$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: aw+vcsSqOmLLy8OIv1o9tiMi4TnZ0XAOPf/z0AAH5wE= Subject key identifier: 7C:7C:C0:C4:A7:23:20:43:FD:CE:AC:48:18:3D:5E:7E:12:21:74:9C Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1A75 Signing time: Tue 30 Apr 2024 16:50:07 +0000 Manifest this update: Tue 30 Apr 2024 16:50:06 +0000 Manifest next update: Tue 07 May 2024 16:50:06 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: yBTf848ut9CdxsMlDnT+s5lfri8nmgtAQcoesl9dVWY=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: bS80mdbbpLv10s+nKT/O4x1wBvZSb86FmOe0/bfy2b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6785 (0x1a81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Apr 30 16:50:06 2024 GMT Not After : May 7 16:50:06 2024 GMT Subject: CN=6631213f-b718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:25:98:81:27:a8:71:87:60:7f:5e:14:48: b0:72:a7:e2:07:57:d4:1e:5c:e3:2a:2f:4b:ce:51: 5b:ca:f2:a6:e4:7f:20:35:db:ee:3f:de:dd:0e:5f: 71:33:71:a0:08:d7:26:c7:4a:18:e1:02:34:1f:c3: 27:a6:4a:6a:9c:51:4d:2f:70:af:fe:05:ff:ca:79: 3c:4d:26:1c:b9:52:53:3a:1f:64:ee:71:34:4f:28: 04:67:f3:11:e7:d5:4d:e1:a3:9b:cd:79:d0:1b:e7: 8a:af:b0:ce:b5:49:b7:b0:29:b3:aa:45:8f:7e:40: 5f:7c:73:97:35:0a:38:9e:b9:dc:d6:bb:03:04:b4: dc:10:48:68:cf:ad:f0:ac:06:38:64:55:28:d7:74: eb:ab:66:4a:43:17:60:1f:6d:c7:dd:a5:b2:58:bc: f8:7e:2d:57:d3:9d:b9:86:67:8e:e4:87:f8:1c:54: b1:a7:7b:94:4a:2d:8f:63:42:d8:f8:da:db:52:ed: aa:31:7a:e0:6d:d5:86:91:60:ec:98:4d:0f:fb:70: b9:de:cb:e2:c2:87:8d:69:22:73:29:58:3a:fa:5e: c3:bb:cb:ab:87:82:9d:18:80:e7:ae:bb:fb:25:97: 4f:f1:9a:40:a1:2a:29:fd:87:88:a4:71:c5:44:e4: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7C:C0:C4:A7:23:20:43:FD:CE:AC:48:18:3D:5E:7E:12:21:74:9C X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c6:40:c2:da:27:60:bc:b4:bd:aa:43:4e:6d:d8:de:c9:34: 14:56:18:a9:96:9f:6e:33:2b:eb:cf:ac:17:16:0e:8e:79:b2: 96:ed:32:71:60:fa:95:c3:d3:a9:f8:5c:c0:07:88:64:e5:1d: 37:79:83:86:e0:ab:7c:b5:a0:b1:e1:10:a7:93:0e:fc:be:39: bb:d2:71:32:aa:ea:bf:b1:13:cc:3b:bc:f4:42:f8:3d:38:da: 07:fa:79:86:d1:a6:34:5f:dc:93:bd:00:e8:36:18:a1:e3:d0: f3:0e:4b:53:78:9b:ac:6c:79:fc:1f:81:74:21:35:df:45:0b: 44:5b:4a:35:4e:20:e4:58:6b:a4:e9:e5:da:57:98:67:0c:75: 95:51:0d:13:e0:cb:57:4d:6e:a4:f3:11:21:a6:3b:eb:bc:5c: 03:52:22:c3:6e:9c:2a:f0:a1:1b:81:3a:65:9f:55:6c:d0:cd: 25:8c:0f:46:0f:15:9b:ff:6e:ab:2f:a6:72:86:6e:fb:eb:e0: 8d:3c:14:f1:c2:33:97:4e:cd:f7:63:f0:8d:bc:09:12:a7:b5: 89:64:37:b0:75:25:f4:fb:d1:f4:d5:0f:4f:22:9d:31:7f:dd: 54:f9:13:19:a5:9b:ab:f8:83:97:5a:9b:20:aa:13:db:4a:cc: 15:df:6f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjQwNDMwMTY1MDA2WhcNMjQwNTA3MTY1MDA2WjAYMRYwFAYD VQQDEw02NjMxMjEzZi1iNzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VUlmIEnqHGHYH9eFEiwcqfiB1fUHlzjKi9LzlFbyvKm5H8gNdvuP97dDl9x M3GgCNcmx0oY4QI0H8MnpkpqnFFNL3Cv/gX/ynk8TSYcuVJTOh9k7nE0TygEZ/MR 59VN4aObzXnQG+eKr7DOtUm3sCmzqkWPfkBffHOXNQo4nrnc1rsDBLTcEEhoz63w rAY4ZFUo13Trq2ZKQxdgH23H3aWyWLz4fi1X0525hmeO5If4HFSxp3uUSi2PY0LY +NrbUu2qMXrgbdWGkWDsmE0P+3C53sviwoeNaSJzKVg6+l7Du8urh4KdGIDnrrv7 JZdP8ZpAoSop/YeIpHHFROR9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx8wMSn IyBD/c6sSBg9Xn4SIXScMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlxkDC2idgvLS9qkNObdjeyTQUVhiplp9uMyvrz6wXFg6OebKW7TJx YPqVw9Op+FzAB4hk5R03eYOG4Kt8taCx4RCnkw78vjm70nEyquq/sRPMO7z0Qvg9 ONoH+nmG0aY0X9yTvQDoNhih49DzDktTeJusbHn8H4F0ITXfRQtEW0o1TiDkWGuk 6eXaV5hnDHWVUQ0T4MtXTW6k8xEhpjvrvFwDUiLDbpwq8KEbgTpln1Vs0M0ljA9G DxWb/26rL6Zyhm776+CNPBTxwjOXTs33Y/CNvAkSp7WJZDewdSX0+9H01Q9PIp0x f91U+RMZpZur+IOXWpsgqhPbSswV32/B -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:59 2024 by rpki-client on console-ams.rpki-client.org