$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: OxVd3d+vkb52YsNuaaly5gJJC9Elq9ltw3fgn31Bx/o= Subject key identifier: 22:B7:66:94:A3:37:F2:1F:A8:0E:FE:33:E6:7F:6C:82:FF:D2:7B:74 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 07D3 Signing time: Sun 28 Apr 2024 22:00:37 +0000 Manifest this update: Sun 28 Apr 2024 22:00:36 +0000 Manifest next update: Sun 05 May 2024 22:00:36 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: OMBmLC6wKhDL6zVXBms0fBulwdrb9YOnbkXX84zVBZ4=) 2: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: mdZyEfS4W5rF1PYWp2VRbpalc8PduLv6/BzSpR8EJUI=) 3: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: nyhBCm3BhfmQYwDrKRfmOpugiKWOT3ixhleIMRLIRf4=) 4: 7DB236C63AF011EC9E421056C4F9AE02.roa (hash: Qe0bSAzxUzLnCwoCfMG83WkjeB/KOy2K9/zQX1D1lEs=) 5: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: evARwuBdLRlVzbdD287Wcg5qNOvXPUX24+n0y/2KTDo=) 6: 91724FC87C3811ECB00D8477C4F9AE02.roa (hash: P3BIgyocTc8gHkGMnVoMWwvlrTQcOCf82N8uBI0g0fU=) 7: 18C73826CF7311EB8AAA0C10C4F9AE02.roa (hash: hCxzLAOSpGYfMv+mD1itDxZU7Dx/h9pFsymEXvn0nNw=) 8: C7173EDAC6AD11EC90592C23C4F9AE02.roa (hash: cpN+d604vjGp/yO9RUPzL2phBWxser/Q0Mi7yoSQrBE=) 9: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: FATBotkIGD0bQJXeJ7pkyjLL4bWOCg2lIzaGeYVTZNM=) 10: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: 88Mr0FHBhr3kpdHxo8pGdxgvAUdFbFEEoeRLc9z4/iE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 21:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Apr 28 22:00:36 2024 GMT Not After : May 5 22:00:36 2024 GMT Subject: CN=662ec704-eede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:66:78:ea:b0:92:02:03:04:76:73:fc:e0: f8:67:63:38:dc:d6:61:25:a6:9e:ea:58:12:59:f5: 6d:78:1e:dc:5f:63:4d:f4:bb:1b:7c:6b:e5:8f:9c: 5a:93:88:3f:27:00:22:62:84:d8:4c:67:2d:77:7d: 86:04:bd:17:74:48:c0:47:60:46:10:f8:db:e4:ea: e6:c3:e8:3a:94:60:23:e1:f9:d6:4b:a3:51:28:70: 76:0b:f4:c8:a1:20:7d:3c:63:8f:e0:ff:b7:05:ab: 5f:e8:42:77:65:ca:68:34:9a:66:94:9f:9b:f4:ad: b8:cf:3b:29:70:75:c5:9d:d1:f6:9a:41:4c:0a:cb: 03:50:31:a8:78:c2:f8:d7:2c:e5:d7:24:65:a4:3b: b9:6c:e6:02:06:42:3a:0b:8b:61:5f:a7:4d:7a:ba: 89:61:4a:74:b8:c5:0b:b7:d9:ee:37:a2:c5:04:10: 47:b0:01:13:30:96:e7:f5:cb:67:84:17:ce:39:08: 4b:ed:74:b8:69:da:c4:58:99:c2:72:50:ec:60:6a: 10:34:bb:f8:f4:6d:22:1b:17:54:34:c4:75:5f:5b: 11:2c:e8:b2:62:9b:96:65:9c:60:97:c2:fc:c5:96: fe:29:e3:fe:35:a9:7e:d6:32:2a:32:f7:95:ec:08: 4f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B7:66:94:A3:37:F2:1F:A8:0E:FE:33:E6:7F:6C:82:FF:D2:7B:74 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:73:c4:6b:a9:65:71:5f:fa:de:21:6e:e5:4d:fe:d4:55:5d: 5c:07:10:a3:0e:27:e8:dd:ed:f1:0e:6d:34:2f:cc:9a:99:75: 45:85:3a:ae:8d:33:0e:16:92:1c:f1:f4:7c:c6:25:f4:8b:fc: 94:44:06:8b:11:83:ad:15:39:d6:82:0e:73:5e:4b:5a:6a:89: df:20:1a:2a:e6:00:47:da:3b:50:7b:e3:8f:47:6d:e3:f1:e0: 2c:11:ea:98:bf:0c:95:16:65:ff:e7:23:bb:7c:e3:e0:89:5f: 54:57:ee:26:68:64:28:ab:93:a0:4b:d8:0e:a6:c3:00:b4:40: d1:81:73:d8:1c:ec:d2:c6:10:5b:f2:17:4f:26:f6:97:0e:8b: bb:f4:58:57:48:7c:30:1a:e3:1e:d8:56:b0:ed:70:1a:60:a8: 9c:65:ab:b0:c7:90:22:86:80:df:bb:51:c7:cc:56:a0:fe:0d: c1:3d:86:9b:3e:23:81:67:2c:c3:32:04:ac:8c:51:49:66:01: 7a:75:db:ef:4d:05:ba:dc:2c:ed:38:e4:86:e2:b6:d3:35:f5: 69:11:d9:f6:11:fb:7c:2c:5f:56:81:87:99:a0:60:bd:f9:82: ef:d6:d3:ae:ad:0d:78:0f:c9:7d:ff:fe:18:c7:b6:94:ae:30: d1:19:66:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjQwNDI4MjIwMDM2WhcNMjQwNTA1MjIwMDM2WjAYMRYwFAYD VQQDEw02NjJlYzcwNC1lZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+ZmeOqwkgIDBHZz/OD4Z2M43NZhJaae6lgSWfVteB7cX2NN9LsbfGvlj5xa k4g/JwAiYoTYTGctd32GBL0XdEjAR2BGEPjb5Ormw+g6lGAj4fnWS6NRKHB2C/TI oSB9PGOP4P+3Batf6EJ3ZcpoNJpmlJ+b9K24zzspcHXFndH2mkFMCssDUDGoeML4 1yzl1yRlpDu5bOYCBkI6C4thX6dNerqJYUp0uMULt9nuN6LFBBBHsAETMJbn9ctn hBfOOQhL7XS4adrEWJnCclDsYGoQNLv49G0iGxdUNMR1X1sRLOiyYpuWZZxgl8L8 xZb+KeP+Nal+1jIqMveV7AhPLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCK3ZpSj N/IfqA7+M+Z/bIL/0nt0MB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUc8RrqWVxX/reIW7lTf7UVV1cBxCjDifo3e3xDm00L8yamXVFhTqu jTMOFpIc8fR8xiX0i/yURAaLEYOtFTnWgg5zXktaaonfIBoq5gBH2jtQe+OPR23j 8eAsEeqYvwyVFmX/5yO7fOPgiV9UV+4maGQoq5OgS9gOpsMAtEDRgXPYHOzSxhBb 8hdPJvaXDou79FhXSHwwGuMe2Faw7XAaYKicZauwx5AihoDfu1HHzFag/g3BPYab PiOBZyzDMgSsjFFJZgF6ddvvTQW63CztOOSG4rbTNfVpEdn2Eft8LF9WgYeZoGC9 +YLv1tOurQ14D8l9//4Yx7aUrjDRGWa8 -----END CERTIFICATE-----Generated at Mon Apr 29 00:40:51 2024 by rpki-client on console-fra.rpki-client.org