$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft File: v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json) Hash identifier: SrB1nKPbp/tMT+RA8OFx91N8xMTCnaufUHeMFQ08hP8= Subject key identifier: 5A:EB:A3:AF:D8:49:89:A3:1A:5D:C7:89:F8:7E:67:29:53:2A:72:C5 Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft Manifest number: 0627 Signing time: Sat 04 May 2024 23:57:26 +0000 Manifest this update: Sat 04 May 2024 23:57:26 +0000 Manifest next update: Sat 11 May 2024 23:57:26 +0000 Files and hashes: 1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: 57b1LR9+0jB5f5T9kSD5gX0vyjA27IvAN/XsVnrH3gM=) 2: F8A432C0DDCF11ED855EAF77C4F9AE02.roa (hash: bTicRRpxUPWV/m0pY+3veW9VX+01HxjTcbB3sLo5+7c=) 3: 44E601A48AE411EB9FA47119C4F9AE02.roa (hash: rweuFLzRChrOqNPnYU2zYbD8Q2Ac4TbnRZmPWvNENSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Validity Not Before: May 4 23:57:26 2024 GMT Not After : May 11 23:57:26 2024 GMT Subject: CN=6636cb66-4cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7e:ff:f2:fc:e6:6a:3d:e8:cc:01:15:05:ca: 74:2a:17:ec:3b:15:33:a6:f8:ed:30:90:5d:dd:d2: 72:10:2d:0e:2d:b6:9c:50:0d:7d:57:4a:b6:83:39: 30:99:71:47:aa:a0:39:03:a6:6e:da:4e:20:f2:d3: 41:0b:28:9f:3e:dd:78:d0:f8:e3:25:e3:7c:8b:01: a3:1b:00:86:38:5b:ff:0c:61:ba:b2:cc:20:63:4f: c6:c9:35:12:51:c3:dc:40:72:ea:89:4a:a1:bf:eb: ac:5c:e6:4d:c5:60:34:e5:d4:f9:62:2c:54:dc:5d: e4:64:cd:04:24:12:9f:97:5a:fd:cb:f9:dd:77:e3: 55:6e:89:03:3f:18:67:27:18:dd:e8:b6:74:0b:e2: e5:c4:2b:33:47:95:da:20:2e:e8:82:a9:32:45:c3: 6c:1b:80:96:0a:6c:26:5f:de:22:fe:e1:95:fd:f4: 20:69:98:95:9e:29:75:4b:e6:cd:58:ed:85:68:bd: 69:19:95:b9:05:c9:c8:be:48:35:11:0a:5a:25:24: 99:2e:39:60:2a:da:33:ee:8b:e1:de:44:9c:24:fe: 58:ff:17:16:3a:d9:87:0a:d8:cd:fa:9a:99:d3:37: 3a:d6:ae:d8:c7:b8:0c:91:0e:57:4f:1e:78:9a:19: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EB:A3:AF:D8:49:89:A3:1A:5D:C7:89:F8:7E:67:29:53:2A:72:C5 X509v3 Authority Key Identifier: keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:ea:58:63:16:ba:06:79:d2:58:58:cc:b5:5b:07:ab:9a:99: 13:43:95:8e:ef:1c:a7:62:3f:03:e7:4d:60:2b:d3:89:ae:ed: 15:c4:ac:56:9b:a7:22:ac:85:06:83:07:1f:a9:0d:33:97:1e: 7c:04:06:e9:e1:a7:7c:98:30:7f:7c:b7:19:b1:78:82:6a:74: 42:c0:a5:b6:47:31:80:bc:7c:e5:78:04:f8:a4:f8:5f:e2:0b: b9:f7:27:20:63:66:3b:e6:91:a5:86:78:ca:0a:67:3d:15:e3: 68:5c:88:7b:e8:78:20:77:18:93:42:fc:1a:9b:72:f0:c3:e5: ea:fa:f9:ca:e2:58:ad:bb:9b:91:f8:59:07:16:84:f9:85:e6: d2:22:79:77:63:71:32:8e:66:76:bc:67:37:ed:27:64:89:64: 39:82:4d:3b:80:43:a3:22:78:67:d4:e1:a2:b2:b3:8b:20:5c: fb:51:d4:08:1b:f7:1d:6e:86:0c:22:5d:50:ec:83:7a:4b:fe: 66:3d:42:ce:52:0a:04:60:82:21:70:5d:18:b4:2f:ee:72:48: 7b:cc:01:87:73:85:6c:08:9b:d4:a4:db:a3:0f:38:a2:65:2c: 42:a0:59:84:32:46:16:58:1b:15:01:a0:c4:9e:6c:4f:2a:a0: 1f:d4:7e:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q5OEQxMTAvBgNVBAUTKEJGRTQ2MTM3NURDMjIzRDRGN0IyNzA1NUUyQjM0NzQ1 RkU2MTAxRDQwHhcNMjQwNTA0MjM1NzI2WhcNMjQwNTExMjM1NzI2WjAYMRYwFAYD VQQDEw02NjM2Y2I2Ni00Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6n7/8vzmaj3ozAEVBcp0KhfsOxUzpvjtMJBd3dJyEC0OLbacUA19V0q2gzkw mXFHqqA5A6Zu2k4g8tNBCyifPt140PjjJeN8iwGjGwCGOFv/DGG6sswgY0/GyTUS UcPcQHLqiUqhv+usXOZNxWA05dT5YixU3F3kZM0EJBKfl1r9y/ndd+NVbokDPxhn Jxjd6LZ0C+LlxCszR5XaIC7ogqkyRcNsG4CWCmwmX94i/uGV/fQgaZiVnil1S+bN WO2FaL1pGZW5BcnIvkg1EQpaJSSZLjlgKtoz7ovh3kScJP5Y/xcWOtmHCtjN+pqZ 0zc61q7Yx7gMkQ5XTx54mhnOfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrro6/Y SYmjGl3Hifh+ZylTKnLFMB8GA1UdIwQYMBaAFL/kYTddwiPU97JwVeKzR0X+YQHU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDk4RC80NjE0NTdCNDUw MEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5VDNzbkJWNHJOSFJmNWhB ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YtUmhOMTNDSTlUM3NuQlY0ck5IUmY1aEFkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDk4RC80NjE0NTdCNDUwMEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5 VDNzbkJWNHJOSFJmNWhBZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE6lhjFroGedJYWMy1WwermpkTQ5WO7xynYj8D501gK9OJru0VxKxW m6cirIUGgwcfqQ0zlx58BAbp4ad8mDB/fLcZsXiCanRCwKW2RzGAvHzleAT4pPhf 4gu59ycgY2Y75pGlhnjKCmc9FeNoXIh76HggdxiTQvwam3Lww+Xq+vnK4litu5uR +FkHFoT5hebSInl3Y3EyjmZ2vGc37SdkiWQ5gk07gEOjInhn1OGisrOLIFz7UdQI G/cdboYMIl1Q7IN6S/5mPULOUgoEYIIhcF0YtC/uckh7zAGHc4VsCJvUpNujDzii ZSxCoFmEMkYWWBsVAaDEnmxPKqAf1H5w -----END CERTIFICATE-----Generated at Sun May 5 01:13:21 2024 by rpki-client on console-ams.rpki-client.org