$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: rKq1HcJ9ErdC4ndTztY8S18FHRXdxZNaELwEDZ/HuHc= Subject key identifier: 42:A5:08:A1:41:FE:E1:44:92:96:EF:87:23:4F:29:DE:B2:83:90:BA Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 230D Signing time: Sat 18 May 2024 16:09:22 +0000 Manifest this update: Sat 18 May 2024 16:09:21 +0000 Manifest next update: Sat 25 May 2024 16:09:21 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: 5XWQd2/DEgaKcikqjZXyqSpNZycqmpbweMl93ld+gag=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: mDuFCJlPDmckocR6ma03jYQ+PIoKh5owGtsBoIrTZaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8992 (0x2320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: May 18 16:09:21 2024 GMT Not After : May 25 16:09:21 2024 GMT Subject: CN=6648d2b2-8d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:f5:1d:9e:e7:43:9a:22:c8:20:35:ef:a1: f4:7e:e5:59:42:91:5b:60:92:e9:1d:c9:c0:52:ec: f3:c6:3d:d9:33:6a:da:d5:c4:b8:92:ad:82:ba:8d: 82:a7:e0:ae:eb:9b:99:ad:97:48:78:ea:99:48:2d: f2:30:9a:55:ad:cc:38:5f:ce:c4:ab:dc:5e:cc:6c: 4f:9c:ea:a1:72:1d:88:6c:5f:d9:99:31:cc:aa:90: 00:1f:6e:60:33:b1:68:60:81:0f:e1:1d:95:59:51: f2:f9:91:dd:19:21:48:f2:0c:43:4d:38:a4:f6:49: 87:40:78:97:9a:89:6c:6c:5d:c8:72:d2:2b:20:e1: 20:c0:7e:40:a3:3f:81:75:e9:0b:87:9b:bb:10:fb: 2f:19:5d:58:6d:45:6a:eb:56:12:32:0b:4e:e1:e4: d9:34:e8:ac:76:7a:c7:e9:96:46:bb:f9:70:8c:7e: e9:fa:3f:63:f6:01:e1:80:ce:5a:cc:6e:3f:90:3d: a8:14:36:dc:a4:d3:ef:2f:23:1b:14:b9:e8:9d:ed: ea:4d:d2:aa:fc:01:2c:62:a6:ac:4b:55:c9:d2:37: 65:b5:ab:59:6a:9a:ed:a5:b3:b5:0f:76:66:8f:80: 16:8f:16:54:34:49:97:58:ee:05:2d:0e:86:b9:e0: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:08:A1:41:FE:E1:44:92:96:EF:87:23:4F:29:DE:B2:83:90:BA X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:bc:e2:0f:a4:3f:03:b6:c2:2c:2d:9d:50:96:21:a1:e3:fa: 54:ae:5c:60:8a:a9:ef:3d:02:fd:29:bf:c2:36:c0:27:e5:ef: 72:e6:8b:39:ac:dc:7f:88:17:78:b4:67:0c:51:eb:cb:d5:59: bc:b9:a8:2d:40:29:c2:6c:20:60:85:03:19:c5:10:7c:c8:f0: 55:59:0f:cb:2c:63:ba:79:1a:66:4e:67:19:71:d5:f6:41:b8: 18:13:09:34:60:82:48:64:6a:0e:73:a0:ac:96:af:94:fa:cc: 56:7a:87:32:13:10:c9:2b:95:45:c2:c9:2c:59:b6:79:fa:ba: b1:5a:1f:54:e8:38:c6:db:06:4f:66:dc:e3:64:3a:66:8d:6b: ec:be:ff:82:e2:67:be:1c:35:b5:cb:11:a2:45:4e:69:d8:01: 4a:ba:d1:d4:fa:f4:48:80:99:7f:67:1c:f2:f3:d0:ff:92:49: 70:1f:c0:2d:83:22:6c:ca:ec:28:9b:29:58:77:92:72:08:55: de:cb:f6:76:eb:42:2b:04:98:a6:64:63:0e:24:8a:22:81:93: 5d:bb:25:8a:65:a7:fe:f6:07:33:44:20:43:a1:32:eb:5e:5f: 66:4d:15:ba:0c:d6:21:ac:8a:82:10:ec:19:e8:e8:e0:d4:d5: 1d:e5:2c:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjQwNTE4MTYwOTIxWhcNMjQwNTI1MTYwOTIxWjAYMRYwFAYD VQQDEw02NjQ4ZDJiMi04ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6L1HZ7nQ5oiyCA176H0fuVZQpFbYJLpHcnAUuzzxj3ZM2ra1cS4kq2Cuo2C p+Cu65uZrZdIeOqZSC3yMJpVrcw4X87Eq9xezGxPnOqhch2IbF/ZmTHMqpAAH25g M7FoYIEP4R2VWVHy+ZHdGSFI8gxDTTik9kmHQHiXmolsbF3IctIrIOEgwH5Aoz+B dekLh5u7EPsvGV1YbUVq61YSMgtO4eTZNOisdnrH6ZZGu/lwjH7p+j9j9gHhgM5a zG4/kD2oFDbcpNPvLyMbFLnone3qTdKq/AEsYqasS1XJ0jdltatZaprtpbO1D3Zm j4AWjxZUNEmXWO4FLQ6GueB0JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKlCKFB /uFEkpbvhyNPKd6yg5C6MB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFvOIPpD8DtsIsLZ1QliGh4/pUrlxgiqnvPQL9Kb/CNsAn5e9y5os5 rNx/iBd4tGcMUevL1Vm8uagtQCnCbCBghQMZxRB8yPBVWQ/LLGO6eRpmTmcZcdX2 QbgYEwk0YIJIZGoOc6Cslq+U+sxWeocyExDJK5VFwsksWbZ5+rqxWh9U6DjG2wZP ZtzjZDpmjWvsvv+C4me+HDW1yxGiRU5p2AFKutHU+vRIgJl/Zxzy89D/kklwH8At gyJsyuwomylYd5JyCFXey/Z260IrBJimZGMOJIoigZNduyWKZaf+9gczRCBDoTLr Xl9mTRW6DNYhrIqCEOwZ6Ojg1NUd5Swt -----END CERTIFICATE-----Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org