$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: 6EFq5wO9qlFibrSVex3hJ8x29zy5jHq6Awl7mJq/8Nk= Subject key identifier: DD:75:EF:9B:F3:4D:1E:EC:18:6C:2D:DD:10:57:88:3F:31:0E:2D:80 Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 0FBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 0FB8 Signing time: Sat 18 May 2024 18:03:09 +0000 Manifest this update: Sat 18 May 2024 18:03:08 +0000 Manifest next update: Sat 25 May 2024 18:03:08 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: uFTbvjVfRRREiaiRhmY/cQoO5PvibfhYJRYOQnygFXM=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: yVQ7Tl1tWpf81vPcr+DIGrlTie1lmDP121ZRm0ckbwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4031 (0xfbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: May 18 18:03:08 2024 GMT Not After : May 25 18:03:08 2024 GMT Subject: CN=6648ed5c-b50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:3f:b6:f2:98:fe:88:68:58:66:8a:b4:46: 48:ca:eb:f0:03:a9:0f:69:f0:3f:e7:8d:35:f3:65: e0:1a:f6:44:3a:68:1d:46:8b:f4:02:bb:40:10:6b: 81:9f:21:56:44:5a:5d:59:d3:6e:21:aa:9f:03:9b: f1:4f:ca:29:e5:d8:fd:6b:c1:91:47:64:df:11:87: 9a:29:92:a5:cf:3f:f1:4f:55:6a:da:6e:a4:75:a6: de:d8:da:ec:07:ea:fc:59:3a:74:f9:85:b6:57:a9: 7a:62:4f:5b:02:da:d7:ba:cc:dc:52:7c:c1:61:af: ed:f6:09:e5:61:1f:10:66:fe:26:62:84:92:a8:bd: fb:e9:84:7b:89:3f:44:03:a7:41:fa:a7:de:77:b4: b5:d9:73:58:80:2b:78:3a:5a:7c:3b:e4:1b:03:c4: 31:13:eb:63:0c:60:a0:e8:6a:56:a0:18:1a:4d:69: 5c:ed:d1:bd:c1:60:f1:16:00:1b:a7:ef:89:11:4e: ab:50:17:78:97:83:12:24:45:d1:26:59:ca:52:5a: 03:f7:3a:b0:3f:f9:4f:98:af:0f:84:32:5b:fb:00: 97:f1:50:b7:cd:c4:c4:ab:b7:a4:9e:45:12:99:42: 33:e9:64:1a:aa:e0:e4:15:2b:8e:8a:5c:91:ce:d6: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:EF:9B:F3:4D:1E:EC:18:6C:2D:DD:10:57:88:3F:31:0E:2D:80 X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fb:9b:51:47:36:e4:3a:64:08:8b:77:97:3b:e9:fb:fb:ea: 5e:f8:df:72:ab:b5:25:98:94:91:7c:ce:b1:9c:c2:62:c8:91: 74:54:11:73:79:92:d7:d7:1b:a4:30:57:b8:49:b5:bb:5d:9b: 27:78:93:26:7b:48:ae:df:ed:34:65:35:cb:41:ab:5a:02:06: 24:a7:d2:40:81:41:87:b0:f5:74:30:1b:41:33:dd:50:2e:d0: 4b:4d:76:fd:2b:55:ce:b0:9e:3c:dc:79:8c:f0:d3:35:ad:8f: 00:99:fc:71:fc:cf:11:7a:24:44:a4:47:e5:f9:26:53:f9:d9: 55:76:3e:1d:89:1d:f5:77:f0:f4:a8:86:01:b1:44:d2:5c:98: 23:64:e2:98:1d:52:14:87:3f:66:a7:89:4e:4f:92:49:8a:c2: 88:f4:d9:5f:fd:a8:cf:33:6d:15:96:c0:99:fa:f0:48:a4:aa: 4c:bd:ef:95:5a:31:ca:e7:9e:4d:d9:a5:4f:30:75:39:1b:4c: d4:10:9f:8f:dc:13:2e:20:d0:0a:38:23:30:07:96:e8:9e:6a: 6a:5b:24:71:ee:2c:f1:89:39:bb:ea:20:4d:42:1e:35:bc:2b: 73:31:50:e2:1c:b3:88:ec:c3:f7:04:09:2a:f9:35:99:7e:ca: e0:8d:7b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjQwNTE4MTgwMzA4WhcNMjQwNTI1MTgwMzA4WjAYMRYwFAYD VQQDEw02NjQ4ZWQ1Yy1iNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxds/tvKY/ohoWGaKtEZIyuvwA6kPafA/540182XgGvZEOmgdRov0ArtAEGuB nyFWRFpdWdNuIaqfA5vxT8op5dj9a8GRR2TfEYeaKZKlzz/xT1Vq2m6kdabe2Nrs B+r8WTp0+YW2V6l6Yk9bAtrXuszcUnzBYa/t9gnlYR8QZv4mYoSSqL376YR7iT9E A6dB+qfed7S12XNYgCt4Olp8O+QbA8QxE+tjDGCg6GpWoBgaTWlc7dG9wWDxFgAb p++JEU6rUBd4l4MSJEXRJlnKUloD9zqwP/lPmK8PhDJb+wCX8VC3zcTEq7eknkUS mUIz6WQaquDkFSuOilyRztZCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1175vz TR7sGGwt3RBXiD8xDi2AMB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc+5tRRzbkOmQIi3eXO+n7++pe+N9yq7UlmJSRfM6xnMJiyJF0VBFz eZLX1xukMFe4SbW7XZsneJMme0iu3+00ZTXLQataAgYkp9JAgUGHsPV0MBtBM91Q LtBLTXb9K1XOsJ483HmM8NM1rY8Amfxx/M8ReiREpEfl+SZT+dlVdj4diR31d/D0 qIYBsUTSXJgjZOKYHVIUhz9mp4lOT5JJisKI9Nlf/ajPM20VlsCZ+vBIpKpMve+V WjHK555N2aVPMHU5G0zUEJ+P3BMuINAKOCMwB5bonmpqWyRx7izxiTm76iBNQh41 vCtzMVDiHLOI7MP3BAkq+TWZfsrgjXsL -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org