$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: wuDVMmPBA0ho0SgG3Y9BvOH1nOzFL1mriC0bMo/A/oU= Subject key identifier: 22:48:3A:94:6B:FF:58:AB:7F:51:6A:CA:FD:4B:DF:61:76:2C:CB:1A Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 068A Signing time: Sat 18 May 2024 23:26:11 +0000 Manifest this update: Sat 18 May 2024 23:26:11 +0000 Manifest next update: Sat 25 May 2024 23:26:11 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: q3MkEgcjuECYYtUjQSIb1soCKxtNw2abFyh1nQklr0I=) 2: 10DD258E2AE711EBBFFCBC15C4F9AE02.roa (hash: Mo+hPOfI71a1O5KOHpV9+ycAqTlWC6XGjhyhmnWVTds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: May 18 23:26:11 2024 GMT Not After : May 25 23:26:11 2024 GMT Subject: CN=66493913-dcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:5e:cd:6c:51:e1:96:c9:ec:b8:9b:91:71: 0e:81:b7:fd:c6:bc:13:40:60:db:f9:24:7c:ba:f5: 30:90:55:6c:0c:0f:4e:5d:4a:a6:5c:15:14:42:67: b6:8d:f8:da:21:94:0c:c5:a6:31:1f:d7:6d:15:4e: 30:9e:f0:b0:0f:3c:16:9d:e7:fc:eb:2d:53:3b:1e: c3:a1:29:51:f2:8f:f1:82:81:11:74:1b:aa:5b:d3: e1:fd:4c:a2:e2:2f:45:39:5b:41:0a:c2:42:5a:97: 50:24:27:26:93:bd:28:17:0f:a2:3e:3e:05:4e:f8: 44:cc:42:44:09:f9:cd:8a:91:d5:fb:ff:ae:5e:4e: f6:66:dc:d0:c3:2c:8d:95:9d:72:09:f0:1f:39:56: e4:14:83:1b:2b:f3:01:75:b5:2d:69:70:f7:75:a3: ae:c1:3a:00:c5:50:8e:a5:3d:09:e2:88:4f:ad:9d: 60:b9:52:28:25:88:a9:31:ab:f3:81:7c:ee:7e:e8: 93:6c:9d:7f:b4:fa:e2:07:01:7c:87:a9:93:b8:29: df:f9:cb:9b:f7:70:f6:c6:c5:23:25:d2:d6:79:c3: 14:e4:03:33:1f:0b:ca:44:a9:d2:71:e0:99:22:df: ec:44:8f:2b:a0:86:5a:7d:8a:92:6c:24:da:b4:47: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:48:3A:94:6B:FF:58:AB:7F:51:6A:CA:FD:4B:DF:61:76:2C:CB:1A X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:29:fc:7c:dd:01:8f:43:ba:5e:cd:13:a3:81:85:1b:75:d7: 68:7d:cd:c4:29:ba:12:42:81:fc:59:c4:a0:27:0b:f2:64:b4: ce:6f:76:15:c8:17:0a:f2:30:b0:6b:b5:c1:af:89:e8:5f:b7: 1a:16:1a:23:1b:41:53:6a:9e:8e:7a:2e:63:59:56:33:a9:43: 44:bc:1e:0c:60:fc:25:55:6f:1d:b9:9a:64:9d:4f:6e:14:54: 29:07:46:e7:82:9d:e9:5e:fb:fc:01:a5:1f:33:35:1d:bb:94: 04:22:bc:86:5a:ae:fd:e0:d2:91:56:cd:70:b7:78:ac:51:91: c9:a0:05:99:aa:dd:cf:b9:6b:1b:1e:4b:8a:08:02:71:02:b8: 70:3a:f9:a4:1a:7f:1c:82:c9:71:69:8a:9b:17:c6:d8:1d:de: ba:73:2c:b1:de:8f:34:63:52:1b:e4:46:97:92:db:31:d6:ae: 50:5b:eb:77:09:08:05:73:91:7d:66:23:25:ef:ad:a2:20:38: c0:de:21:2c:e4:75:7d:56:89:22:93:51:39:cc:09:cd:4a:3e: 49:4c:3d:2e:bd:b8:96:ef:e4:83:00:aa:64:11:59:e8:b9:eb: df:d6:8e:6b:23:5f:fb:d6:7a:7d:5d:f6:f6:83:26:ee:79:ca: b9:ca:91:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjQwNTE4MjMyNjExWhcNMjQwNTI1MjMyNjExWjAYMRYwFAYD VQQDEw02NjQ5MzkxMy1kY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGNezWxR4ZbJ7LibkXEOgbf9xrwTQGDb+SR8uvUwkFVsDA9OXUqmXBUUQme2 jfjaIZQMxaYxH9dtFU4wnvCwDzwWnef86y1TOx7DoSlR8o/xgoERdBuqW9Ph/Uyi 4i9FOVtBCsJCWpdQJCcmk70oFw+iPj4FTvhEzEJECfnNipHV+/+uXk72ZtzQwyyN lZ1yCfAfOVbkFIMbK/MBdbUtaXD3daOuwToAxVCOpT0J4ohPrZ1guVIoJYipMavz gXzufuiTbJ1/tPriBwF8h6mTuCnf+cub93D2xsUjJdLWecMU5AMzHwvKRKnSceCZ It/sRI8roIZafYqSbCTatEedEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJIOpRr /1irf1Fqyv1L32F2LMsaMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMKfx83QGPQ7pezROjgYUbdddofc3EKboSQoH8WcSgJwvyZLTOb3YV yBcK8jCwa7XBr4noX7caFhojG0FTap6Oei5jWVYzqUNEvB4MYPwlVW8duZpknU9u FFQpB0bngp3pXvv8AaUfMzUdu5QEIryGWq794NKRVs1wt3isUZHJoAWZqt3PuWsb HkuKCAJxArhwOvmkGn8cgslxaYqbF8bYHd66cyyx3o80Y1Ib5EaXktsx1q5QW+t3 CQgFc5F9ZiMl762iIDjA3iEs5HV9Vokik1E5zAnNSj5JTD0uvbiW7+SDAKpkEVno uevf1o5rI1/71np9Xfb2gybuecq5ypFi -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org