$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: DSRhqr+VGi6OkVmct1xSm3SGHmtwE2jejlmCwB5bXKU= Subject key identifier: BA:E7:1D:89:0A:F8:E3:B6:38:69:B2:81:9B:BB:42:B9:A6:B9:03:8E Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 08C2 Signing time: Sat 18 May 2024 21:26:07 +0000 Manifest this update: Sat 18 May 2024 21:26:07 +0000 Manifest next update: Sat 25 May 2024 21:26:07 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: Z76P/tCXgK9SadSzURlVwCEj6VDm43n6usHqx31E+Qw=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: 5CFKnjcy5F9IXxk31F+vn5LjvcxiJFwvGmhruhqdGmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: May 18 21:26:07 2024 GMT Not After : May 25 21:26:07 2024 GMT Subject: CN=66491cef-6cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:29:63:ba:5a:b8:6b:93:04:4e:78:7c:4f: be:0a:28:63:61:ea:05:d8:22:94:fa:11:b1:d5:13: 36:0e:c4:d7:56:ef:2c:90:3a:3c:b2:e6:20:51:c2: 5f:c4:5f:a0:ef:90:ba:79:48:b7:f2:e2:6b:a6:81: 53:1f:a1:8d:10:60:c6:8c:2f:73:0f:02:37:18:93: 09:8f:26:44:40:dc:80:ef:8a:6d:5b:f3:df:9c:92: 5a:85:37:a6:ac:96:c4:30:13:18:2d:2e:80:7d:ae: 17:3e:3e:c3:a4:8d:a3:82:20:34:e6:5b:bb:f0:0a: fb:61:a2:65:87:a4:c6:fa:93:0d:48:02:98:92:9c: 2f:23:51:38:a6:df:90:d1:bc:56:ed:fd:84:53:b2: ee:9c:97:0d:a4:23:48:8f:ea:59:84:3d:46:56:eb: 13:e9:0d:e6:56:14:51:74:c1:5e:73:3b:ac:ce:33: 16:1f:35:3a:d8:ce:2c:87:ef:d6:72:25:35:1d:9c: 8f:b4:ab:b4:f9:60:86:9d:5b:66:ac:7e:5e:3c:27: 56:91:5a:69:55:da:03:8a:b4:70:a0:09:a6:fe:73: 11:b1:11:6f:00:55:6c:8a:36:2b:61:9c:0c:ad:9d: 48:72:33:16:d2:91:95:ed:c5:47:68:31:18:ed:2f: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E7:1D:89:0A:F8:E3:B6:38:69:B2:81:9B:BB:42:B9:A6:B9:03:8E X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c2:d0:78:0d:f6:28:56:c7:fd:92:c6:a6:88:0a:f8:51:33: c3:27:61:39:8b:4f:39:ff:14:62:17:0a:e0:3c:9b:38:d6:e4: b7:8f:8b:13:48:d2:bd:b2:9f:23:42:16:03:d7:f9:61:ff:f2: 56:02:04:92:1c:be:20:6d:19:12:24:30:d3:00:eb:01:0b:f3: a6:03:f7:ce:fe:ce:a6:38:7d:f7:30:a2:4d:bc:fa:7b:24:77: 40:1a:5b:cf:06:ff:e4:97:7c:05:bc:e8:f9:fd:e8:c9:c3:8d: 81:a4:8c:87:6f:d4:80:b5:8d:2c:71:e8:d5:0a:d4:02:76:b5: f9:d9:9b:2e:df:28:5a:ff:cb:56:a2:6e:fb:e3:2c:26:66:a8: 4a:cf:f6:fc:a0:06:f2:1a:67:1d:09:74:5a:c5:0a:af:ff:09: 56:6f:07:95:3f:88:48:e2:6a:0e:ec:2a:63:64:b0:95:5d:6d: b5:6d:28:de:b5:4f:b9:b1:dd:46:16:85:26:60:f7:8a:8a:55: 08:d1:9e:b6:3c:f6:82:94:b8:ff:84:7e:29:c9:c4:ee:c6:e4: eb:f8:d2:8f:6e:5d:a8:87:88:0b:a5:c1:1d:6f:3a:6e:84:b3: 24:51:c3:05:cf:e1:9e:b9:bc:f1:e3:ef:4e:40:ef:9e:90:dd: 33:6f:61:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjQwNTE4MjEyNjA3WhcNMjQwNTI1MjEyNjA3WjAYMRYwFAYD VQQDEw02NjQ5MWNlZi02Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCYpY7pauGuTBE54fE++CihjYeoF2CKU+hGx1RM2DsTXVu8skDo8suYgUcJf xF+g75C6eUi38uJrpoFTH6GNEGDGjC9zDwI3GJMJjyZEQNyA74ptW/PfnJJahTem rJbEMBMYLS6Afa4XPj7DpI2jgiA05lu78Ar7YaJlh6TG+pMNSAKYkpwvI1E4pt+Q 0bxW7f2EU7LunJcNpCNIj+pZhD1GVusT6Q3mVhRRdMFeczuszjMWHzU62M4sh+/W ciU1HZyPtKu0+WCGnVtmrH5ePCdWkVppVdoDirRwoAmm/nMRsRFvAFVsijYrYZwM rZ1IcjMW0pGV7cVHaDEY7S9gEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrnHYkK +OO2OGmygZu7QrmmuQOOMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXwtB4DfYoVsf9ksamiAr4UTPDJ2E5i085/xRiFwrgPJs41uS3j4sT SNK9sp8jQhYD1/lh//JWAgSSHL4gbRkSJDDTAOsBC/OmA/fO/s6mOH33MKJNvPp7 JHdAGlvPBv/kl3wFvOj5/ejJw42BpIyHb9SAtY0scejVCtQCdrX52Zsu3yha/8tW om774ywmZqhKz/b8oAbyGmcdCXRaxQqv/wlWbweVP4hI4moO7CpjZLCVXW21bSje tU+5sd1GFoUmYPeKilUI0Z62PPaClLj/hH4pycTuxuTr+NKPbl2oh4gLpcEdbzpu hLMkUcMFz+Geubzx4+9OQO+ekN0zb2Gq -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org