$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: /Rszjdl8RkU9UA5N0aryioaRzsy1WVlwQO55yCg6HLQ= Subject key identifier: AE:C3:83:A7:E2:31:D7:8F:C6:A4:9D:F3:FF:98:CC:8D:4C:92:60:98 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 352F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 348E Signing time: Sat 04 May 2024 14:18:23 +0000 Manifest this update: Sat 04 May 2024 14:18:22 +0000 Manifest next update: Sat 11 May 2024 14:18:22 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: CduDCF7SMDXxLdflsjfLC1eJ+tT/Q3zb2DhKBKUJd9A=) 2: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: GhMpIsuZe6UWSXVhxx0gZ7LGDFuMOBfOpEr3szGlSIw=) 3: 5E05FB54A8FE11E990A7E27FC4F9AE02.roa (hash: mkS8yistQSPi7NMH1JehepWmWxUa6l17roNRXFEiwqI=) 4: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: MXTujm5bxVtwRR2qRhwfBiQo+U60HZqoc/46+Q9rCqg=) 5: 68FB91C8D62011EEB71DB418C4F9AE02.roa (hash: Y82kcv/M2LHp498bo2fsaqhck+xJ95yDD5ruup9f5Qc=) 6: 88978730772311EBB972032EC4F9AE02.roa (hash: nz3/6k7N3mPNzs0DFxh1VvDXVpDIjk6/7OQf5UZ/EgA=) 7: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: WuXzJGatSIhxLLVFJYnAc7zb2/GN+pIVoHOaMyICWzI=) 8: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: 4Q3os1Mfu8xIUdVQK6hTBnRWzUONxabmo1fE2pyLLXE=) 9: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: ch1wPAb/c25q+6cdmEAHM5pjXCNPqiccski5eE5WXDs=) 10: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: mPli45HHzDhlWzD7+vX8/tUBtrWHY58J4/XZrbS0zeo=) 11: 89A73D46772311EBB972032EC4F9AE02.roa (hash: 9hXnGMU3WUCKM3WK6+9iFLRQ6N17p8pM/kmtF91qcvQ=) 12: ED90D73A46B611EEBADD0963C4F9AE02.roa (hash: 5p7K6wp/VhzIgACltrLmvNc2Mh3sce8QYs6DQ1Du+6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13615 (0x352f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: May 4 14:18:22 2024 GMT Not After : May 11 14:18:22 2024 GMT Subject: CN=663643af-ca8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:02:de:3f:a2:7f:52:65:04:a5:35:1a:80: d0:2a:1a:d6:62:cd:ee:75:67:95:95:82:03:2b:21: 60:2a:f9:33:a9:82:cb:6f:db:7e:cb:ea:c1:9e:cb: 80:de:0b:52:7d:fa:45:1d:58:2c:4c:06:e9:ac:c8: 6e:3f:84:2a:2b:cc:e2:44:10:35:b4:12:ef:d8:67: 88:10:a7:0e:31:17:d6:9f:13:04:55:5f:46:34:8a: 19:43:bb:dd:2c:78:6a:2e:2a:51:00:47:dc:f4:90: ba:33:a6:ca:93:34:b5:c9:17:45:f2:33:c2:55:5e: 92:91:0b:96:13:06:44:9b:bf:73:b7:34:fc:b9:9b: 25:eb:96:eb:48:f9:0e:9a:e2:ca:e1:a6:b8:23:1a: fe:ab:a0:a9:04:c8:bc:22:d1:61:fa:5f:fe:6a:2f: 67:5d:fa:f6:e0:6d:9c:81:fc:28:bf:cf:7b:64:8d: 89:43:d0:09:80:be:de:fc:2f:a7:93:46:8a:ec:94: 90:59:2d:10:4d:2c:93:95:9c:68:27:a0:f8:34:6c: f8:76:cc:60:e3:33:73:e1:01:25:4c:22:4f:8a:27: 89:a8:5a:b5:53:cf:66:82:d1:08:eb:40:8b:88:74: 7c:b7:2d:88:c9:46:1c:46:67:d1:ec:5b:9a:38:62: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C3:83:A7:E2:31:D7:8F:C6:A4:9D:F3:FF:98:CC:8D:4C:92:60:98 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ea:85:08:04:e1:4c:13:68:28:1b:b2:19:c2:a4:29:81:fe: e3:e7:98:bd:55:af:b4:02:c0:e8:01:c2:75:f4:a7:bb:69:fe: 52:e9:cf:04:86:21:95:cc:f1:40:d8:6f:b6:9c:39:68:61:ff: 74:5e:a4:d5:8d:42:37:0f:96:2b:f3:00:38:f5:cf:bb:e6:49: 34:f7:47:88:88:81:3a:fd:37:65:b4:aa:ba:df:cd:60:a1:26: e7:f6:d9:60:12:b9:3a:23:14:f7:56:ad:f8:60:2f:cb:c6:98: ef:db:1a:d2:e3:9c:7e:11:17:70:41:04:6b:00:82:25:0e:33: 35:57:93:e3:98:35:48:ad:4b:63:ef:2f:ee:cb:3a:e4:54:2d: df:38:fe:46:85:08:f9:b4:f0:a9:77:54:9a:03:27:47:61:a3: 07:91:49:ea:39:90:48:6c:c4:e0:60:31:1b:6a:a1:bb:12:59: 39:a9:03:6b:2d:4d:1a:0c:7a:fd:1a:f5:52:12:2e:be:08:62: 0d:f1:2b:13:1a:76:90:3b:1b:2a:32:5f:ea:6a:19:56:63:eb: 91:cb:8e:f6:7f:e5:b2:96:53:5d:52:d0:35:fe:95:b8:bd:3a: 21:02:74:9b:a0:1b:d9:83:2c:3d:47:44:e5:66:25:68:bb:f1: ad:0b:76:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjQwNTA0MTQxODIyWhcNMjQwNTExMTQxODIyWjAYMRYwFAYD VQQDEw02NjM2NDNhZi1jYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApv0C3j+if1JlBKU1GoDQKhrWYs3udWeVlYIDKyFgKvkzqYLLb9t+y+rBnsuA 3gtSffpFHVgsTAbprMhuP4QqK8ziRBA1tBLv2GeIEKcOMRfWnxMEVV9GNIoZQ7vd LHhqLipRAEfc9JC6M6bKkzS1yRdF8jPCVV6SkQuWEwZEm79ztzT8uZsl65brSPkO muLK4aa4Ixr+q6CpBMi8ItFh+l/+ai9nXfr24G2cgfwov897ZI2JQ9AJgL7e/C+n k0aK7JSQWS0QTSyTlZxoJ6D4NGz4dsxg4zNz4QElTCJPiieJqFq1U89mgtEI60CL iHR8ty2IyUYcRmfR7FuaOGK7wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7Dg6fi MdePxqSd8/+YzI1MkmCYMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH6oUIBOFME2goG7IZwqQpgf7j55i9Va+0AsDoAcJ19Ke7af5S6c8E hiGVzPFA2G+2nDloYf90XqTVjUI3D5Yr8wA49c+75kk090eIiIE6/TdltKq6381g oSbn9tlgErk6IxT3Vq34YC/Lxpjv2xrS45x+ERdwQQRrAIIlDjM1V5PjmDVIrUtj 7y/uyzrkVC3fOP5GhQj5tPCpd1SaAydHYaMHkUnqOZBIbMTgYDEbaqG7Elk5qQNr LU0aDHr9GvVSEi6+CGIN8SsTGnaQOxsqMl/qahlWY+uRy472f+WyllNdUtA1/pW4 vTohAnSboBvZgyw9R0TlZiVou/GtC3b6 -----END CERTIFICATE-----Generated at Sat May 4 14:45:16 2024 by rpki-client on console-ams.rpki-client.org