$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft File: CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json) Hash identifier: 7ybXu+CJ7Z09xSl9E/2ffkms9/wbdpsuWKbvVeORsFo= Subject key identifier: 89:84:FB:D6:4E:A3:0E:FF:F5:CD:8D:C8:BA:04:A5:AB:65:AF:70:DC Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Certificate serial: 10AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft Manifest number: 10A0 Signing time: Fri 31 May 2024 18:20:36 +0000 Manifest this update: Fri 31 May 2024 18:20:35 +0000 Manifest next update: Fri 07 Jun 2024 18:20:35 +0000 Files and hashes: 1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: kYCT0lnuD8MAAAa1fTfN9c/eJZ0NLMNnJK4gBr2whnc=) 2: 45892AB6E05C11EEBE4DBD67C4F9AE02.roa (hash: ds55Xc10GOakg/f5f9ylyFAnTRcBIgknS/ISEOzC8aw=) 3: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: dV6Gje7HXknhWyrmaQNl7+kUNAwDQ1YRYsrpn/Eiico=) 4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: ju5JyrFx3QMBkBKEHYJiAiwk+yeEJfkrgdj7RoSr48w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Validity Not Before: May 31 18:20:35 2024 GMT Not After : Jun 7 18:20:35 2024 GMT Subject: CN=665a14f3-45ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:51:8a:0a:b2:c6:46:7b:cd:cf:5e:1d:4c: 62:7f:21:6e:13:0f:24:f6:c6:98:d0:a0:f3:95:96: 98:91:5b:c5:a2:8e:e7:4f:d3:4f:84:e1:94:4a:5f: 8a:2a:23:8d:c4:0c:31:3b:91:f4:a2:34:94:2e:50: 8e:95:1e:06:12:b0:aa:04:e4:28:72:64:d7:b6:bd: a2:31:35:5b:f8:03:eb:14:e3:81:a3:24:14:c1:c4: 56:a0:bd:05:3b:10:2b:85:dc:c0:c4:84:f8:d7:0c: 51:84:10:06:55:7a:ce:fd:d3:19:39:bf:ac:38:15: f2:82:ec:91:b5:0e:35:8b:54:82:4b:dc:a0:a0:5f: e6:79:25:c3:c7:e3:a4:38:9b:79:e3:14:d4:7b:5a: 9e:38:89:76:39:e9:e3:a4:73:34:75:84:a3:57:f4: 15:e8:bb:ff:70:9d:03:1a:86:26:2f:fa:da:e1:90: 18:82:cf:04:a5:83:eb:f8:96:0f:7d:90:86:e3:70: e1:0d:4f:8a:a3:a4:2a:b1:df:89:41:7f:51:2c:e2: e6:24:f2:05:b9:44:f4:93:5d:e0:d2:ab:59:69:2c: 50:3f:96:eb:dd:fb:bf:e2:3f:7a:bb:7d:df:55:94: dc:0f:1a:b1:6d:ea:da:f2:18:89:63:87:34:24:a0: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:FB:D6:4E:A3:0E:FF:F5:CD:8D:C8:BA:04:A5:AB:65:AF:70:DC X509v3 Authority Key Identifier: keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:74:f5:68:3f:f1:58:b7:81:43:6b:d8:3f:97:9b:11:71:e9: f4:34:61:18:39:31:08:20:9f:5f:31:4f:b7:22:ce:a8:75:b8: e2:8e:d4:a3:87:e3:fa:78:30:63:0a:7b:bd:00:50:5a:99:ca: f8:68:2a:66:f2:25:51:61:7a:f4:d1:5e:8c:24:13:fb:36:c6: 40:3d:f4:b0:d9:0b:fa:fa:af:d3:a4:01:79:2e:b7:7f:44:e6: 53:e4:f7:92:3e:61:b1:92:c5:f9:80:bd:83:6a:1f:32:e6:d4: bc:51:7d:6a:38:2e:21:4a:39:44:db:22:ed:5e:3f:26:18:c8: 1f:ec:72:39:7d:92:18:73:82:d1:e4:f0:b3:fd:51:eb:89:b0: 7d:4d:51:de:55:df:c4:3a:cd:a3:24:54:ef:cc:f4:44:97:74: 11:cc:3d:02:89:3d:66:21:cd:0d:9a:4f:61:fd:af:c6:7f:39: cf:17:ac:a7:2f:3d:29:b8:45:f6:4a:43:f7:a0:cc:f3:f1:a1: ff:7c:34:b3:28:15:1b:dc:6a:67:74:58:ed:23:ee:1f:09:3c: 3f:85:26:9e:12:04:78:a4:89:c3:6e:45:84:39:d5:48:83:57: d6:6c:38:be:7b:94:31:09:56:3d:4e:be:19:fa:03:41:e6:a5: bb:e5:62:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2MDAxMTAvBgNVBAUTKDA4REI4MTVCNzMxMEQ4N0VFRkFGQ0Q1MkNGMjYxQ0Qx NTgyOUY3OTAwHhcNMjQwNTMxMTgyMDM1WhcNMjQwNjA3MTgyMDM1WjAYMRYwFAYD VQQDEw02NjVhMTRmMy00NWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JNRigqyxkZ7zc9eHUxifyFuEw8k9saY0KDzlZaYkVvFoo7nT9NPhOGUSl+K KiONxAwxO5H0ojSULlCOlR4GErCqBOQocmTXtr2iMTVb+APrFOOBoyQUwcRWoL0F OxArhdzAxIT41wxRhBAGVXrO/dMZOb+sOBXyguyRtQ41i1SCS9ygoF/meSXDx+Ok OJt54xTUe1qeOIl2OenjpHM0dYSjV/QV6Lv/cJ0DGoYmL/ra4ZAYgs8EpYPr+JYP fZCG43DhDU+Ko6Qqsd+JQX9RLOLmJPIFuUT0k13g0qtZaSxQP5br3fu/4j96u33f VZTcDxqxbera8hiJY4c0JKDfLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImE+9ZO ow7/9c2NyLoEpatlr3DcMB8GA1UdIwQYMBaAFAjbgVtzENh+76/NUs8mHNFYKfeQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjYwMC85RjYxNUJCRTA1 OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJIN3ZyODFTenlZYzBWZ3A5 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOdUJXM01RMkg3dnI4MVN6eVljMFZncDk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjYwMC85RjYxNUJCRTA1OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJI N3ZyODFTenlZYzBWZ3A5NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIdPVoP/FYt4FDa9g/l5sRcen0NGEYOTEIIJ9fMU+3Is6odbjijtSj h+P6eDBjCnu9AFBamcr4aCpm8iVRYXr00V6MJBP7NsZAPfSw2Qv6+q/TpAF5Lrd/ ROZT5PeSPmGxksX5gL2Dah8y5tS8UX1qOC4hSjlE2yLtXj8mGMgf7HI5fZIYc4LR 5PCz/VHribB9TVHeVd/EOs2jJFTvzPREl3QRzD0CiT1mIc0Nmk9h/a/GfznPF6yn Lz0puEX2SkP3oMzz8aH/fDSzKBUb3GpndFjtI+4fCTw/hSaeEgR4pInDbkWEOdVI g1fWbDi+e5QxCVY9Tr4Z+gNB5qW75WKV -----END CERTIFICATE-----Generated at Fri May 31 20:34:01 2024 by rpki-client on console-ams.rpki-client.org