$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: K7LCVTOzBLR1jzD1dO/Zco2v9v3QWk1og5jS54xyLVk= Subject key identifier: F4:91:6A:DA:4D:38:36:69:3D:B5:66:52:76:77:79:38:2F:2F:71:21 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0A86 Signing time: Wed 24 Apr 2024 20:19:43 +0000 Manifest this update: Wed 24 Apr 2024 20:19:43 +0000 Manifest next update: Wed 01 May 2024 20:19:43 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: ZymciIxmHhE7DHRuXjbvg+H0QuPIYClN5d5jS0jlNvk=) 2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: HsUFhnyNSyJhti2UoaZI6KVexsqtQUo3nTuJz6oOW4Q=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: 6biR6MQ0JUDTuMdhFEHjNfr8X+saMuO1Yl6P4/jh0zs=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: KMcvzUrwYvv7qojBnwefCUmBg96+35aVlS8PqzGenGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 20:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Apr 24 20:19:43 2024 GMT Not After : May 1 20:19:43 2024 GMT Subject: CN=6629695f-f5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:19:43:eb:57:63:84:4e:b6:d7:0f:79:07: 4f:92:86:d6:03:38:a4:1a:2e:48:09:d2:da:b1:25: ed:9d:f9:a3:d1:01:67:16:96:13:73:33:70:10:f6: 3e:c0:8a:e9:18:c7:92:d2:b5:67:90:2c:c1:08:4e: 08:f9:aa:aa:ac:53:d5:95:0c:a3:38:a3:a9:5d:f5: 09:34:e1:0b:fb:94:2b:e5:49:74:06:0c:d8:fe:57: d0:4c:1d:d6:19:09:89:13:87:57:d8:54:70:9b:2d: 91:e7:26:b5:7d:be:e9:30:a6:5f:ea:92:4d:1c:90: 51:5f:9d:ec:af:0f:69:14:5c:24:22:ad:8b:ed:d6: f8:ad:0e:52:83:36:aa:6f:69:bb:2c:38:a5:65:4e: 78:3c:ed:54:22:a2:ce:cf:c7:b8:3a:2d:f0:e9:2e: 34:86:e9:fd:b1:da:6f:20:bb:67:c9:59:5f:70:66: fe:e7:ce:85:25:d7:8d:eb:8f:48:c0:e6:32:df:9d: d2:b9:a0:d6:f6:30:65:81:5f:6c:de:77:57:2e:d9: 76:80:83:ab:59:71:3e:6a:58:c3:a4:07:64:8e:dd: 47:1f:60:a8:3d:86:96:ac:4d:07:bd:03:6b:9d:2c: ff:e4:a1:45:b4:a7:26:3f:64:0d:79:75:93:76:41: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:91:6A:DA:4D:38:36:69:3D:B5:66:52:76:77:79:38:2F:2F:71:21 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4c:27:a6:c8:bf:98:3d:22:0b:cb:82:b2:33:5c:25:e4:b0: b2:8c:2c:e3:e2:d1:3f:85:79:e0:27:bd:7c:4e:11:9e:66:ff: d1:d5:3c:69:da:77:05:fb:df:f8:b3:84:35:14:53:8b:f4:1a: fe:b9:c2:57:1e:bc:2c:6c:3e:ca:b5:b2:36:9f:20:5b:7e:93: cb:28:85:78:04:10:f7:ac:de:00:30:e4:11:5a:10:b4:af:56: 12:16:84:d3:41:75:37:ff:67:a3:ff:d4:1d:e4:50:9d:b2:d4: 20:40:a5:50:fe:14:06:21:e8:31:81:81:96:d7:bd:91:dc:6f: 34:4e:91:fe:c0:fe:3f:d7:af:bd:ca:14:de:a0:bb:d0:b5:e7: a3:e2:37:0c:63:01:af:bf:0c:c2:db:06:4a:2f:06:f4:d3:43: 0e:01:4e:7c:0d:a5:12:04:40:3d:18:6f:00:bc:f1:83:2d:ad: f6:f5:86:76:4e:06:41:0c:76:8a:b8:f0:33:6e:b6:fe:54:4c: 36:28:ab:ce:55:c0:e4:9e:51:70:79:8c:e7:1f:3a:ea:7d:45: b7:ec:90:02:3c:67:a7:32:86:05:5f:75:7f:63:80:86:4a:04: 54:9d:73:ae:a6:60:ad:56:6f:20:e7:85:8d:4d:7a:11:07:3c: 68:1d:18:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjQwNDI0MjAxOTQzWhcNMjQwNTAxMjAxOTQzWjAYMRYwFAYD VQQDEw02NjI5Njk1Zi1mNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yQZQ+tXY4ROttcPeQdPkobWAzikGi5ICdLasSXtnfmj0QFnFpYTczNwEPY+ wIrpGMeS0rVnkCzBCE4I+aqqrFPVlQyjOKOpXfUJNOEL+5Qr5Ul0BgzY/lfQTB3W GQmJE4dX2FRwmy2R5ya1fb7pMKZf6pJNHJBRX53srw9pFFwkIq2L7db4rQ5Sgzaq b2m7LDilZU54PO1UIqLOz8e4Oi3w6S40hun9sdpvILtnyVlfcGb+586FJdeN649I wOYy353SuaDW9jBlgV9s3ndXLtl2gIOrWXE+aljDpAdkjt1HH2CoPYaWrE0HvQNr nSz/5KFFtKcmP2QNeXWTdkEVwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSRatpN ODZpPbVmUnZ3eTgvL3EhMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYTCemyL+YPSILy4KyM1wl5LCyjCzj4tE/hXngJ718ThGeZv/R1Txp 2ncF+9/4s4Q1FFOL9Br+ucJXHrwsbD7KtbI2nyBbfpPLKIV4BBD3rN4AMOQRWhC0 r1YSFoTTQXU3/2ej/9Qd5FCdstQgQKVQ/hQGIegxgYGW172R3G80TpH+wP4/16+9 yhTeoLvQteej4jcMYwGvvwzC2wZKLwb000MOAU58DaUSBEA9GG8AvPGDLa329YZ2 TgZBDHaKuPAzbrb+VEw2KKvOVcDknlFweYznHzrqfUW37JACPGenMoYFX3V/Y4CG SgRUnXOupmCtVm8g54WNTXoRBzxoHRjC -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:04 2024 by rpki-client on console-fra.rpki-client.org