$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft File: 92beXsvKeWcFK5bbbxeCvY_abXQ.mft (raw, json) Hash identifier: 1LDSTZXak+fkZJZhl4FGCvqv3rwPR5dFhmlFlt+dZ/M= Subject key identifier: 3B:B4:B3:C7:94:C9:BC:D9:EB:2B:A3:97:10:6D:F4:DA:6C:D9:D7:45 Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74 Certificate issuer: /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft Manifest number: 047C Signing time: Wed 01 May 2024 01:59:18 +0000 Manifest this update: Wed 01 May 2024 01:59:17 +0000 Manifest next update: Wed 08 May 2024 01:59:17 +0000 Files and hashes: 1: 92beXsvKeWcFK5bbbxeCvY_abXQ.crl (hash: V4n5Fx6f5GqHCCeeqUs1IqofFKfyBvfWUieE6OFroEo=) 2: E2663F929C9511ED8014F84CC4F9AE02.roa (hash: ZDZ8AE6u93UpfzZLuAEDW0C4qVyJLeRqdGE15jbnwd0=) 3: E14490BE9C9511ED8014F84CC4F9AE02.roa (hash: /MgtQcweIAcBhK7+0nnabZoBWUotTZ+eRWCRE/XqRM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74 Validity Not Before: May 1 01:59:17 2024 GMT Not After : May 8 01:59:17 2024 GMT Subject: CN=6631a1f5-6b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:de:19:ff:be:6b:cb:a1:5f:ec:78:9e:be: 4b:c7:04:f4:7b:9f:48:af:43:af:75:ec:d0:9c:7e: 1a:22:0b:a3:52:c5:cc:96:db:ab:91:76:b0:38:ac: 25:ac:75:f9:4f:f4:01:dd:25:68:37:d1:6b:f9:38: db:17:5f:39:ee:63:69:ac:a7:f8:3d:14:35:dd:63: 5f:9c:b2:85:d9:7f:1d:30:8d:40:a4:6f:1f:79:02: 91:ff:c2:ba:32:96:c6:40:6f:bf:12:64:43:62:77: a5:2a:87:6a:78:98:a8:f7:09:97:0b:88:34:9c:f9: 98:52:8b:23:7e:fb:87:44:31:75:5f:64:90:95:44: dd:81:54:b1:f3:9b:ff:0a:90:0d:00:a0:d5:a8:bd: 06:db:5c:d4:c7:97:a5:56:fc:8a:0b:5a:44:bc:c5: 8f:ec:f6:96:3a:b7:17:b1:f3:51:2d:ac:2d:08:53: ed:eb:e5:a1:89:70:92:a4:67:0d:94:c5:28:7d:dd: 5f:88:32:11:2d:43:e1:17:4a:f8:c0:6e:d9:9f:7e: f3:11:ff:2b:01:78:92:39:20:fd:c8:f3:b9:4d:33: a6:dc:9e:e5:f5:bc:39:11:63:c6:fe:30:dc:57:5f: 73:1f:f6:83:25:76:3e:bd:ba:fc:a9:d5:e2:5c:21: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:B3:C7:94:C9:BC:D9:EB:2B:A3:97:10:6D:F4:DA:6C:D9:D7:45 X509v3 Authority Key Identifier: keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:6e:8d:dd:5f:4d:76:e0:d9:b3:7e:2c:87:1e:3d:6f:92:a4: 11:08:da:f9:0a:e9:76:59:0b:0d:eb:8c:34:f2:a5:62:9f:05: 5f:7a:15:14:1a:0a:e1:74:eb:19:e8:28:8b:d1:5c:2a:dd:eb: c3:a0:d9:2f:64:8f:66:a3:6b:ce:30:a8:37:99:34:87:7d:80: 28:a3:55:65:03:0d:f9:ca:95:d3:43:7f:e9:c0:a7:af:ed:6d: 27:c1:02:9d:e7:15:ec:50:aa:4d:b2:32:73:f3:10:ec:79:ae: 8d:28:65:83:bb:6e:44:c1:4b:a6:30:0a:a2:9c:69:bb:b3:eb: 1e:f7:45:73:e1:61:9d:0e:d4:9b:22:5a:5c:7d:9a:57:87:e7: d9:5c:f8:83:07:3e:02:40:c9:bc:a7:56:0c:fa:86:e5:a2:08: c7:4c:90:e4:b9:fe:b4:06:3a:29:9a:f6:14:4a:79:6e:99:a9: 8b:e9:7a:b5:4e:a0:07:83:f1:9f:6c:61:54:25:01:8b:0f:d2: ed:fa:9d:dc:eb:14:43:67:b4:dd:ae:f6:ce:b8:0f:df:b6:13: 95:06:51:32:69:75:32:44:26:bc:51:e8:f3:69:1f:68:86:94: 48:fe:7f:f7:9b:a7:33:01:bc:49:57:f5:95:ee:b8:a0:1c:3a: ec:c3:de:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2NzAxMTAvBgNVBAUTKEY3NjZERTVFQ0JDQTc5NjcwNTJCOTZEQjZGMTc4MkJE OEZEQTZENzQwHhcNMjQwNTAxMDE1OTE3WhcNMjQwNTA4MDE1OTE3WjAYMRYwFAYD VQQDEw02NjMxYTFmNS02YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI3eGf++a8uhX+x4nr5LxwT0e59Ir0OvdezQnH4aIgujUsXMlturkXawOKwl rHX5T/QB3SVoN9Fr+TjbF1857mNprKf4PRQ13WNfnLKF2X8dMI1ApG8feQKR/8K6 MpbGQG+/EmRDYnelKodqeJio9wmXC4g0nPmYUosjfvuHRDF1X2SQlUTdgVSx85v/ CpANAKDVqL0G21zUx5elVvyKC1pEvMWP7PaWOrcXsfNRLawtCFPt6+WhiXCSpGcN lMUofd1fiDIRLUPhF0r4wG7Zn37zEf8rAXiSOSD9yPO5TTOm3J7l9bw5EWPG/jDc V19zH/aDJXY+vbr8qdXiXCFf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDu0s8eU ybzZ6yujlxBt9Nps2ddFMB8GA1UdIwQYMBaAFPdm3l7LynlnBSuW228Xgr2P2m10 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTY3MC81OTQwNDg5Q0Yz ODcxMUVCODcyQzAxMkJDNEY5QUUwMi85MmJlWHN2S2VXY0ZLNWJiYnhlQ3ZZX2Fi WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyYmVYc3ZLZVdjRks1YmJieGVDdllfYWJYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTY3MC81OTQwNDg5Q0YzODcxMUVCODcyQzAxMkJDNEY5QUUwMi85MmJlWHN2S2VX Y0ZLNWJiYnhlQ3ZZX2FiWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACbo3dX0124NmzfiyHHj1vkqQRCNr5Cul2WQsN64w08qVinwVfehUU GgrhdOsZ6CiL0Vwq3evDoNkvZI9mo2vOMKg3mTSHfYAoo1VlAw35ypXTQ3/pwKev 7W0nwQKd5xXsUKpNsjJz8xDsea6NKGWDu25EwUumMAqinGm7s+se90Vz4WGdDtSb IlpcfZpXh+fZXPiDBz4CQMm8p1YM+oblogjHTJDkuf60BjopmvYUSnlumamL6Xq1 TqAHg/GfbGFUJQGLD9Lt+p3c6xRDZ7TdrvbOuA/fthOVBlEyaXUyRCa8UejzaR9o hpRI/n/3m6czAbxJV/WV7rigHDrsw95H -----END CERTIFICATE-----Generated at Wed May 1 02:46:22 2024 by rpki-client on console-ams.rpki-client.org