$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: mgp/q+SgSSR5HSZgqQ1ljQokhwZ1Ehn1YBaRQM1PWA4= Subject key identifier: EF:83:5D:13:A3:B4:2C:4C:85:4A:A1:A6:15:F5:C6:18:D0:A4:D4:A2 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 0255 Signing time: Sat 27 Apr 2024 03:49:40 +0000 Manifest this update: Sat 27 Apr 2024 03:49:39 +0000 Manifest next update: Sat 04 May 2024 03:49:39 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: xK3UTYLLCPY+Wtl1p+NtJaCYsNE1S5j5YSoZrqEfcVw=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: Ia7xV/mMe3k81A61j5VDKHaSQK7LRNoy1NJWe5S5fVg=) 3: B1CE8816650411EEBE8D4512C4F9AE02.roa (hash: vq3Qsq5FWypMfTGvqhBSyTeswX8b81oUzefM/xyfZH0=) 4: 9389FFE8650411EE80570A12C4F9AE02.roa (hash: Q2dIutL+RKsgCTSnjKaI/XydYg18Fof/b33Z1mco1HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Apr 27 03:49:39 2024 GMT Not After : May 4 03:49:39 2024 GMT Subject: CN=662c75d4-9e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:f7:3b:a3:12:ff:8a:67:b7:af:63:bc:c6: 1d:cc:e3:ca:85:61:e3:45:46:96:b5:77:57:1b:dc: 1a:c9:dd:ed:1a:72:f2:23:89:4c:35:bc:fd:87:a2: 19:a9:c5:d1:ae:7f:3b:c3:18:3e:28:62:83:c4:a0: 51:50:70:5f:fb:d0:4c:ff:4c:33:e8:5c:82:ed:17: df:b6:bf:06:76:d4:49:87:13:39:7f:0f:44:e5:6b: 8e:a5:59:fe:14:f9:72:0b:44:ec:48:e4:a7:90:f5: 58:39:46:19:f0:49:14:a9:3f:32:de:6c:e6:02:6f: fc:06:d5:25:f5:c6:ee:0b:40:77:df:cf:43:eb:30: e7:81:0a:93:20:44:32:2f:25:67:93:1a:bb:5e:37: 4d:91:8a:a3:03:21:ea:6e:9e:12:c8:12:22:65:89: 8f:3e:ff:7e:27:88:fd:71:1e:b0:91:6b:19:5c:e3: a8:a6:1b:ac:39:aa:a5:24:f7:1b:a1:f1:08:5d:86: 28:64:f1:27:30:61:3b:4e:d6:94:67:c0:a3:7a:ed: 1a:64:a7:0b:b9:e3:85:62:e2:fb:b3:ce:e5:8b:29: 92:17:c4:df:48:77:66:bb:54:2c:d2:b2:01:f7:b4: f7:31:10:1f:b5:40:7c:be:38:ba:bb:f3:c9:b1:3a: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:83:5D:13:A3:B4:2C:4C:85:4A:A1:A6:15:F5:C6:18:D0:A4:D4:A2 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:e0:ff:ba:1e:64:86:9e:18:e0:4e:68:1f:2b:cb:4e:8d:26: 21:8e:5e:0a:2e:44:db:f8:06:ac:2c:3f:c7:1e:33:39:36:e8: fa:92:84:4d:4c:c7:3a:7d:0c:6f:bb:59:78:08:c4:a2:f8:03: 0c:82:44:cb:49:0a:a9:75:a4:95:bc:1c:ad:77:8d:c0:c8:0d: 77:84:05:4f:b6:93:76:e8:26:14:13:7c:94:c5:ee:d9:63:c9: 1a:fa:54:80:85:41:2a:95:03:13:4e:98:7b:76:3b:c2:82:b5: 30:f6:97:f7:48:03:dd:e8:5d:e6:51:b5:e1:a2:60:f8:d2:eb: b9:67:ec:14:4e:ae:6e:79:36:25:f3:78:64:10:1d:ae:0b:c6: 7f:ce:fe:7a:d5:3d:d9:73:fd:c2:fd:01:c3:04:e3:72:f9:52: 16:ef:3e:b2:5c:26:ad:92:df:b0:ab:9f:92:6c:56:4d:4b:c5: 4c:1d:09:32:14:b9:6e:21:c2:95:11:eb:0c:f2:b2:0d:22:57: 00:72:c8:aa:92:b2:a9:53:a4:df:39:06:d8:41:27:c2:16:74: 30:f5:12:f5:a4:c1:d3:ba:3e:5f:b6:65:59:fe:18:18:13:fc: 96:d4:86:7b:ff:9a:25:7a:b4:e7:02:2f:0c:a2:14:30:36:9a: ac:79:ca:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjQwNDI3MDM0OTM5WhcNMjQwNTA0MDM0OTM5WjAYMRYwFAYD VQQDEw02NjJjNzVkNC05ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EX3O6MS/4pnt69jvMYdzOPKhWHjRUaWtXdXG9wayd3tGnLyI4lMNbz9h6IZ qcXRrn87wxg+KGKDxKBRUHBf+9BM/0wz6FyC7Rfftr8GdtRJhxM5fw9E5WuOpVn+ FPlyC0TsSOSnkPVYOUYZ8EkUqT8y3mzmAm/8BtUl9cbuC0B3389D6zDngQqTIEQy LyVnkxq7XjdNkYqjAyHqbp4SyBIiZYmPPv9+J4j9cR6wkWsZXOOophusOaqlJPcb ofEIXYYoZPEnMGE7TtaUZ8Cjeu0aZKcLueOFYuL7s87liymSF8TfSHdmu1Qs0rIB 97T3MRAftUB8vji6u/PJsTqVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+DXROj tCxMhUqhphX1xhjQpNSiMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB4P+6HmSGnhjgTmgfK8tOjSYhjl4KLkTb+AasLD/HHjM5Nuj6koRN TMc6fQxvu1l4CMSi+AMMgkTLSQqpdaSVvBytd43AyA13hAVPtpN26CYUE3yUxe7Z Y8ka+lSAhUEqlQMTTph7djvCgrUw9pf3SAPd6F3mUbXhomD40uu5Z+wUTq5ueTYl 83hkEB2uC8Z/zv561T3Zc/3C/QHDBONy+VIW7z6yXCatkt+wq5+SbFZNS8VMHQky FLluIcKVEesM8rINIlcAcsiqkrKpU6TfOQbYQSfCFnQw9RL1pMHTuj5ftmVZ/hgY E/yW1IZ7/5olerTnAi8MohQwNpqsecrj -----END CERTIFICATE-----Generated at Sat Apr 27 10:21:00 2024 by rpki-client on console-ams.rpki-client.org