$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: l9SCbOnNz6aC4k/zPG0ufPr1QNJlDBKRPSRV3WGts5k= Subject key identifier: 4B:F4:B9:C4:4E:8F:8E:B0:A6:19:19:F7:27:C6:98:15:0C:43:5E:47 Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 01B9 Signing time: Wed 01 May 2024 04:47:54 +0000 Manifest this update: Wed 01 May 2024 04:47:54 +0000 Manifest next update: Wed 08 May 2024 04:47:53 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: 5IMsbWztLCiLvl/Tjn7G30xJ1Rhpa1Oe3XSjzXly31U=) 2: F06FFC3408CC11EDA7130E70C4F9AE02.roa (hash: 8KH1hqzkLXkXy97Wm81W0rBnCYlFZJ27utgN9vEX9+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: May 1 04:47:54 2024 GMT Not After : May 8 04:47:53 2024 GMT Subject: CN=6631c97a-23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:31:31:cc:68:22:4d:ef:7a:e7:90:b0:ee:83: 11:1f:fc:62:49:88:48:77:b8:a8:fe:d6:d8:5e:fe: eb:5c:2d:14:9e:77:34:fe:46:27:5b:97:a7:5f:d7: f6:1d:2c:6b:69:eb:3c:94:b2:b7:ce:a9:9e:9b:ff: 44:b0:a6:86:3c:a0:94:c0:82:73:3b:6f:67:0a:e3: 32:d4:45:e4:d9:a6:9d:93:b5:39:5a:9e:37:4b:c8: f7:1d:85:91:ad:01:c1:28:3a:8e:b9:3e:55:94:2b: 02:3d:7f:f0:f7:72:d4:91:b7:76:11:d2:b3:3a:68: 5d:62:e1:85:27:48:5f:6b:75:e1:13:58:55:b8:d3: e1:33:1f:e7:23:09:5f:5d:6e:b5:81:fc:bd:d5:ec: da:e3:c4:54:2d:bd:28:36:b4:42:f2:d9:bc:de:ec: 4b:47:56:1c:e9:5c:19:20:ba:02:a6:56:f3:62:0d: 9d:7e:86:84:5d:d5:8c:ff:67:8f:14:93:94:97:8b: 72:d6:c7:df:90:07:6c:d9:fd:a2:30:7f:27:99:38: c8:6c:e0:c3:35:78:54:b2:1b:8c:32:87:a3:cc:1d: 88:b6:3d:59:52:93:94:8e:94:d8:18:d4:0d:fb:98: 7d:cd:99:1e:56:9f:bc:3d:3f:bb:cc:0c:d5:98:13: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:B9:C4:4E:8F:8E:B0:A6:19:19:F7:27:C6:98:15:0C:43:5E:47 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fd:a7:75:31:98:86:50:bd:08:6b:41:2d:7a:f9:25:b4:f0: 6b:83:80:43:63:eb:92:3b:20:83:27:44:d5:0e:a6:2f:e8:d5: c5:02:44:86:9f:c1:89:2e:ba:a8:69:44:cc:60:a7:4f:00:21: a6:d6:28:db:44:34:32:b7:52:b0:5d:58:95:d6:27:2a:7c:32: 3b:95:c2:d3:e5:21:db:36:b2:96:3c:10:4d:94:38:c5:ed:7a: 0c:0c:b4:a7:f4:b3:28:11:10:db:01:bc:81:5d:e7:17:e2:22: 1a:f1:73:cd:f7:00:7c:21:e4:71:37:0e:b4:1a:c1:d0:bb:cc: a4:75:00:17:56:1d:7b:aa:70:fb:b7:b4:fe:20:1c:cb:30:f3: c1:b7:ba:eb:d3:1e:e5:59:b1:a6:4c:fa:04:0c:83:a5:0d:b3: 67:71:21:fc:f6:c3:86:9d:28:4a:c1:97:ea:b7:2a:06:71:1b: 7a:ff:1f:8f:a3:11:2e:cc:54:a9:39:e1:0a:b8:5e:26:73:2b: 37:bd:1a:3a:aa:c0:17:48:f3:34:1b:5a:69:62:74:45:d0:cc: d0:cb:1f:66:01:c6:41:4f:95:4d:11:f8:ef:d4:7b:cf:6e:8b: 5b:d3:a0:32:2a:13:c9:7b:9f:b4:12:31:44:f8:77:c0:85:1e: 15:d5:c8:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjQwNTAxMDQ0NzU0WhcNMjQwNTA4MDQ0NzUzWjAYMRYwFAYD VQQDEw02NjMxYzk3YS0yM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+DExzGgiTe9655Cw7oMRH/xiSYhId7io/tbYXv7rXC0Unnc0/kYnW5enX9f2 HSxraes8lLK3zqmem/9EsKaGPKCUwIJzO29nCuMy1EXk2aadk7U5Wp43S8j3HYWR rQHBKDqOuT5VlCsCPX/w93LUkbd2EdKzOmhdYuGFJ0hfa3XhE1hVuNPhMx/nIwlf XW61gfy91eza48RULb0oNrRC8tm83uxLR1Yc6VwZILoCplbzYg2dfoaEXdWM/2eP FJOUl4ty1sffkAds2f2iMH8nmTjIbODDNXhUshuMMoejzB2Itj1ZUpOUjpTYGNQN +5h9zZkeVp+8PT+7zAzVmBNbywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv0ucRO j46wphkZ9yfGmBUMQ15HMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe/ad1MZiGUL0Ia0EtevkltPBrg4BDY+uSOyCDJ0TVDqYv6NXFAkSG n8GJLrqoaUTMYKdPACGm1ijbRDQyt1KwXViV1icqfDI7lcLT5SHbNrKWPBBNlDjF 7XoMDLSn9LMoERDbAbyBXecX4iIa8XPN9wB8IeRxNw60GsHQu8ykdQAXVh17qnD7 t7T+IBzLMPPBt7rr0x7lWbGmTPoEDIOlDbNncSH89sOGnShKwZfqtyoGcRt6/x+P oxEuzFSpOeEKuF4mcys3vRo6qsAXSPM0G1ppYnRF0MzQyx9mAcZBT5VNEfjv1HvP botb06AyKhPJe5+0EjFE+HfAhR4V1cjt -----END CERTIFICATE-----Generated at Wed May 1 05:55:45 2024 by rpki-client on console-ams.rpki-client.org