$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft File: dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json) Hash identifier: ua/p/gM1lWeFRaZdINxgyDvKWKHa44trHwEN3pVnfjE= Subject key identifier: AC:A7:BB:CD:9F:6D:71:31:C9:FD:D0:32:36:11:8E:DD:9B:C3:7E:20 Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 Certificate issuer: /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft Manifest number: 058B Signing time: Sat 18 May 2024 14:54:20 +0000 Manifest this update: Sat 18 May 2024 14:54:20 +0000 Manifest next update: Sat 25 May 2024 14:54:20 +0000 Files and hashes: 1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: PmxCMJlsXPd4rFL8Nl2FFkOOfU/Riu9Mp5iSzGKRG1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Validity Not Before: May 18 14:54:20 2024 GMT Not After : May 25 14:54:20 2024 GMT Subject: CN=6648c11c-c100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:3d:9e:f0:88:89:ae:51:0e:42:68:90:2f: 85:25:ce:b8:9a:f7:82:9b:dd:8c:dd:e2:b8:15:f4: 09:a3:fa:97:3b:37:4b:f6:92:f1:c6:65:e4:45:67: 5d:7d:15:c9:25:ca:fa:54:65:ff:27:e0:5c:c5:74: 6f:01:6c:22:99:0e:10:03:45:70:01:77:57:22:23: 71:9c:a6:9c:2f:7d:b8:66:c2:f0:f0:9e:4b:6b:57: 39:72:77:0b:5a:c2:f6:6a:de:06:b1:f6:7e:6b:af: 97:eb:f6:40:a5:fa:23:e0:b7:0a:57:50:ce:8f:9d: 4f:67:13:c8:2b:7b:a6:60:d3:04:55:bf:0b:c3:08: 3a:12:e3:80:35:80:d9:b4:39:29:cd:20:0e:29:09: f3:83:da:e0:69:71:25:b6:8b:1c:da:0c:98:2b:a2: 2a:d7:33:f9:15:92:4d:52:b3:27:d8:86:3a:e6:0f: 02:1b:24:b6:b9:1c:b1:1b:e1:d5:f1:cd:4c:6c:8e: c2:bd:ab:98:f5:fa:35:f9:a3:35:fe:b4:1d:a2:fb: 29:a2:0a:1e:c5:13:1d:b4:33:3c:96:25:22:bd:f4: bd:4a:0e:a4:4f:34:a3:9b:72:15:82:c0:a5:dc:74: de:41:9d:50:58:b0:de:2e:2b:8a:a0:c0:6e:57:c3: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:BB:CD:9F:6D:71:31:C9:FD:D0:32:36:11:8E:DD:9B:C3:7E:20 X509v3 Authority Key Identifier: keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:27:0d:ab:05:cd:5e:d9:0b:42:78:25:c9:71:58:d3:8b:1e: 5a:76:8c:b9:4e:51:ed:2c:5f:0e:33:60:c7:33:39:dd:f9:23: 78:12:0d:39:8a:39:fa:d7:cd:c2:cf:d4:da:97:9c:61:e8:0a: 1f:89:1e:eb:be:d6:ff:8e:36:4d:cf:77:5b:02:ea:95:18:d7: 2c:69:64:91:62:a1:be:27:f6:4d:4b:8f:00:4c:7e:bc:91:61: 58:2c:b5:e5:20:af:95:8b:c6:29:1d:47:4b:03:2c:c1:63:15: 9e:e8:8d:e8:15:97:74:07:58:e7:d2:31:7e:6f:ee:9e:d4:8a: 34:e3:43:99:95:1b:71:64:78:dc:c5:d8:f0:7f:82:91:8c:77: 45:0a:78:0e:56:2c:2c:f8:11:72:56:0a:e1:1d:33:e4:19:ed: 8e:22:3a:28:1e:35:a4:3b:f2:b9:ce:3c:d9:9d:81:02:eb:03: 75:59:44:eb:34:18:ef:02:c8:0c:ca:77:2d:20:5c:7d:f9:fc: c8:54:5b:11:f3:7f:23:ff:2d:3a:11:41:bb:de:63:19:db:af: 83:df:81:97:aa:3c:04:fd:60:90:c5:76:ed:82:dd:8c:af:5e: 8a:31:cc:2e:e1:58:d1:ff:48:08:b1:e9:cf:50:22:59:f2:20: 18:f2:87:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFFMTMxMTAvBgNVBAUTKDc0RTFDQjgzMzYyNjg3MzQ3ODkzMkNBMjExODhBODhG REYyRTlERTAwHhcNMjQwNTE4MTQ1NDIwWhcNMjQwNTI1MTQ1NDIwWjAYMRYwFAYD VQQDEw02NjQ4YzExYy1jMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEw9nvCIia5RDkJokC+FJc64mveCm92M3eK4FfQJo/qXOzdL9pLxxmXkRWdd fRXJJcr6VGX/J+BcxXRvAWwimQ4QA0VwAXdXIiNxnKacL324ZsLw8J5La1c5cncL WsL2at4GsfZ+a6+X6/ZApfoj4LcKV1DOj51PZxPIK3umYNMEVb8Lwwg6EuOANYDZ tDkpzSAOKQnzg9rgaXEltosc2gyYK6Iq1zP5FZJNUrMn2IY65g8CGyS2uRyxG+HV 8c1MbI7CvauY9fo1+aM1/rQdovspogoexRMdtDM8liUivfS9Sg6kTzSjm3IVgsCl 3HTeQZ1QWLDeLiuKoMBuV8P09QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKynu82f bXExyf3QMjYRjt2bw34gMB8GA1UdIwQYMBaAFHThy4M2Joc0eJMsohGIqI/fLp3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUUxMy8xODNGOTlGQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6UjRreXlpRVlpb2o5OHVu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPSExnelltaHpSNGt5eWlFWWlvajk4dW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUUxMy8xODNGOTlGQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6 UjRreXlpRVlpb2o5OHVuZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlJw2rBc1e2QtCeCXJcVjTix5adoy5TlHtLF8OM2DHMznd+SN4Eg05 ijn6183Cz9Tal5xh6AofiR7rvtb/jjZNz3dbAuqVGNcsaWSRYqG+J/ZNS48ATH68 kWFYLLXlIK+Vi8YpHUdLAyzBYxWe6I3oFZd0B1jn0jF+b+6e1Io040OZlRtxZHjc xdjwf4KRjHdFCngOViws+BFyVgrhHTPkGe2OIjooHjWkO/K5zjzZnYEC6wN1WUTr NBjvAsgMynctIFx9+fzIVFsR838j/y06EUG73mMZ26+D34GXqjwE/WCQxXbtgt2M r16KMcwu4VjR/0gIsenPUCJZ8iAY8odS -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org