$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: nRG8lcMfLA96zjWRex6bUTi4pDF2j8aMpoEIKuXW+68= Subject key identifier: 36:D8:13:43:E6:53:30:BA:4C:25:50:B0:4D:CE:EA:C6:54:86:1B:83 Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: 31 Signing time: Sat 11 May 2024 08:37:38 +0000 Manifest this update: Sat 11 May 2024 08:37:38 +0000 Manifest next update: Sat 18 May 2024 08:37:38 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: 3t99YVyVnZt66SKDO2hQeEX9dLqh7Ta22RiRYiX/EEk=) 2: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: /tGBO2MLCus8PNWAAV5edOtrlC7E+7n4ZDxG8UW5xvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: May 11 08:37:38 2024 GMT Not After : May 18 08:37:38 2024 GMT Subject: CN=663f2e52-799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:47:86:61:8a:0a:44:31:d9:6b:d1:02:9d: 0f:25:62:06:f1:35:53:35:cd:5a:67:f8:02:59:d5: b6:99:92:46:7f:cf:e5:96:c4:02:11:c9:bb:9a:a6: 30:3d:a3:75:3e:1a:3e:45:e5:f1:ab:32:9e:dc:ec: d2:59:fd:3c:47:f9:97:1e:e1:0f:c2:96:83:16:bb: 00:28:d3:55:4c:bf:25:95:c0:47:ae:e8:e9:5d:3c: dd:9c:f5:9d:01:f9:de:2e:a1:41:de:a7:f5:27:11: 19:77:f9:78:d9:22:33:89:8c:cd:2a:d8:aa:d4:33: 93:b1:4d:2f:03:c1:2d:4a:65:b5:9d:cd:c7:08:4b: 87:30:d5:1f:b3:12:cc:a7:bf:0f:00:20:09:b5:94: 62:d3:95:f0:4a:15:60:5a:1b:0f:39:62:51:52:8a: 40:70:29:a2:a4:0f:06:7f:4e:f2:ad:3c:8f:41:ac: da:9a:7d:c5:61:4a:6a:e3:ca:0f:90:b6:a1:6a:d6: cd:f2:2e:fe:a7:40:b9:70:5e:cd:1a:df:53:84:84: ca:47:1c:53:36:fc:2a:a5:7f:67:8a:19:87:a3:d2: 42:51:e6:51:26:c9:e1:99:d9:e8:fe:6c:1e:94:1c: 50:13:94:6b:3e:fd:6b:6d:0b:c3:0f:e6:f7:dd:35: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:13:43:E6:53:30:BA:4C:25:50:B0:4D:CE:EA:C6:54:86:1B:83 X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:17:27:c7:ed:47:ec:54:09:96:ff:b4:00:a5:73:07:f7:52: e5:5f:99:14:99:cf:e4:1d:97:d3:98:d9:53:49:0f:59:ba:49: 16:95:be:5e:e6:e7:5f:ad:54:0b:3b:9b:d9:6e:c4:a0:f3:56: b1:8c:38:63:89:ac:d1:d5:45:e9:9c:51:e9:5a:df:a8:fc:0d: 47:4f:26:b8:f0:d5:11:a2:93:3f:ca:67:ca:5e:62:41:41:4d: 3c:6b:ed:77:13:a0:dd:db:eb:9b:2b:67:ce:3a:bc:9f:95:59: fd:55:37:8e:e7:3c:99:ef:80:4e:23:86:d2:d3:7a:bf:51:73: dd:e0:f0:95:56:41:58:36:c8:7a:f0:56:37:c2:78:15:71:cc: a0:09:cc:8f:10:5d:b3:d2:a8:80:7f:ef:8f:f7:88:f4:68:f6: 97:a8:fd:23:25:16:53:cb:7b:43:2c:1e:f1:59:95:04:3e:03: 97:d6:3a:9a:5c:1e:56:f4:a8:50:ff:16:d1:e1:af:79:eb:f1: e7:a4:c3:82:98:68:04:4f:f7:71:0b:6c:41:1c:69:59:28:e0: 07:07:7d:de:a6:dc:aa:13:11:03:cc:33:ed:67:69:5a:87:af: 97:d2:18:17:01:3e:5a:12:4f:96:f5:28:1d:74:3e:79:a0:f1: f5:05:b0:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFEQjExMC8GA1UEBRMoNDQzMTM2MzgxNUJDNUQwQkI3QTQyQjYxRDkyMzBCNERB RTIyQzUzQzAeFw0yNDA1MTEwODM3MzhaFw0yNDA1MTgwODM3MzhaMBgxFjAUBgNV BAMTDTY2M2YyZTUyLTc5OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuZkeGYYoKRDHZa9ECnQ8lYgbxNVM1zVpn+AJZ1baZkkZ/z+WWxAIRybuapjA9 o3U+Gj5F5fGrMp7c7NJZ/TxH+Zce4Q/CloMWuwAo01VMvyWVwEeu6OldPN2c9Z0B +d4uoUHep/UnERl3+XjZIjOJjM0q2KrUM5OxTS8DwS1KZbWdzccIS4cw1R+zEsyn vw8AIAm1lGLTlfBKFWBaGw85YlFSikBwKaKkDwZ/TvKtPI9BrNqafcVhSmrjyg+Q tqFq1s3yLv6nQLlwXs0a31OEhMpHHFM2/Cqlf2eKGYej0kJR5lEmyeGZ2ej+bB6U HFATlGs+/WttC8MP5vfdNVz9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNtgTQ+ZT MLpMJVCwTc7qxlSGG4MwHwYDVR0jBBgwFoAURDE2OBW8XQu3pCth2SMLTa4ixTww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QURCLzgxRjM4ODg2Qzc4 QzExRUU5N0U0MzgyRkM0RjlBRTAyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhU dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkRFMk9CVzhYUXUzcEN0aDJTTUxUYTRpeFR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QURCLzgxRjM4ODg2Qzc4QzExRUU5N0U0MzgyRkM0RjlBRTAyL1JERTJPQlc4WFF1 M3BDdGgyU01MVGE0aXhUdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4XJ8ftR+xUCZb/tAClcwf3UuVfmRSZz+Qdl9OY2VNJD1m6SRaVvl7m 51+tVAs7m9luxKDzVrGMOGOJrNHVRemcUela36j8DUdPJrjw1RGikz/KZ8peYkFB TTxr7XcToN3b65srZ846vJ+VWf1VN47nPJnvgE4jhtLTer9Rc93g8JVWQVg2yHrw VjfCeBVxzKAJzI8QXbPSqIB/74/3iPRo9peo/SMlFlPLe0MsHvFZlQQ+A5fWOppc Hlb0qFD/FtHhr3nr8eekw4KYaARP93ELbEEcaVko4AcHfd6m3KoTEQPMM+1naVqH r5fSGBcBPloST5b1KB10Pnmg8fUFsKE= -----END CERTIFICATE-----Generated at Sat May 11 09:13:15 2024 by rpki-client on console-ams.rpki-client.org