$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: Ieoswwr6AV9ZFviA6YpG0Ipm/AB9xFyTJsAXKr9DpsA= Subject key identifier: 94:ED:84:10:93:6A:3F:50:A0:67:51:A1:AB:C3:83:56:A9:24:A6:CB Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: B0 Signing time: Sun 19 May 2024 06:36:07 +0000 Manifest this update: Sun 19 May 2024 06:36:07 +0000 Manifest next update: Sun 26 May 2024 06:36:07 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: 9qcxi4zCgY35Wolcis5YG9ummMso3CwwjWvBmSjGD8M=) 2: 000E0ABC0F6D11EE9C6BFE46C4F9AE02.roa (hash: T1SvHlvMUlXiHHTNX2e5nN0Php19sfmAVz7RYyt2PDE=) 3: B274FC2E0F6811EEB4A51726C4F9AE02.roa (hash: xT8qdVP2MP8Ox16zjkZRgJtNT2NI8n8d0MZF5JhVyq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: May 19 06:36:07 2024 GMT Not After : May 26 06:36:07 2024 GMT Subject: CN=66499dd7-e60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:1d:60:c4:e5:bf:9b:6c:92:81:f1:e8:a5: f7:99:20:54:3f:4f:e5:dd:33:f9:cc:bd:d6:a9:a9: 63:94:c0:df:7e:90:51:3e:5a:10:53:72:ab:05:12: d4:e1:ee:d4:82:f7:2d:56:21:60:0c:25:06:79:c2: 9f:23:2f:fd:4f:0e:67:72:c4:51:54:5f:55:af:89: f6:34:db:d5:a5:23:e8:87:70:2f:8b:e0:8d:8e:70: cb:0b:57:7f:9e:99:68:81:77:b2:7b:56:c8:0f:74: 95:9b:30:a1:d7:85:51:ba:fb:58:e8:58:11:5e:ac: 43:63:8b:d8:69:0f:4b:02:c1:20:7c:61:79:05:c2: 7f:69:46:d0:7a:e4:5d:e1:77:5c:e3:a4:b4:d1:76: 16:df:05:25:a7:c0:78:1a:96:4f:fa:74:52:e3:8c: c2:0e:b2:29:c6:c6:f5:c5:7d:f1:92:34:29:cd:82: 1d:90:9a:99:0f:e2:eb:3a:ca:c3:78:40:ed:4f:d7: 6f:72:d0:81:9f:a5:4a:8a:29:05:90:ff:c5:f9:19: 2d:92:b0:51:1d:e6:ed:47:fd:9e:ff:50:04:3b:aa: 6d:13:a8:b3:e2:35:c9:de:0c:da:27:12:66:59:4a: 92:d0:39:b6:1d:9b:40:04:44:02:db:61:f6:76:47: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:ED:84:10:93:6A:3F:50:A0:67:51:A1:AB:C3:83:56:A9:24:A6:CB X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:5e:b9:8f:41:8b:82:e8:c8:51:1d:6c:ec:12:a0:49:c4:22: 54:5e:2e:1f:e2:8c:87:09:76:d5:43:b3:63:1c:66:84:1c:34: b7:20:75:e8:c8:5f:9e:1b:e0:4b:a5:ee:39:1c:63:7c:ab:ef: 52:9b:0f:f2:4d:a4:ea:9a:00:8f:81:76:d2:8d:46:d6:7d:16: ad:f8:2b:17:6d:e4:29:7a:7b:49:2b:f9:17:e2:35:85:c6:e2: b4:ca:b5:5b:12:5a:8e:09:e7:3c:ff:c5:ce:33:f3:07:c0:af: 67:67:a4:bd:cd:8e:4d:8c:3d:ae:04:f1:f7:ea:6a:8a:f9:4e: d4:6e:b5:8e:2e:9d:1a:24:03:ea:00:f2:85:79:35:42:55:52: ec:76:e6:5b:b8:f4:6e:da:db:09:74:bc:fc:c3:f5:2d:d7:f5: 40:3a:cf:b9:13:8b:79:00:55:26:15:cb:85:46:bb:51:c4:84: f6:6f:40:2d:31:c4:56:80:58:57:be:48:88:15:7f:a6:8d:01: 6e:53:51:51:50:1a:60:c9:db:e1:67:80:c0:f7:0d:95:96:fe: 34:5b:9b:e7:c1:00:ac:ce:f0:90:28:17:f7:22:61:f8:af:3e: 89:2c:a5:b4:44:4b:7d:bf:03:f8:b6:ef:23:19:f0:44:ea:be: bb:63:f5:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjQwNTE5MDYzNjA3WhcNMjQwNTI2MDYzNjA3WjAYMRYwFAYD VQQDEw02NjQ5OWRkNy1lNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv30dYMTlv5tskoHx6KX3mSBUP0/l3TP5zL3WqaljlMDffpBRPloQU3KrBRLU 4e7UgvctViFgDCUGecKfIy/9Tw5ncsRRVF9Vr4n2NNvVpSPoh3Avi+CNjnDLC1d/ nplogXeye1bID3SVmzCh14VRuvtY6FgRXqxDY4vYaQ9LAsEgfGF5BcJ/aUbQeuRd 4Xdc46S00XYW3wUlp8B4GpZP+nRS44zCDrIpxsb1xX3xkjQpzYIdkJqZD+LrOsrD eEDtT9dvctCBn6VKiikFkP/F+RktkrBRHebtR/2e/1AEO6ptE6iz4jXJ3gzaJxJm WUqS0Dm2HZtABEQC22H2dkdxdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTthBCT aj9QoGdRoavDg1apJKbLMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFXrmPQYuC6MhRHWzsEqBJxCJUXi4f4oyHCXbVQ7NjHGaEHDS3IHXo yF+eG+BLpe45HGN8q+9Smw/yTaTqmgCPgXbSjUbWfRat+CsXbeQpentJK/kX4jWF xuK0yrVbElqOCec8/8XOM/MHwK9nZ6S9zY5NjD2uBPH36mqK+U7UbrWOLp0aJAPq APKFeTVCVVLsduZbuPRu2tsJdLz8w/Ut1/VAOs+5E4t5AFUmFcuFRrtRxIT2b0At McRWgFhXvkiIFX+mjQFuU1FRUBpgydvhZ4DA9w2Vlv40W5vnwQCszvCQKBf3ImH4 rz6JLKW0REt9vwP4tu8jGfBE6r67Y/XZ -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org