$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json) Hash identifier: lY/lfBQKVLnBP0fsSFBs1oSTVAnJ0tTan9Sh24byiHA= Subject key identifier: 77:FB:E1:77:AE:EE:03:D3:8E:04:71:F4:0F:37:D9:57:C1:F8:6B:1E Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft Manifest number: 0643 Signing time: Thu 02 May 2024 23:49:24 +0000 Manifest this update: Thu 02 May 2024 23:49:23 +0000 Manifest next update: Thu 09 May 2024 23:49:23 +0000 Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: MGeYnnYhdP/F0cZp/gWaTyF9QPBU+LjulSD6preFbqs=) 2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: p7kzWVn5QnTbiNl5YAhRwhI2rAlI1JbZ8THOCFNXxlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Validity Not Before: May 2 23:49:23 2024 GMT Not After : May 9 23:49:23 2024 GMT Subject: CN=66342684-aff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:c2:2b:5a:8f:ce:33:f9:1f:c0:28:77:75: 37:19:73:da:9e:d8:f2:60:cb:85:ac:9d:06:f0:1e: 3a:ed:1c:82:25:86:cc:89:b2:e1:70:9d:9a:9a:ae: b1:9e:df:22:fc:fa:be:7a:3d:c2:b8:f5:38:e3:57: b6:65:47:e9:91:da:f6:4a:3d:32:a4:94:d0:fd:15: 9b:ce:bf:74:d1:c3:e4:7b:d6:2c:99:02:e2:4f:d8: c6:f3:c5:93:dd:3e:62:99:2c:3e:ee:62:bd:48:48: ae:f5:0d:51:c8:60:e1:b9:70:62:b6:00:d4:5a:53: 13:db:f4:ef:e2:c0:4c:07:bd:33:a6:1c:8c:2b:ee: 37:94:a9:da:b6:9e:b4:9c:31:30:18:eb:84:ee:05: 70:c5:94:3f:99:f3:5a:99:ca:19:63:41:ef:04:ba: 8c:e0:f4:dc:43:48:f0:84:55:21:b6:c3:01:d7:77: e9:63:d1:2c:ef:48:80:e3:bb:d5:20:a7:e3:bd:a0: 49:26:cb:ca:2b:98:ce:7d:a3:42:a1:b8:59:72:76: 34:14:61:30:ee:b7:39:6a:42:c0:65:05:bc:71:17: 25:52:1e:16:f3:f1:cc:35:17:17:8a:86:c7:d6:08: 97:2c:8e:e2:84:61:26:8e:1f:48:f3:5b:e8:aa:0b: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:E1:77:AE:EE:03:D3:8E:04:71:F4:0F:37:D9:57:C1:F8:6B:1E X509v3 Authority Key Identifier: keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ae:48:28:cf:69:f3:c0:fa:e8:1c:01:56:59:2f:9b:aa:f1: 56:58:99:76:89:33:b5:94:9a:3a:bb:de:4e:1c:b8:b4:ae:34: 53:b7:49:45:45:ef:5b:fb:81:cc:ba:8d:5a:36:5d:ad:0c:02: 24:99:d1:af:5c:85:99:b9:cd:8e:3d:4e:53:62:23:b2:85:2b: c1:a9:2d:fd:41:bb:54:fd:f7:b0:e5:94:19:15:c9:1c:7c:e6: 2c:b2:7c:d1:28:97:c7:79:63:cb:fd:33:71:42:cf:ea:5e:f4: 6c:d0:16:f1:7a:c4:f6:db:c7:3f:9e:41:0c:83:f5:05:11:64: 44:65:7a:e7:17:fa:be:f0:4f:df:8d:83:70:ad:04:26:fe:6c: 83:1e:af:f9:21:5d:6f:0b:ca:c7:c1:28:05:81:58:78:15:3b: 01:7a:ce:f7:ee:17:80:66:60:5f:87:d4:b6:97:a7:6d:4a:fa: 1d:51:ab:b8:3f:ae:0b:bc:31:6d:22:b0:d2:5d:dd:4f:14:f7: dd:60:58:fb:b6:6d:3c:0c:af:2a:1a:17:9f:b6:8f:4a:23:a3: 7b:25:f9:1b:8e:9f:3e:56:f3:3d:73:9c:fb:6f:ce:6f:1e:aa: e9:08:b8:86:30:7d:2b:d3:01:1d:a9:e6:42:22:5e:48:23:3f: 6f:56:88:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCRUUxMTAvBgNVBAUTKDY5NjlDMjBCODY5OUE0OEQwNzJENEEzMDY3Q0ZGMDBE NUY0NDdDOTgwHhcNMjQwNTAyMjM0OTIzWhcNMjQwNTA5MjM0OTIzWjAYMRYwFAYD VQQDEw02NjM0MjY4NC1hZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB7CK1qPzjP5H8Aod3U3GXPantjyYMuFrJ0G8B467RyCJYbMibLhcJ2amq6x nt8i/Pq+ej3CuPU441e2ZUfpkdr2Sj0ypJTQ/RWbzr900cPke9YsmQLiT9jG88WT 3T5imSw+7mK9SEiu9Q1RyGDhuXBitgDUWlMT2/Tv4sBMB70zphyMK+43lKnatp60 nDEwGOuE7gVwxZQ/mfNamcoZY0HvBLqM4PTcQ0jwhFUhtsMB13fpY9Es70iA47vV IKfjvaBJJsvKK5jOfaNCobhZcnY0FGEw7rc5akLAZQW8cRclUh4W8/HMNRcXiobH 1giXLI7ihGEmjh9I81voqgvDlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf74Xeu 7gPTjgRx9A832VfB+GseMB8GA1UdIwQYMBaAFGlpwguGmaSNBy1KMGfP8A1fRHyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJFRS82RTA2MjdGODNG MDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJMEhMVW93Wjhfd0RWOUVm SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXbkNDNGFacEkwSExVb3daOF93RFY5RWZKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJFRS82RTA2MjdGODNGMDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJ MEhMVW93Wjhfd0RWOUVmSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWrkgoz2nzwProHAFWWS+bqvFWWJl2iTO1lJo6u95OHLi0rjRTt0lF Re9b+4HMuo1aNl2tDAIkmdGvXIWZuc2OPU5TYiOyhSvBqS39QbtU/few5ZQZFckc fOYssnzRKJfHeWPL/TNxQs/qXvRs0BbxesT228c/nkEMg/UFEWREZXrnF/q+8E/f jYNwrQQm/myDHq/5IV1vC8rHwSgFgVh4FTsBes737heAZmBfh9S2l6dtSvodUau4 P64LvDFtIrDSXd1PFPfdYFj7tm08DK8qGhefto9KI6N7Jfkbjp8+VvM9c5z7b85v HqrpCLiGMH0r0wEdqeZCIl5IIz9vVojE -----END CERTIFICATE-----Generated at Fri May 3 00:48:30 2024 by rpki-client on console-ams.rpki-client.org