$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: mwcSkIBYhOmvNdwMYvv2bjqIl/IX+RwZkKjtVA9FZvg= Subject key identifier: 7B:60:CA:C3:9D:AF:BD:EE:43:BA:39:B6:F9:EF:C1:F3:4E:E9:C0:93 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 0114 Signing time: Fri 03 May 2024 05:23:07 +0000 Manifest this update: Fri 03 May 2024 05:23:06 +0000 Manifest next update: Fri 10 May 2024 05:23:06 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: znguvruYoMphJjk7iBMr/7EiNEDd4Qat+n1xa0Rbkio=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: bQGRo+BKv1VXRi3jWhiN4sfYJGpMkN3hIT4uTMt1AFA=) 3: B360BB9689AD11ED93CAB75FC4F9AE02.roa (hash: phCaH2hmKn9csgEA/K+CD2iFkrWqLhy3OCLIe+VLrHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: May 3 05:23:06 2024 GMT Not After : May 10 05:23:06 2024 GMT Subject: CN=663474bb-9036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:b7:87:9c:51:96:b7:f7:90:a7:02:56:78: eb:5a:7c:e6:4a:22:0e:df:00:bc:4e:8d:79:69:7f: 0e:92:7b:02:46:b5:06:fd:a0:a2:84:23:f5:ba:db: 3d:46:14:73:3c:98:7d:48:12:c6:cc:2a:96:2c:f3: c5:0d:e0:d6:8d:bf:80:a2:3f:b2:c3:29:39:e8:bb: 02:3a:c7:8e:53:6b:ff:5f:5d:31:45:3d:5a:5c:7e: ac:72:91:5d:32:8e:01:74:d4:0e:ad:cf:d1:c4:b1: 4c:6b:b8:7b:1d:3a:e6:5f:3a:53:8b:85:74:25:fd: 45:31:eb:0d:78:a2:86:cb:0e:1d:a2:b9:19:ae:07: 32:19:b9:03:51:8d:30:14:71:fa:34:2a:e5:e7:00: d0:4d:a9:69:d7:de:25:84:24:15:bb:2c:7a:00:a5: 20:ec:a5:25:f6:88:85:aa:25:13:d3:ee:3b:b2:df: 57:21:26:15:b4:1f:00:a0:d6:52:c3:b8:da:dd:0c: ee:d9:75:c2:a1:79:0a:30:e0:49:19:14:6b:bd:77: 7b:1f:a9:93:a4:cc:37:2d:76:a4:e4:45:ad:de:54: 09:f3:cf:2f:08:0b:23:f0:3b:7e:b6:f4:60:d2:e8: 41:23:54:ee:79:f6:7c:24:2b:56:91:a9:cc:35:bf: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:60:CA:C3:9D:AF:BD:EE:43:BA:39:B6:F9:EF:C1:F3:4E:E9:C0:93 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ad:30:c2:0c:73:17:64:63:94:87:75:54:3e:95:07:46:2d: 50:f3:6c:0c:b5:56:39:44:78:71:4e:7d:ae:31:0b:50:65:9f: d1:46:3d:e2:a9:ef:7f:62:52:ea:ff:4f:a8:58:b2:90:d8:88: 99:09:05:bd:94:6b:e1:fa:5d:8c:e4:ed:e1:a4:49:10:fe:c6: b8:86:6d:c2:fc:c0:aa:fe:13:f7:0d:27:03:ee:04:b6:39:19: 05:cd:a4:0e:6f:78:97:b5:d9:b0:17:58:af:24:1e:16:9d:a9: 24:49:a9:39:2a:46:b0:03:e0:59:3a:90:6f:5a:96:1b:5b:9e: 4e:63:bf:d6:b0:00:6d:dd:ea:47:09:55:ba:1c:1f:03:d9:f0: db:b8:d4:ba:07:e6:15:a1:d9:fa:53:54:9a:e7:9a:00:e2:6e: 14:cc:7c:61:c8:51:f8:cc:24:5e:e8:2a:29:55:cd:f2:82:79: 8d:1a:10:0c:23:f9:26:20:0e:36:b7:25:ec:03:d5:2b:aa:c1: 66:3d:70:2d:00:f2:30:3c:fc:24:35:77:8d:8d:53:75:21:78: fc:5c:64:c5:fd:ed:fc:f5:14:f5:cf:19:e5:85:7c:6c:ae:dc: d6:31:32:db:4c:f7:5c:df:71:45:9b:68:45:53:3d:09:1d:35: 5c:b3:fe:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjQwNTAzMDUyMzA2WhcNMjQwNTEwMDUyMzA2WjAYMRYwFAYD VQQDEw02NjM0NzRiYi05MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+m3h5xRlrf3kKcCVnjrWnzmSiIO3wC8To15aX8OknsCRrUG/aCihCP1uts9 RhRzPJh9SBLGzCqWLPPFDeDWjb+Aoj+ywyk56LsCOseOU2v/X10xRT1aXH6scpFd Mo4BdNQOrc/RxLFMa7h7HTrmXzpTi4V0Jf1FMesNeKKGyw4dorkZrgcyGbkDUY0w FHH6NCrl5wDQTalp194lhCQVuyx6AKUg7KUl9oiFqiUT0+47st9XISYVtB8AoNZS w7ja3Qzu2XXCoXkKMOBJGRRrvXd7H6mTpMw3LXak5EWt3lQJ888vCAsj8Dt+tvRg 0uhBI1TuefZ8JCtWkanMNb9HNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtgysOd r73uQ7o5tvnvwfNO6cCTMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvrTDCDHMXZGOUh3VUPpUHRi1Q82wMtVY5RHhxTn2uMQtQZZ/RRj3i qe9/YlLq/0+oWLKQ2IiZCQW9lGvh+l2M5O3hpEkQ/sa4hm3C/MCq/hP3DScD7gS2 ORkFzaQOb3iXtdmwF1ivJB4WnakkSak5KkawA+BZOpBvWpYbW55OY7/WsABt3epH CVW6HB8D2fDbuNS6B+YVodn6U1Sa55oA4m4UzHxhyFH4zCRe6CopVc3ygnmNGhAM I/kmIA42tyXsA9UrqsFmPXAtAPIwPPwkNXeNjVN1IXj8XGTF/e389RT1zxnlhXxs rtzWMTLbTPdc33FFm2hFUz0JHTVcs/58 -----END CERTIFICATE-----Generated at Fri May 3 06:29:24 2024 by rpki-client on console-fra.rpki-client.org