$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft File: MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json) Hash identifier: Xmn8TA0r+dtJiACziXwkZqPhWOoLC2Wna9YXXvK7P6A= Subject key identifier: 3C:3C:59:B6:3C:4C:9E:59:34:A6:2B:8D:D8:18:BD:3B:53:5F:9B:D0 Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft Manifest number: 0635 Signing time: Mon 06 May 2024 23:49:52 +0000 Manifest this update: Mon 06 May 2024 23:49:52 +0000 Manifest next update: Mon 13 May 2024 23:49:52 +0000 Files and hashes: 1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: 55V0H/lUlO7p2Ky0ezadV3dN0wSPZxZU3BdwU7ov2RY=) 2: E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa (hash: KbmKtTlUkbGUXMfBow8Um6GLcqBvDst3ajH55Y7RS70=) 3: 8A162CBC5CC011EEAD18A95CC4F9AE02.roa (hash: uWXYe8F4NZ1KTtscCCzXjUiRK9hUa9iZhisG2LywSZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Validity Not Before: May 6 23:49:52 2024 GMT Not After : May 13 23:49:52 2024 GMT Subject: CN=66396ca0-d0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:92:ee:e0:0f:65:4f:2d:f3:60:fe:6e:de: 20:ac:79:62:35:7d:23:fe:49:67:f1:79:bd:10:e8: 1e:60:e6:61:35:d0:6d:70:25:bd:e5:e9:bf:b7:33: ab:5c:94:51:9f:4a:9b:8f:54:09:78:73:85:fa:7c: 59:19:05:5d:9f:67:0b:a7:a5:79:cf:55:7f:75:63: d7:cd:73:75:1b:f5:e7:6c:90:15:1f:78:a6:96:5f: f6:05:3f:e3:d9:1f:6a:a7:13:d3:89:d0:d3:e0:44: ad:67:d3:ed:0c:81:97:dc:12:27:b7:e9:7e:ed:ef: fa:3b:ac:75:ee:e2:1e:e1:77:bc:d2:d1:86:cc:0f: 9f:fc:7b:b9:be:ba:3a:97:d4:6f:01:f9:7e:97:50: 22:b8:61:47:20:a5:bb:63:71:57:9d:7e:50:38:b8: 44:63:d8:0a:ce:68:9f:87:f9:eb:7e:85:4c:b6:29: 77:09:75:82:50:81:b1:d3:c9:84:1c:71:ab:11:97: d5:43:f5:14:65:fb:ed:a8:43:e2:7c:c8:ff:77:f1: 8d:b5:b8:97:05:26:bc:51:78:7d:5e:cc:2d:ca:87: 30:27:93:87:fd:bc:fa:2b:b0:ce:31:a5:ba:0d:b9: 19:8e:3f:ae:0b:d8:7e:35:1c:60:70:ca:1a:a6:aa: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3C:59:B6:3C:4C:9E:59:34:A6:2B:8D:D8:18:BD:3B:53:5F:9B:D0 X509v3 Authority Key Identifier: keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7c:e6:03:c1:b4:a6:bd:9e:2e:80:d2:cf:4f:99:e1:9d:35: f5:e6:ce:5c:2e:dc:38:fa:96:90:5a:4d:46:55:d6:33:ba:7c: 33:19:aa:e9:9b:9b:70:56:5a:68:15:0a:66:a3:4d:0b:86:3f: cc:23:a0:eb:30:29:e8:30:04:3f:f0:a9:c6:bc:78:26:27:8e: 60:d5:bd:eb:39:06:bb:7d:1e:74:bf:2d:31:22:5a:88:30:80: fd:89:97:f6:ed:05:cd:63:6c:a5:5a:36:8c:0e:5e:93:68:55: 69:32:ce:1f:6b:90:65:f3:61:5f:5f:6e:5c:d5:fd:84:f4:84: de:78:78:40:c5:98:54:61:61:35:c8:ff:d1:43:0b:81:5c:96: 10:94:5e:65:62:97:c4:48:b8:72:0f:4b:bb:d6:eb:58:18:41: 83:48:e5:71:6e:96:14:a0:f8:6c:4b:16:b5:93:49:8c:fd:e2: 79:f6:dc:d1:45:e0:60:a8:22:d6:e4:a3:1b:0f:2c:cb:f8:91: 87:60:5f:d8:4d:1a:79:44:e6:53:50:e9:c0:ea:56:b4:8a:3e: b3:98:72:e6:66:5d:b1:c8:72:b7:80:81:ab:3c:37:b6:b5:9f: 97:1e:0b:f9:7c:e7:e2:08:bb:ca:6d:ed:7b:b9:4c:e9:83:60: 04:8d:71:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC QkExMzRFMkIwHhcNMjQwNTA2MjM0OTUyWhcNMjQwNTEzMjM0OTUyWjAYMRYwFAYD VQQDEw02NjM5NmNhMC1kMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+WS7uAPZU8t82D+bt4grHliNX0j/kln8Xm9EOgeYOZhNdBtcCW95em/tzOr XJRRn0qbj1QJeHOF+nxZGQVdn2cLp6V5z1V/dWPXzXN1G/XnbJAVH3imll/2BT/j 2R9qpxPTidDT4EStZ9PtDIGX3BInt+l+7e/6O6x17uIe4Xe80tGGzA+f/Hu5vro6 l9RvAfl+l1AiuGFHIKW7Y3FXnX5QOLhEY9gKzmifh/nrfoVMtil3CXWCUIGx08mE HHGrEZfVQ/UUZfvtqEPifMj/d/GNtbiXBSa8UXh9XswtyocwJ5OH/bz6K7DOMaW6 DbkZjj+uC9h+NRxgcMoapqouxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw8WbY8 TJ5ZNKYrjdgYvTtTX5vQMB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTY2NS82RDBEMTJCODRCRjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3 Y3NMWW80WHA4cXE3b1RUaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAefOYDwbSmvZ4ugNLPT5nhnTX15s5cLtw4+paQWk1GVdYzunwzGarp m5twVlpoFQpmo00Lhj/MI6DrMCnoMAQ/8KnGvHgmJ45g1b3rOQa7fR50vy0xIlqI MID9iZf27QXNY2ylWjaMDl6TaFVpMs4fa5Bl82FfX25c1f2E9ITeeHhAxZhUYWE1 yP/RQwuBXJYQlF5lYpfESLhyD0u71utYGEGDSOVxbpYUoPhsSxa1k0mM/eJ59tzR ReBgqCLW5KMbDyzL+JGHYF/YTRp5ROZTUOnA6la0ij6zmHLmZl2xyHK3gIGrPDe2 tZ+XHgv5fOfiCLvKbe17uUzpg2AEjXGL -----END CERTIFICATE-----Generated at Tue May 7 00:53:26 2024 by rpki-client on console-ams.rpki-client.org