$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft File: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft (raw, json) Hash identifier: 1D/KwQqMMS0qD3cXC5y6fLXabazWuCnI9oRdLLkl6co= Subject key identifier: 7D:44:B5:3B:94:AF:5D:98:B8:E2:51:77:38:97:A3:34:40:AD:49:38 Authority key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46 Certificate issuer: /CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46 Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft Manifest number: 059C Signing time: Fri 03 May 2024 00:30:26 +0000 Manifest this update: Fri 03 May 2024 00:30:26 +0000 Manifest next update: Fri 10 May 2024 00:30:26 +0000 Files and hashes: 1: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl (hash: IkNdBEvBrJE0SsRv5bB7K3t0fUBaC5rd8121lzeKQJ4=) 2: 98536A8A8D1811EBA3DEC15BC4F9AE02.roa (hash: ZwnpKpWasMMb2j9yXON+fLkGg0bzvmD3Pv0mc8VHV5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46 Validity Not Before: May 3 00:30:26 2024 GMT Not After : May 10 00:30:26 2024 GMT Subject: CN=66343022-495e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:b2:4b:64:07:63:13:ba:79:b2:41:2f:d1: 34:04:7f:e2:4b:71:a1:6b:a8:8e:8f:64:b8:50:44: 98:c2:a7:f1:71:04:1a:2f:44:7f:62:c9:2f:4e:83: 8f:25:52:5d:3f:3b:32:c8:ee:2e:59:3a:b7:8c:e9: d9:a5:37:4f:a1:24:07:c9:f7:f0:a7:7c:32:62:44: a5:8a:80:e2:6a:83:9f:73:04:c9:00:40:3c:08:fe: b2:5f:56:93:bd:0e:e5:e8:a8:bf:24:2d:fe:0a:1d: 0c:aa:48:fa:97:a0:de:22:91:69:61:1e:c4:7d:ac: 44:88:be:6c:8b:33:c9:dd:01:65:7d:4c:98:33:2f: 35:53:17:dc:ef:f1:c8:70:ad:13:f4:c7:e2:5e:af: 57:2b:b8:b5:54:15:44:89:1e:69:d8:fa:8a:09:c7: 59:9c:9e:cd:ae:20:96:ff:53:a4:44:72:47:cc:44: 0b:15:28:ad:2f:b3:2c:cc:e3:6d:59:aa:45:0b:be: 2e:0b:c0:18:0f:84:ef:cd:e7:75:0c:19:88:0c:6a: f3:24:f8:ab:7c:d2:65:04:c7:ac:3f:85:78:a0:93: 7f:98:e5:e4:59:77:83:2c:f5:3a:da:bf:23:00:8c: ce:4d:c3:08:df:53:c7:d5:8b:90:2c:15:4a:12:e4: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:44:B5:3B:94:AF:5D:98:B8:E2:51:77:38:97:A3:34:40:AD:49:38 X509v3 Authority Key Identifier: keyid:EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:43:34:ef:0e:74:a3:a6:60:76:ab:15:20:da:7f:af:f5:b3: e6:a2:56:1e:be:40:0b:48:1e:ad:2f:6f:34:e2:5f:fb:ff:0b: 30:2e:1d:47:c1:30:ac:d5:e6:2c:4b:fe:ab:ff:3f:5d:20:a5: 74:01:08:15:09:49:cb:15:bf:17:ed:12:b8:11:09:da:02:aa: d3:dc:11:ab:70:4f:8f:4e:20:ab:b7:07:4e:1c:03:45:cd:2f: a3:4b:20:e5:e4:5f:db:17:44:8e:cb:cd:a0:dd:f5:2b:80:e2: 87:cd:1c:5f:d0:e0:c5:5b:25:84:fb:7a:2e:42:46:69:68:06: 40:4f:a2:b1:60:00:36:19:07:bc:53:bb:3f:82:57:ef:cd:b9: e8:3a:00:44:06:ee:1d:30:b0:28:0c:25:d6:fa:96:36:fd:84: 5e:09:82:fa:36:9a:e7:c5:c4:16:32:a0:46:b6:96:13:24:01: 28:94:26:de:4f:b1:1f:42:b1:0c:32:ba:8b:a9:41:47:8d:d8: 59:cd:e2:0a:5b:8b:d9:3a:11:b8:1f:a6:35:cb:65:0c:b7:da: bd:78:04:5a:13:3d:fb:5f:07:88:1a:ec:9a:4a:49:4d:e0:ff: 87:dd:a9:0b:b9:a5:cf:59:eb:88:f6:9f:3a:5c:3a:7a:a8:bc: 51:8d:74:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGRjkxMTAvBgNVBAUTKEVFRkQzRTg2QUY3NEY5NDgzNDY0MDE2QjkzNEZDM0VG MTRDODJENDYwHhcNMjQwNTAzMDAzMDI2WhcNMjQwNTEwMDAzMDI2WjAYMRYwFAYD VQQDEw02NjM0MzAyMi00OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrmyS2QHYxO6ebJBL9E0BH/iS3Gha6iOj2S4UESYwqfxcQQaL0R/YskvToOP JVJdPzsyyO4uWTq3jOnZpTdPoSQHyffwp3wyYkSlioDiaoOfcwTJAEA8CP6yX1aT vQ7l6Ki/JC3+Ch0Mqkj6l6DeIpFpYR7EfaxEiL5sizPJ3QFlfUyYMy81Uxfc7/HI cK0T9MfiXq9XK7i1VBVEiR5p2PqKCcdZnJ7NriCW/1OkRHJHzEQLFSitL7MszONt WapFC74uC8AYD4Tvzed1DBmIDGrzJPirfNJlBMesP4V4oJN/mOXkWXeDLPU62r8j AIzOTcMI31PH1YuQLBVKEuRU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1EtTuU r12YuOJRdziXozRArUk4MB8GA1UdIwQYMBaAFO79PoavdPlINGQBa5NPw+8UyC1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZGOS9ERDZBNzY1MDgw Q0UxMUVCOTM1MDE4NjhDNEY5QUUwMi83djAtaHE5MC1VZzBaQUZyazBfRDd4VElM VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2MC1ocTkwLVVnMFpBRnJrMF9EN3hUSUxVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZGOS9ERDZBNzY1MDgwQ0UxMUVCOTM1MDE4NjhDNEY5QUUwMi83djAtaHE5MC1V ZzBaQUZyazBfRDd4VElMVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWQzTvDnSjpmB2qxUg2n+v9bPmolYevkALSB6tL2804l/7/wswLh1H wTCs1eYsS/6r/z9dIKV0AQgVCUnLFb8X7RK4EQnaAqrT3BGrcE+PTiCrtwdOHANF zS+jSyDl5F/bF0SOy82g3fUrgOKHzRxf0ODFWyWE+3ouQkZpaAZAT6KxYAA2GQe8 U7s/glfvzbnoOgBEBu4dMLAoDCXW+pY2/YReCYL6NprnxcQWMqBGtpYTJAEolCbe T7EfQrEMMrqLqUFHjdhZzeIKW4vZOhG4H6Y1y2UMt9q9eARaEz37XweIGuyaSklN 4P+H3akLuaXPWeuI9p86XDp6qLxRjXRn -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org