$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: p5rAD9W+0Lw+vRuoT00kG3PhNGIBimdv2pWfr1Cyg3s= Subject key identifier: 43:54:D2:04:0D:1E:20:6B:2E:E8:AC:8E:E9:3B:09:41:1F:90:7F:A7 Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 0512 Signing time: Sun 05 May 2024 01:17:26 +0000 Manifest this update: Sun 05 May 2024 01:17:26 +0000 Manifest next update: Sun 12 May 2024 01:17:26 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: C/EUAVpMshhOGglTopMlAVtEH/2/4ik2dFrtwKcwnvU=) 2: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: cMuNaVAd+yK4iNdby3f4Jz9+oLuvPMTpa01Kg/z2IIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: May 5 01:17:26 2024 GMT Not After : May 12 01:17:26 2024 GMT Subject: CN=6636de26-23a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:ca:5a:d8:07:e2:58:a4:48:e5:0b:7d:c6: 2f:ee:43:01:96:86:d1:fd:0c:21:c3:8f:1b:90:fa: 99:bc:43:91:dd:1f:a5:34:1b:3f:a4:2d:d4:9c:11: f4:6a:93:ec:53:0e:64:7b:66:93:02:12:0d:c8:58: 0e:7e:ba:9d:42:b7:af:35:25:48:74:e4:11:8c:8c: cc:22:ef:af:25:24:31:56:35:7a:2a:0b:5b:fa:8a: 94:2b:bb:51:1c:13:63:ee:66:08:92:ba:f9:5c:49: cf:de:76:be:45:08:df:8b:bc:f7:49:d1:4a:ed:79: 4c:ab:7e:ea:32:a9:62:8f:f3:c0:c6:b9:84:ce:8e: 6e:be:39:dc:79:e4:67:05:1f:05:8f:e0:3f:09:29: f0:83:4f:48:b6:ec:5e:9c:87:61:b5:33:2d:10:73: 66:28:e4:e6:44:ff:75:ec:8d:c7:bd:12:e1:ec:2a: 0e:17:9d:18:62:73:f5:e9:a5:58:ec:ce:d8:ff:ca: 2e:2b:ac:24:c4:5f:63:9c:db:0d:8b:6b:4b:31:86: 58:0c:93:5c:78:b0:5c:d9:fc:48:28:cf:6a:1a:d0: f3:d0:82:5b:de:ff:74:8e:c3:05:e8:e8:75:49:fb: 0f:c4:18:44:92:ee:9a:71:54:00:54:29:36:38:b1: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:54:D2:04:0D:1E:20:6B:2E:E8:AC:8E:E9:3B:09:41:1F:90:7F:A7 X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:bb:de:00:49:e3:71:31:a5:b4:70:2a:2f:c0:ba:2c:94:21: 93:a3:47:ae:17:b3:50:51:72:ce:21:b3:8f:08:38:45:9b:2e: fd:ba:4d:97:f6:c5:85:70:62:02:3a:89:b7:6a:03:09:be:c7: 9c:af:f3:45:3d:9a:1f:c7:7d:df:5d:03:20:18:77:b0:31:fe: 86:cd:ef:bc:84:67:ca:03:3e:6e:73:2f:3d:35:fb:a0:31:c6: e3:34:72:fc:21:a9:e6:66:ba:c0:c5:8c:51:9d:60:b3:d3:7f: c2:11:7a:cf:ea:f0:b8:51:9d:29:17:26:79:6b:f7:d0:b6:dc: a6:64:58:05:15:a2:7c:b8:bd:91:85:3f:e6:a2:c9:4c:50:29: 64:fa:8f:52:4f:74:a4:1a:f7:e2:20:25:ae:c3:13:d9:db:5d: b3:7f:9c:44:dd:9e:eb:f4:a3:42:76:2f:62:ef:e1:99:c4:51: a7:70:61:17:5d:ed:19:12:a5:16:6f:e8:c0:95:ae:47:a4:d6: 26:55:4e:07:71:89:6b:0e:6b:16:38:29:0d:84:6b:f3:42:7c: c4:a7:33:ff:5e:fe:cb:da:b8:00:33:61:9f:20:7f:04:f4:07: ce:3b:89:b1:9f:29:46:76:0e:d6:d1:39:d7:8b:1d:fd:ec:0c: 51:18:06:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjQwNTA1MDExNzI2WhcNMjQwNTEyMDExNzI2WjAYMRYwFAYD VQQDEw02NjM2ZGUyNi0yM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kTKWtgH4likSOULfcYv7kMBlobR/Qwhw48bkPqZvEOR3R+lNBs/pC3UnBH0 apPsUw5ke2aTAhINyFgOfrqdQrevNSVIdOQRjIzMIu+vJSQxVjV6Kgtb+oqUK7tR HBNj7mYIkrr5XEnP3na+RQjfi7z3SdFK7XlMq37qMqlij/PAxrmEzo5uvjnceeRn BR8Fj+A/CSnwg09ItuxenIdhtTMtEHNmKOTmRP917I3HvRLh7CoOF50YYnP16aVY 7M7Y/8ouK6wkxF9jnNsNi2tLMYZYDJNceLBc2fxIKM9qGtDz0IJb3v90jsMF6Oh1 SfsPxBhEku6acVQAVCk2OLGixQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENU0gQN HiBrLuisjuk7CUEfkH+nMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJu94ASeNxMaW0cCovwLoslCGTo0euF7NQUXLOIbOPCDhFmy79uk2X 9sWFcGICOom3agMJvsecr/NFPZofx33fXQMgGHewMf6Gze+8hGfKAz5ucy89Nfug McbjNHL8IanmZrrAxYxRnWCz03/CEXrP6vC4UZ0pFyZ5a/fQttymZFgFFaJ8uL2R hT/moslMUClk+o9ST3SkGvfiICWuwxPZ212zf5xE3Z7r9KNCdi9i7+GZxFGncGEX Xe0ZEqUWb+jAla5HpNYmVU4HcYlrDmsWOCkNhGvzQnzEpzP/Xv7L2rgAM2GfIH8E 9AfOO4mxnylGdg7W0TnXix397AxRGAYC -----END CERTIFICATE-----Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org