$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: v9B/TayCN/kk9GQTcCl4mEIA6CsLe5BbUoLF6Zs1gsU= Subject key identifier: CD:F6:4F:69:56:7E:CC:40:C4:62:83:EE:EB:36:48:0D:4D:71:FE:57 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 136F Signing time: Sat 04 May 2024 17:39:58 +0000 Manifest this update: Sat 04 May 2024 17:39:57 +0000 Manifest next update: Sat 11 May 2024 17:39:57 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: QLBmp6wVCndlRP6yaIbjGHnaBA29bUFtbuVSBOYjqZ4=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: t8p+ioksjrCfKT2jmkqgKeIKrd2u5pnMMXoSOKMoWU4=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: 26mWB8zG4LLxXwZuD8Itp5HpladqjmY8n4AL8D2lrVk=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: O6YfSXkP15RMCoE0Zrm02IyWYVTgsh5afV0S0cHHE3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5000 (0x1388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: May 4 17:39:57 2024 GMT Not After : May 11 17:39:57 2024 GMT Subject: CN=663672ed-d89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:06:d8:a1:2b:f8:57:70:33:f3:eb:0b:b9: e0:18:9e:aa:92:df:e2:f0:e9:02:18:8c:79:6c:a0: 2f:ce:45:ff:ff:41:c6:fb:f5:6e:d8:26:c5:27:a8: 08:0e:95:a1:56:dd:38:0d:aa:f3:da:1a:8f:61:ed: b4:28:8d:dc:36:ef:60:95:eb:1a:27:23:e0:94:24: c5:6b:37:0f:53:15:60:a7:81:dd:b0:cb:c8:8f:49: f4:02:60:f2:94:05:ff:7e:f5:9d:04:07:d2:7d:f2: 38:5d:cd:9c:23:3b:3f:35:36:69:9c:b0:b3:d2:61: c5:4c:33:7e:c3:13:ad:42:a2:71:3c:98:d4:68:6c: c0:e2:ce:b8:3c:9f:9b:70:83:e5:42:31:20:6f:39: 5c:dc:8c:52:cf:74:49:e8:6b:1e:01:04:10:35:b4: db:87:c0:a7:58:3d:5a:ff:62:b4:be:e7:99:16:9b: db:88:56:0c:ce:80:2a:1e:5a:a8:fa:b1:6c:fa:2f: da:1d:de:11:a7:db:2c:ac:64:eb:fb:b1:1d:76:c4: 51:4d:02:b3:ef:ac:78:6e:92:16:c3:91:10:3d:bb: 71:af:f6:2e:d6:54:2b:2b:fb:07:b1:f4:25:87:55: 9d:a4:52:6a:a0:ad:e0:51:9b:15:11:02:f2:f2:ca: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:4F:69:56:7E:CC:40:C4:62:83:EE:EB:36:48:0D:4D:71:FE:57 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:53:4c:e8:2c:1d:55:f1:59:a2:ae:6d:06:0e:0e:69:02:85: a0:55:dd:5a:75:2f:36:2e:92:66:90:14:b8:94:04:51:4f:2e: 1a:e9:69:79:1f:b5:7c:64:ec:36:01:e8:ba:60:07:e9:b2:b8: 73:f3:96:eb:41:3f:e1:d8:e0:e5:7d:48:d0:36:5b:1c:71:90: 25:42:30:41:92:57:7b:30:1b:77:0c:5c:8a:f4:23:f5:2a:c6: 7d:e3:bb:f0:81:7d:8a:1e:4c:e2:4b:df:4b:60:a3:fc:02:56: 3e:ec:39:41:39:7e:89:51:14:29:eb:dd:37:e7:4d:4d:c8:74: 54:6f:7f:59:bf:29:a6:bf:db:57:6f:8f:57:2e:ad:91:25:dc: c5:f4:7a:64:94:6d:95:77:a2:c6:1d:85:c9:b9:f5:d2:de:d7: 8c:b0:11:89:76:86:bf:01:57:47:5c:e3:8a:57:b8:4e:04:ac: b8:bf:c5:8b:6f:b1:19:44:b5:a9:00:66:bd:0d:c2:7b:c8:e3: dc:4a:ca:7d:a5:f4:b0:f4:f7:01:17:d6:e9:b8:8f:69:34:f7: eb:2d:59:18:a6:d6:c2:b4:b1:c6:b7:43:48:f8:e8:67:7e:ed: f6:78:06:5e:15:84:19:bd:6e:54:89:b9:5d:79:62:2d:8a:ca: 62:27:7f:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjQwNTA0MTczOTU3WhcNMjQwNTExMTczOTU3WjAYMRYwFAYD VQQDEw02NjM2NzJlZC1kODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+kG2KEr+FdwM/PrC7ngGJ6qkt/i8OkCGIx5bKAvzkX//0HG+/Vu2CbFJ6gI DpWhVt04Darz2hqPYe20KI3cNu9glesaJyPglCTFazcPUxVgp4HdsMvIj0n0AmDy lAX/fvWdBAfSffI4Xc2cIzs/NTZpnLCz0mHFTDN+wxOtQqJxPJjUaGzA4s64PJ+b cIPlQjEgbzlc3IxSz3RJ6GseAQQQNbTbh8CnWD1a/2K0vueZFpvbiFYMzoAqHlqo +rFs+i/aHd4Rp9ssrGTr+7EddsRRTQKz76x4bpIWw5EQPbtxr/Yu1lQrK/sHsfQl h1WdpFJqoK3gUZsVEQLy8srPXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM32T2lW fsxAxGKD7us2SA1Ncf5XMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwU0zoLB1V8Vmirm0GDg5pAoWgVd1adS82LpJmkBS4lARRTy4a6Wl5 H7V8ZOw2Aei6YAfpsrhz85brQT/h2ODlfUjQNlsccZAlQjBBkld7MBt3DFyK9CP1 KsZ947vwgX2KHkziS99LYKP8AlY+7DlBOX6JURQp6903501NyHRUb39Zvymmv9tX b49XLq2RJdzF9HpklG2Vd6LGHYXJufXS3teMsBGJdoa/AVdHXOOKV7hOBKy4v8WL b7EZRLWpAGa9DcJ7yOPcSsp9pfSw9PcBF9bpuI9pNPfrLVkYptbCtLHGt0NI+Ohn fu32eAZeFYQZvW5UibldeWItispiJ3/s -----END CERTIFICATE-----Generated at Sat May 4 19:58:43 2024 by rpki-client on console-ams.rpki-client.org