$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: ytvRCu+1XXj1hAFG06niqDDNR/JiL6FqoNC91bKKQl4= Subject key identifier: 34:84:BF:C8:C9:41:13:E9:DC:94:C4:48:98:CB:8F:8D:45:B1:E7:42 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0AE4 Signing time: Thu 02 May 2024 20:08:47 +0000 Manifest this update: Thu 02 May 2024 20:08:47 +0000 Manifest next update: Thu 09 May 2024 20:08:47 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: YCb2csEj2J+AKJubkq8fl5GYtXl6EeUXXMMkGXYY62Q=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: qlZP3R6ADNSLIjHBw8W0Ir6gb+wbtwRxcHltJI21c8o=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: XZvDy9rrNZdAc4wLm1/CDaz5V+p7vna2qFhp8p1ojnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: May 2 20:08:47 2024 GMT Not After : May 9 20:08:47 2024 GMT Subject: CN=6633f2cf-2611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:14:4c:90:99:01:46:2a:97:7f:c0:2f:5a: 61:41:a9:a4:5b:c4:63:a8:d0:f5:48:43:e7:b4:0e: ca:41:08:8f:9d:ac:d9:55:22:5b:75:52:8c:b5:06: 7f:94:fd:2e:f9:af:41:2c:f5:bb:37:61:78:b9:11: 9b:1a:09:6e:08:98:18:93:e4:1b:04:f9:26:f5:07: e0:c6:54:91:fd:1a:5b:58:56:30:19:4f:8c:0f:f7: 7b:b5:68:9b:95:03:d4:0e:21:34:14:f0:3b:39:21: d8:94:a6:94:4f:db:ca:6c:0b:e8:a0:83:dc:a6:0a: 26:9b:82:8f:e3:ed:67:95:32:00:73:6c:74:04:f8: ba:32:53:15:85:2a:ce:c9:c9:10:e2:eb:e0:de:85: d7:86:94:4f:52:42:cd:89:d9:31:d2:3d:ff:ea:1b: 15:18:07:02:5a:35:37:cf:63:32:d4:d6:82:9d:1b: 5e:7c:dc:00:cc:60:b0:75:77:b2:89:b7:31:49:e2: 02:59:56:00:6f:fd:a2:e8:68:d4:59:92:f9:c6:5a: 3a:10:68:de:51:28:cb:d2:0f:4c:2e:5d:42:63:69: 69:8c:fe:d2:cd:01:45:2a:6a:ab:b1:eb:5f:13:8a: f6:a8:69:43:90:b2:a5:a7:a4:4e:b7:0c:c5:28:b8: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:84:BF:C8:C9:41:13:E9:DC:94:C4:48:98:CB:8F:8D:45:B1:E7:42 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:36:0a:f4:69:a6:24:77:c1:98:f3:18:a4:aa:cb:d8:ad:6e: 16:66:1f:ef:52:b1:fb:ec:ac:f9:c3:0e:bd:4b:97:c0:70:b9: 55:69:ee:9a:31:15:fe:b1:70:42:b6:84:5c:17:fa:82:2a:04: eb:44:b9:fe:fc:d6:31:ba:b2:60:b6:0a:95:6c:4d:6c:7e:11: 5e:d2:58:69:e7:94:ca:39:73:b3:11:5a:47:90:a8:79:12:0d: 97:62:33:9c:8c:a7:f4:68:d1:b5:31:57:3d:57:a4:8b:d5:76: a2:b4:f5:cf:00:fc:64:40:f4:30:42:a9:08:c6:85:3d:02:ed: 3b:27:bd:1f:22:c0:c7:3c:bb:f0:c2:c6:b2:cf:ca:ca:3c:e2: 46:24:0a:db:3e:a8:db:25:d4:fc:d6:ee:f9:06:53:99:7b:ed: 54:5a:a1:6a:61:43:75:1d:80:dc:ea:6c:1c:e1:b1:e2:67:a7: 05:0f:fb:5c:b3:d0:23:4b:a4:d9:7f:dc:f2:cf:f9:d4:f7:86: d0:ba:f5:e6:02:57:9b:e1:bc:0c:48:99:06:7c:ab:cb:aa:e1: d3:f8:4b:63:58:11:59:d2:f8:3c:99:ca:3d:52:89:ff:99:2d: e4:2e:08:84:ec:10:6d:af:ec:1f:f0:e5:af:46:5f:13:f3:3c: 8a:28:34:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjQwNTAyMjAwODQ3WhcNMjQwNTA5MjAwODQ3WjAYMRYwFAYD VQQDEw02NjMzZjJjZi0yNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYwUTJCZAUYql3/AL1phQamkW8RjqND1SEPntA7KQQiPnazZVSJbdVKMtQZ/ lP0u+a9BLPW7N2F4uRGbGgluCJgYk+QbBPkm9QfgxlSR/RpbWFYwGU+MD/d7tWib lQPUDiE0FPA7OSHYlKaUT9vKbAvooIPcpgomm4KP4+1nlTIAc2x0BPi6MlMVhSrO yckQ4uvg3oXXhpRPUkLNidkx0j3/6hsVGAcCWjU3z2My1NaCnRtefNwAzGCwdXey ibcxSeICWVYAb/2i6GjUWZL5xlo6EGjeUSjL0g9MLl1CY2lpjP7SzQFFKmqrsetf E4r2qGlDkLKlp6ROtwzFKLjF9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSEv8jJ QRPp3JTESJjLj41FsedCMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGNgr0aaYkd8GY8xikqsvYrW4WZh/vUrH77Kz5ww69S5fAcLlVae6a MRX+sXBCtoRcF/qCKgTrRLn+/NYxurJgtgqVbE1sfhFe0lhp55TKOXOzEVpHkKh5 Eg2XYjOcjKf0aNG1MVc9V6SL1XaitPXPAPxkQPQwQqkIxoU9Au07J70fIsDHPLvw wsayz8rKPOJGJArbPqjbJdT81u75BlOZe+1UWqFqYUN1HYDc6mwc4bHiZ6cFD/tc s9AjS6TZf9zyz/nU94bQuvXmAleb4bwMSJkGfKvLquHT+EtjWBFZ0vg8mco9Uon/ mS3kLgiE7BBtr+wf8OWvRl8T8zyKKDT0 -----END CERTIFICATE-----Generated at Thu May 2 22:28:51 2024 by rpki-client on console-ams.rpki-client.org