$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: 3cSfqb9t37NPtbhSZMyzpWZbGagsB+fjz9VFTl3ar00= Subject key identifier: 82:76:88:3F:6B:3A:6D:F9:21:36:C5:55:8D:DE:BE:24:B8:A9:D9:A6 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 057B Signing time: Sun 19 May 2024 00:39:40 +0000 Manifest this update: Sun 19 May 2024 00:39:39 +0000 Manifest next update: Sun 26 May 2024 00:39:39 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: 84b3B9gUGX8PURhnYf0IoypUSGFrdeEJQRelAQSymVU=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: i8DoGHYlHx46c/zGymlOqfsnnDW4xU0Ca98hVoxidlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: May 19 00:39:39 2024 GMT Not After : May 26 00:39:39 2024 GMT Subject: CN=66494a4c-bc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:0b:19:5f:31:6d:59:73:49:d5:55:e3:89: 6a:af:69:b4:86:fc:52:8c:99:d6:08:03:70:b1:cf: 26:c9:1e:67:fb:4e:95:d3:3f:21:6f:7d:55:ce:48: e0:b3:cf:2c:e7:36:31:0f:38:b5:e4:d1:e5:94:f6: f6:78:96:e4:c4:25:07:79:0d:73:42:c4:ff:0d:4f: 85:6d:61:89:10:c0:f4:48:8a:76:89:88:fa:f9:e8: 9f:1d:74:e8:11:39:e0:48:5e:40:d7:97:18:1b:9a: 4a:e5:c5:1f:a6:63:8d:fd:55:e7:72:4c:bf:45:94: 3b:c5:12:52:b0:f3:7d:40:b0:c8:c9:c0:84:73:6b: f3:ac:86:49:b4:04:a2:59:7e:a0:5d:c0:80:ee:be: 01:38:ac:a7:c2:ee:a0:3d:c6:14:8a:ff:b6:08:31: b4:dc:22:b4:06:17:b7:a9:05:aa:69:30:a8:35:92: cb:bb:d7:50:aa:6b:59:92:6f:7c:bd:7d:be:e7:8f: 01:05:61:33:6b:27:44:cc:8f:d7:9c:30:9c:da:72: e8:35:2b:77:2c:07:61:a6:5a:da:c6:7a:0a:7a:21: 7d:e1:77:6d:e4:f5:0b:63:0f:bd:9e:4a:e7:ed:67: d8:3c:6d:a2:df:19:31:d0:3e:58:85:85:fa:2c:31: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:76:88:3F:6B:3A:6D:F9:21:36:C5:55:8D:DE:BE:24:B8:A9:D9:A6 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:0c:5e:2d:02:4a:9a:25:0a:e3:3e:77:89:a2:d0:fe:1e:e8: c8:c0:ba:02:6c:90:53:ec:6a:89:ec:87:a9:48:de:55:fc:a4: a3:d6:b9:bb:44:a8:64:e3:d5:16:46:33:11:1d:27:f0:7c:60: 47:8e:3f:fb:7c:e5:af:b0:dc:37:d5:44:14:56:9e:f4:47:e6: af:aa:82:6b:40:a4:55:f7:cf:5d:79:69:9b:5d:7c:00:c6:c8: b7:94:91:9d:a9:61:c9:15:50:e3:53:d0:70:b4:47:7c:53:0b: 6f:8f:34:9f:0c:d8:79:f8:f7:f0:cc:2f:64:14:c5:93:eb:d6: aa:4f:f5:b4:5c:40:ff:57:df:43:52:06:0e:f4:10:e5:d3:ec: 5a:71:60:51:c8:ae:c9:f3:c5:91:44:4d:8f:68:6c:1e:a7:f6: ab:5f:6e:68:36:fc:fa:3d:f4:0e:87:42:79:af:0f:a0:97:cf: 2d:79:4d:14:39:ec:c0:0e:89:66:b3:b8:a9:9f:87:c6:85:a2: 91:8f:2d:db:ff:36:40:41:a6:de:d1:78:71:9e:f6:1b:97:0c: a0:23:dd:bf:6f:98:e0:14:40:09:84:26:50:b9:e4:27:c9:00: 21:3b:c5:53:2e:7b:25:c6:18:0a:3c:2b:77:c2:f1:5c:0a:6d: 68:7e:ff:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjQwNTE5MDAzOTM5WhcNMjQwNTI2MDAzOTM5WjAYMRYwFAYD VQQDEw02NjQ5NGE0Yy1iYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaALGV8xbVlzSdVV44lqr2m0hvxSjJnWCANwsc8myR5n+06V0z8hb31Vzkjg s88s5zYxDzi15NHllPb2eJbkxCUHeQ1zQsT/DU+FbWGJEMD0SIp2iYj6+eifHXTo ETngSF5A15cYG5pK5cUfpmON/VXncky/RZQ7xRJSsPN9QLDIycCEc2vzrIZJtASi WX6gXcCA7r4BOKynwu6gPcYUiv+2CDG03CK0Bhe3qQWqaTCoNZLLu9dQqmtZkm98 vX2+548BBWEzaydEzI/XnDCc2nLoNSt3LAdhplraxnoKeiF94Xdt5PULYw+9nkrn 7WfYPG2i3xkx0D5YhYX6LDFI0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ2iD9r Om35ITbFVY3eviS4qdmmMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHDF4tAkqaJQrjPneJotD+HujIwLoCbJBT7GqJ7IepSN5V/KSj1rm7 RKhk49UWRjMRHSfwfGBHjj/7fOWvsNw31UQUVp70R+avqoJrQKRV989deWmbXXwA xsi3lJGdqWHJFVDjU9BwtEd8UwtvjzSfDNh5+PfwzC9kFMWT69aqT/W0XED/V99D UgYO9BDl0+xacWBRyK7J88WRRE2PaGwep/arX25oNvz6PfQOh0J5rw+gl88teU0U OezADolms7ipn4fGhaKRjy3b/zZAQabe0XhxnvYblwygI92/b5jgFEAJhCZQueQn yQAhO8VTLnslxhgKPCt3wvFcCm1ofv8u -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org