$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft File: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json) Hash identifier: LBKJIBdGSjK0FUBMrE9BHZiBPU1oahBCpvSUTg7jn7A= Subject key identifier: 09:C5:62:B0:3F:CE:6F:A2:82:20:36:FB:05:6D:0A:15:D2:91:B3:53 Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft Manifest number: 0431 Signing time: Sun 19 May 2024 02:01:24 +0000 Manifest this update: Sun 19 May 2024 02:01:24 +0000 Manifest next update: Sun 26 May 2024 02:01:24 +0000 Files and hashes: 1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: wewEHt9aZvesmy2RimcLzQ7/t+OUbkuWO3wrtaH/u18=) 2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: Nk4ibWKpPuVtlG9/CDhXT/kC4VGAOuhpnoAKVaH7bcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: May 19 02:01:24 2024 GMT Not After : May 26 02:01:24 2024 GMT Subject: CN=66495d74-1afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:ac:e3:68:18:38:50:d8:e4:0d:fe:ce:46: 74:33:ad:55:ab:5a:61:7b:ed:07:3b:aa:cd:35:98: 7b:cd:fd:2a:ff:30:7f:fc:a4:99:42:0b:66:36:7a: 8a:4a:97:1d:17:99:7c:c4:f0:37:48:5c:37:e9:1c: 67:6a:a0:82:a2:f4:f7:0a:36:bd:49:67:9d:70:47: 40:95:18:19:ee:c9:b4:64:79:c5:2b:c1:49:d7:23: d4:d2:f4:56:7f:c3:e7:e3:c0:0b:8c:7d:0e:a9:c4: be:86:59:4e:30:d6:c9:f9:b0:de:6f:84:56:4e:de: e4:c0:8a:6e:fd:2c:e1:78:e8:13:74:0d:f3:23:90: 70:ea:7d:56:11:ad:26:89:27:c7:d1:0c:a5:53:30: 10:3c:e6:2f:e8:37:ca:3b:86:d8:82:e9:5c:c6:98: dd:2d:4e:71:06:d6:09:f9:fe:2c:7e:1d:aa:c0:53: 6e:09:8a:ee:d7:48:51:00:11:05:3b:df:a4:f6:b9: f0:3a:dc:78:94:4e:02:bd:5b:ab:b0:da:04:8c:1a: d8:a5:f3:4a:0f:18:cb:95:e3:a2:f5:d5:c1:15:d8: e8:a0:b4:5b:da:ca:50:8c:03:0d:1c:1d:e9:af:a5: a8:40:50:ab:be:7d:40:99:cd:57:0c:f0:3e:dd:a5: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C5:62:B0:3F:CE:6F:A2:82:20:36:FB:05:6D:0A:15:D2:91:B3:53 X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ee:03:67:6f:19:57:3b:53:e2:b5:f2:29:4c:03:59:c8:ac: 1e:6e:28:6f:76:99:b8:8b:04:0e:df:b6:45:24:d7:3e:33:c4: 1b:f3:4c:68:14:7c:16:72:fd:b7:b1:d3:c1:15:a0:d5:28:f5: 17:b0:7c:c5:2a:82:1c:28:ae:4e:a9:93:e7:63:16:15:8c:be: 13:6b:30:f9:20:3d:18:df:ac:cb:fb:86:c0:1e:5b:3d:2f:f5: 44:f9:1c:c3:1f:e3:00:08:ad:84:b5:3a:2d:c0:90:fe:4b:2b: 00:f8:27:1c:91:6d:d1:2b:39:7f:3e:06:c4:75:06:de:78:eb: 38:4e:01:a0:6d:e4:16:98:06:2c:ad:34:2f:18:57:78:ca:ca: eb:36:6b:74:cf:be:79:00:7f:d7:bf:4b:c0:f8:e6:9c:5d:19: d9:50:61:9c:ad:de:f3:20:b1:c7:9e:2b:00:31:b5:a8:48:5e: 8d:44:90:8b:32:1e:3a:c6:e4:61:f2:a9:15:fa:94:6c:76:ae: 53:a0:9d:df:8b:27:dd:66:b4:83:80:c0:c9:bd:c8:70:d0:d7: 28:39:c5:de:4e:02:79:6c:9f:e6:b8:85:4c:12:80:dd:37:3c: cd:ab:a0:b4:47:68:49:38:6f:11:30:d5:32:bf:01:ac:f3:19: 86:22:b6:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjQwNTE5MDIwMTI0WhcNMjQwNTI2MDIwMTI0WjAYMRYwFAYD VQQDEw02NjQ5NWQ3NC0xYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlis42gYOFDY5A3+zkZ0M61Vq1phe+0HO6rNNZh7zf0q/zB//KSZQgtmNnqK SpcdF5l8xPA3SFw36RxnaqCCovT3Cja9SWedcEdAlRgZ7sm0ZHnFK8FJ1yPU0vRW f8Pn48ALjH0OqcS+hllOMNbJ+bDeb4RWTt7kwIpu/SzheOgTdA3zI5Bw6n1WEa0m iSfH0QylUzAQPOYv6DfKO4bYgulcxpjdLU5xBtYJ+f4sfh2qwFNuCYru10hRABEF O9+k9rnwOtx4lE4CvVursNoEjBrYpfNKDxjLleOi9dXBFdjooLRb2spQjAMNHB3p r6WoQFCrvn1Amc1XDPA+3aWLbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnFYrA/ zm+igiA2+wVtChXSkbNTMB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1NS9DQ0JFMUJBNjE3NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bh a1dtZmdJWko3Rk5vTWJBRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC7gNnbxlXO1PitfIpTANZyKwebihvdpm4iwQO37ZFJNc+M8Qb80xo FHwWcv23sdPBFaDVKPUXsHzFKoIcKK5OqZPnYxYVjL4TazD5ID0Y36zL+4bAHls9 L/VE+RzDH+MACK2EtTotwJD+SysA+CcckW3RKzl/PgbEdQbeeOs4TgGgbeQWmAYs rTQvGFd4ysrrNmt0z755AH/Xv0vA+OacXRnZUGGcrd7zILHHnisAMbWoSF6NRJCL Mh46xuRh8qkV+pRsdq5ToJ3fiyfdZrSDgMDJvchw0NcoOcXeTgJ5bJ/muIVMEoDd NzzNq6C0R2hJOG8RMNUyvwGs8xmGIrZy -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org