$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: j+9ndO2Y7znFT3ZZrak2RiROPD5cpea2gCaAx6DBYmg= Subject key identifier: 27:CA:1C:24:62:31:96:7E:44:59:1F:76:17:F1:59:A1:66:84:82:9C Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1B25 Signing time: Sat 22 Jun 2024 16:31:23 +0000 Manifest this update: Sat 22 Jun 2024 16:31:22 +0000 Manifest next update: Sat 29 Jun 2024 16:31:22 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: uG8niuKjDY4ZGHuDWYgXkLjX2souvuO0M3LrCYuKUow=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: FlD6l9ml0Sj35iGiiEz88NQ3FFhPvucSrHqMYjb/Gjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 15:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6960 (0x1b30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Jun 22 16:31:22 2024 GMT Not After : Jun 29 16:31:22 2024 GMT Subject: CN=6676fc5a-3863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4d:41:85:10:57:56:fb:5c:15:fa:3f:9d:cb: cb:90:54:f6:56:05:b0:00:42:74:7e:68:c1:2a:ac: 90:45:b2:df:de:5b:83:8a:72:65:c8:c2:0e:8e:f6: 37:80:6b:60:2c:31:79:7c:c5:86:7d:a3:40:1e:46: 72:7c:ee:4a:de:3f:90:56:fa:20:7e:40:78:ee:30: 44:0a:53:b6:c2:8c:84:51:b9:45:8a:9b:9c:fe:51: 4b:83:bc:8b:0c:43:fa:bb:bb:a1:5f:3a:40:ff:58: fb:f7:55:be:33:0d:ab:1a:6a:fd:cc:ca:18:e5:af: d9:43:74:1e:36:21:2a:41:95:ff:9a:03:41:7c:55: 28:c0:5b:b5:9e:f9:7d:01:1a:2a:78:28:b6:83:4c: 94:a9:7c:d8:2f:41:30:c8:1a:84:02:1e:a9:b4:1d: 45:81:6b:a8:e7:d0:a6:cc:8c:54:62:6a:2c:7e:79: 48:82:7b:e2:67:d9:d7:54:8e:cc:e2:df:bb:8b:97: e4:50:d7:89:a1:d8:06:a8:48:5d:94:0d:7a:91:9b: 7a:b4:89:52:8c:d5:aa:9a:87:07:71:c7:b2:45:24: e5:df:96:df:6e:48:fb:d9:6b:43:63:90:81:98:d7: 8e:ac:e7:b5:6a:51:8a:f0:38:41:a5:24:e1:ea:bd: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CA:1C:24:62:31:96:7E:44:59:1F:76:17:F1:59:A1:66:84:82:9C X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:1d:d0:77:ad:ff:b5:a7:ca:b7:ac:27:6e:72:6c:d0:0b:fd: ba:ae:44:66:c9:d3:1b:48:5a:74:84:d3:8b:8b:19:79:9e:58: 70:17:34:74:46:84:3b:be:1d:c0:2f:61:36:e8:6c:ec:3c:c8: 7e:da:98:87:21:40:e6:b4:72:1a:63:03:b9:74:9a:c5:41:e3: 6c:60:28:07:e3:de:ab:6c:3a:f9:03:5e:bb:65:75:59:ea:62: a5:f8:e9:7a:56:f2:25:ae:ed:46:85:4d:45:07:72:28:f6:ae: c4:6d:36:b1:92:f6:06:23:8e:1f:c5:22:3e:65:8d:e0:41:72: ec:4d:3f:a2:22:17:4f:c0:03:48:85:41:f1:39:43:98:27:41: c5:31:b8:ba:b4:65:59:ad:87:0d:59:61:c3:ab:a8:8c:1e:b2: aa:54:18:89:8c:5c:53:52:6c:1b:41:db:cc:53:c3:01:a1:dd: 21:01:97:1e:90:12:da:4a:a1:d4:1c:42:98:1e:ad:e7:2d:34: a3:21:da:1e:37:51:b5:f4:16:3c:f6:f0:22:4b:67:3f:6e:a4: 40:2f:e4:3d:6e:e7:65:d8:72:23:a2:7b:ca:4a:57:6d:55:17: 5c:8d:94:fe:51:a7:04:14:21:a7:83:26:51:54:eb:82:80:b9: 17:6b:73:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjQwNjIyMTYzMTIyWhcNMjQwNjI5MTYzMTIyWjAYMRYwFAYD VQQDEw02Njc2ZmM1YS0zODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6E1BhRBXVvtcFfo/ncvLkFT2VgWwAEJ0fmjBKqyQRbLf3luDinJlyMIOjvY3 gGtgLDF5fMWGfaNAHkZyfO5K3j+QVvogfkB47jBEClO2woyEUblFipuc/lFLg7yL DEP6u7uhXzpA/1j791W+Mw2rGmr9zMoY5a/ZQ3QeNiEqQZX/mgNBfFUowFu1nvl9 ARoqeCi2g0yUqXzYL0EwyBqEAh6ptB1FgWuo59CmzIxUYmosfnlIgnviZ9nXVI7M 4t+7i5fkUNeJodgGqEhdlA16kZt6tIlSjNWqmocHcceyRSTl35bfbkj72WtDY5CB mNeOrOe1alGK8DhBpSTh6r1e5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfKHCRi MZZ+RFkfdhfxWaFmhIKcMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHHdB3rf+1p8q3rCducmzQC/26rkRmydMbSFp0hNOLixl5nlhwFzR0 RoQ7vh3AL2E26GzsPMh+2piHIUDmtHIaYwO5dJrFQeNsYCgH496rbDr5A167ZXVZ 6mKl+Ol6VvIlru1GhU1FB3Io9q7EbTaxkvYGI44fxSI+ZY3gQXLsTT+iIhdPwANI hUHxOUOYJ0HFMbi6tGVZrYcNWWHDq6iMHrKqVBiJjFxTUmwbQdvMU8MBod0hAZce kBLaSqHUHEKYHq3nLTSjIdoeN1G19BY89vAiS2c/bqRAL+Q9budl2HIjonvKSldt VRdcjZT+UacEFCGngyZRVOuCgLkXa3PV -----END CERTIFICATE-----Generated at Sat Jun 22 17:13:45 2024 by rpki-client on console-ams.rpki-client.org