$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft File: Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json) Hash identifier: J9401qTI+DXJItj/v+w3YLunwZw+8Wz1KkonDnXGdH0= Subject key identifier: 96:8F:D9:18:8C:D9:84:BE:1B:D9:81:23:3C:E7:87:E4:86:01:0B:20 Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft Manifest number: 059D Signing time: Fri 03 May 2024 00:31:02 +0000 Manifest this update: Fri 03 May 2024 00:31:01 +0000 Manifest next update: Fri 10 May 2024 00:31:01 +0000 Files and hashes: 1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: KjosWlKA8jpswdYpVh5EyuVUq3aBv+eyHN/iz6Ca87Y=) 2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aDYY4L0K3KhTRWZqYiXaA1NmtZx9xM7d4Wrx2kjyFx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Validity Not Before: May 3 00:31:01 2024 GMT Not After : May 10 00:31:01 2024 GMT Subject: CN=66343045-f2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:99:61:9b:cf:0f:50:57:66:d4:ea:9c:94:33: 47:86:76:31:fe:f0:97:ce:fb:62:95:12:3d:da:0d: c6:a0:8c:33:87:fc:51:bd:19:c2:55:49:2a:18:61: d0:68:7b:75:bf:a3:e8:19:78:64:fc:52:9a:32:cf: c6:22:a4:0e:d5:0f:19:73:9a:2a:f2:ab:ee:29:82: c5:62:e7:8d:f3:1f:40:66:fb:d1:98:82:5b:33:2d: d9:fe:53:39:33:20:2d:95:ec:87:ed:e4:fa:7e:b5: 61:b0:0c:32:68:a3:9c:58:17:39:46:67:68:bc:3a: 91:a8:c1:b8:2e:f3:c8:b2:00:55:ad:e0:a9:1e:49: 73:6c:a0:a2:38:d3:26:6d:ef:4b:00:fb:72:56:3a: 8a:9a:22:08:41:f9:1b:ba:ce:b7:14:66:9c:c9:ed: 38:25:ef:13:24:80:73:c0:13:d3:79:94:e6:20:85: e3:a3:3b:3a:d9:98:13:60:db:33:a9:35:01:f5:4c: 02:01:71:41:d0:76:0d:90:e2:67:b5:78:d6:e8:e9: d6:6d:04:11:ec:ab:ae:2f:43:aa:0f:40:b2:8a:76: 7b:86:ec:60:30:da:4f:5b:75:dd:19:75:cd:11:78: f7:a2:a2:a7:2d:ec:30:b7:af:76:b9:88:f2:2d:05: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:D9:18:8C:D9:84:BE:1B:D9:81:23:3C:E7:87:E4:86:01:0B:20 X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:75:a6:93:27:07:41:e2:1f:90:9d:3d:17:7f:0a:c5:03:ea: c8:2b:62:7f:88:72:14:8c:8a:0b:45:40:59:bc:1d:3b:f7:54: 04:33:7d:47:9c:37:ca:b1:32:43:c4:62:54:e4:33:de:b3:72: 25:b5:a7:d0:b3:4c:5e:61:07:8e:16:b2:85:00:fa:a1:26:63: 8f:a2:b4:5e:37:01:ad:a2:e2:0a:65:b1:b2:1c:22:fe:4f:30: 1c:0f:b7:9b:44:16:05:6e:df:56:a4:d9:20:95:02:cc:b2:9c: 8b:ac:1a:72:f1:2f:b8:9e:be:3c:13:d3:3e:26:e2:dc:7e:e1: 5e:0c:c2:40:6d:a8:5e:31:71:eb:e4:c0:ef:34:40:1d:37:16: e8:e5:41:7d:77:b7:0d:14:ae:db:b8:24:43:3b:97:14:01:52: de:d8:a9:4a:12:e5:38:fd:5f:ea:43:69:6c:6b:0f:f3:71:54: 9c:46:c0:b4:2b:36:a9:2c:c0:84:70:57:62:e5:56:b4:d1:f2: 14:e5:c6:ad:6e:7d:a2:38:53:46:ab:ac:03:3d:be:72:96:ff: 8b:a4:7d:60:65:e0:07:a1:ea:fd:cd:58:f1:5d:7a:0f:f6:ae: 09:19:bf:91:25:2d:33:9a:23:49:d5:fb:c8:38:45:38:3b:ab: d8:78:84:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjQwNTAzMDAzMTAxWhcNMjQwNTEwMDAzMTAxWjAYMRYwFAYD VQQDEw02NjM0MzA0NS1mMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Zlhm88PUFdm1OqclDNHhnYx/vCXzvtilRI92g3GoIwzh/xRvRnCVUkqGGHQ aHt1v6PoGXhk/FKaMs/GIqQO1Q8Zc5oq8qvuKYLFYueN8x9AZvvRmIJbMy3Z/lM5 MyAtleyH7eT6frVhsAwyaKOcWBc5RmdovDqRqMG4LvPIsgBVreCpHklzbKCiONMm be9LAPtyVjqKmiIIQfkbus63FGacye04Je8TJIBzwBPTeZTmIIXjozs62ZgTYNsz qTUB9UwCAXFB0HYNkOJntXjW6OnWbQQR7KuuL0OqD0CyinZ7huxgMNpPW3XdGXXN EXj3oqKnLewwt692uYjyLQXa8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaP2RiM 2YS+G9mBIzznh+SGAQsgMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdaaTJwdB4h+QnT0XfwrFA+rIK2J/iHIUjIoLRUBZvB0791QEM31H nDfKsTJDxGJU5DPes3IltafQs0xeYQeOFrKFAPqhJmOPorReNwGtouIKZbGyHCL+ TzAcD7ebRBYFbt9WpNkglQLMspyLrBpy8S+4nr48E9M+JuLcfuFeDMJAbaheMXHr 5MDvNEAdNxbo5UF9d7cNFK7buCRDO5cUAVLe2KlKEuU4/V/qQ2lsaw/zcVScRsC0 KzapLMCEcFdi5Va00fIU5catbn2iOFNGq6wDPb5ylv+LpH1gZeAHoer9zVjxXXoP 9q4JGb+RJS0zmiNJ1fvIOEU4O6vYeIQ7 -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org