$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: bsZhBcCQ3vfarhFNWMeuRlkilvcQfQzvZlYYXw67hL8= Subject key identifier: D3:B7:7F:D8:2F:3E:BC:F7:95:6F:4B:C8:19:0B:E1:38:1C:A7:74:45 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 010A Signing time: Fri 03 May 2024 05:34:07 +0000 Manifest this update: Fri 03 May 2024 05:34:06 +0000 Manifest next update: Fri 10 May 2024 05:34:06 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: jlPgN5tVs9NFzEvublmk8K151vVjKbLZ1pNhcO4Xb38=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: PRlgeU9l97eXnXg8cbyi2HDfwXPS3np14g8ZcLj+7FY=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: G06FvFoAJ5h41BcLQmGwH2tbR32/ZGzMoGbsCmnNNC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: May 3 05:34:06 2024 GMT Not After : May 10 05:34:06 2024 GMT Subject: CN=6634774f-286f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:76:94:74:3d:e2:4a:56:36:bc:ec:86:e1: 87:f9:0b:b4:cb:10:81:ba:2e:d1:67:f3:56:8d:13: 49:42:13:89:e2:c9:6a:44:1c:bc:c9:32:79:36:ff: 5c:2c:ac:57:03:58:7b:6c:05:57:a3:09:6b:0b:6e: 7d:0e:35:a8:12:a9:ab:d0:57:03:e0:65:e1:2b:78: 13:0d:3a:ed:8c:59:2b:fe:01:85:a4:28:73:60:d9: 6c:6b:0f:78:ff:f0:ad:df:c4:cd:77:b5:91:f8:fb: 82:15:77:c4:2a:b0:e4:76:a8:40:16:88:a6:8d:73: 8b:b3:3c:65:bd:25:50:07:0a:cd:fd:ca:87:ee:61: 22:65:66:be:fd:da:c4:1c:fa:c5:b8:b4:34:87:92: 76:87:09:e1:a4:7b:11:a7:dd:53:e0:65:09:0a:d1: 65:73:db:34:9a:77:6d:ab:e9:3f:2e:28:e3:51:c4: 21:24:c2:b9:f5:f9:66:8d:ac:09:c3:e1:20:d6:35: 8c:37:27:bb:7a:89:2a:7a:55:05:43:76:a9:b6:c8: 24:72:26:c3:4e:bc:e7:b1:04:f6:d8:9c:ab:51:f5: 6b:ac:b0:4b:de:b9:f0:8d:77:63:77:7b:da:fd:d2: 73:d4:71:f4:cb:2b:1c:d5:94:f0:5c:7e:93:0a:34: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:7F:D8:2F:3E:BC:F7:95:6F:4B:C8:19:0B:E1:38:1C:A7:74:45 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:3a:df:3b:e1:09:43:51:d3:56:04:c6:ec:d1:6f:08:7c:6a: ad:48:2c:b5:5b:b0:6b:24:76:58:18:d0:cc:c0:af:bd:8f:6d: df:d1:bf:dc:79:98:b5:e9:94:e8:37:d1:1c:3d:35:a6:73:d5: cf:2e:7a:11:a3:e2:49:b3:60:38:52:30:b7:01:da:59:16:35: b9:a4:69:3f:fb:ec:b2:7e:ff:38:28:6c:ec:eb:6a:d2:57:02: cc:5a:27:66:67:04:c3:f4:14:07:93:58:0c:0e:30:bc:a8:6b: ca:97:23:8c:33:f9:2e:c5:f2:b4:be:38:86:c3:fa:c2:ea:ba: db:0a:71:e2:52:76:12:18:14:70:98:6e:33:b1:b2:24:9f:26: 13:de:7b:8f:35:43:cb:80:ef:65:9a:d6:6a:10:67:bb:1d:8e: 5b:fa:26:9c:93:99:67:7b:1b:f7:6b:88:4e:40:0d:26:83:c5: 49:a6:50:69:08:c2:8d:0f:15:89:28:59:c2:10:c9:a3:ca:63: 6a:d9:6f:a0:55:2e:25:b1:2d:1a:7d:e2:7a:d7:ab:f3:e3:0d: d8:c4:40:06:90:2f:44:6c:d0:53:26:7a:4d:ec:46:ff:a2:96: 71:6f:4d:fe:79:6d:93:d2:e5:6b:3e:48:21:8e:45:5b:da:71: a3:61:a5:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjQwNTAzMDUzNDA2WhcNMjQwNTEwMDUzNDA2WjAYMRYwFAYD VQQDEw02NjM0Nzc0Zi0yODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmb52lHQ94kpWNrzshuGH+Qu0yxCBui7RZ/NWjRNJQhOJ4slqRBy8yTJ5Nv9c LKxXA1h7bAVXowlrC259DjWoEqmr0FcD4GXhK3gTDTrtjFkr/gGFpChzYNlsaw94 //Ct38TNd7WR+PuCFXfEKrDkdqhAFoimjXOLszxlvSVQBwrN/cqH7mEiZWa+/drE HPrFuLQ0h5J2hwnhpHsRp91T4GUJCtFlc9s0mndtq+k/LijjUcQhJMK59flmjawJ w+Eg1jWMNye7eokqelUFQ3aptsgkcibDTrznsQT22JyrUfVrrLBL3rnwjXdjd3va /dJz1HH0yysc1ZTwXH6TCjTx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO3f9gv Prz3lW9LyBkL4Tgcp3RFMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwOt874QlDUdNWBMbs0W8IfGqtSCy1W7BrJHZYGNDMwK+9j23f0b/c eZi16ZToN9EcPTWmc9XPLnoRo+JJs2A4UjC3AdpZFjW5pGk/++yyfv84KGzs62rS VwLMWidmZwTD9BQHk1gMDjC8qGvKlyOMM/kuxfK0vjiGw/rC6rrbCnHiUnYSGBRw mG4zsbIknyYT3nuPNUPLgO9lmtZqEGe7HY5b+iack5lnexv3a4hOQA0mg8VJplBp CMKNDxWJKFnCEMmjymNq2W+gVS4lsS0afeJ616vz4w3YxEAGkC9EbNBTJnpN7Eb/ opZxb03+eW2T0uVrPkghjkVb2nGjYaXQ -----END CERTIFICATE-----Generated at Fri May 3 06:18:54 2024 by rpki-client on console-ams.rpki-client.org