$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json) Hash identifier: T3ZMCA7nXb59aqityssKo+kqeVjW0Qsnc16vnsKrcQ0= Subject key identifier: F0:6E:AA:B9:D9:C4:C6:A0:60:97:B0:51:CC:D6:15:E4:6A:42:84:FB Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20 Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft Manifest number: 0A77 Signing time: Sat 18 May 2024 20:16:17 +0000 Manifest this update: Sat 18 May 2024 20:16:16 +0000 Manifest next update: Sat 25 May 2024 20:16:16 +0000 Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: FHLtGm8PelS0m15Kl7FQkBfDPcd8Kwcm8YyQISsTm9o=) 2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: ZKl8ZS9GjVj0g18F2jv/rDCZr/m5D23OwiqZ7fI/VrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320 Validity Not Before: May 18 20:16:16 2024 GMT Not After : May 25 20:16:16 2024 GMT Subject: CN=66490c90-5a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:34:bb:07:c9:41:41:0b:13:db:10:9b:6a: 44:3c:45:d9:50:da:be:49:a6:e4:8e:88:94:83:7d: fc:e4:ce:2e:54:90:56:80:6f:6e:49:00:d7:9c:d0: 11:ec:7a:8c:5c:f0:8f:5a:65:ee:9e:04:5a:91:ab: 9e:78:57:58:ec:e4:e9:f7:f4:3c:f5:4a:d8:14:1a: af:58:55:8a:41:02:ac:dc:45:1d:97:1d:ae:f0:1b: 39:c1:db:5b:c7:c8:32:9b:c5:cf:49:97:f5:32:0f: 2c:b6:f7:8e:a2:63:58:b1:5c:0a:a8:f5:77:3f:d3: cf:1b:c3:f7:c7:c7:7b:a5:e5:65:14:69:0b:dc:7c: 57:89:12:14:84:f1:f8:1e:ed:99:e1:8c:9c:c6:04: 21:97:45:fb:1d:13:53:15:04:c9:f5:b4:8a:9e:3b: a7:aa:43:68:4d:5f:a7:ea:f0:99:45:58:18:14:2a: 14:eb:0d:f9:e2:90:b1:b0:72:8a:57:51:32:ef:e1: 64:4e:bf:40:84:b8:1d:db:04:df:ec:e6:51:5e:41: 14:3b:c1:ee:4e:9e:ed:1a:c1:e7:48:a8:47:d2:15: b7:01:4c:d2:f4:d8:46:77:83:3b:39:06:b1:a0:66: 45:c1:7b:04:b7:e0:30:ef:50:f4:b2:e2:43:67:da: ba:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6E:AA:B9:D9:C4:C6:A0:60:97:B0:51:CC:D6:15:E4:6A:42:84:FB X509v3 Authority Key Identifier: keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:de:45:3b:cd:ec:55:70:84:0d:da:95:9a:a2:f2:d2:28:2f: ed:7f:69:ef:ab:97:27:a0:d9:06:44:83:38:ae:50:48:14:d0: 27:49:c6:3f:9a:03:e2:45:7e:02:d8:94:f2:8a:03:38:6b:4f: 4e:bb:08:8d:b2:f9:a2:b1:03:9f:1d:6f:e6:ca:c9:55:d7:be: 0f:a4:92:90:36:48:75:a8:78:91:c8:37:25:52:6b:a5:07:d8: 22:db:e0:59:cc:88:5a:6c:5f:a2:11:7e:60:bb:84:1e:cd:75: 19:2d:d3:58:b1:e9:6e:e4:ac:66:57:59:7a:b5:63:ba:53:c7: e8:79:41:7a:3c:a1:58:66:ca:ad:38:f6:82:b3:6c:f7:69:7c: 9a:b3:18:d8:6c:c1:31:cc:3c:6f:3d:2f:55:30:c5:58:bd:75: 11:86:eb:92:c1:21:0c:18:24:c6:5e:3b:1e:74:89:a5:a4:8b: 61:e0:a5:69:79:00:c3:97:06:19:eb:42:2a:cf:c6:1f:e6:2b: 1a:60:b0:05:e5:9e:31:18:65:08:1e:f5:84:8a:02:51:b0:ec: ab:77:ec:89:75:18:4c:f9:b3:3f:4b:21:ea:65:e6:64:36:3c: 08:ff:a8:47:23:11:80:dc:9e:6b:e8:0d:dd:9f:f9:9e:0e:6a: 43:f8:f5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QkQxMTAvBgNVBAUTKEE2MkRFNzU2QTlCMTY5QkJDRkY3QjU1NkQ0MzMwMDk1 NUQ0MEUzMjAwHhcNMjQwNTE4MjAxNjE2WhcNMjQwNTI1MjAxNjE2WjAYMRYwFAYD VQQDEw02NjQ5MGM5MC01YTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41A0uwfJQUELE9sQm2pEPEXZUNq+SabkjoiUg3385M4uVJBWgG9uSQDXnNAR 7HqMXPCPWmXungRakaueeFdY7OTp9/Q89UrYFBqvWFWKQQKs3EUdlx2u8Bs5wdtb x8gym8XPSZf1Mg8stveOomNYsVwKqPV3P9PPG8P3x8d7peVlFGkL3HxXiRIUhPH4 Hu2Z4YycxgQhl0X7HRNTFQTJ9bSKnjunqkNoTV+n6vCZRVgYFCoU6w354pCxsHKK V1Ey7+FkTr9AhLgd2wTf7OZRXkEUO8HuTp7tGsHnSKhH0hW3AUzS9NhGd4M7OQax oGZFwXsEt+Aw71D0suJDZ9q6MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBuqrnZ xMagYJewUczWFeRqQoT7MB8GA1UdIwQYMBaAFKYt51apsWm7z/e1VtQzAJVdQOMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRCRC80MzczRDUwQzM4 NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFidlA5N1ZXMURNQWxWMUE0 eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpM25WcW14YWJ2UDk3VlcxRE1BbFYxQTR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRCRC80MzczRDUwQzM4NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFi dlA5N1ZXMURNQWxWMUE0eUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD3kU7zexVcIQN2pWaovLSKC/tf2nvq5cnoNkGRIM4rlBIFNAnScY/ mgPiRX4C2JTyigM4a09OuwiNsvmisQOfHW/myslV174PpJKQNkh1qHiRyDclUmul B9gi2+BZzIhabF+iEX5gu4QezXUZLdNYselu5KxmV1l6tWO6U8foeUF6PKFYZsqt OPaCs2z3aXyasxjYbMExzDxvPS9VMMVYvXURhuuSwSEMGCTGXjsedImlpIth4KVp eQDDlwYZ60Iqz8Yf5isaYLAF5Z4xGGUIHvWEigJRsOyrd+yJdRhM+bM/SyHqZeZk NjwI/6hHIxGA3J5r6A3dn/meDmpD+PV0 -----END CERTIFICATE-----Generated at Sat May 18 21:31:24 2024 by rpki-client on console-ams.rpki-client.org