$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: 84INnjoIvbQUFf6m/mJI6NbnFH4TklGu3qpWtQhvR6w= Subject key identifier: E4:A7:4F:F6:DB:89:DB:F8:23:E7:65:CE:11:7E:4B:F8:D7:D5:FE:5B Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0160 Signing time: Fri 03 May 2024 04:57:30 +0000 Manifest this update: Fri 03 May 2024 04:57:29 +0000 Manifest next update: Fri 10 May 2024 04:57:29 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: MQd20Wj5Btl3W48rku/7wufRpLAOzhOxlPny3DpUESg=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: VH7Az1l3/C2rodFNPFK9l0cDE+AV/Y9VchB0X9wxyLY=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: fI24ww+ckWmpN0OtogeTi+6uALeUfFotFhjPlpivn84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 04:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: May 3 04:57:29 2024 GMT Not After : May 10 04:57:29 2024 GMT Subject: CN=66346eb9-ecf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:e7:d1:ba:c3:76:18:5a:d6:64:c2:24:40: 1a:c0:2d:f9:e7:83:41:17:ca:6c:d1:1b:21:7e:13: 93:1b:08:df:42:4f:e2:ea:d2:c3:3c:67:48:aa:97: 3c:9d:f4:ac:56:01:d2:16:5f:27:54:9e:e3:92:b0: 34:8c:75:39:d8:e6:a7:98:18:a6:44:f3:de:be:76: f5:fc:f6:d5:0b:b5:c8:53:54:82:cd:29:bf:39:e2: f1:8d:8d:b6:0a:31:6d:d6:c6:57:af:c3:a5:bc:02: 37:77:27:31:69:ec:52:98:70:7d:4d:88:40:38:ee: 70:3b:2f:84:0b:85:d7:8c:59:17:bd:6b:e1:3a:46: 10:5f:b0:ae:d8:94:a8:06:b1:68:d0:f2:79:68:66: 22:cc:e5:d0:a5:97:a5:de:a1:36:99:d1:b0:05:7b: e7:b7:11:35:f3:d6:06:32:ac:f0:42:b9:dd:d4:b5: 2a:1f:b8:13:6a:2c:20:da:bd:97:c6:d2:9a:40:27: 62:c0:d3:b1:c5:4e:a4:af:98:90:75:c6:60:cd:8d: 05:fd:02:a6:49:57:cd:aa:dd:b9:13:c3:86:91:70: 82:a4:78:6a:cb:19:12:b4:b1:f9:af:4e:ba:0a:32: 35:44:8e:3b:d1:5e:0f:f3:23:b0:c4:88:58:7e:af: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:4F:F6:DB:89:DB:F8:23:E7:65:CE:11:7E:4B:F8:D7:D5:FE:5B X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b2:c9:5c:61:5d:0f:b4:53:56:27:75:7f:ca:65:f5:ae:da: fd:9c:cc:00:ec:c0:ad:d5:bb:dc:75:ce:6d:ba:69:a1:59:6b: e3:97:0e:ee:bd:49:57:bc:0d:ea:99:75:00:a6:88:7b:73:48: d4:5e:bd:8d:e4:a4:42:25:a7:6f:e1:9f:f3:1a:a3:2e:0f:94: 55:4e:bf:8b:81:a9:ce:20:66:33:3c:fa:e9:2a:19:c1:67:10: c2:e4:da:63:60:da:4d:44:8c:35:5a:ba:21:27:fb:fc:e7:29: c7:16:f9:a8:70:eb:c3:29:b5:fa:01:d8:54:a7:65:f1:37:ee: d5:43:cc:cb:b4:32:ec:19:92:ef:42:94:6b:d1:35:d1:8d:73: f9:f4:bf:7a:13:ff:bb:ee:17:aa:ef:45:dc:8a:b3:ee:59:e5: 27:ba:b0:6a:d5:5b:63:fb:d7:bf:a0:41:9a:f1:ab:c7:d1:e1: 9e:69:8c:98:51:32:22:33:7e:9b:ec:32:d4:94:b8:fb:45:dc: 30:56:0b:f9:31:77:7e:fe:9a:c1:0d:7d:e6:05:37:2b:fc:5a: 9a:b5:6b:b7:f0:d9:41:40:23:7d:2b:5a:b2:7f:46:cd:d4:df: 1d:4a:12:a5:b3:c0:33:b5:f9:ba:e6:ff:90:c7:43:7e:20:06: 59:d8:2b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjQwNTAzMDQ1NzI5WhcNMjQwNTEwMDQ1NzI5WjAYMRYwFAYD VQQDEw02NjM0NmViOS1lY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGHn0brDdhha1mTCJEAawC3554NBF8ps0RshfhOTGwjfQk/i6tLDPGdIqpc8 nfSsVgHSFl8nVJ7jkrA0jHU52OanmBimRPPevnb1/PbVC7XIU1SCzSm/OeLxjY22 CjFt1sZXr8OlvAI3dycxaexSmHB9TYhAOO5wOy+EC4XXjFkXvWvhOkYQX7Cu2JSo BrFo0PJ5aGYizOXQpZel3qE2mdGwBXvntxE189YGMqzwQrnd1LUqH7gTaiwg2r2X xtKaQCdiwNOxxU6kr5iQdcZgzY0F/QKmSVfNqt25E8OGkXCCpHhqyxkStLH5r066 CjI1RI470V4P8yOwxIhYfq8pvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSnT/bb idv4I+dlzhF+S/jX1f5bMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEsslcYV0PtFNWJ3V/ymX1rtr9nMwA7MCt1bvcdc5tummhWWvjlw7u vUlXvA3qmXUApoh7c0jUXr2N5KRCJadv4Z/zGqMuD5RVTr+LganOIGYzPPrpKhnB ZxDC5NpjYNpNRIw1WrohJ/v85ynHFvmocOvDKbX6AdhUp2XxN+7VQ8zLtDLsGZLv QpRr0TXRjXP59L96E/+77heq70XcirPuWeUnurBq1Vtj+9e/oEGa8avH0eGeaYyY UTIiM36b7DLUlLj7RdwwVgv5MXd+/prBDX3mBTcr/FqatWu38NlBQCN9K1qyf0bN 1N8dShKls8Aztfm65v+Qx0N+IAZZ2CuZ -----END CERTIFICATE-----Generated at Fri May 3 06:29:26 2024 by rpki-client on console-fra.rpki-client.org