$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft File: M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft (raw, json) Hash identifier: cqq1Wuo1efraKayuknwLeLlhOQOvwnxBeds55G00hx8= Subject key identifier: 0B:70:0C:16:90:B6:42:27:95:2A:14:41:DA:5B:83:B9:4F:ED:0A:93 Authority key identifier: 33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD Certificate issuer: /CN=A91C5413/serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft Manifest number: 0629 Signing time: Fri 17 May 2024 00:21:34 +0000 Manifest this update: Fri 17 May 2024 00:21:33 +0000 Manifest next update: Fri 24 May 2024 00:21:33 +0000 Files and hashes: 1: M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl (hash: LJaQXmqv3CA/yx3cQ9bCpjC0706D+UDU5XyQhGLkV+Y=) 2: 6E9BA8D467E911EEAC5AD27AC4F9AE02.roa (hash: 0FyBk9jIeYxULovo1PVC/UVc4+bRdPuT87f6V2CBZlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413/serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD Validity Not Before: May 17 00:21:33 2024 GMT Not After : May 24 00:21:33 2024 GMT Subject: CN=6646a30e-f295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:63:b2:91:dc:5c:2f:c8:d5:25:a0:41:10: 27:34:cb:b7:bd:22:9e:12:18:12:3f:4c:37:38:38: 4e:51:97:44:3d:ac:5b:36:ec:51:00:52:5a:62:3b: 3f:50:f5:77:58:e7:3d:86:3a:15:e5:89:8d:a1:75: cb:a0:74:1d:b3:3d:fd:6c:95:55:d3:01:19:2b:01: ad:93:77:9e:fe:9c:51:3f:e6:a1:5b:c2:00:8a:5b: 88:72:01:bd:2d:d0:64:2f:3a:76:15:f5:1b:9b:27: f4:9b:f7:34:c0:e2:18:c7:c1:be:b7:0b:96:ba:08: 7c:f2:4a:8f:29:39:14:69:0e:fc:70:cf:45:ab:2e: df:ca:f2:e6:6f:ac:d5:35:58:64:2f:0f:f8:57:32: 0f:a3:ea:0b:bc:70:c7:cb:96:2f:15:4a:f9:62:07: 2b:aa:37:54:79:fe:80:3c:85:fe:95:0b:da:59:e4: 01:e8:cc:e8:ac:1f:d6:74:6e:59:74:19:9d:9c:da: 67:d1:77:bc:e0:bc:70:cd:36:ef:65:d2:f6:74:62: 57:1c:29:25:23:91:a3:1b:20:9d:77:6e:8d:ab:42: 39:8a:52:ad:0e:e5:c7:68:0d:87:51:4f:54:de:c5: 0c:f6:1b:c9:12:39:15:6a:5f:81:68:af:d8:6e:35: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:70:0C:16:90:B6:42:27:95:2A:14:41:DA:5B:83:B9:4F:ED:0A:93 X509v3 Authority Key Identifier: keyid:33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:64:82:99:bd:09:9c:93:92:5f:2f:35:ec:1b:5b:23:14:e5: 9e:7e:68:d9:2e:38:be:05:be:d9:60:b8:c4:3e:e4:cf:f4:0b: 8c:fd:dc:84:70:17:c6:01:2d:90:dd:6e:b2:75:70:97:a1:af: 18:1a:22:e3:e1:5d:5e:3d:4a:48:4d:8b:fc:b5:6a:76:5d:b2: 22:de:38:02:6f:9b:85:12:9b:1c:89:8c:ec:75:18:f4:ac:fc: a6:07:7e:8d:ed:cf:06:56:39:10:2f:c8:ba:c2:f3:f4:4d:dd: 84:f7:a0:8e:22:49:f4:3f:72:48:fa:c4:dc:1c:08:9a:fe:d3: 5c:f3:ea:c2:e5:50:89:a1:93:cf:13:51:92:6c:4e:5c:2e:eb: 26:a6:b2:d5:c4:ec:d2:70:8a:71:94:f8:37:f5:e3:72:02:38: ee:62:79:2d:f2:a7:53:75:a4:8e:59:ec:ca:a2:f2:84:a1:69: ed:17:a8:19:80:fb:7f:ed:c5:b8:a8:c9:83:da:cb:fe:74:5d: 80:30:aa:80:18:98:25:fe:77:60:64:bb:0d:45:ac:9e:64:e6: 24:78:2e:ef:7e:c8:6f:b3:6c:1f:f5:4d:be:fd:e6:b8:8e:b3: c5:4b:f9:a4:ce:59:9d:3c:ad:c6:2a:64:6a:a7:f0:71:c6:4b: af:f2:a6:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTQxMzExMC8GA1UEBRMoMzNFN0YyNjYxNUQzRjQwNzMyQzUzQkY4NzNFMjdDOUM1 MkUxMkRDRDAeFw0yNDA1MTcwMDIxMzNaFw0yNDA1MjQwMDIxMzNaMBgxFjAUBgNV BAMTDTY2NDZhMzBlLWYyOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC91WOykdxcL8jVJaBBECc0y7e9Ip4SGBI/TDc4OE5Rl0Q9rFs27FEAUlpiOz9Q 9XdY5z2GOhXliY2hdcugdB2zPf1slVXTARkrAa2Td57+nFE/5qFbwgCKW4hyAb0t 0GQvOnYV9RubJ/Sb9zTA4hjHwb63C5a6CHzySo8pORRpDvxwz0WrLt/K8uZvrNU1 WGQvD/hXMg+j6gu8cMfLli8VSvliByuqN1R5/oA8hf6VC9pZ5AHozOisH9Z0bll0 GZ2c2mfRd7zgvHDNNu9l0vZ0YlccKSUjkaMbIJ13bo2rQjmKUq0O5cdoDYdRT1Te xQz2G8kSORVqX4For9huNcwFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC3AMFpC2 QieVKhRB2luDuU/tCpMwHwYDVR0jBBgwFoAUM+fyZhXT9AcyxTv4c+J8nFLhLc0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NDEzL0RGOTlBMUU4N0JF ODExRUI5QTA5MjM0MkM0RjlBRTAyL00tZnlaaFhUOUFjeXhUdjRjLUo4bkZMaExj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTS1meVpoWFQ5QWN5eFR2NGMtSjhuRkxoTGMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NDEzL0RGOTlBMUU4N0JFODExRUI5QTA5MjM0MkM0RjlBRTAyL00tZnlaaFhUOUFj eXhUdjRjLUo4bkZMaExjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtkgpm9CZyTkl8vNewbWyMU5Z5+aNkuOL4FvtlguMQ+5M/0C4z93IRw F8YBLZDdbrJ1cJehrxgaIuPhXV49SkhNi/y1anZdsiLeOAJvm4USmxyJjOx1GPSs /KYHfo3tzwZWORAvyLrC8/RN3YT3oI4iSfQ/ckj6xNwcCJr+01zz6sLlUImhk88T UZJsTlwu6yamstXE7NJwinGU+Df143ICOO5ieS3yp1N1pI5Z7Mqi8oShae0XqBmA +3/txbioyYPay/50XYAwqoAYmCX+d2Bkuw1FrJ5k5iR4Lu9+yG+zbB/1Tb795riO s8VL+aTOWZ08rcYqZGqn8HHGS6/ypms= -----END CERTIFICATE-----Generated at Fri May 17 01:02:52 2024 by rpki-client on console-ams.rpki-client.org