$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: psozwdMA/yFKniaL3SJ/dyO315VCcBGiBTOLC+vEGlg= Subject key identifier: D7:21:9A:18:A2:66:B4:4E:CA:78:6D:9D:DA:51:D2:C9:C6:71:55:FA Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2C7C Signing time: Thu 02 May 2024 16:02:35 +0000 Manifest this update: Thu 02 May 2024 16:02:34 +0000 Manifest next update: Thu 09 May 2024 16:02:34 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: /19FKBwit3LDQ+oyfz1KdfJzq2C1LbuBEyhavcEbmu4=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: bLM4hecBjp4+kZrFBYpUYh3+T8MNWN7sNl7r7CCqW6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11424 (0x2ca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: May 2 16:02:34 2024 GMT Not After : May 9 16:02:34 2024 GMT Subject: CN=6633b91b-bf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:a0:27:1b:57:c6:ee:74:34:4a:4b:9c:b3: a8:7f:38:87:59:82:a4:ab:80:1f:83:83:d9:de:7d: fb:6b:f9:e4:9b:6e:38:43:eb:43:1f:18:d8:cf:02: e5:1e:95:93:4f:06:a1:0b:4a:8b:cd:27:ad:c0:eb: 65:e6:9a:d1:f2:65:bb:3c:e6:38:9f:4c:a0:50:73: 6c:97:7d:12:61:88:d9:13:07:5b:f8:82:87:fc:24: e6:24:c1:1d:25:b8:fd:1c:83:d3:44:ad:bf:b4:e2: d6:60:2d:78:c1:8a:84:6c:11:29:1b:c4:ea:44:85: 81:a0:c3:8a:37:ab:0d:6b:fc:66:77:09:fc:85:1e: f0:35:d5:4c:0c:78:cd:0e:d9:15:6f:da:87:9b:23: 07:23:28:cd:dc:0b:90:dc:d5:ad:4a:00:fb:14:2f: ef:01:5a:db:18:ba:b3:d0:e6:1b:c3:3c:f7:a8:1d: c9:99:06:3b:43:d1:8d:94:2a:c4:b6:97:71:70:e3: 9f:53:ee:ca:c1:1b:12:32:82:5e:fb:81:4e:14:14: 37:c6:78:af:11:12:6d:bd:73:7c:a6:22:88:3e:88: 64:32:8f:00:c9:e3:7c:b6:6d:41:a9:69:9a:2e:8a: 81:a5:a5:f0:b8:aa:39:8f:91:27:d4:9b:22:2e:65: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:9A:18:A2:66:B4:4E:CA:78:6D:9D:DA:51:D2:C9:C6:71:55:FA X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:66:0a:2e:54:af:83:1d:fa:9b:57:0b:95:dd:b8:e3:c8:28: d0:8a:ca:bf:e3:90:bd:14:6e:5c:f7:c3:b9:f8:fa:e7:41:03: 5d:ef:35:35:56:b0:83:93:dd:a6:29:8e:6f:8f:45:d5:6b:2f: 34:5d:44:76:a3:ec:68:b1:d3:09:fb:7c:84:57:fd:31:c1:d0: 28:30:a4:94:2a:cd:eb:3e:56:34:fa:6d:84:05:5e:5d:c7:eb: 92:91:ec:47:18:ce:58:b9:5c:4e:1d:92:82:d5:b8:77:23:63: ce:f2:58:ca:cd:eb:89:10:e3:cc:0c:b8:18:6d:57:3a:f3:c1: 82:88:d0:99:84:b9:23:7e:64:69:04:f7:b6:a4:3c:a9:83:28: d7:d0:2e:6e:77:90:be:04:7f:f1:22:0c:d5:b5:f5:6f:37:cf: dc:6b:83:f4:a0:8a:6d:dd:54:c1:84:e4:06:8b:ad:54:fb:e5: 18:ea:b1:9f:ae:31:9f:cd:74:a4:e4:a7:63:61:53:52:99:5c: 7d:61:f9:58:8a:a2:24:da:9c:03:7f:f6:3a:c1:8e:95:0f:1b: 32:51:4d:64:90:56:30:b1:b7:8c:7d:bd:3f:77:f2:d8:c8:fc: d5:e7:9f:38:92:62:3b:c8:fa:3d:3e:e0:15:23:d9:bc:58:25: ab:c0:c6:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjQwNTAyMTYwMjM0WhcNMjQwNTA5MTYwMjM0WjAYMRYwFAYD VQQDEw02NjMzYjkxYi1iZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2mgJxtXxu50NEpLnLOofziHWYKkq4Afg4PZ3n37a/nkm244Q+tDHxjYzwLl HpWTTwahC0qLzSetwOtl5prR8mW7POY4n0ygUHNsl30SYYjZEwdb+IKH/CTmJMEd Jbj9HIPTRK2/tOLWYC14wYqEbBEpG8TqRIWBoMOKN6sNa/xmdwn8hR7wNdVMDHjN DtkVb9qHmyMHIyjN3AuQ3NWtSgD7FC/vAVrbGLqz0OYbwzz3qB3JmQY7Q9GNlCrE tpdxcOOfU+7KwRsSMoJe+4FOFBQ3xnivERJtvXN8piKIPohkMo8AyeN8tm1BqWma LoqBpaXwuKo5j5En1JsiLmXZgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNchmhii ZrROynhtndpR0snGcVX6MB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEZgouVK+DHfqbVwuV3bjjyCjQisq/45C9FG5c98O5+PrnQQNd7zU1 VrCDk92mKY5vj0XVay80XUR2o+xosdMJ+3yEV/0xwdAoMKSUKs3rPlY0+m2EBV5d x+uSkexHGM5YuVxOHZKC1bh3I2PO8ljKzeuJEOPMDLgYbVc688GCiNCZhLkjfmRp BPe2pDypgyjX0C5ud5C+BH/xIgzVtfVvN8/ca4P0oIpt3VTBhOQGi61U++UY6rGf rjGfzXSk5KdjYVNSmVx9YflYiqIk2pwDf/Y6wY6VDxsyUU1kkFYwsbeMfb0/d/LY yPzV5584kmI7yPo9PuAVI9m8WCWrwMbq -----END CERTIFICATE-----Generated at Thu May 2 17:18:56 2024 by rpki-client on console-ams.rpki-client.org