$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json) Hash identifier: /8S7hkI8ZEdKNF2JyKJtRPnxzArHC0MfnlwBpE85GTY= Subject key identifier: 5A:68:95:63:33:2B:64:DE:A2:8F:76:F4:5E:E1:4E:43:E9:75:3C:C2 Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft Manifest number: 0105 Signing time: Tue 07 May 2024 05:36:49 +0000 Manifest this update: Tue 07 May 2024 05:36:48 +0000 Manifest next update: Tue 14 May 2024 05:36:48 +0000 Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: GrdBn7sRITYkpewcG6mthVavjiNhqandKsnJY3upQ2w=) 2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: mffY3AuaPAKQ52OkYd/j1Cv7tCpL1MMwz1fbq1wCKrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: May 7 05:36:48 2024 GMT Not After : May 14 05:36:48 2024 GMT Subject: CN=6639bdf1-d42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:89:8b:78:3b:8a:0a:2f:ae:e2:c4:ea:7f: 57:a3:31:82:20:3f:71:89:b4:19:43:3a:ef:ed:fd: 3b:d5:88:cc:0a:7b:f0:75:e4:7c:00:69:74:48:7e: e7:00:a0:fc:4e:83:fd:32:8b:05:a7:19:7e:4e:fe: 21:4d:d7:2c:19:e4:3d:39:d0:ae:84:91:a9:35:6e: 69:87:f0:fe:e0:68:9c:7b:48:55:53:90:83:c6:3a: bd:2c:09:2e:4b:81:2f:15:dc:bb:66:f7:1e:35:2b: cb:d5:c1:a7:6a:00:77:c8:e5:59:66:a0:21:97:2b: 4c:75:bd:18:01:f0:91:af:a3:02:ac:bd:b7:9e:17: a0:32:0f:cb:e8:8c:6c:9b:2a:57:28:15:be:14:0f: 9b:bd:bc:31:57:2b:0a:02:13:bd:d7:d6:2c:5c:9c: a6:e1:c1:a2:6f:e8:dc:ac:6f:9d:d8:a8:c5:0c:8d: 2e:ac:9d:27:c1:94:18:a1:29:69:16:55:4c:5a:59: c0:77:d9:01:c2:db:00:91:77:58:6f:18:35:1f:05: 85:b7:61:3c:83:94:30:d8:22:47:dd:db:3f:25:5e: 95:49:29:ab:72:bc:13:ed:66:f6:d8:90:85:cc:5c: 95:be:b1:20:fe:3c:6f:c5:4b:ad:2a:36:ac:59:b4: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:68:95:63:33:2B:64:DE:A2:8F:76:F4:5E:E1:4E:43:E9:75:3C:C2 X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:6b:fc:9b:f5:f5:de:d5:7f:99:4c:13:5d:d2:05:8b:0a:7a: e0:da:cd:dd:38:76:d8:46:d1:a1:7c:04:1e:05:60:b0:37:8c: f1:b8:c3:0f:5c:06:e1:50:4d:5e:00:a3:a4:13:92:ac:de:b6: 7a:14:eb:94:1e:ec:99:05:b3:51:ca:45:b0:8f:25:4a:3d:73: e1:cd:7c:3e:df:b3:57:f9:1a:28:47:10:57:1c:d4:62:ad:e9: 87:7c:1f:a7:14:bf:2e:ec:c0:7e:38:40:24:d0:43:a2:06:b2: 05:77:a1:72:1f:9d:2a:23:44:d7:24:c1:39:b1:19:ef:61:35: 06:c7:bd:83:c4:d2:5c:69:96:1a:6a:cd:4c:84:fa:4d:cb:2f: 65:93:15:e5:d9:67:61:42:5c:ae:c3:78:d4:cd:09:19:08:7e: f8:50:dc:57:6f:e7:79:41:a0:27:cc:0c:47:52:91:28:75:8e: bd:32:32:11:57:c3:08:dd:e7:b3:84:ac:bf:88:1b:f3:5d:49: 6d:06:43:1e:aa:b4:b1:ab:a6:86:12:65:09:cf:1b:3f:9b:3a: bb:dd:1e:a4:c0:57:4a:ac:35:d4:08:d4:c0:46:ff:6e:9b:18: 71:08:77:bf:ee:0e:69:2d:93:5c:4b:cd:f6:45:ef:52:40:02: a1:fe:c4:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjQwNTA3MDUzNjQ4WhcNMjQwNTE0MDUzNjQ4WjAYMRYwFAYD VQQDEw02NjM5YmRmMS1kNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHuJi3g7igovruLE6n9XozGCID9xibQZQzrv7f071YjMCnvwdeR8AGl0SH7n AKD8ToP9MosFpxl+Tv4hTdcsGeQ9OdCuhJGpNW5ph/D+4Gice0hVU5CDxjq9LAku S4EvFdy7ZvceNSvL1cGnagB3yOVZZqAhlytMdb0YAfCRr6MCrL23nhegMg/L6Ixs mypXKBW+FA+bvbwxVysKAhO919YsXJym4cGib+jcrG+d2KjFDI0urJ0nwZQYoSlp FlVMWlnAd9kBwtsAkXdYbxg1HwWFt2E8g5Qw2CJH3ds/JV6VSSmrcrwT7Wb22JCF zFyVvrEg/jxvxUutKjasWbRfsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpolWMz K2Teoo929F7hTkPpdTzCMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCa/yb9fXe1X+ZTBNd0gWLCnrg2s3dOHbYRtGhfAQeBWCwN4zxuMMP XAbhUE1eAKOkE5Ks3rZ6FOuUHuyZBbNRykWwjyVKPXPhzXw+37NX+RooRxBXHNRi remHfB+nFL8u7MB+OEAk0EOiBrIFd6FyH50qI0TXJME5sRnvYTUGx72DxNJcaZYa as1MhPpNyy9lkxXl2WdhQlyuw3jUzQkZCH74UNxXb+d5QaAnzAxHUpEodY69MjIR V8MI3eezhKy/iBvzXUltBkMeqrSxq6aGEmUJzxs/mzq73R6kwFdKrDXUCNTARv9u mxhxCHe/7g5pLZNcS832Re9SQAKh/sQ9 -----END CERTIFICATE-----Generated at Tue May 7 06:30:15 2024 by rpki-client on console-ams.rpki-client.org