$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft File: AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json) Hash identifier: t2cJHYBirLk6I0WuHnKSxjykaAqtAEK/xBwQFH/NO54= Subject key identifier: B8:9D:FC:24:AF:CA:8D:14:12:31:8A:DF:BD:74:F0:38:1B:35:C6:34 Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft Manifest number: 0B63 Signing time: Sat 18 May 2024 19:37:48 +0000 Manifest this update: Sat 18 May 2024 19:37:48 +0000 Manifest next update: Sat 25 May 2024 19:37:48 +0000 Files and hashes: 1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: HhOt/AF2asuuybv3xR5Lbe3VM2Mwo5NJbzwbgotkA6M=) 2: 2D0509BC078511ED87041524C4F9AE02.roa (hash: UfdEZfX8U1OFebNGmFOMBKsBzC+6uWXV7Kk7HfMAJmY=) 3: 8045C26A3B3E11EC94B9CE0BC4F9AE02.roa (hash: unWEVW99jcgEqQR6p5xroTJKftsLi8aygBIWPAop84o=) 4: 2BA0624C078511ED87041524C4F9AE02.roa (hash: +DJN7L7U20IOYBw+mw1+xj96Ek8avdQS7ghcGjFKxeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: May 18 19:37:48 2024 GMT Not After : May 25 19:37:48 2024 GMT Subject: CN=6649038c-6db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:d1:84:f0:c0:0c:aa:16:ba:a5:46:b5:59: 42:3b:83:5e:f6:45:9e:75:1b:79:37:9a:5b:74:0b: e8:7f:36:40:45:67:08:c2:0b:7d:45:54:b6:3b:a1: 8f:49:e5:0e:fa:a0:d9:a1:70:fd:4d:c1:5b:ed:b1: 17:d7:92:d1:d0:9a:04:ba:81:6e:35:c2:76:6e:33: a1:ae:1f:da:dc:9a:bb:7c:50:cf:bb:51:22:bd:33: a0:30:cf:20:16:5f:f0:ff:b6:df:95:44:86:04:25: f5:09:52:39:7f:07:a8:4d:53:c3:e8:6e:04:09:db: 4e:e2:10:34:36:99:c4:a7:03:13:0d:c8:fe:e1:00: b8:17:bb:10:bc:70:03:1c:67:42:c6:a5:d1:2f:50: 11:3a:bb:f0:62:64:f2:d9:c1:e1:63:5b:76:72:0c: cd:8b:cb:7c:f1:a5:69:05:21:00:92:19:23:98:b7: dc:a3:fe:b5:d9:9a:21:b9:94:52:85:71:fd:a6:05: d2:f0:8e:e3:af:28:46:8b:8f:32:54:bf:5c:29:20: 1e:a8:54:b1:be:d1:e6:22:15:6c:bd:5c:39:1b:5e: 2f:fc:2d:b2:ee:05:92:1d:da:fc:92:4d:1d:eb:ba: df:f8:23:7f:e2:8a:06:47:a0:98:dd:b1:34:ea:fb: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9D:FC:24:AF:CA:8D:14:12:31:8A:DF:BD:74:F0:38:1B:35:C6:34 X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4d:a4:06:a5:73:8c:7e:37:ee:cf:1d:0f:6d:d8:b1:e6:8a: da:a1:10:1f:da:be:b1:2c:be:16:f6:0a:ba:90:c6:fc:7a:bf: 09:a3:35:a5:43:bc:73:3d:d3:7b:4f:5d:3c:c4:d1:34:ce:76: 42:0e:32:a9:dd:65:bf:fe:b2:31:d6:de:b1:9f:a2:c1:e6:33: c6:4a:be:a1:bd:b4:8f:92:40:01:97:fc:8c:32:42:9e:71:98: d2:4c:eb:68:61:6d:f2:9f:05:8f:35:fb:f1:ad:7b:14:b1:4b: ec:22:55:e7:f0:3f:94:f6:5c:2c:6c:23:4d:8c:5b:0d:3f:21: bf:fa:92:49:74:88:40:18:52:7d:c6:a9:ba:da:c7:a8:f3:62: ee:0d:5a:27:5c:1c:35:13:13:b8:5b:7e:75:e5:e4:c6:7e:2b: 00:d5:4b:9b:d7:09:95:0c:9b:a3:13:b4:21:07:fc:42:89:68: f9:b3:02:45:01:19:1a:90:cf:4a:ef:f7:33:39:d1:01:93:d6: 27:ff:d0:a8:e1:57:78:6e:d6:69:5d:55:ea:7b:3d:41:57:c4: 97:9c:fe:39:00:82:e3:92:28:bd:5a:e0:5c:1e:4a:fd:31:2f: 83:2d:b3:a3:3b:57:1a:20:a8:34:fe:ec:8a:ea:b7:cf:14:b9: 91:29:d8:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjQwNTE4MTkzNzQ4WhcNMjQwNTI1MTkzNzQ4WjAYMRYwFAYD VQQDEw02NjQ5MDM4Yy02ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgTRhPDADKoWuqVGtVlCO4Ne9kWedRt5N5pbdAvofzZARWcIwgt9RVS2O6GP SeUO+qDZoXD9TcFb7bEX15LR0JoEuoFuNcJ2bjOhrh/a3Jq7fFDPu1EivTOgMM8g Fl/w/7bflUSGBCX1CVI5fweoTVPD6G4ECdtO4hA0NpnEpwMTDcj+4QC4F7sQvHAD HGdCxqXRL1AROrvwYmTy2cHhY1t2cgzNi8t88aVpBSEAkhkjmLfco/612ZohuZRS hXH9pgXS8I7jryhGi48yVL9cKSAeqFSxvtHmIhVsvVw5G14v/C2y7gWSHdr8kk0d 67rf+CN/4ooGR6CY3bE06vu3ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLid/CSv yo0UEjGK37108DgbNcY0MB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkUyQi8yN0U3Q0FBNjBDMkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3Mktw V0hRLWh0UEkwR0VhYXRzRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkTaQGpXOMfjfuzx0Pbdix5oraoRAf2r6xLL4W9gq6kMb8er8JozWl Q7xzPdN7T108xNE0znZCDjKp3WW//rIx1t6xn6LB5jPGSr6hvbSPkkABl/yMMkKe cZjSTOtoYW3ynwWPNfvxrXsUsUvsIlXn8D+U9lwsbCNNjFsNPyG/+pJJdIhAGFJ9 xqm62seo82LuDVonXBw1ExO4W3515eTGfisA1Uub1wmVDJujE7QhB/xCiWj5swJF ARkakM9K7/czOdEBk9Yn/9Co4Vd4btZpXVXqez1BV8SXnP45AILjkii9WuBcHkr9 MS+DLbOjO1caIKg0/uyK6rfPFLmRKdh+ -----END CERTIFICATE-----Generated at Sat May 18 21:31:28 2024 by rpki-client on console-ams.rpki-client.org