$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: YOv2oBVBL7vpSYalGteZYWYJKzrNlt18E2hKGPCR/xo= Subject key identifier: B8:03:FC:68:D8:E2:07:CA:E6:7D:7A:07:EB:E7:4B:D3:C7:B2:1F:7A Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 09C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 09B9 Signing time: Mon 06 May 2024 20:57:57 +0000 Manifest this update: Mon 06 May 2024 20:57:56 +0000 Manifest next update: Mon 13 May 2024 20:57:56 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: onMWGiMzw7Y7Uw0UIkCwoC+YV6p9ksRyLXbcDm1lDqg=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: XDiNSyvSEtWXI6wHIar737kbkmX0g3of9RTGZZqXm0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: May 6 20:57:56 2024 GMT Not After : May 13 20:57:56 2024 GMT Subject: CN=66394455-f05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:ed:10:2b:f6:c6:e7:8c:da:16:f4:20:c6: dd:c4:68:03:28:9b:60:a4:12:e3:be:49:ca:8c:20: 90:45:51:3f:87:c9:da:af:52:1e:b2:3e:e7:be:2d: 5c:ec:55:d1:75:96:be:04:88:a0:29:1f:86:49:b4: 89:c9:04:15:b2:a3:49:12:d8:0f:e9:1a:e0:83:31: aa:df:67:47:2a:a8:0b:ec:1e:65:a3:43:4b:bc:20: 03:ad:39:1c:9c:c1:3d:9d:91:58:98:99:ed:b7:df: ec:05:49:a3:a3:40:cd:da:ca:e3:8f:8e:1a:16:07: 0a:7b:0e:67:31:7e:1a:27:d4:2a:1d:2c:85:a8:4e: f0:44:52:72:2a:cf:75:69:6d:21:91:25:09:7a:63: 3b:6f:13:11:b0:3d:32:a9:87:53:cb:17:f2:90:66: ff:a1:0e:18:1e:16:84:c7:60:b1:8a:d3:ed:c4:7d: d9:7c:ce:5c:11:74:83:32:7c:3d:a1:8d:a7:46:47: 01:b2:48:a0:76:9c:a7:cd:aa:4f:bf:65:a7:b3:97: 1e:41:66:bf:45:00:f3:a8:c9:82:a2:68:12:7d:98: 99:b3:c5:15:c9:22:6b:49:bb:a6:a7:ca:b9:0a:55: 4d:be:c6:15:4e:96:60:09:d5:70:38:7f:3f:3b:d9: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:03:FC:68:D8:E2:07:CA:E6:7D:7A:07:EB:E7:4B:D3:C7:B2:1F:7A X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:38:cc:60:05:1d:32:ab:b4:f1:bf:b2:0d:32:ca:5d:3a:49: a6:71:c8:34:75:28:f7:32:e6:9d:89:24:0b:dd:e4:37:ef:69: 2e:82:61:9f:50:de:11:ea:74:22:9b:45:8a:e0:8b:18:e6:33: cb:07:47:e8:38:2a:d9:76:d2:a4:4a:54:0e:f1:f7:fa:53:5f: c5:f1:a7:76:47:18:e0:a7:4d:79:3e:16:df:79:d5:e0:94:3b: 19:60:8c:6d:e9:38:36:1c:d1:0d:57:16:3b:6c:1f:d3:55:e9: ab:23:17:fb:c5:65:4b:b1:3d:0b:19:59:a9:d6:1d:bc:5a:54: cc:04:49:f0:3f:cc:48:da:76:27:55:6c:4b:99:9c:bc:0f:02: 51:0f:f5:3c:55:4f:1f:2f:f8:dd:ef:6e:28:ca:71:23:a3:f0: 86:ae:e5:36:01:c2:71:9f:f8:25:2e:7d:47:ee:25:44:c3:ba: 38:c8:e9:8d:af:1e:11:0f:a7:43:f1:7c:b1:b8:c6:a2:0d:e5: 21:47:d4:be:42:a4:47:96:8d:45:de:80:e4:08:f3:db:47:23: 69:93:d8:34:ae:e6:93:c3:4c:7f:8f:38:85:48:8b:42:b2:73: c0:30:65:9b:2b:50:37:e0:4d:91:d9:4c:1e:7f:9c:28:d0:51: 5a:e0:87:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjQwNTA2MjA1NzU2WhcNMjQwNTEzMjA1NzU2WjAYMRYwFAYD VQQDEw02NjM5NDQ1NS1mMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kbtECv2xueM2hb0IMbdxGgDKJtgpBLjvknKjCCQRVE/h8nar1Iesj7nvi1c 7FXRdZa+BIigKR+GSbSJyQQVsqNJEtgP6RrggzGq32dHKqgL7B5lo0NLvCADrTkc nME9nZFYmJntt9/sBUmjo0DN2srjj44aFgcKew5nMX4aJ9QqHSyFqE7wRFJyKs91 aW0hkSUJemM7bxMRsD0yqYdTyxfykGb/oQ4YHhaEx2CxitPtxH3ZfM5cEXSDMnw9 oY2nRkcBskigdpynzapPv2Wns5ceQWa/RQDzqMmComgSfZiZs8UVySJrSbump8q5 ClVNvsYVTpZgCdVwOH8/O9lHewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgD/GjY 4gfK5n16B+vnS9PHsh96MB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxOMxgBR0yq7Txv7INMspdOkmmccg0dSj3MuadiSQL3eQ372kugmGf UN4R6nQim0WK4IsY5jPLB0foOCrZdtKkSlQO8ff6U1/F8ad2Rxjgp015PhbfedXg lDsZYIxt6Tg2HNENVxY7bB/TVemrIxf7xWVLsT0LGVmp1h28WlTMBEnwP8xI2nYn VWxLmZy8DwJRD/U8VU8fL/jd724oynEjo/CGruU2AcJxn/glLn1H7iVEw7o4yOmN rx4RD6dD8XyxuMaiDeUhR9S+QqRHlo1F3oDkCPPbRyNpk9g0ruaTw0x/jziFSItC snPAMGWbK1A34E2R2Uwef5wo0FFa4IdZ -----END CERTIFICATE-----Generated at Mon May 6 22:41:05 2024 by rpki-client on console-ams.rpki-client.org