$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: 2vSiEF0idzJv0v1VhduCi7jD0P8ebjQaR8IjuCtT4VE= Subject key identifier: 94:46:08:C5:70:5E:C8:A3:34:4E:89:E8:1C:85:C6:14:93:C6:91:24 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 03A8 Signing time: Sun 19 May 2024 02:32:19 +0000 Manifest this update: Sun 19 May 2024 02:32:18 +0000 Manifest next update: Sun 26 May 2024 02:32:18 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: KuZ5u0aT3iRjrmHk+pTMrnuSMUZSjCGPb8OxhexNyds=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: J7F5rWdEO0O5itoKRPpqVsgyFtbFRNLbshPrRk8ZKbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: May 19 02:32:18 2024 GMT Not After : May 26 02:32:18 2024 GMT Subject: CN=664964b3-6044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:e6:fe:0f:6a:b5:80:ab:04:70:d8:be:a3: 51:4d:51:07:ad:0a:ca:a1:f9:9a:9f:c6:eb:a0:6c: b2:7c:ba:2c:1f:ec:03:4b:4e:95:03:6f:c1:ce:5d: 0a:0f:55:38:b9:ad:dc:b1:1b:0f:2b:a4:ed:9f:a8: be:88:c1:2f:5a:8b:ac:60:8d:9e:d3:a2:36:48:6c: 23:03:4e:b8:20:c3:0f:a0:be:d7:97:0c:b6:95:68: 7d:db:52:7e:5f:4c:df:ce:6b:7d:ea:3b:d9:65:7e: e1:67:43:e1:b5:8f:dc:f6:72:a9:0b:ba:49:e0:fb: 87:7b:fd:ea:7f:3f:fc:9a:d7:6f:89:cf:c8:19:b8: cc:d8:2a:a4:1f:9c:aa:1f:e9:fc:9c:36:5b:0e:3e: 6f:87:71:6b:c9:2b:71:d2:9d:e1:96:77:05:bf:d9: 13:fc:bc:55:df:ae:ba:a3:0e:d4:dc:1b:72:2e:d1: 03:44:b2:73:d1:38:34:07:e5:f2:ec:8f:e3:32:cd: 93:02:5b:a0:cf:1a:e4:39:60:c2:3a:7d:ad:bf:de: e0:89:79:a3:ef:92:e6:dd:e0:46:4b:9a:81:e2:e6: ee:c1:76:77:b8:70:17:9a:cf:cb:0c:b2:e4:73:a9: db:af:0f:cc:33:b5:2f:4a:41:3c:a4:73:8a:91:0c: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:08:C5:70:5E:C8:A3:34:4E:89:E8:1C:85:C6:14:93:C6:91:24 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:01:23:37:de:50:aa:a9:76:f0:b0:82:d1:6f:b5:7e:89:7b: 3b:aa:27:4e:32:28:9e:52:a0:de:4d:60:a4:b9:0e:56:08:9e: 54:c7:b4:1a:67:24:a1:f7:4b:8d:f6:06:bf:cd:01:da:a2:90: 1e:02:a9:9c:aa:c1:ba:b8:df:f9:7d:de:a7:ee:4c:87:53:2c: e8:31:d0:a9:99:58:cc:40:0d:70:88:30:0d:62:ac:08:a0:05: 64:8a:90:63:aa:36:1c:2f:9d:2f:59:f9:a5:39:c8:8b:0b:eb: 6a:82:dd:5b:80:3e:39:e8:71:5f:22:91:0d:ab:2d:bd:17:ab: c6:41:56:72:53:56:c3:f7:67:78:08:53:28:3d:41:3e:ce:2f: 97:05:11:53:6e:aa:a5:95:3d:ec:82:d4:7c:a9:3b:49:33:5f: 8c:03:4c:9c:30:e2:91:7a:74:24:61:53:d2:16:17:01:04:69: 01:77:01:ed:5a:57:a5:8b:e0:27:cf:35:7b:30:3a:0d:f1:95: 4a:a6:96:6f:ea:85:c8:2a:b8:ef:8c:09:12:9b:17:88:b9:a8: 89:6e:32:2e:1e:ff:91:5d:2d:8e:83:b8:da:80:66:43:e6:c6: 13:12:e7:c6:11:a4:f3:40:fb:14:3b:af:b7:b5:54:bc:3e:38: 57:6a:6c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjQwNTE5MDIzMjE4WhcNMjQwNTI2MDIzMjE4WjAYMRYwFAYD VQQDEw02NjQ5NjRiMy02MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T3m/g9qtYCrBHDYvqNRTVEHrQrKofman8broGyyfLosH+wDS06VA2/Bzl0K D1U4ua3csRsPK6Ttn6i+iMEvWousYI2e06I2SGwjA064IMMPoL7Xlwy2lWh921J+ X0zfzmt96jvZZX7hZ0PhtY/c9nKpC7pJ4PuHe/3qfz/8mtdvic/IGbjM2CqkH5yq H+n8nDZbDj5vh3FryStx0p3hlncFv9kT/LxV3666ow7U3BtyLtEDRLJz0Tg0B+Xy 7I/jMs2TAlugzxrkOWDCOn2tv97giXmj75Lm3eBGS5qB4ubuwXZ3uHAXms/LDLLk c6nbrw/MM7UvSkE8pHOKkQzdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRGCMVw XsijNE6J6ByFxhSTxpEkMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADASM33lCqqXbwsILRb7V+iXs7qidOMiieUqDeTWCkuQ5WCJ5Ux7Qa ZySh90uN9ga/zQHaopAeAqmcqsG6uN/5fd6n7kyHUyzoMdCpmVjMQA1wiDANYqwI oAVkipBjqjYcL50vWfmlOciLC+tqgt1bgD456HFfIpENqy29F6vGQVZyU1bD92d4 CFMoPUE+zi+XBRFTbqqllT3sgtR8qTtJM1+MA0ycMOKRenQkYVPSFhcBBGkBdwHt Wleli+AnzzV7MDoN8ZVKppZv6oXIKrjvjAkSmxeIuaiJbjIuHv+RXS2Og7jagGZD 5sYTEufGEaTzQPsUO6+3tVS8PjhXamyI -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org