$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: uP/xnajx63behqV8rqLBLYtNBivSfmYuc4P+dk0TzbA= Subject key identifier: 14:F2:CB:F1:04:C3:72:6C:A6:7E:75:B2:18:0F:89:49:2B:78:6A:AC Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 02E0 Signing time: Sun 19 May 2024 03:22:03 +0000 Manifest this update: Sun 19 May 2024 03:22:03 +0000 Manifest next update: Sun 26 May 2024 03:22:03 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: QkiiaR9Jd0sIgNvj2NLCFdiRFHtYC66F2+A5VKB4UfU=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: UW7+nv4irITMLcDjMG0OJ/5kJqb/tQLhLog1jaQcizo=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: 9QjIxLga5lr2tlfsedpHgDUExpH9szxPvAZ9GMbY2jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: May 19 03:22:03 2024 GMT Not After : May 26 03:22:03 2024 GMT Subject: CN=6649705b-312b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:32:9d:a2:41:39:a8:c3:c7:c6:9d:4a:a2: 32:4b:ab:48:d2:95:d5:b0:a4:41:fb:d7:24:28:4d: 88:44:99:15:e7:f6:c4:b7:9a:32:47:f7:dd:75:9a: 7f:0d:c0:96:ed:40:da:36:72:de:a9:05:60:00:ea: 0d:4d:28:b0:fb:41:a4:2e:3d:84:2d:5f:16:6b:d6: d4:83:1a:22:09:b8:f5:80:9f:9a:2b:cc:c7:59:61: fe:79:c3:34:e6:6a:53:2b:02:e0:85:e1:38:05:b7: 87:bb:2d:9d:c0:e5:18:39:e9:88:27:e3:76:52:b1: ce:90:46:44:7b:e6:f1:ea:4e:af:a1:6c:08:d8:bb: 6f:d8:d8:fb:70:24:6e:07:3d:94:f0:9f:1d:f7:c4: 24:26:8b:ce:28:45:a6:55:5b:6f:44:fd:1c:ef:52: 96:c7:a1:ad:4d:e8:14:e9:af:cb:f5:cd:0b:eb:fd: a6:5c:8f:59:bb:14:ff:d4:ec:2a:f2:02:7e:e1:40: 72:20:dd:f5:81:1c:05:74:66:8f:ed:9e:ba:ae:10: 01:7f:3c:ab:2e:1c:44:e6:8d:59:3f:2f:47:42:a2: bc:fd:a3:92:da:e2:0e:45:e1:ee:8b:9a:e6:61:07: 85:12:33:e6:b6:1e:79:fc:ac:82:ab:43:45:1e:4a: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F2:CB:F1:04:C3:72:6C:A6:7E:75:B2:18:0F:89:49:2B:78:6A:AC X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:66:b4:a6:d0:38:f1:4c:c4:5e:6c:e2:b9:47:e5:95:1c:28: c8:1c:29:51:9c:e5:67:34:9b:f5:18:20:a8:48:54:98:f6:15: f8:8a:88:57:4b:cf:32:40:e9:2b:64:ca:bd:bc:15:e2:60:3b: ac:0e:b3:07:c1:19:ca:5f:0e:63:7e:4c:26:48:09:37:72:59: 1b:ed:9d:e3:a7:4b:ce:75:91:26:16:52:6c:c8:46:dd:5b:2d: 1b:3d:07:66:05:0e:4c:dc:23:5a:16:99:2e:52:a4:c5:f7:da: 09:b4:62:e5:31:bf:1d:6a:8a:db:62:e0:07:42:b5:cd:ba:f9: 91:92:04:9a:85:9b:dc:99:70:72:14:3e:f7:71:16:78:48:09: 5d:b0:26:79:9c:6c:7c:42:10:d7:94:4a:50:57:e4:d6:46:e4: e8:9a:7a:a9:d5:ce:64:8a:b5:64:fc:cf:54:75:d2:27:dd:6d: 7c:3e:a4:5e:3e:50:73:46:36:65:ad:7a:ae:4f:0f:0f:59:24: 57:f0:45:e3:94:e2:b1:40:fe:a4:c5:cc:24:86:31:ff:97:98: 7b:fc:a6:0b:4a:61:54:5d:b1:42:11:01:d9:a2:ca:8c:c5:7e: e8:16:16:e4:f5:d1:d9:c6:ad:01:21:ae:36:5b:de:0b:96:93: c6:fb:c9:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjQwNTE5MDMyMjAzWhcNMjQwNTI2MDMyMjAzWjAYMRYwFAYD VQQDEw02NjQ5NzA1Yi0zMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua4ynaJBOajDx8adSqIyS6tI0pXVsKRB+9ckKE2IRJkV5/bEt5oyR/fddZp/ DcCW7UDaNnLeqQVgAOoNTSiw+0GkLj2ELV8Wa9bUgxoiCbj1gJ+aK8zHWWH+ecM0 5mpTKwLgheE4BbeHuy2dwOUYOemIJ+N2UrHOkEZEe+bx6k6voWwI2Ltv2Nj7cCRu Bz2U8J8d98QkJovOKEWmVVtvRP0c71KWx6GtTegU6a/L9c0L6/2mXI9ZuxT/1Owq 8gJ+4UByIN31gRwFdGaP7Z66rhABfzyrLhxE5o1ZPy9HQqK8/aOS2uIOReHui5rm YQeFEjPmth55/KyCq0NFHkqXPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTyy/EE w3Jspn51shgPiUkreGqsMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByZrSm0DjxTMRebOK5R+WVHCjIHClRnOVnNJv1GCCoSFSY9hX4iohX S88yQOkrZMq9vBXiYDusDrMHwRnKXw5jfkwmSAk3clkb7Z3jp0vOdZEmFlJsyEbd Wy0bPQdmBQ5M3CNaFpkuUqTF99oJtGLlMb8daorbYuAHQrXNuvmRkgSahZvcmXBy FD73cRZ4SAldsCZ5nGx8QhDXlEpQV+TWRuTomnqp1c5kirVk/M9UddIn3W18PqRe PlBzRjZlrXquTw8PWSRX8EXjlOKxQP6kxcwkhjH/l5h7/KYLSmFUXbFCEQHZosqM xX7oFhbk9dHZxq0BIa42W94LlpPG+8m+ -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org