$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json) Hash identifier: polMBPeZ9tEuH8GbLOCglHiQLp1vexEugvAii99nqxE= Subject key identifier: E0:53:A0:2B:43:01:7C:39:B2:3A:46:0F:57:1B:C4:74:52:4A:BE:A0 Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft Manifest number: 06F7 Signing time: Sat 04 May 2024 22:53:54 +0000 Manifest this update: Sat 04 May 2024 22:53:54 +0000 Manifest next update: Sat 11 May 2024 22:53:54 +0000 Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: AX7GUMDclzGAkp+NefhndRbeWq66XDzO0ct9vVhYIIE=) 2: BAE25202230011EEB5448B3FC4F9AE02.roa (hash: s53ijDXUIjWrcS+3ZZFFa5y0Fpk0vX6X2I7BWWydq80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: May 4 22:53:54 2024 GMT Not After : May 11 22:53:54 2024 GMT Subject: CN=6636bc82-f1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:94:b8:92:56:07:09:ef:39:e4:4e:28:b9: eb:d4:54:43:e5:64:cb:a9:de:a4:36:3a:df:9f:91: 3c:d1:2f:e5:45:6c:08:d7:f1:df:23:fc:df:f6:7f: c4:1c:d4:df:5a:7b:1d:a2:fa:7a:fd:11:4e:90:d4: b2:a4:81:76:3d:2e:a8:fe:0d:18:6c:ee:5d:1b:c9: 0b:84:92:61:96:a5:e0:2a:19:89:44:db:17:9e:71: 15:79:cb:90:57:0f:22:8b:60:b0:86:6c:22:c3:7a: a8:ba:2e:e3:d3:7f:c5:c0:c7:4c:be:b4:d8:23:07: f5:02:5d:73:f1:23:54:3c:42:88:63:6e:92:37:76: 9b:0e:03:19:5c:51:db:e5:6d:3d:b7:b3:3f:56:8f: 68:d0:da:28:cc:c7:23:f4:4b:29:32:9f:a2:cc:86: bc:46:b7:fd:8a:98:11:54:9d:c7:3f:75:72:58:e1: a0:d8:4a:a4:a9:36:00:90:27:20:90:6e:85:64:20: bc:08:8d:6d:5e:de:f5:19:d3:94:95:ce:5c:91:f9: f8:eb:1d:f2:87:ab:58:b6:c8:e5:52:b0:27:6d:2c: 17:6b:fb:e9:c3:f5:4c:c6:70:98:87:db:fd:64:fd: b0:91:97:55:2a:cf:60:ef:e9:3b:89:8a:07:9c:2e: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:53:A0:2B:43:01:7C:39:B2:3A:46:0F:57:1B:C4:74:52:4A:BE:A0 X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:55:a7:f0:5b:6d:4f:bd:a8:a1:f3:74:47:a9:3b:d8:6c:23: fc:0d:e9:02:17:8f:79:5e:05:b9:40:da:6f:bd:ee:32:8c:b5: 0f:06:71:bd:b4:e9:74:75:9b:ce:ed:e7:50:d0:1d:97:0f:5c: d0:ff:7a:26:17:cb:63:7f:58:5c:94:8e:cd:c0:dd:9d:25:9f: e3:33:77:ae:5f:26:90:77:75:d3:21:24:c1:11:1f:1c:68:07: de:04:25:0c:30:77:a4:69:42:c3:ae:74:bb:84:82:b1:00:32: 2c:d0:a2:93:e8:8f:e3:f0:df:5e:7b:e2:4e:7c:f8:b1:44:ae: 71:36:d2:f3:d9:6e:e1:01:9e:20:80:0e:ee:55:75:8c:3f:8c: b1:8c:23:a2:75:4a:46:e4:ce:b4:ea:a0:37:59:ba:ba:78:4a: 92:dc:58:06:16:53:65:e4:f6:0a:14:9a:fd:cf:81:5f:97:43: be:7d:47:f2:f2:b9:b9:41:13:b7:85:64:dc:3b:7c:8e:c2:31: 64:16:b2:6c:a2:b5:e8:f0:c0:5b:96:83:0e:9c:2b:16:34:b4: 8b:4a:3e:ff:d8:ec:80:49:ee:b7:bb:e7:36:ff:7b:3d:7f:34: b1:a5:ac:7e:b5:da:19:cd:8f:7d:21:30:e8:78:7f:a4:8a:8f: ad:67:1d:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjQwNTA0MjI1MzU0WhcNMjQwNTExMjI1MzU0WjAYMRYwFAYD VQQDEw02NjM2YmM4Mi1mMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwluUuJJWBwnvOeROKLnr1FRD5WTLqd6kNjrfn5E80S/lRWwI1/HfI/zf9n/E HNTfWnsdovp6/RFOkNSypIF2PS6o/g0YbO5dG8kLhJJhlqXgKhmJRNsXnnEVecuQ Vw8ii2Cwhmwiw3qoui7j03/FwMdMvrTYIwf1Al1z8SNUPEKIY26SN3abDgMZXFHb 5W09t7M/Vo9o0NoozMcj9EspMp+izIa8Rrf9ipgRVJ3HP3VyWOGg2EqkqTYAkCcg kG6FZCC8CI1tXt71GdOUlc5ckfn46x3yh6tYtsjlUrAnbSwXa/vpw/VMxnCYh9v9 ZP2wkZdVKs9g7+k7iYoHnC4PLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBToCtD AXw5sjpGD1cbxHRSSr6gMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzVFOS9FNjk0RkM0QUZCRDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEz enBWVUhLV3NVdklYX3BXVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwVafwW21Pvaih83RHqTvYbCP8DekCF495XgW5QNpvve4yjLUPBnG9 tOl0dZvO7edQ0B2XD1zQ/3omF8tjf1hclI7NwN2dJZ/jM3euXyaQd3XTISTBER8c aAfeBCUMMHekaULDrnS7hIKxADIs0KKT6I/j8N9ee+JOfPixRK5xNtLz2W7hAZ4g gA7uVXWMP4yxjCOidUpG5M606qA3Wbq6eEqS3FgGFlNl5PYKFJr9z4Ffl0O+fUfy 8rm5QRO3hWTcO3yOwjFkFrJsorXo8MBbloMOnCsWNLSLSj7/2OyASe63u+c2/3s9 fzSxpax+tdoZzY99ITDoeH+kio+tZx2h -----END CERTIFICATE-----Generated at Sun May 5 00:14:48 2024 by rpki-client on console-ams.rpki-client.org