$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: bxEvj5zLkdNbB8wOvOZ5J9RzRh+/vyQQGgfIA7MxC3Y= Subject key identifier: 43:5E:AA:7C:22:55:47:D8:C7:36:B3:EB:7D:C3:2B:58:54:6A:A5:3B Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0B5D Signing time: Sat 18 May 2024 19:36:33 +0000 Manifest this update: Sat 18 May 2024 19:36:33 +0000 Manifest next update: Sat 25 May 2024 19:36:33 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: 2BrBIP1Jprvptpbe9e7T5Dh1XpYUfjC63T/iuj31VY0=) 2: E938CA160B8311EABDDD354EC4F9AE02.roa (hash: p9dbIcqnoAuCJhNNaUEynVsoUs5YC13EgZnj2lLl7ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: May 18 19:36:33 2024 GMT Not After : May 25 19:36:33 2024 GMT Subject: CN=66490341-c3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:b8:39:78:5b:4b:81:d1:85:a7:5f:97:cd: 36:0a:8a:c7:f6:c9:31:9f:ea:d8:7d:1a:28:06:83: 49:fe:d3:30:2a:ed:19:be:e1:c2:38:14:cd:9a:0f: 5e:9c:86:a1:92:08:af:f9:a0:03:0a:8d:43:05:9f: e5:e3:64:8f:72:33:e0:9d:f7:18:08:d7:db:f1:e4: 75:dd:04:a2:cc:21:b5:c8:20:19:4c:e0:68:67:2c: dd:8a:79:42:b9:66:f3:b7:a0:ba:80:c9:9f:2d:b1: 10:5a:d4:f3:8a:5b:ee:02:3e:fd:e3:10:e7:a4:be: f2:d3:48:67:7d:5f:d8:a7:41:b3:59:d0:e0:83:35: b3:d6:05:9a:cc:ed:d0:d0:55:a3:c8:1f:3b:81:86: 90:6b:e4:cc:60:c6:24:11:fc:88:64:8b:73:64:2d: 2c:52:bb:8f:a2:05:3e:c8:9f:ae:8b:78:2f:ef:b8: af:ab:f4:c1:4e:61:7f:41:be:2d:5b:37:56:e2:a1: 63:c6:81:f7:af:ff:b7:8b:7a:d8:92:32:d2:e7:db: ca:86:30:8e:98:ba:53:5e:22:a9:fd:8b:9a:e8:b0: 23:c7:95:b0:c4:16:29:08:e9:7d:3a:54:da:c6:2d: cb:49:93:26:9b:21:a0:fa:69:57:85:40:be:d8:31: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5E:AA:7C:22:55:47:D8:C7:36:B3:EB:7D:C3:2B:58:54:6A:A5:3B X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f7:09:de:e6:05:f2:f0:f5:19:17:9b:18:87:62:eb:59:58: 10:cf:0e:8f:ac:b0:40:7e:7e:d6:a5:df:fe:fe:b8:a8:2b:e7: c7:79:e7:5f:d2:ec:39:05:14:99:cc:c2:53:e6:cc:96:e5:4c: 10:87:3c:61:a6:8f:9d:ba:b4:62:5b:15:42:2e:b1:52:31:de: 9f:c0:cb:f2:d6:fb:22:79:10:5f:7c:2d:ae:6e:32:af:f1:08: 65:7d:6b:13:db:b4:4f:48:a4:43:8d:4c:eb:06:06:e7:41:da: fa:32:bc:6e:e0:e6:94:53:5a:3a:91:22:3e:88:7a:79:6a:2b: e6:9a:8d:d6:6a:56:6a:7e:ec:55:57:a1:8c:71:43:16:f5:4c: 19:04:d6:2a:c0:0c:77:4a:5c:2c:2b:37:f8:c7:59:0f:7f:74: 14:90:f3:76:f6:c2:d4:fa:19:3f:5e:a8:c4:d7:93:02:29:06: 8c:ca:89:cd:93:79:2c:19:4f:35:0f:50:d4:03:7b:19:b8:53: 7e:4f:8f:1f:c7:bf:44:83:31:80:a8:62:46:58:40:65:c8:8b: 43:71:a1:dd:f8:91:68:96:05:91:e0:1e:5b:a1:09:22:c9:96: 64:56:ba:e2:e0:3d:7f:e0:0c:48:71:a7:5d:a4:48:d3:4c:bf: 65:bf:ea:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjQwNTE4MTkzNjMzWhcNMjQwNTI1MTkzNjMzWjAYMRYwFAYD VQQDEw02NjQ5MDM0MS1jM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqna4OXhbS4HRhadfl802CorH9skxn+rYfRooBoNJ/tMwKu0ZvuHCOBTNmg9e nIahkgiv+aADCo1DBZ/l42SPcjPgnfcYCNfb8eR13QSizCG1yCAZTOBoZyzdinlC uWbzt6C6gMmfLbEQWtTzilvuAj794xDnpL7y00hnfV/Yp0GzWdDggzWz1gWazO3Q 0FWjyB87gYaQa+TMYMYkEfyIZItzZC0sUruPogU+yJ+ui3gv77ivq/TBTmF/Qb4t WzdW4qFjxoH3r/+3i3rYkjLS59vKhjCOmLpTXiKp/Yua6LAjx5WwxBYpCOl9OlTa xi3LSZMmmyGg+mlXhUC+2DF02QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENeqnwi VUfYxzaz633DK1hUaqU7MB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY9wne5gXy8PUZF5sYh2LrWVgQzw6PrLBAfn7Wpd/+/rioK+fHeedf 0uw5BRSZzMJT5syW5UwQhzxhpo+durRiWxVCLrFSMd6fwMvy1vsieRBffC2ubjKv 8QhlfWsT27RPSKRDjUzrBgbnQdr6Mrxu4OaUU1o6kSI+iHp5aivmmo3WalZqfuxV V6GMcUMW9UwZBNYqwAx3SlwsKzf4x1kPf3QUkPN29sLU+hk/XqjE15MCKQaMyonN k3ksGU81D1DUA3sZuFN+T48fx79EgzGAqGJGWEBlyItDcaHd+JFolgWR4B5boQki yZZkVrri4D1/4AxIcaddpEjTTL9lv+o+ -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org