$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: bbda+NvurCzYqXiSr9P10OObXGalh+jVJ5FGc/Zwgrg= Subject key identifier: 80:22:8A:CA:75:07:A0:50:84:A6:5F:F9:41:0E:41:A0:FB:F6:D1:A3 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 0416 Signing time: Tue 07 May 2024 02:04:34 +0000 Manifest this update: Tue 07 May 2024 02:04:34 +0000 Manifest next update: Tue 14 May 2024 02:04:34 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: a9NBf5pwksdPM/ePIePaFy/C01m9Hq9LP4Tbpp1u2Is=) 2: D3001978D03B11ECA7C18D2DC4F9AE02.roa (hash: VhdbU5oeoE1P0kbQ3Dehjq8QrO/fgJ2Mi3no4eVdznQ=) 3: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: V0Ju3pd3n+IcbQEzHygiG/kTkhX/jsHG9G0e1qBxAxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: May 7 02:04:34 2024 GMT Not After : May 14 02:04:34 2024 GMT Subject: CN=66398c32-270e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b8:30:94:28:cf:05:85:d7:ee:b2:28:b7:31: 89:36:04:4f:48:54:4d:c7:14:79:61:a1:bc:02:98: 77:55:9f:92:ae:55:90:2c:1b:17:ec:f6:f7:62:37: 75:7c:56:0f:19:f5:66:ce:a8:30:23:a9:26:06:e0: e2:a6:f8:c9:cd:e4:e9:36:0d:f4:78:e7:ba:f0:54: 09:d9:0d:3a:3b:c9:da:dc:22:9b:41:0f:ee:b0:14: 41:cf:0d:1e:22:d1:47:91:8b:96:a9:a6:54:51:51: 21:f8:1a:50:d6:a3:5a:f3:bd:ff:85:af:1c:d6:28: 73:3f:93:19:d1:8c:2b:90:68:17:d3:2f:ed:ea:49: 0a:29:2b:d6:be:2c:4c:fb:94:98:48:d1:e6:63:cc: 2e:74:2f:1a:57:1d:1e:5d:4b:27:d9:bc:d7:7b:02: 6a:79:b9:54:9e:b7:68:ca:80:30:76:53:6c:5c:50: 88:7c:1f:b8:80:ec:3d:53:7b:a0:cd:c0:64:13:08: e7:fc:39:67:10:c1:9a:1e:6b:a9:41:13:bf:fb:59: d8:99:41:5b:fe:b2:03:4b:e6:4d:8b:c7:7b:46:c2: 93:9c:c4:1d:b6:c5:cf:b0:4b:10:15:11:ca:50:0c: 9d:d2:60:09:ac:80:ed:95:b6:4f:02:9e:0d:1b:23: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:22:8A:CA:75:07:A0:50:84:A6:5F:F9:41:0E:41:A0:FB:F6:D1:A3 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:81:f9:14:0a:c8:e2:66:39:22:26:1f:43:73:0d:70:a3:53: 2d:44:aa:c5:3e:d3:4f:20:7a:4a:5b:f5:ca:b1:13:57:2f:5e: 0e:b0:5e:f5:38:66:a4:ff:34:de:f4:6f:ea:4f:00:7a:73:d1: ac:f3:ea:10:35:e8:24:26:b9:ca:86:a2:59:5a:a4:38:99:da: d3:b7:29:8a:dc:bc:ac:bd:44:77:8f:0b:e9:a0:ea:ab:83:fb: 41:b5:25:99:ac:ad:9e:56:bd:a5:1f:ae:05:ea:be:63:9e:db: f9:a2:4a:5f:ef:75:0c:a3:d6:fa:5f:aa:bb:98:0a:2d:34:41: ad:b8:76:b5:08:54:6d:f8:3a:e3:67:28:ae:31:03:be:95:79: bb:17:6a:73:ef:3a:10:4a:af:5b:79:dc:7f:99:6a:d1:77:f9: fe:ad:a9:85:a9:ec:9e:de:1b:bf:d6:3d:78:17:96:a6:c1:1d: c9:04:cc:6c:bc:ff:4a:1d:71:73:7f:c0:ea:b6:56:16:de:06: c9:e5:ee:b2:cf:1d:3b:2d:dd:eb:28:f5:65:86:39:4e:4b:8f: 3b:da:a6:e0:29:cf:86:67:1f:23:50:5a:b0:99:17:5c:80:f3: b3:b2:1a:58:60:bc:58:27:af:b0:57:d6:af:ca:2a:9f:a8:1c: 78:49:93:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjQwNTA3MDIwNDM0WhcNMjQwNTE0MDIwNDM0WjAYMRYwFAYD VQQDEw02NjM5OGMzMi0yNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37gwlCjPBYXX7rIotzGJNgRPSFRNxxR5YaG8Aph3VZ+SrlWQLBsX7Pb3Yjd1 fFYPGfVmzqgwI6kmBuDipvjJzeTpNg30eOe68FQJ2Q06O8na3CKbQQ/usBRBzw0e ItFHkYuWqaZUUVEh+BpQ1qNa873/ha8c1ihzP5MZ0YwrkGgX0y/t6kkKKSvWvixM +5SYSNHmY8wudC8aVx0eXUsn2bzXewJqeblUnrdoyoAwdlNsXFCIfB+4gOw9U3ug zcBkEwjn/DlnEMGaHmupQRO/+1nYmUFb/rIDS+ZNi8d7RsKTnMQdtsXPsEsQFRHK UAyd0mAJrIDtlbZPAp4NGyOPBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAiisp1 B6BQhKZf+UEOQaD79tGjMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJgfkUCsjiZjkiJh9Dcw1wo1MtRKrFPtNPIHpKW/XKsRNXL14OsF71 OGak/zTe9G/qTwB6c9Gs8+oQNegkJrnKhqJZWqQ4mdrTtymK3LysvUR3jwvpoOqr g/tBtSWZrK2eVr2lH64F6r5jntv5okpf73UMo9b6X6q7mAotNEGtuHa1CFRt+Drj ZyiuMQO+lXm7F2pz7zoQSq9bedx/mWrRd/n+ramFqeye3hu/1j14F5amwR3JBMxs vP9KHXFzf8DqtlYW3gbJ5e6yzx07Ld3rKPVlhjlOS4872qbgKc+GZx8jUFqwmRdc gPOzshpYYLxYJ6+wV9avyiqfqBx4SZP0 -----END CERTIFICATE-----Generated at Tue May 7 03:10:22 2024 by rpki-client on console-ams.rpki-client.org