$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json) Hash identifier: bV1YxJYzLY3N6IBTXMtm15zEyeeKREpp9yDVqbRb4c8= Subject key identifier: 4A:C2:76:2A:E4:D0:BC:60:5D:25:B5:36:FE:0E:EF:29:BA:BA:60:20 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0E15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft Manifest number: 0D2B Signing time: Thu 02 May 2024 18:59:56 +0000 Manifest this update: Thu 02 May 2024 18:59:55 +0000 Manifest next update: Thu 09 May 2024 18:59:55 +0000 Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: UKaaP53RzgcIQOIBLAxQXrCJo1wHxNhoF/ph3T2wpCM=) 2: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: xsRvYHkt1kSJe/5WADtn9IbTwxTSTZmiIotthIwgGiQ=) 3: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: 1Zg3uJs0B9SBEAEBnlt+lBVE6s62+7/QDv6bVIsWqaU=) 4: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: 3RupdV0E3AJ2Yrqp3j0pmtVBbkL6edsyZAqwmmp5q2E=) 5: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: Rl4wvZ1bQ+rW5Jss4ptaS97YoQDCBwchiKCYjFlSZFQ=) 6: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: Nsyuz4pVBmCSLGABPSKpBQa3yU72+R4F7kivIeQsp5M=) 7: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: QqIyGCefAxLeqvom8feWqLCBzkG8r/+a3a+PgxerWrc=) 8: 5767371863FE11ED9287A15DC4F9AE02.roa (hash: FSlO93QBFy0yB2m4MihFIG6+n59WsoW9XnBM2VF+zXg=) 9: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: RIPvfK8QUF5wmav7mk9nMb7DDj6cSNmzn+eFWQglssU=) 10: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: oHIaP2NJ8qCLYstJJ6+GfE8mMKYeymY1s7uux8FYeyI=) 11: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: +7m2OTWuKLLYbb41sDTiQAOToUAeHchnEjf9Iro+vW4=) 12: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: R4wrT8zc1K+DV4H+c/LYTsZfoq1c/8r9FMd3l3K1fsM=) 13: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: mCmcaYB22H4c0Nk62d6wSTOP7zL9gZg8L5pxFEpRgDM=) 14: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: MHsKA6rSmP/5ljZEq6IWVKWYpT2ymttT4WvGNnnCU0M=) 15: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: M696+5UFpF5kX1zKZ1iE9zRBar+hYBuMMv70MsqSzFc=) 16: FB9C6A1A77CA11EA95ECC830C4F9AE02.roa (hash: 0nN9mR6Movdpj9mFe9MyLylah55uw7sKp19/HTYnsn0=) 17: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: DNAussOAhhKTgiB9XEna+amUcXb0mthrv74FzgccW7M=) 18: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: V+Z1scvo5UHb+Ra3Ka2uleBikTmA8/0+Tgf2EQamPk4=) 19: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: gNaJnFa9XuSHzmfL6Uwro9V8guRgZQ3ViR+mA1En7q0=) 20: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: OR4FotIF7u5M2RKgTvF/yMCSACYQcBm42uVHareeY0s=) 21: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: L3UG8gL8J7aKAeycb8PsA3dBmQsih+G0FiTvQ7phQ3U=) 22: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: VjkFtnXBH2zgR/7GAmCLy2av4peQDcQ6/XsDR3llBbs=) 23: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: aulda/IDBjINvkVmDSR5SF4+9AqLl56cfZfOgOUn0Sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3605 (0xe15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: May 2 18:59:55 2024 GMT Not After : May 9 18:59:55 2024 GMT Subject: CN=6633e2ab-3994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:25:07:8c:78:e2:2a:23:14:c2:ef:81:2b: 3c:62:fa:84:51:e0:ab:48:6e:28:e3:04:27:2b:c3: bb:4d:39:fa:59:bc:e2:14:fc:eb:a1:63:73:36:2b: bf:6c:42:e3:0d:93:9e:a6:8f:a6:4b:34:59:6e:ae: 64:25:cb:09:ba:3a:22:9c:61:67:fa:26:c7:5a:4d: 93:17:76:76:78:84:80:b2:e1:4b:98:4a:22:2f:78: 3c:bb:19:14:ed:a0:7c:03:d2:bc:71:64:ef:89:83: 27:9c:ad:39:90:68:ea:df:d9:86:8e:6b:d2:ae:a1: 8e:26:a7:5d:38:92:cd:7c:33:3c:4e:4d:43:01:07: 2b:22:2f:66:01:02:23:8f:ca:2f:e7:e2:4c:1e:0f: 1e:f8:8a:d1:d0:05:97:6b:29:5f:3e:1f:a1:3f:55: e7:85:45:9d:30:30:8b:7b:5b:70:47:83:12:1f:da: c5:a5:88:95:e9:0b:72:a9:ab:b9:a8:d4:90:fb:17: fa:00:40:d3:31:36:cb:47:1d:ad:81:c2:d4:63:51: 17:c2:61:57:5f:25:30:33:bf:a9:74:ba:db:d2:62: e7:5b:fa:f6:b6:35:8d:3d:56:75:df:fd:a9:3f:4a: 2a:20:e1:c3:4b:93:03:8e:8c:49:39:df:2d:b7:7a: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C2:76:2A:E4:D0:BC:60:5D:25:B5:36:FE:0E:EF:29:BA:BA:60:20 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:31:7a:02:e7:8d:b8:5f:06:b8:91:88:b0:47:50:94:27:55: 59:08:a3:30:ba:85:da:91:c6:ce:d9:d0:e0:65:7f:b4:e1:75: 44:75:9d:4e:26:d2:9b:ea:f6:71:81:79:cf:2d:22:08:11:db: 43:c7:ea:5c:00:92:d5:d4:14:2d:eb:51:df:22:8c:10:29:0c: e0:fd:1c:d2:23:3b:e7:e6:dc:67:01:b5:61:43:b1:cc:ef:57: 5b:8b:79:14:3c:9c:0c:1e:39:3d:1a:2d:be:80:ee:1c:f5:54: 32:0a:03:bd:eb:fd:82:93:64:0b:bc:78:9f:92:74:2f:43:db: a9:87:8a:68:75:5f:89:95:9f:80:6b:dc:a2:93:67:4e:d0:e1: 81:e0:c8:79:56:0b:88:04:11:4b:8e:27:37:d4:35:d8:4b:2f: 1e:de:d8:ec:5e:1e:90:f8:d7:42:9e:65:e9:24:57:29:ee:c8: 1d:36:75:cc:05:b5:1a:87:0e:96:85:5c:ee:7e:0a:b3:98:61: 74:1f:e6:f0:e5:39:0c:a3:8f:33:f7:2b:bd:d2:ae:cb:e9:da: 7d:e6:5a:d1:5c:1f:a2:47:a7:49:4f:ad:7e:42:c0:ac:4e:56: 95:c2:c5:e8:70:c0:ef:33:22:29:b6:a8:3c:2a:c3:ff:ae:8c: d6:46:98:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjQwNTAyMTg1OTU1WhcNMjQwNTA5MTg1OTU1WjAYMRYwFAYD VQQDEw02NjMzZTJhYi0zOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxElB4x44iojFMLvgSs8YvqEUeCrSG4o4wQnK8O7TTn6WbziFPzroWNzNiu/ bELjDZOepo+mSzRZbq5kJcsJujoinGFn+ibHWk2TF3Z2eISAsuFLmEoiL3g8uxkU 7aB8A9K8cWTviYMnnK05kGjq39mGjmvSrqGOJqddOJLNfDM8Tk1DAQcrIi9mAQIj j8ov5+JMHg8e+IrR0AWXaylfPh+hP1XnhUWdMDCLe1twR4MSH9rFpYiV6Qtyqau5 qNSQ+xf6AEDTMTbLRx2tgcLUY1EXwmFXXyUwM7+pdLrb0mLnW/r2tjWNPVZ13/2p P0oqIOHDS5MDjoxJOd8tt3pjZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErCdirk 0LxgXSW1Nv4O7ym6umAgMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xRDY2RDQ4NkQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZm TzNOMm9KUGJFZHV0T3Vfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABMXoC5424Xwa4kYiwR1CUJ1VZCKMwuoXakcbO2dDgZX+04XVEdZ1O JtKb6vZxgXnPLSIIEdtDx+pcAJLV1BQt61HfIowQKQzg/RzSIzvn5txnAbVhQ7HM 71dbi3kUPJwMHjk9Gi2+gO4c9VQyCgO96/2Ck2QLvHifknQvQ9uph4podV+JlZ+A a9yik2dO0OGB4Mh5VguIBBFLjic31DXYSy8e3tjsXh6Q+NdCnmXpJFcp7sgdNnXM BbUahw6WhVzufgqzmGF0H+bw5TkMo48z9yu90q7L6dp95lrRXB+iR6dJT61+QsCs TlaVwsXocMDvMyIptqg8KsP/rozWRpiE -----END CERTIFICATE-----Generated at Thu May 2 20:04:59 2024 by rpki-client on console-ams.rpki-client.org