$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: ViPvdk0t0tvTGMBXveA5rKzOFAhzUKgUnaA1OLd+PB8= Subject key identifier: 03:78:FD:AC:96:30:A2:E9:CF:2A:B7:87:BE:1F:C0:AD:E1:C4:0A:3A Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 0E6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0E52 Signing time: Fri 26 Apr 2024 18:26:00 +0000 Manifest this update: Fri 26 Apr 2024 18:25:59 +0000 Manifest next update: Fri 03 May 2024 18:25:59 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: TElyVW57Vr+CqWxg9OGzy4Ltqymx3mlh85KtECn1c2I=) 2: 76C2A8A2AC8F11ED9F292231C4F9AE02.roa (hash: zSeZ3w/F8C3cLNraMvVn9y3TgAQ2I7EbWW1/4UiDysQ=) 3: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: XBeLByasLFAR8do7tNTxhh0jQtZtivMveMhhIQYYpGw=) 4: 3EC9B08E017211EE8B2BF635C4F9AE02.roa (hash: d9PE/siXHPs1UfoVZ3IX1jeCP8+NqpKzTJ5SMM58NWc=) 5: A8F749EAC74C11ED8307D145C4F9AE02.roa (hash: KFRBBOBZOfucEoBJc3CToVd8iVk1oCD5Ptpaf+doOhE=) 6: 3F763E44017211EE8B2BF635C4F9AE02.roa (hash: T27PqZODiVTbI+EbFf62hQq8msnaqE9QMZQB3c52YSY=) 7: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: xDNVgmjN9DxZxjXVEWTQzbIsIGQRcVSh7mJ/JhS9bSU=) 8: 3DFACF80017211EE8B2BF635C4F9AE02.roa (hash: 7mICpQVuc7jYJtqdahGCaFWtwSzbic5vjOXO/926UXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Apr 26 18:25:59 2024 GMT Not After : May 3 18:25:59 2024 GMT Subject: CN=662bf1b7-7e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:d6:f1:91:85:53:b8:46:e7:14:4f:48:3a: 01:b8:61:79:37:50:19:a9:77:e4:a6:3d:ca:43:22: a7:9e:a3:de:02:2f:d8:68:91:64:80:2d:10:6d:1a: 41:f5:70:74:36:13:0f:04:4c:d1:7a:b0:95:03:9b: 99:0b:d6:38:c1:86:2d:3f:a6:17:89:7f:34:1d:c2: 7d:f0:fc:85:d1:bd:61:c9:0f:7b:b5:2a:f1:28:4e: 5d:99:a8:5d:37:92:74:92:3f:31:ea:82:9f:c4:5d: 08:ba:22:58:94:b7:76:9b:12:b8:04:28:74:12:09: 28:32:e2:50:bb:bc:bf:74:94:2c:7a:60:95:e6:26: 34:6b:df:ee:49:d2:4c:d1:5c:dd:f1:b6:2f:e0:e4: 1b:ab:3d:c3:d4:73:82:05:cf:e4:3b:0b:d4:cc:ba: 31:36:ed:8d:5f:3b:da:d7:9f:8e:e6:4b:7b:8b:31: 2d:be:cf:80:f2:15:83:65:82:57:f7:cc:04:f4:74: bc:2a:4a:58:4d:7e:18:3b:3f:38:cc:47:3e:a5:34: 83:f6:a2:60:9a:f2:8a:b0:18:06:bd:a6:f5:79:39: 08:09:d6:09:b5:35:79:f3:63:81:ae:cb:02:7e:fa: e8:d9:73:9f:a1:54:8e:bf:8f:54:1f:11:d3:50:01: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:78:FD:AC:96:30:A2:E9:CF:2A:B7:87:BE:1F:C0:AD:E1:C4:0A:3A X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:66:28:9d:88:ae:4a:5d:66:ef:0f:e4:e0:40:dd:93:81:16: c2:03:d9:05:16:65:ba:46:53:05:a0:a5:35:58:65:85:e3:51: 70:09:b7:df:59:70:0c:28:81:68:15:af:a0:b2:d6:f6:4d:f2: 9d:98:15:f2:9a:ff:8c:0b:67:0f:4b:2e:c1:fc:9d:d7:88:75: 37:f5:ae:ef:6a:50:8d:01:13:f6:36:a7:4c:17:17:d0:98:da: 76:06:a4:ce:78:91:4d:ae:92:e8:cf:aa:75:7c:78:7b:9b:ab: 3a:80:5c:5b:27:cb:3d:68:79:10:d5:ea:26:d5:dd:93:3f:98: 1b:e5:c2:3e:52:fe:e7:2f:6f:9c:01:29:70:c3:1c:69:6e:53: 9f:32:6a:8c:ad:c1:b8:77:7b:5b:04:ef:be:04:b4:99:d8:66: d1:5b:aa:af:9f:1c:4f:d9:73:f5:61:cb:2c:c4:e1:37:b9:dd: 45:92:cf:2a:94:f9:3b:fc:fe:88:13:16:fd:93:b8:66:a3:e0: cd:4b:eb:64:73:3a:87:5d:a9:53:43:e4:ce:0b:6a:a0:56:5e: b7:b3:26:7d:b9:f1:61:e6:37:f7:66:e9:c4:8c:bf:07:c6:54: 1e:5d:24:d6:e7:c7:93:5b:01:5e:b4:1a:fe:45:6a:6c:6a:26: bb:8f:aa:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjQwNDI2MTgyNTU5WhcNMjQwNTAzMTgyNTU5WjAYMRYwFAYD VQQDEw02NjJiZjFiNy03ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqrW8ZGFU7hG5xRPSDoBuGF5N1AZqXfkpj3KQyKnnqPeAi/YaJFkgC0QbRpB 9XB0NhMPBEzRerCVA5uZC9Y4wYYtP6YXiX80HcJ98PyF0b1hyQ97tSrxKE5dmahd N5J0kj8x6oKfxF0IuiJYlLd2mxK4BCh0EgkoMuJQu7y/dJQsemCV5iY0a9/uSdJM 0Vzd8bYv4OQbqz3D1HOCBc/kOwvUzLoxNu2NXzva15+O5kt7izEtvs+A8hWDZYJX 98wE9HS8KkpYTX4YOz84zEc+pTSD9qJgmvKKsBgGvab1eTkICdYJtTV582OBrssC fvro2XOfoVSOv49UHxHTUAGK8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN4/ayW MKLpzyq3h74fwK3hxAo6MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqZiidiK5KXWbvD+TgQN2TgRbCA9kFFmW6RlMFoKU1WGWF41FwCbff WXAMKIFoFa+gstb2TfKdmBXymv+MC2cPSy7B/J3XiHU39a7valCNARP2NqdMFxfQ mNp2BqTOeJFNrpLoz6p1fHh7m6s6gFxbJ8s9aHkQ1eom1d2TP5gb5cI+Uv7nL2+c ASlwwxxpblOfMmqMrcG4d3tbBO++BLSZ2GbRW6qvnxxP2XP1YcssxOE3ud1Fks8q lPk7/P6IExb9k7hmo+DNS+tkczqHXalTQ+TOC2qgVl63syZ9ufFh5jf3ZunEjL8H xlQeXSTW58eTWwFetBr+RWpsaia7j6oN -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:25 2024 by rpki-client on console-ams.rpki-client.org