$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: RM0QZgq74Bg6p6lHI/fb1p1oKzpBZdvu5U0O+tvgFjY= Subject key identifier: 75:1B:AE:2A:1B:2B:AF:DD:D9:D3:75:C3:F6:D3:B0:5D:4C:51:F9:05 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 9D Signing time: Wed 15 May 2024 06:59:17 +0000 Manifest this update: Wed 15 May 2024 06:59:17 +0000 Manifest next update: Wed 22 May 2024 06:59:17 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: 98qR692XJOU9jhaoBqmrYmp/XsAv4D0iHS++ASQl2LM=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 5Q25UCh0k+HcT+bVmBbgnql+OtM49EW3g9wv+fI2f98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: May 15 06:59:17 2024 GMT Not After : May 22 06:59:17 2024 GMT Subject: CN=66445d45-830a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:96:83:d0:f7:a0:b2:71:83:ae:4e:40:b0: 87:63:d0:b0:7e:2f:19:7e:5e:e5:44:49:9a:9a:a0: 31:aa:bc:4b:1e:b5:16:82:d4:55:02:e2:9c:09:a7: ad:8d:c3:54:55:41:ff:d7:da:3f:b2:80:3d:49:28: 3c:c3:51:27:7f:da:41:59:87:d3:da:d2:88:a6:12: 88:d8:7c:06:e4:0c:2e:55:68:c0:c4:0e:08:95:3d: db:6e:02:89:5b:33:ed:c6:3d:ac:f9:ca:d2:f2:33: d1:62:d1:50:44:0a:26:3f:c6:b5:b7:31:e6:c5:a0: 58:a4:ef:6c:af:61:9a:31:c8:90:5c:fb:d2:97:42: fd:08:d2:dc:d1:d1:c5:c3:81:0e:bd:1a:e6:2e:2d: 11:65:af:85:94:85:85:50:e6:35:06:1c:c0:31:98: dd:85:77:83:78:06:55:93:a7:c5:01:16:64:fb:5f: 28:7a:83:e5:ac:3b:e6:53:ef:d6:1d:06:a0:97:09: b7:c1:6f:24:e0:c5:2c:53:dc:e3:01:e9:e5:16:bf: 6a:b5:e7:a8:c9:ef:91:59:f0:f2:ce:19:d0:27:cb: 6a:19:12:44:b3:9d:42:9d:f5:e2:51:a7:8c:28:d5: b6:cc:8a:a0:8d:e6:74:9e:7a:ee:be:bd:ab:e9:a3: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1B:AE:2A:1B:2B:AF:DD:D9:D3:75:C3:F6:D3:B0:5D:4C:51:F9:05 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e1:d8:22:0a:e5:11:77:f3:64:d3:85:8e:81:77:dd:50:6f: 18:96:d8:e1:4b:76:f6:94:38:fe:6c:cf:ad:78:b5:9c:bc:ae: 8a:6a:8a:56:39:76:cf:b3:b3:bc:3b:d8:98:21:3a:f5:b6:68: 57:78:47:18:90:80:02:ae:82:63:11:b1:13:e4:33:df:14:9c: df:0a:b1:2e:fb:4e:d5:7f:f2:bb:68:a8:72:d9:c8:1e:93:de: 26:2a:43:65:06:74:71:21:3f:4d:ec:91:b5:7e:3b:d1:d1:21: 9a:0e:cb:0b:94:46:eb:fd:2f:67:17:f6:61:3e:ef:40:13:ee: 7a:20:d8:e5:c5:7c:fa:06:1a:10:f8:5c:15:a4:66:19:07:95: 2b:ab:b3:e7:64:fe:8b:58:a6:88:84:72:8d:b2:2d:27:d8:75: ba:7d:68:62:15:1a:5e:61:01:a0:0f:f8:07:22:16:93:bf:e6: 90:4a:c4:7e:b9:80:a5:95:38:3f:a0:8b:d2:b8:b8:05:cb:6b: 51:99:73:1d:7c:d8:5e:06:d5:ec:f7:cf:28:53:47:d4:0c:ff: c0:97:c0:0d:b1:e8:a1:e4:ea:76:6d:a6:41:96:66:d1:57:68: 6e:ef:e8:3d:5f:0e:4a:c4:65:5a:54:df:73:e3:2f:49:04:90: 0f:fd:b6:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjQwNTE1MDY1OTE3WhcNMjQwNTIyMDY1OTE3WjAYMRYwFAYD VQQDEw02NjQ0NWQ0NS04MzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyWWg9D3oLJxg65OQLCHY9Cwfi8Zfl7lREmamqAxqrxLHrUWgtRVAuKcCaet jcNUVUH/19o/soA9SSg8w1Enf9pBWYfT2tKIphKI2HwG5AwuVWjAxA4IlT3bbgKJ WzPtxj2s+crS8jPRYtFQRAomP8a1tzHmxaBYpO9sr2GaMciQXPvSl0L9CNLc0dHF w4EOvRrmLi0RZa+FlIWFUOY1BhzAMZjdhXeDeAZVk6fFARZk+18oeoPlrDvmU+/W HQaglwm3wW8k4MUsU9zjAenlFr9qteeoye+RWfDyzhnQJ8tqGRJEs51CnfXiUaeM KNW2zIqgjeZ0nnruvr2r6aMe9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUbriob K6/d2dN1w/bTsF1MUfkFMB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj4dgiCuURd/Nk04WOgXfdUG8YltjhS3b2lDj+bM+teLWcvK6KaopW OXbPs7O8O9iYITr1tmhXeEcYkIACroJjEbET5DPfFJzfCrEu+07Vf/K7aKhy2cge k94mKkNlBnRxIT9N7JG1fjvR0SGaDssLlEbr/S9nF/ZhPu9AE+56INjlxXz6BhoQ +FwVpGYZB5Urq7PnZP6LWKaIhHKNsi0n2HW6fWhiFRpeYQGgD/gHIhaTv+aQSsR+ uYCllTg/oIvSuLgFy2tRmXMdfNheBtXs988oU0fUDP/Al8ANseih5Op2baZBlmbR V2hu7+g9Xw5KxGVaVN9z4y9JBJAP/baD -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org