d: 94:2f:2e:e5:61:04:d7:45:9a:28:00:a8:cf:00:0d:da:68:60: 42:aa:fb:75:81:f0:e2:bb:4e:63:24:f6:ed:57:b3:fd:74:81: 59:59:13:0f:93:99:fa:70:70:73:8b:e8:f1:74:a4:8a:52:7a: 95:28:43:de:a9:69:a2:eb:b6:1e:83:29:36:3b:12:ca:c5:ae: 2d:d3:25:00:2c:45:31:13:6e:a4:40:b0:e0:8a:c3:26:f5:da: 31:73:f4:19:16:d9:ea:d7:ca:15:23:20:c4:a5:c7:2e:8a:af: 46:88:1d:26:53:9d:7f:bb:d9:bd:77:da:04:e9:58:89:d9:8d: 72:4b:e6:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjQwNTA0MTUzMzQyWhcNMjQwNTExMTUzMzQyWjAYMRYwFAYD VQQDEw02NjM2NTU1Ni1iMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00nCrTMJzxA+sGkq4qCBE1we0YgGtyO4gsbAroTCIeV2Ve5C34lRSJWlhEjg aG265NUPoqgU6P41c0ERMpDzWEJqk6LvV8tPHNCIYFXkDpfFJAvr4XjgV4KW7QVE mofkuLXcHdr6OBqdPq+hYLUxuD59cm2OpjBCET2NxhvMoI2n3/xwCfZ4keLbyv2V 1POJjmxWuBCaW7VQVnTvCJ9uSEpE+3v8FZ6mfpBYY0fr0N+NHhANEVNjBy79Illd wZFleRsUs5x505qMM0BGdSULE1klSAbiyeTk06LU20gXSfYf/gvxhRW0J7rgx/lY uYuK6HaKAGnbBDeXx3/la11V5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2PdlW/ 7w+Ly6MPiae50htJIy7SMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9rxkBS9UAmmkywigBH6K5cp/v6iAFQFd9j2F5mNAV5Y6Sg0x0hVUo sqVU8ud1djVkl6/rjGcVSCYUq/80N/xM0pVvYYfpKawdnJP04eBRL4hfIWdchjI6 M+YWpzEG5YbElTmMpxxBd2NsM4q1fYek1dh+a9mIEfp0AzV58j2ULy7lYQTXRZoo AKjPAA3aaGBCqvt1gfDiu05jJPbtV7P9dIFZWRMPk5n6cHBzi+jxdKSKUnqVKEPe qWmi67Yegyk2OxLKxa4t0yUALEUxE26kQLDgisMm9doxc/QZFtnq18oVIyDEpccu iq9GiB0mU51/u9m9d9oE6ViJ2Y1yS+ZQ -----END CERTIFICATE-----Generated at Sat May 4 16:49:08 2024 by rpki-client on console-ams.rpki-client.org