$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: DXP8nsUdONMV+3Ch6O9ngVoFSbWlTAnRILBZpZ6TX/8= Subject key identifier: B8:17:F9:B7:AB:54:19:1D:25:E8:9B:A3:73:F8:25:8A:B1:42:E4:8F Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 031B Signing time: Sun 19 May 2024 02:29:54 +0000 Manifest this update: Sun 19 May 2024 02:29:54 +0000 Manifest next update: Sun 26 May 2024 02:29:54 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: tx8mwpDjO11J1iNfxLr/UIouq7brd3YB4MaTGtCYQpM=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: PLGw9NG/LDLAwYupVxB/HWVn7IiF43r6Nw3857fc1oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: May 19 02:29:54 2024 GMT Not After : May 26 02:29:54 2024 GMT Subject: CN=66496422-104a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:75:56:69:c4:30:ff:de:75:b7:c0:39:ad: bb:c1:c9:41:e8:ec:67:b7:fa:14:77:3b:e5:44:c5: 2b:d8:c4:f4:f1:9c:b8:27:0c:a8:df:8d:05:7a:26: 6d:78:0f:c3:c0:be:5e:13:2c:ba:c2:e7:42:6d:ce: ca:ef:7d:99:be:ed:a0:d1:28:e3:7e:7a:e8:bc:a3: df:d3:5a:0e:d5:80:9f:49:59:4d:c8:65:46:e9:a7: 29:22:c0:32:01:50:34:e5:ec:de:b1:41:c5:b7:3e: 13:3d:f8:1f:3c:70:8a:80:35:64:db:40:c0:aa:36: e8:6b:6f:84:90:6e:6b:41:0d:9b:cd:25:d1:77:a9: 7a:a6:82:84:35:b0:ae:39:76:16:da:dd:7b:24:80: 80:12:9e:52:0d:c9:1b:d8:4d:6f:56:a8:c7:9f:1e: fe:ec:b3:58:39:74:c3:3c:bf:e0:17:fd:66:b5:d1: 8e:cb:bb:ce:b9:86:86:2f:a8:18:84:2e:70:67:68: 36:82:2c:45:a5:5f:74:03:5c:e1:2b:92:04:d3:e4: 43:b8:9e:83:ad:0c:be:dc:6a:da:86:30:79:2a:4a: 37:34:03:c9:17:fd:20:59:36:32:4b:cb:fe:8b:f5: 29:95:ab:93:8d:e9:c1:b8:66:b7:89:69:81:79:5f: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:F9:B7:AB:54:19:1D:25:E8:9B:A3:73:F8:25:8A:B1:42:E4:8F X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a9:69:83:9d:ac:bf:1b:5d:cc:9f:43:bf:cf:fe:8b:15:9c: 0a:1b:5d:eb:17:cb:22:89:ed:46:04:15:47:89:52:e5:d3:cc: 79:89:fd:3f:28:78:ce:50:cc:4d:d0:90:48:16:47:77:08:96: c4:49:5c:ef:f7:f1:b4:fc:77:46:66:36:e2:d1:31:aa:3b:20: 8f:ad:24:bc:74:ef:44:3a:6b:39:1b:52:e0:21:30:a3:30:03: ce:7d:49:e6:c9:0f:19:ba:8b:98:79:a0:42:7a:af:5e:78:4e: 76:93:00:80:e8:17:2b:1b:32:ef:ac:1d:2a:89:83:97:1f:39: e9:e7:0d:f2:11:dd:7d:18:1f:2a:c6:0c:5e:1e:30:ae:c7:8d: 14:ce:63:b3:de:85:64:c0:60:3e:1b:9e:0f:a0:81:97:e5:a5: ff:7b:e3:49:39:52:cc:80:22:8c:84:36:a8:56:19:3a:ce:e7: 83:ed:5b:c8:78:22:98:2e:e4:e5:46:c9:3d:66:d7:80:4c:9c: 36:11:86:2d:a2:d5:5d:f8:2d:77:26:c1:36:2e:f1:45:60:8d: 6c:7f:67:e0:6c:a8:a4:bf:2d:68:40:f2:9b:69:77:93:d0:22: ec:4f:cf:84:b7:8a:6f:78:d6:aa:7d:c7:61:72:57:31:84:24: 67:32:9d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjQwNTE5MDIyOTU0WhcNMjQwNTI2MDIyOTU0WjAYMRYwFAYD VQQDEw02NjQ5NjQyMi0xMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8V1VmnEMP/edbfAOa27wclB6Oxnt/oUdzvlRMUr2MT08Zy4Jwyo340FeiZt eA/DwL5eEyy6wudCbc7K732Zvu2g0SjjfnrovKPf01oO1YCfSVlNyGVG6acpIsAy AVA05ezesUHFtz4TPfgfPHCKgDVk20DAqjboa2+EkG5rQQ2bzSXRd6l6poKENbCu OXYW2t17JICAEp5SDckb2E1vVqjHnx7+7LNYOXTDPL/gF/1mtdGOy7vOuYaGL6gY hC5wZ2g2gixFpV90A1zhK5IE0+RDuJ6DrQy+3GrahjB5Kko3NAPJF/0gWTYyS8v+ i/UplauTjenBuGa3iWmBeV+kMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgX+ber VBkdJeibo3P4JYqxQuSPMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdqWmDnay/G13Mn0O/z/6LFZwKG13rF8siie1GBBVHiVLl08x5if0/ KHjOUMxN0JBIFkd3CJbESVzv9/G0/HdGZjbi0TGqOyCPrSS8dO9EOms5G1LgITCj MAPOfUnmyQ8ZuouYeaBCeq9eeE52kwCA6BcrGzLvrB0qiYOXHznp5w3yEd19GB8q xgxeHjCux40UzmOz3oVkwGA+G54PoIGX5aX/e+NJOVLMgCKMhDaoVhk6zueD7VvI eCKYLuTlRsk9ZteATJw2EYYtotVd+C13JsE2LvFFYI1sf2fgbKikvy1oQPKbaXeT 0CLsT8+Et4pveNaqfcdhclcxhCRnMp06 -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org