$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json) Hash identifier: stfOQhGoRYLt1ns792e4jU8yCw/iV2a98kJuj8L/nP8= Subject key identifier: 49:6D:46:83:4E:39:65:36:0C:7B:01:37:33:A7:45:6F:3A:10:4D:72 Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64 Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064 Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft Manifest number: 0543 Signing time: Sat 01 Jun 2024 02:07:18 +0000 Manifest this update: Sat 01 Jun 2024 02:07:17 +0000 Manifest next update: Sat 08 Jun 2024 02:07:17 +0000 Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: w0WQOMfCuqzENaccaOdvmFA9FjBi/9NBhckl3FQZ6lM=) 2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: uxXFko4v1AL31DsxVShIW21OhPh6hu+4O3UHY6p5BM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064 Validity Not Before: Jun 1 02:07:17 2024 GMT Not After : Jun 8 02:07:17 2024 GMT Subject: CN=665a8255-e683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:70:97:0b:2f:3f:1f:2c:40:fe:3e:1e:c3:dd: f3:94:89:3a:5f:6d:b9:6d:33:8a:ce:b5:a4:c6:97: 43:1f:83:9e:29:c1:b2:62:20:87:26:7b:1e:97:40: aa:0d:70:6e:a8:8c:b8:66:0b:53:d9:19:db:56:0c: 78:db:68:ac:9c:cd:c3:dc:74:65:ab:79:0b:a7:17: 95:5e:75:01:f5:93:c5:86:98:73:e8:94:dc:89:c9: 5e:53:98:09:a2:8d:fc:51:09:92:a2:d3:5d:b5:22: 03:a1:8a:db:8a:87:0e:2c:27:eb:c5:7a:96:04:a8: 5c:6e:92:5a:15:0d:7d:81:33:ad:c5:85:ba:77:e5: 94:59:ba:29:91:f6:74:34:4b:66:34:f6:c7:75:ad: 7d:ca:a2:c7:8b:95:18:ef:52:fe:8e:71:27:bb:74: 1e:80:02:3b:d4:68:f3:32:a0:de:e1:74:cf:e9:95: f4:62:3d:b4:86:f5:f2:f6:a4:f6:e0:bf:e6:6b:69: 72:4b:7a:ae:82:77:f6:76:91:8d:30:cb:2a:8b:c2: 4a:5c:6c:46:9b:de:a7:0e:e4:51:2e:56:a7:98:ba: ea:cd:6a:f3:4d:7e:55:ef:ca:80:de:02:e1:ff:a0: fa:dc:2d:80:b9:ee:41:51:aa:54:fc:31:2f:08:45: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6D:46:83:4E:39:65:36:0C:7B:01:37:33:A7:45:6F:3A:10:4D:72 X509v3 Authority Key Identifier: keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a0:24:b5:83:5a:35:8f:bf:73:bb:cc:e2:de:3f:d7:86:68: 1a:fd:3d:fc:01:1f:27:f5:37:e3:68:bd:89:7e:93:d8:45:d1: 5e:c0:bd:92:50:08:d5:1d:1f:5f:0d:58:d6:d1:52:13:62:78: 38:d6:38:2a:4e:65:22:8b:2f:c7:59:0b:6e:a4:6d:99:1c:f3: 29:89:ab:96:8b:10:06:0c:ee:da:64:02:1d:c9:21:ed:42:55: 8e:65:05:44:f6:23:d9:2e:37:b4:53:d8:b5:e6:6a:89:1d:80: d0:b7:ad:84:e1:a6:95:a7:a9:0b:b8:bc:7a:78:dd:13:fd:d5: 64:dd:d0:42:98:39:e3:f2:5c:e4:c5:8c:75:cd:1d:8c:ee:d8: 44:c9:dc:64:3b:09:9a:1f:e4:9d:02:08:47:37:0e:8f:f9:f0: 8b:e0:b7:73:02:23:b1:03:c9:04:50:d9:83:2e:46:52:4f:af: af:74:23:a5:ae:b8:c5:ac:e6:1b:6a:56:da:f1:be:c3:ad:54: 5e:49:19:87:79:c9:f9:b5:6f:b3:83:94:2a:08:e7:a3:12:8e: 82:75:75:ad:a2:57:d1:88:2a:cb:7a:df:a7:db:88:7a:b3:d6: 93:55:9b:69:25:1a:09:10:2c:bf:8a:a1:15:e5:76:29:3f:fe: 0b:8d:14:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBODIxMTAvBgNVBAUTKEQyQTA4NzFCQ0Q4Mzc2QzExQThGMDQ5QTM5ODU1QUZD REIxODMwNjQwHhcNMjQwNjAxMDIwNzE3WhcNMjQwNjA4MDIwNzE3WjAYMRYwFAYD VQQDEw02NjVhODI1NS1lNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73CXCy8/HyxA/j4ew93zlIk6X225bTOKzrWkxpdDH4OeKcGyYiCHJnsel0Cq DXBuqIy4ZgtT2RnbVgx422isnM3D3HRlq3kLpxeVXnUB9ZPFhphz6JTcicleU5gJ oo38UQmSotNdtSIDoYrbiocOLCfrxXqWBKhcbpJaFQ19gTOtxYW6d+WUWbopkfZ0 NEtmNPbHda19yqLHi5UY71L+jnEnu3QegAI71GjzMqDe4XTP6ZX0Yj20hvXy9qT2 4L/ma2lyS3qugnf2dpGNMMsqi8JKXGxGm96nDuRRLlanmLrqzWrzTX5V78qA3gLh /6D63C2Aue5BUapU/DEvCEUCVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEltRoNO OWU2DHsBNzOnRW86EE1yMB8GA1UdIwQYMBaAFNKghxvNg3bBGo8EmjmFWvzbGDBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi8wQkVCMzc1QUJF NDQxMUVCQUUzRDQzNDhDNEY5QUUwMi8wcUNIRzgyRGRzRWFqd1NhT1lWYV9Oc1lN R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBxQ0hHODJEZHNFYWp3U2FPWVZhX05zWU1HUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E4Mi8wQkVCMzc1QUJFNDQxMUVCQUUzRDQzNDhDNEY5QUUwMi8wcUNIRzgyRGRz RWFqd1NhT1lWYV9Oc1lNR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+oCS1g1o1j79zu8zi3j/Xhmga/T38AR8n9TfjaL2JfpPYRdFewL2S UAjVHR9fDVjW0VITYng41jgqTmUiiy/HWQtupG2ZHPMpiauWixAGDO7aZAIdySHt QlWOZQVE9iPZLje0U9i15mqJHYDQt62E4aaVp6kLuLx6eN0T/dVk3dBCmDnj8lzk xYx1zR2M7thEydxkOwmaH+SdAghHNw6P+fCL4LdzAiOxA8kEUNmDLkZST6+vdCOl rrjFrOYbalba8b7DrVReSRmHecn5tW+zg5QqCOejEo6CdXWtolfRiCrLet+n24h6 s9aTVZtpJRoJECy/iqEV5XYpP/4LjRQP -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org