$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: /V8hKRo9L+ot/Y1ktNt82CpsRHyel4j0TZ4Mg1zZZ5U= Subject key identifier: 84:2F:4B:38:7F:45:C1:18:5A:26:96:6E:C5:C4:31:44:35:C3:BC:52 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0449 Signing time: Wed 01 May 2024 02:14:37 +0000 Manifest this update: Wed 01 May 2024 02:14:36 +0000 Manifest next update: Wed 08 May 2024 02:14:36 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: v9aV5yWLy3RS8VjY8KlOJttNBq/QHn8+nKxHwj2XUDc=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: AabFPDz6+I9hZYUDoeYaVFIetX3SgG8wOkktjNXXD00=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 8K0OLnQIIyeaybcR+DDNaFQ9ubw6xSBGNAQO5+FnVu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: May 1 02:14:36 2024 GMT Not After : May 8 02:14:36 2024 GMT Subject: CN=6631a58c-c5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:2d:f1:18:a1:12:e7:fe:a1:89:e6:42:aa: 45:34:c8:db:68:01:ff:d3:d5:e4:0f:4f:95:2c:99: f3:19:37:f3:59:5b:15:e7:7a:0b:54:08:62:08:ef: 69:bd:20:1c:79:07:6a:06:8e:72:29:36:c1:37:db: 1b:80:2a:4e:bd:32:2b:ea:21:ea:9a:31:7e:b1:e1: 19:9a:db:e1:fb:1f:dc:af:b5:e9:10:1b:d8:72:61: b1:3f:2a:02:15:62:df:6d:8d:f3:03:06:82:bd:43: 11:de:d4:40:7d:6a:15:3f:87:32:ac:36:a3:16:4e: 6f:71:76:66:08:3c:ba:e3:7a:41:a7:4d:33:1e:5b: dc:19:ff:3d:d6:15:1d:51:2c:47:fa:0f:dc:94:10: c9:aa:47:0a:8c:3e:f4:8d:cd:3c:fd:cd:98:9f:87: f8:9b:43:4c:07:e9:61:24:c3:1b:19:e8:f7:6d:ac: de:b5:af:59:14:1c:9b:a7:87:e2:15:2b:a2:2d:78: ae:30:8c:d3:05:6f:90:50:bf:ca:72:fa:58:55:60: 69:c8:40:52:7b:98:8c:41:3f:65:c5:fe:60:e3:f7: ef:5f:68:70:1c:b0:a1:99:a2:67:65:18:b9:7d:b5: b2:4f:08:94:81:e1:76:3a:46:70:06:d6:3f:8b:e6: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2F:4B:38:7F:45:C1:18:5A:26:96:6E:C5:C4:31:44:35:C3:BC:52 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:52:1b:dd:10:7e:ab:37:eb:07:9c:48:94:ea:3d:4d:96:02: 19:5a:33:e1:dd:c5:09:19:0c:a3:f7:fe:f8:f4:4a:2c:70:dc: 5e:75:4b:97:c7:14:dc:58:68:b1:89:ea:ca:72:c6:a4:44:66: f5:8f:00:a9:90:ca:00:4b:dc:94:87:d8:66:24:31:fd:c6:cd: ea:be:b8:67:80:86:be:0f:1e:8e:e8:a3:a0:c1:8b:dd:9f:03: 04:ae:45:80:b5:b3:12:6c:c8:8e:fe:95:b4:7c:0f:98:33:b9: 71:3c:a4:65:87:83:7b:95:0c:75:0f:5d:ce:7b:fb:97:34:44: f2:f1:fa:eb:47:29:72:e3:34:f6:a6:4a:1d:ec:84:ab:cf:07: d7:7d:78:37:5b:37:92:3c:7c:af:60:ee:ba:9d:d2:4a:32:27: 7c:a2:92:b2:ea:87:a3:2d:58:5b:15:79:f3:59:9b:65:4f:9d: af:19:ae:7c:08:12:1e:01:67:9a:f9:67:48:69:a8:b0:c3:dc: ff:29:58:50:f1:8f:28:1e:4f:6e:c3:68:a5:d1:62:f3:2b:8b: 61:74:c1:82:15:b8:58:07:4f:e0:1b:7c:6c:37:b3:d5:08:b7: 1c:9f:c0:9e:31:6d:7e:ca:83:83:ff:d5:0e:5c:7e:8c:bd:a7: cd:81:d5:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjQwNTAxMDIxNDM2WhcNMjQwNTA4MDIxNDM2WjAYMRYwFAYD VQQDEw02NjMxYTU4Yy1jNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqkt8RihEuf+oYnmQqpFNMjbaAH/09XkD0+VLJnzGTfzWVsV53oLVAhiCO9p vSAceQdqBo5yKTbBN9sbgCpOvTIr6iHqmjF+seEZmtvh+x/cr7XpEBvYcmGxPyoC FWLfbY3zAwaCvUMR3tRAfWoVP4cyrDajFk5vcXZmCDy643pBp00zHlvcGf891hUd USxH+g/clBDJqkcKjD70jc08/c2Yn4f4m0NMB+lhJMMbGej3bazeta9ZFBybp4fi FSuiLXiuMIzTBW+QUL/KcvpYVWBpyEBSe5iMQT9lxf5g4/fvX2hwHLChmaJnZRi5 fbWyTwiUgeF2OkZwBtY/i+ZFnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQvSzh/ RcEYWiaWbsXEMUQ1w7xSMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdUhvdEH6rN+sHnEiU6j1NlgIZWjPh3cUJGQyj9/749EoscNxedUuX xxTcWGixierKcsakRGb1jwCpkMoAS9yUh9hmJDH9xs3qvrhngIa+Dx6O6KOgwYvd nwMErkWAtbMSbMiO/pW0fA+YM7lxPKRlh4N7lQx1D13Oe/uXNETy8frrRyly4zT2 pkod7ISrzwfXfXg3WzeSPHyvYO66ndJKMid8opKy6oejLVhbFXnzWZtlT52vGa58 CBIeAWea+WdIaaiww9z/KVhQ8Y8oHk9uw2il0WLzK4thdMGCFbhYB0/gG3xsN7PV CLccn8CeMW1+yoOD/9UOXH6MvafNgdVS -----END CERTIFICATE-----Generated at Wed May 1 02:46:22 2024 by rpki-client on console-ams.rpki-client.org