$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json) Hash identifier: Y75EwzJQsK3hHu5xOLuusjyezd2v7j1pupc2K+H7O1A= Subject key identifier: 58:51:C2:C9:DA:0F:D1:02:72:1E:59:83:DD:EF:90:C5:29:F9:E7:A0 Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft Manifest number: 88 Signing time: Sun 19 May 2024 07:05:55 +0000 Manifest this update: Sun 19 May 2024 07:05:55 +0000 Manifest next update: Sun 26 May 2024 07:05:55 +0000 Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: aNmhP1iMDSbjV+sKxCCYsQvBJoRwPZTH0mFsXA7k6q0=) 2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: xolDRhSXt2WA8L+8gCDvdLVCLWfk24OE5JGsb3rd3QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Validity Not Before: May 19 07:05:55 2024 GMT Not After : May 26 07:05:55 2024 GMT Subject: CN=6649a4d3-7538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:b0:3d:1d:7a:fc:f9:cc:86:d4:38:8c:8c: 7c:e3:f9:5c:5e:a1:ac:7d:47:3a:4e:d4:1c:eb:70: 80:57:32:52:aa:6c:43:22:99:63:5b:c3:9a:db:e4: a7:20:fb:b6:11:cb:a6:ed:d6:5d:7e:8f:63:c6:b8: b3:2d:91:f3:e9:b1:95:1f:09:90:a1:56:01:28:96: 0f:d8:2a:e9:63:7c:e5:a5:fd:6f:1c:39:5a:95:23: 52:00:ef:f3:60:1e:ec:76:05:b5:25:41:50:31:49: 60:5f:e7:85:c0:79:9d:03:fd:ef:34:03:52:46:2b: e5:88:83:f4:1b:50:9e:da:7e:13:5a:60:e3:2b:29: 84:97:31:f1:ee:6c:e6:ec:21:63:51:e0:31:d1:81: fa:27:8c:61:d2:50:7c:5d:05:22:f3:b2:0a:83:5a: fe:4c:ec:a9:35:4d:eb:45:b8:7b:b9:bc:6e:6f:72: 02:4e:c2:b5:3b:0c:e6:03:59:b0:9e:2b:3d:2b:ef: d8:d4:46:86:1d:8f:f1:7d:79:a1:b5:44:0c:37:55: 2d:81:c9:d7:db:5c:3d:d3:01:30:3e:13:98:be:13: 15:17:99:01:ad:98:25:1b:14:41:71:1d:49:4e:56: 25:41:64:10:8b:f9:26:ea:38:5a:15:3f:40:2c:ec: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:51:C2:C9:DA:0F:D1:02:72:1E:59:83:DD:EF:90:C5:29:F9:E7:A0 X509v3 Authority Key Identifier: keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6b:bc:1a:fe:4c:dd:92:4c:87:a6:2b:74:76:19:f4:e5:5d: 6c:0a:85:59:f4:77:90:e8:f0:26:b9:19:e6:96:29:fc:d0:0d: df:d0:8f:3b:55:73:d8:37:68:3c:a7:fc:25:d4:65:1a:73:b6: 66:c7:d1:31:71:4d:a7:6b:50:1f:bc:91:74:03:99:cb:ef:85: fe:c4:57:79:e2:a6:3b:e9:e7:83:6e:a2:83:ac:3f:fd:92:31: f3:45:bd:46:a3:8f:d1:c5:85:25:3e:99:64:8e:8b:05:db:31: ac:5a:96:00:66:6d:2c:dc:d6:63:48:34:84:24:19:30:33:44: 78:de:56:ea:57:d2:67:57:4e:de:02:c8:52:cf:e8:7d:f4:af: 8e:2d:19:9d:39:03:2b:86:da:39:90:b8:b2:d3:86:a3:b3:37: bc:29:13:e6:c5:c1:8f:c5:0a:99:dd:6a:d5:32:73:cb:04:d9: d1:e4:d7:65:8d:4c:44:96:8c:53:52:03:63:13:73:a9:31:7b: 90:94:65:2b:0b:58:d9:79:d3:8c:f7:ca:3d:58:c1:12:0c:1b: 96:ea:da:3c:16:5d:e7:a9:a4:b6:87:8e:12:72:09:f8:1f:93: 10:d5:06:47:4e:a4:9e:4a:a4:6f:6a:85:de:56:20:51:69:0d: cd:07:95:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG NTAwNTFFOUEwHhcNMjQwNTE5MDcwNTU1WhcNMjQwNTI2MDcwNTU1WjAYMRYwFAYD VQQDEw02NjQ5YTRkMy03NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx96wPR16/PnMhtQ4jIx84/lcXqGsfUc6TtQc63CAVzJSqmxDIpljW8Oa2+Sn IPu2Ecum7dZdfo9jxrizLZHz6bGVHwmQoVYBKJYP2CrpY3zlpf1vHDlalSNSAO/z YB7sdgW1JUFQMUlgX+eFwHmdA/3vNANSRivliIP0G1Ce2n4TWmDjKymElzHx7mzm 7CFjUeAx0YH6J4xh0lB8XQUi87IKg1r+TOypNU3rRbh7ubxub3ICTsK1OwzmA1mw nis9K+/Y1EaGHY/xfXmhtUQMN1UtgcnX21w90wEwPhOYvhMVF5kBrZglGxRBcR1J TlYlQWQQi/km6jhaFT9ALOwbNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhRwsna D9ECch5Zg93vkMUp+eegMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3 M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxa7wa/kzdkkyHpit0dhn05V1sCoVZ9HeQ6PAmuRnmlin80A3f0I87 VXPYN2g8p/wl1GUac7Zmx9ExcU2na1AfvJF0A5nL74X+xFd54qY76eeDbqKDrD/9 kjHzRb1Go4/RxYUlPplkjosF2zGsWpYAZm0s3NZjSDSEJBkwM0R43lbqV9JnV07e AshSz+h99K+OLRmdOQMrhto5kLiy04ajsze8KRPmxcGPxQqZ3WrVMnPLBNnR5Ndl jUxEloxTUgNjE3OpMXuQlGUrC1jZedOM98o9WMESDBuW6to8Fl3nqaS2h44Scgn4 H5MQ1QZHTqSeSqRvaoXeViBRaQ3NB5Vj -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org