$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft File: iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json) Hash identifier: OynSBgfhWbWefWfiS8Ce39hD/z6mP27ZKLLrAwR6zaE= Subject key identifier: 62:1B:35:BC:BE:09:76:4B:3F:D2:5A:68:B3:83:1C:82:F4:6D:2D:B3 Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft Manifest number: 0588 Signing time: Sun 19 May 2024 00:33:24 +0000 Manifest this update: Sun 19 May 2024 00:33:23 +0000 Manifest next update: Sun 26 May 2024 00:33:23 +0000 Files and hashes: 1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: MSDm8hY1LWchjQzWUdoMhDfOk48HA1qjSgriVJ/w7ok=) 2: 6339493A516311ED90F04711C4F9AE02.roa (hash: WXF55ahHLLIxuCdgdv6S5K66iBb3zG6OgjxwlWvJGNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: May 19 00:33:23 2024 GMT Not After : May 26 00:33:23 2024 GMT Subject: CN=664948d4-c383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:52:ca:b7:38:12:e5:a6:56:51:4a:de:1c: de:8c:d8:e0:80:07:f6:bc:b4:85:55:f2:7d:a4:ff: ab:31:cf:b3:89:e2:ba:27:7d:25:8f:98:88:31:13: 54:dc:a2:a3:01:05:1e:a3:b8:dd:87:88:e9:2f:36: 1e:e0:b1:a9:69:41:bd:b3:63:61:ab:60:0f:d0:f5: 5e:6e:0b:09:79:77:21:19:17:2b:25:44:47:d6:5b: 5a:dd:76:ca:17:db:4d:a9:c4:49:2b:94:a3:3e:ac: ff:ee:9d:93:15:0a:5f:b8:87:b2:68:db:70:47:5b: 79:bc:7a:61:65:2d:90:87:b8:2e:ec:d5:92:82:02: 8e:3b:d8:6c:aa:4e:c1:e3:b3:6d:5f:f2:76:f6:4f: 50:9e:79:09:99:38:cd:ee:29:47:6f:6f:12:14:67: 60:44:1d:b8:7c:ee:f6:e4:66:0b:01:aa:00:87:ed: 21:c9:e4:ee:dc:07:c1:7f:0a:f3:ba:50:59:fc:d0: 86:6c:66:6a:eb:c3:e7:2b:d0:56:67:a7:13:b2:e5: 5c:5e:c2:1e:88:22:47:39:7a:de:72:9b:f8:36:0b: 90:12:aa:24:cd:39:ff:12:c7:15:a4:47:88:b4:a4: ce:4e:36:32:c5:21:be:4a:2e:39:9f:9f:81:95:5b: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:35:BC:BE:09:76:4B:3F:D2:5A:68:B3:83:1C:82:F4:6D:2D:B3 X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7a:d7:6a:b3:39:2f:2b:bb:20:b8:af:aa:63:c5:e4:8d:75: 0e:4b:c2:4a:dd:94:80:7c:c3:29:d7:19:56:7c:4a:97:3c:51: 61:18:44:83:02:a0:14:b5:92:e5:dc:5c:b0:94:7c:c9:4d:a0: dd:53:27:48:08:a7:0e:3f:b7:8f:19:2e:96:e4:71:33:82:ec: 3a:73:93:37:4c:3e:3c:d5:a7:aa:21:86:d1:95:dd:71:65:f7: fa:0e:33:78:03:ce:2a:46:08:7e:a3:0c:62:33:40:8a:69:b8: b8:68:46:75:72:44:07:b7:99:07:2e:db:36:18:a9:67:80:32: 98:a6:f0:b0:08:d9:e0:a9:f6:ef:d1:0e:24:e3:35:31:ef:76: 3b:92:b3:99:ae:31:9f:e2:e8:9b:95:32:10:eb:ef:b8:b5:1e: c5:9f:5f:6f:2a:b1:3c:ce:3c:22:c0:43:61:41:02:51:1f:aa: c2:83:18:c0:0b:7b:fd:26:52:99:6d:66:c7:95:e0:50:47:a4: 8b:2e:8f:dc:67:c4:41:f7:ce:bf:05:b6:13:12:be:c2:2e:9b: 5b:81:b1:d8:d7:c4:92:9e:ef:05:98:7b:dd:df:37:77:d5:41: ef:c7:06:63:7d:6d:51:df:80:b8:65:7b:d5:d4:0a:03:15:aa: e4:c3:af:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjQwNTE5MDAzMzIzWhcNMjQwNTI2MDAzMzIzWjAYMRYwFAYD VQQDEw02NjQ5NDhkNC1jMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxhSyrc4EuWmVlFK3hzejNjggAf2vLSFVfJ9pP+rMc+zieK6J30lj5iIMRNU 3KKjAQUeo7jdh4jpLzYe4LGpaUG9s2Nhq2AP0PVebgsJeXchGRcrJURH1lta3XbK F9tNqcRJK5SjPqz/7p2TFQpfuIeyaNtwR1t5vHphZS2Qh7gu7NWSggKOO9hsqk7B 47NtX/J29k9QnnkJmTjN7ilHb28SFGdgRB24fO725GYLAaoAh+0hyeTu3AfBfwrz ulBZ/NCGbGZq68PnK9BWZ6cTsuVcXsIeiCJHOXrecpv4NguQEqokzTn/EscVpEeI tKTOTjYyxSG+Si45n5+BlVvgxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIbNby+ CXZLP9JaaLODHIL0bS2zMB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4 Q2xNOTlMdU9MT2pSeExueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNetdqszkvK7sguK+qY8XkjXUOS8JK3ZSAfMMp1xlWfEqXPFFhGESD AqAUtZLl3FywlHzJTaDdUydICKcOP7ePGS6W5HEzguw6c5M3TD481aeqIYbRld1x Zff6DjN4A84qRgh+owxiM0CKabi4aEZ1ckQHt5kHLts2GKlngDKYpvCwCNngqfbv 0Q4k4zUx73Y7krOZrjGf4uiblTIQ6++4tR7Fn19vKrE8zjwiwENhQQJRH6rCgxjA C3v9JlKZbWbHleBQR6SLLo/cZ8RB986/BbYTEr7CLptbgbHY18SSnu8FmHvd3zd3 1UHvxwZjfW1R34C4ZXvV1AoDFarkw6+y -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org