$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: wfpsD+jycNzb9kOTjlkOCCG5mXC7ns7A9Qig+T+1iKI= Subject key identifier: 02:1A:17:5A:73:BC:8A:A5:83:C3:55:B0:99:FA:78:55:9E:8D:36:BB Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 27AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2710 Signing time: Sat 18 May 2024 15:57:26 +0000 Manifest this update: Sat 18 May 2024 15:57:26 +0000 Manifest next update: Sat 25 May 2024 15:57:26 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: svEnuuKo7Qh20VAvxphJ8KsM8JA1tniA4WOjAHdVELI=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: iIqlzPytsa3BVmq/9xlrojgwODLXaEHM0o+8HYAnpj4=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: /HPe3GlQUWgCQecdxS2NpsaJsB9lrRhWuuGPyDpAHGM=) 4: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 714gnISUJPNuT8BIFwn3VAf89NH89gKo0Zr/vaMgfes=) 5: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: ja/92MLjUY3y8CpWwSha3kXLkGhtXf1LBnto/uEumSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10154 (0x27aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: May 18 15:57:26 2024 GMT Not After : May 25 15:57:26 2024 GMT Subject: CN=6648cfe6-c1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:ac:41:71:5d:1c:04:c5:d5:be:dd:07:82: 2e:cb:7e:4e:46:5e:40:01:53:97:d7:01:7b:c7:20: 19:c6:2b:ae:b5:3d:9f:6a:8c:71:a1:5d:78:23:0c: de:a4:e6:98:6d:a3:7d:be:fa:5c:5b:3f:1b:8c:ba: 2a:7a:04:57:f1:08:88:67:1a:4d:c7:5c:f2:1b:12: 55:0c:b1:e9:15:53:89:8e:c5:c6:da:12:1c:64:e2: c6:d0:36:9e:11:64:2d:85:ec:96:46:41:aa:b8:30: cf:61:68:42:d8:6a:f6:37:46:1e:ec:79:4f:6d:15: ab:2b:78:24:71:4b:44:d6:ad:16:75:f2:c2:9e:3a: d4:30:da:98:19:c1:5a:18:d8:65:39:8b:86:ad:f5: 7d:64:25:8d:ee:36:d6:a2:02:a3:bf:af:5f:78:12: 26:40:b3:4e:96:a3:e9:79:91:de:3a:48:71:be:24: 01:a9:ca:ca:1e:70:82:e4:50:13:66:50:db:46:a2: 3c:5c:cd:60:fc:fd:bf:0a:f2:d7:15:07:69:7b:4c: 4b:1d:61:64:78:82:6d:3c:42:8b:d7:44:cb:a9:ef: fc:71:51:af:22:90:25:a9:45:31:f4:2b:ff:15:4c: 5a:91:37:fa:e5:dd:39:57:7c:87:43:dc:e7:b6:86: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1A:17:5A:73:BC:8A:A5:83:C3:55:B0:99:FA:78:55:9E:8D:36:BB X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:02:a0:96:04:d2:2a:3b:43:40:f0:11:17:4e:c6:9c:b7:b4: a3:06:d3:72:6e:63:42:38:67:57:e0:41:ed:a5:14:0a:29:be: 07:ca:94:13:ff:06:01:78:ef:3a:ae:64:40:ff:75:c3:b4:0f: 2a:a1:ea:fd:8f:25:47:79:55:3b:66:0d:52:a8:03:89:af:0d: cc:65:c3:a5:3a:52:11:1b:5d:eb:34:ad:53:d0:9e:d4:57:35: 3c:71:e4:95:ff:87:b3:3c:15:a0:59:fc:ad:e9:94:e8:fb:2f: eb:4c:6e:9d:85:c4:39:c6:85:1a:21:36:cc:8c:3b:ed:9d:24: 92:3c:0e:58:62:f8:9c:19:41:00:63:e4:4e:b2:a2:89:10:51: 29:b7:1a:5f:78:7e:f9:13:d9:97:a2:af:35:15:f3:e0:32:ea: 31:4c:c5:05:56:44:6e:cd:a5:ce:87:52:ad:5e:b2:fd:04:5d: 36:cd:39:50:c9:c2:c6:ba:9c:f1:d9:c5:ac:74:16:da:f2:78: 61:23:45:f9:67:f8:ef:40:a7:46:56:ad:b2:30:8d:40:12:06: cb:22:fc:0b:b5:fa:7a:51:17:02:37:cc:10:2c:e5:b9:af:bf: 13:51:22:01:a0:ae:b4:a9:61:f1:6a:fa:18:0d:be:d4:00:58: 26:a3:24:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjQwNTE4MTU1NzI2WhcNMjQwNTI1MTU1NzI2WjAYMRYwFAYD VQQDEw02NjQ4Y2ZlNi1jMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmiGsQXFdHATF1b7dB4Iuy35ORl5AAVOX1wF7xyAZxiuutT2faoxxoV14Iwze pOaYbaN9vvpcWz8bjLoqegRX8QiIZxpNx1zyGxJVDLHpFVOJjsXG2hIcZOLG0Dae EWQtheyWRkGquDDPYWhC2Gr2N0Ye7HlPbRWrK3gkcUtE1q0WdfLCnjrUMNqYGcFa GNhlOYuGrfV9ZCWN7jbWogKjv69feBImQLNOlqPpeZHeOkhxviQBqcrKHnCC5FAT ZlDbRqI8XM1g/P2/CvLXFQdpe0xLHWFkeIJtPEKL10TLqe/8cVGvIpAlqUUx9Cv/ FUxakTf65d05V3yHQ9zntobmhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIaF1pz vIqlg8NVsJn6eFWejTa7MB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkAqCWBNIqO0NA8BEXTsact7SjBtNybmNCOGdX4EHtpRQKKb4HypQT /wYBeO86rmRA/3XDtA8qoer9jyVHeVU7Zg1SqAOJrw3MZcOlOlIRG13rNK1T0J7U VzU8ceSV/4ezPBWgWfyt6ZTo+y/rTG6dhcQ5xoUaITbMjDvtnSSSPA5YYvicGUEA Y+ROsqKJEFEptxpfeH75E9mXoq81FfPgMuoxTMUFVkRuzaXOh1KtXrL9BF02zTlQ ycLGupzx2cWsdBba8nhhI0X5Z/jvQKdGVq2yMI1AEgbLIvwLtfp6URcCN8wQLOW5 r78TUSIBoK60qWHxavoYDb7UAFgmoyR3 -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org