$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: 9ddBDZmK+VoqgVkD2EJEhDMBlBTdX6FDhcoxZW4o8rM= Subject key identifier: CE:17:15:08:7B:4F:1F:74:BB:B2:A5:77:AA:44:7D:17:49:95:EA:81 Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 030A Signing time: Sun 19 May 2024 03:10:55 +0000 Manifest this update: Sun 19 May 2024 03:10:54 +0000 Manifest next update: Sun 26 May 2024 03:10:54 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: HrEdhDyt8Q2W/Cb8xW9jZxAmL6VV3dHc6vwRp2lJZYI=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: ZhHVqRfjUTG6IoZU0e/IjUfz93SIgyKZrFjBx0NRxRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: May 19 03:10:54 2024 GMT Not After : May 26 03:10:54 2024 GMT Subject: CN=66496dbf-be5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:3c:f3:0c:71:a8:aa:f5:6c:2f:58:45:81: d2:6c:75:b0:57:7a:11:89:c0:6f:ee:f4:22:86:d4: 56:ae:5f:ca:77:f5:ad:70:22:a0:04:1e:da:99:2e: 76:62:cd:24:a1:db:0f:b3:8c:17:bc:99:09:6e:d1: bb:40:ae:99:75:55:64:0e:e4:3e:c1:ef:f6:11:5d: e7:2f:ac:4b:0b:96:8c:24:62:e5:27:8a:74:91:d8: 55:e8:08:09:01:b5:99:cf:aa:73:1d:bc:84:6f:53: f9:6e:9e:b0:01:8b:b9:12:90:d6:2b:60:36:ef:01: fe:01:70:0c:76:f6:e9:5d:11:dc:e7:89:2c:e3:d5: 0a:23:5b:7a:bd:44:06:05:96:b1:35:d2:b7:76:46: b6:d4:97:39:b2:2e:dd:93:d6:6a:89:16:3d:89:69: fc:3e:e7:41:6e:9d:01:c3:c6:ba:e9:00:95:4c:03: 10:f4:64:f1:5a:8c:10:c1:fa:26:b7:cc:04:d3:91: bb:14:2b:92:32:91:87:21:c6:f6:ca:b1:57:1b:0b: 5a:1c:ff:7c:45:75:23:ee:e9:6a:76:ab:72:e1:30: a3:cc:28:6e:4b:2d:d3:46:aa:06:70:c7:1a:f2:2b: d4:b9:a6:5f:b2:9c:f3:b3:d0:7c:2a:f5:8f:ae:83: 7b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:15:08:7B:4F:1F:74:BB:B2:A5:77:AA:44:7D:17:49:95:EA:81 X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b9:7c:e8:76:f1:39:89:65:18:3b:21:5e:61:39:58:c1:25: b1:42:80:ac:dc:c0:67:ec:39:b4:0f:20:24:56:f6:63:dd:0b: ff:bd:bc:a4:36:cc:6c:2f:b5:f4:a1:20:b1:0c:4b:32:be:b8: 8a:41:00:e1:e6:7f:4f:e8:9f:f1:5c:48:af:59:35:69:5c:f9: 3d:c4:62:2d:7b:bc:67:dc:bc:9e:cc:1c:c7:ae:b1:4d:6b:87: 6f:d7:92:a0:1d:94:ad:f5:00:aa:3d:0a:9d:e2:70:fe:79:58: 10:43:59:d5:83:33:4e:3d:31:43:4c:80:fc:ea:50:25:8b:30: e3:a3:f8:78:92:c9:3a:50:b6:da:49:9d:2b:cf:2c:30:e8:63: 21:2b:8b:77:32:2a:cf:80:5b:ca:9d:0f:d1:85:de:72:af:fe: 25:57:01:3c:21:fb:17:41:07:a4:4c:96:38:1a:2d:ab:1a:72: 51:ed:80:6a:2e:e5:48:52:68:ea:1e:91:74:f4:35:c9:97:ae: 32:1e:dd:fa:ae:4b:82:74:13:8f:cc:b5:6b:d5:fa:84:41:58: 66:70:24:05:f8:ac:c3:f4:da:1b:54:0b:aa:df:45:88:1a:10: d8:14:d5:dc:2c:c7:36:8e:f3:c1:18:0f:8f:1f:d8:a3:6d:4e: 26:da:93:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjQwNTE5MDMxMDU0WhcNMjQwNTI2MDMxMDU0WjAYMRYwFAYD VQQDEw02NjQ5NmRiZi1iZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCo88wxxqKr1bC9YRYHSbHWwV3oRicBv7vQihtRWrl/Kd/WtcCKgBB7amS52 Ys0kodsPs4wXvJkJbtG7QK6ZdVVkDuQ+we/2EV3nL6xLC5aMJGLlJ4p0kdhV6AgJ AbWZz6pzHbyEb1P5bp6wAYu5EpDWK2A27wH+AXAMdvbpXRHc54ks49UKI1t6vUQG BZaxNdK3dka21Jc5si7dk9ZqiRY9iWn8PudBbp0Bw8a66QCVTAMQ9GTxWowQwfom t8wE05G7FCuSMpGHIcb2yrFXGwtaHP98RXUj7ulqdqty4TCjzChuSy3TRqoGcMca 8ivUuaZfspzzs9B8KvWProN7CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4XFQh7 Tx90u7Kld6pEfRdJleqBMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWuXzodvE5iWUYOyFeYTlYwSWxQoCs3MBn7Dm0DyAkVvZj3Qv/vbyk NsxsL7X0oSCxDEsyvriKQQDh5n9P6J/xXEivWTVpXPk9xGIte7xn3LyezBzHrrFN a4dv15KgHZSt9QCqPQqd4nD+eVgQQ1nVgzNOPTFDTID86lAlizDjo/h4ksk6ULba SZ0rzyww6GMhK4t3MirPgFvKnQ/Rhd5yr/4lVwE8IfsXQQekTJY4Gi2rGnJR7YBq LuVIUmjqHpF09DXJl64yHt36rkuCdBOPzLVr1fqEQVhmcCQF+KzD9NobVAuq30WI GhDYFNXcLMc2jvPBGA+PH9ijbU4m2pOE -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org