$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: 3Qgvpuu1WsHiB1qOKby/bfVxTFirezoDUBhuHsyDvPE= Subject key identifier: AE:93:43:0C:53:56:51:20:67:C8:C5:43:94:BC:19:32:E2:36:41:DD Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0903 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 08E9 Signing time: Sat 18 May 2024 21:23:53 +0000 Manifest this update: Sat 18 May 2024 21:23:52 +0000 Manifest next update: Sat 25 May 2024 21:23:52 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: Mlf/+cpqGcfQloWcOIScBFB9boAaYYv+1g9U0f8gGbU=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: J3OAo2oioplrlBzQe4yXqYfONxy+KByGMfnHbS1PbXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: May 18 21:23:52 2024 GMT Not After : May 25 21:23:52 2024 GMT Subject: CN=66491c68-b0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:77:37:b1:89:89:0a:49:4e:eb:e8:e5:92: 4f:36:01:89:a0:98:3e:86:2b:99:ca:45:3a:9c:f1: 86:12:70:7d:91:cf:92:7a:39:59:4f:bc:03:a9:bb: 76:b0:a4:04:4c:29:6f:6d:7a:01:69:e1:71:d0:f9: bd:1f:29:18:5f:39:0b:97:af:4e:bc:85:27:72:e7: 90:15:5e:fb:98:86:7c:0e:f4:a1:c1:5a:5e:a0:a6: 7a:90:50:72:67:40:8f:af:86:cd:ca:d5:32:5f:87: db:57:d7:ee:bd:52:8e:e3:b3:8e:d6:a0:59:fc:51: 5d:92:67:be:9f:95:87:8e:02:4f:82:85:a4:d3:c0: 1a:f1:66:62:70:a1:da:59:88:f7:c6:bc:16:af:25: 3a:7a:8d:23:54:5f:86:6e:4e:7b:f8:cf:b0:d5:82: da:a8:ce:5b:94:60:a8:a5:8b:82:40:8e:03:10:66: be:64:1f:f6:51:76:71:cb:7f:05:b2:89:8c:e5:00: c3:a0:ae:52:8b:be:47:99:3d:9f:10:f2:ee:4a:24: aa:cf:0a:49:37:5a:a6:8b:7d:f9:cd:de:2d:c3:43: ac:cc:7f:02:a0:79:e2:fc:83:75:fe:b6:98:5a:7b: d7:97:bb:90:03:da:e8:06:8c:19:c8:c8:44:14:5a: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:93:43:0C:53:56:51:20:67:C8:C5:43:94:BC:19:32:E2:36:41:DD X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8a:d7:9f:cd:a3:85:6a:90:e2:ba:db:dc:4a:3e:07:de:6c: b6:ca:0e:a4:a2:41:96:df:5f:db:4d:2f:96:13:ff:b6:0d:86: 4c:d0:c7:d5:66:fe:9d:40:27:42:0d:ec:bf:8e:83:15:3e:d7: 04:97:dc:c8:f5:6b:88:1d:d5:4e:5f:18:0f:45:65:6a:1b:b8: 6b:40:c4:05:19:c4:66:e7:16:b0:65:fa:02:1b:07:2b:a8:a3: 22:b7:ba:1d:3b:27:2e:fe:2a:f1:c3:32:0a:c6:1d:18:85:c0: 36:31:a2:85:e9:58:36:cf:2b:b0:37:27:a5:8e:8c:8b:9b:a1: 28:85:60:23:5c:fb:6a:ae:5a:09:ae:db:df:0f:5c:b5:89:63: e4:b2:c3:52:5c:8a:8a:b8:bb:79:ee:24:9e:c8:34:bf:84:fd: 1b:89:89:9c:69:57:db:e8:d5:1a:e8:f6:e8:b8:15:e1:3a:57: bb:0e:b8:35:ea:67:f2:fa:2f:9b:7a:0c:0f:de:91:21:4a:cf: 9a:ca:3f:23:c5:96:c5:67:b8:4c:b5:08:ff:ec:c6:67:5a:8e: 5c:ee:a5:ad:0b:ff:05:c1:43:f6:e7:2c:f7:71:48:fa:ac:e2: bd:8d:d0:dd:b0:f7:40:4b:1a:68:4c:55:5b:dd:e9:0b:0e:00: 5f:fa:ed:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjQwNTE4MjEyMzUyWhcNMjQwNTI1MjEyMzUyWjAYMRYwFAYD VQQDEw02NjQ5MWM2OC1iMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0t3N7GJiQpJTuvo5ZJPNgGJoJg+hiuZykU6nPGGEnB9kc+SejlZT7wDqbt2 sKQETClvbXoBaeFx0Pm9HykYXzkLl69OvIUncueQFV77mIZ8DvShwVpeoKZ6kFBy Z0CPr4bNytUyX4fbV9fuvVKO47OO1qBZ/FFdkme+n5WHjgJPgoWk08Aa8WZicKHa WYj3xrwWryU6eo0jVF+Gbk57+M+w1YLaqM5blGCopYuCQI4DEGa+ZB/2UXZxy38F somM5QDDoK5Si75HmT2fEPLuSiSqzwpJN1qmi335zd4tw0OszH8CoHni/IN1/raY WnvXl7uQA9roBowZyMhEFFrXYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6TQwxT VlEgZ8jFQ5S8GTLiNkHdMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5itefzaOFapDiutvcSj4H3my2yg6kokGW31/bTS+WE/+2DYZM0MfV Zv6dQCdCDey/joMVPtcEl9zI9WuIHdVOXxgPRWVqG7hrQMQFGcRm5xawZfoCGwcr qKMit7odOycu/irxwzIKxh0YhcA2MaKF6Vg2zyuwNyeljoyLm6EohWAjXPtqrloJ rtvfD1y1iWPkssNSXIqKuLt57iSeyDS/hP0biYmcaVfb6NUa6PbouBXhOle7Drg1 6mfy+i+begwP3pEhSs+ayj8jxZbFZ7hMtQj/7MZnWo5c7qWtC/8FwUP25yz3cUj6 rOK9jdDdsPdASxpoTFVb3ekLDgBf+u3h -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org