$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: vLYXAhSYyQT5jWL1YAfSOU1MjyAlo/vR4cbtNZHDQzs= Subject key identifier: 7B:6A:39:8A:98:F2:CC:4C:92:BD:F2:2E:83:67:0E:19:2D:E5:75:A9 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 89 Signing time: Wed 15 May 2024 07:10:09 +0000 Manifest this update: Wed 15 May 2024 07:10:09 +0000 Manifest next update: Wed 22 May 2024 07:10:09 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: Yv6vwuPE6apyepjBXRTMfZgtLoChxfEv0Etb6J8ZSJE=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: sa5RzcxUnwYh4Sc0qjOs54hFuG3B/OqKRSDlh83844g=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: g1L7zesoB5nU8PuGkI145uH8R2UcPZqxEKfaWGmIbic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: May 15 07:10:09 2024 GMT Not After : May 22 07:10:09 2024 GMT Subject: CN=66445fd1-b677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f6:6d:98:d2:fc:6e:fb:98:c1:49:ed:ef:f5: 0b:0e:c2:e6:ec:32:9c:06:63:0e:3b:c5:f0:2d:b0: 70:c8:2b:34:87:a4:1b:b4:78:d7:25:61:75:ca:d7: 52:76:77:bc:a6:18:db:c6:c2:71:27:47:89:f6:f0: d7:4f:25:bb:96:54:e9:6e:02:91:7a:30:4e:fb:6c: 25:d7:9b:d6:d0:47:59:8f:b4:6b:96:48:17:c3:af: 82:30:f9:24:43:89:3e:4f:2b:a7:fa:9c:b3:fc:5a: 0f:62:56:d0:43:0b:9d:d4:e6:68:ea:0d:9c:68:71: 61:a3:ed:12:ac:b8:a7:41:32:84:6e:37:c6:62:d9: 78:2d:b0:87:48:e5:76:24:5e:8b:93:b0:e3:28:92: a0:e0:f5:55:8a:f5:91:08:ce:98:81:26:3f:3d:cc: c7:41:8c:f7:31:3d:96:e7:e0:e9:77:67:6d:fb:80: 4a:19:5c:3a:14:7d:24:be:34:6b:c1:1d:18:51:22: 0d:95:b9:ef:c6:e6:a2:b8:77:81:17:78:ed:0a:f7: 3c:22:5b:f2:8e:ef:7b:3b:6c:0f:18:ff:d5:55:20: d3:d1:1a:4a:7a:e1:9e:41:c3:86:59:98:4f:6f:58: 6f:d6:73:d2:73:4d:fe:16:b7:05:fe:54:fd:b2:79: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6A:39:8A:98:F2:CC:4C:92:BD:F2:2E:83:67:0E:19:2D:E5:75:A9 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:51:db:82:a0:73:97:52:ba:08:cc:fe:67:00:9d:5b:cd:c3: ed:b3:b5:1a:6b:40:a5:6c:23:cb:44:1a:1d:b2:13:d0:29:9a: 5d:0a:1e:13:87:0c:f7:4b:ae:dc:a1:6d:e7:4a:50:dc:d1:75: b5:c3:0a:c2:96:e6:90:3d:98:81:f7:e4:bd:20:99:39:8a:3d: f0:9c:72:f8:13:8e:61:60:ed:0e:05:39:d9:1a:ca:2c:af:7b: 2b:8c:45:64:91:ad:ff:ff:eb:04:37:fe:42:69:ba:80:04:ae: 87:89:b7:3a:32:43:2a:2f:47:83:09:af:f2:dc:12:b9:f9:06: f9:39:92:5b:a7:ca:bb:84:bd:bf:8a:73:3c:37:ca:60:6d:91: 2a:80:e7:2f:f8:4a:39:c2:c7:8f:f4:79:1c:11:93:51:eb:0c: 62:58:cf:e6:41:c9:d4:45:07:76:9c:7e:0c:fe:fb:b6:b4:84: 36:0a:b9:8e:97:df:91:6b:c1:8d:ac:ba:34:6f:62:23:cf:f7: 50:96:4e:4f:1c:ea:0f:3a:6c:38:3b:44:1d:c3:9b:55:0d:c5: c6:ac:39:e0:7c:a1:0b:d5:29:e2:f7:b6:23:8d:46:e2:e8:58: 90:ff:7c:35:b2:d0:56:ed:72:60:9d:b2:66:dc:b7:a1:4c:48: d7:a8:48:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjQwNTE1MDcxMDA5WhcNMjQwNTIyMDcxMDA5WjAYMRYwFAYD VQQDEw02NjQ0NWZkMS1iNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PZtmNL8bvuYwUnt7/ULDsLm7DKcBmMOO8XwLbBwyCs0h6QbtHjXJWF1ytdS dne8phjbxsJxJ0eJ9vDXTyW7llTpbgKRejBO+2wl15vW0EdZj7RrlkgXw6+CMPkk Q4k+Tyun+pyz/FoPYlbQQwud1OZo6g2caHFho+0SrLinQTKEbjfGYtl4LbCHSOV2 JF6Lk7DjKJKg4PVVivWRCM6YgSY/PczHQYz3MT2W5+Dpd2dt+4BKGVw6FH0kvjRr wR0YUSINlbnvxuaiuHeBF3jtCvc8Ilvyju97O2wPGP/VVSDT0RpKeuGeQcOGWZhP b1hv1nPSc03+FrcF/lT9snkPcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtqOYqY 8sxMkr3yLoNnDhkt5XWpMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQUduCoHOXUroIzP5nAJ1bzcPts7Uaa0ClbCPLRBodshPQKZpdCh4T hwz3S67coW3nSlDc0XW1wwrCluaQPZiB9+S9IJk5ij3wnHL4E45hYO0OBTnZGsos r3srjEVkka3//+sEN/5CabqABK6Hibc6MkMqL0eDCa/y3BK5+Qb5OZJbp8q7hL2/ inM8N8pgbZEqgOcv+Eo5wseP9HkcEZNR6wxiWM/mQcnURQd2nH4M/vu2tIQ2CrmO l9+Ra8GNrLo0b2Ijz/dQlk5PHOoPOmw4O0Qdw5tVDcXGrDngfKEL1Sni97YjjUbi 6FiQ/3w1stBW7XJgnbJm3LehTEjXqEhx -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org