$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json) Hash identifier: wgWnmWen7yK1UQE/4mYKSpBlgO8YQB5EQZD1NTm+jis= Subject key identifier: 80:F2:2C:31:84:CF:49:DE:0B:8B:C3:5B:58:8D:B0:5E:A6:0B:0F:A7 Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft Manifest number: 08C0 Signing time: Sat 18 May 2024 21:28:15 +0000 Manifest this update: Sat 18 May 2024 21:28:15 +0000 Manifest next update: Sat 25 May 2024 21:28:15 +0000 Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: xBdlg0MpleFRh8aQxbO4SS9eVFbU6jDEGcbEp2o9POA=) 2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: eNqcJy9MbfULRfN7s1K38VlPL6Fzdy+Md4Shbxk/lNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Validity Not Before: May 18 21:28:15 2024 GMT Not After : May 25 21:28:15 2024 GMT Subject: CN=66491d6f-58e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ca:96:bb:f3:70:b8:e2:dc:3f:76:ee:cf:0a: 61:95:2e:79:3c:19:d8:2c:f3:13:6d:03:be:fd:0a: f3:e5:f8:af:fb:8c:85:ea:3d:9d:97:f7:3e:72:ba: d8:4e:c4:db:d7:99:ac:3d:7d:73:a7:23:21:86:1e: 0d:66:9b:51:27:75:30:76:8e:e3:85:70:dc:c9:62: bf:06:7a:28:c9:85:87:8b:15:ba:37:60:5c:cf:bc: e0:87:d4:ab:df:16:a9:5f:f3:81:5a:0a:17:f7:5e: bb:ab:09:97:f6:58:63:89:e5:dd:d2:f5:da:ec:4b: 0d:c5:4c:39:89:c0:50:b0:e1:c4:b3:28:b2:49:9c: de:fd:33:99:3b:76:cd:0e:86:0c:d3:e4:39:4b:45: ad:ed:38:d6:50:9c:e4:de:2a:78:a1:66:25:e4:b3: 02:87:82:da:a4:8d:f2:26:04:55:db:ec:ee:cf:46: e5:fc:49:44:76:20:22:9e:1d:a0:76:ee:f1:42:36: 34:32:b3:9a:d0:92:00:f3:48:c6:ae:84:91:e4:6f: 95:b2:ca:45:98:2a:e2:3d:fd:ca:53:23:27:67:0e: 16:11:c8:ca:71:87:48:22:e3:1f:8d:c8:fa:e5:c4: c5:7d:67:7a:d2:82:0a:1b:5a:6c:a0:1c:b2:1e:74: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F2:2C:31:84:CF:49:DE:0B:8B:C3:5B:58:8D:B0:5E:A6:0B:0F:A7 X509v3 Authority Key Identifier: keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:68:e4:b7:1c:fe:a5:62:0d:0b:7a:92:b2:83:9d:ea:53:fc: 8c:9b:8a:0c:cd:16:2f:91:47:1e:92:fe:ed:e6:2a:47:1f:62: cf:fd:e1:04:d9:83:eb:5c:d9:be:dc:46:dd:df:ef:9c:57:10: ec:a4:fe:d3:d8:3c:1a:99:38:55:60:5c:34:b8:6f:69:07:b7: 9f:0a:5c:49:93:18:0c:d4:dc:17:63:6c:09:5b:29:24:8c:dd: 90:46:ed:23:1f:a2:9d:18:8c:df:48:07:e7:b0:5a:b1:46:ed: 30:42:11:55:29:51:b2:8f:99:9a:41:ec:fc:64:9f:3b:59:dd: 28:00:0f:17:66:81:5b:83:41:5b:bb:fd:16:66:09:29:24:62: f7:af:98:b1:95:af:2c:9d:cf:9c:69:56:20:b6:9c:bf:4a:8e: 24:d0:e6:d8:81:2d:cb:a0:d5:19:89:c2:30:21:f3:27:ae:d2: 0f:4c:63:7f:48:81:d6:68:26:15:b9:b2:73:16:c4:63:18:ba: 66:58:98:2d:a5:af:c7:e3:3c:4e:47:84:ea:4d:61:a0:d5:3c: 76:1b:59:36:9a:ff:10:92:5e:d0:ad:6f:29:27:19:e7:a9:5f: 76:43:4e:07:63:47:71:93:c7:fd:3b:2b:44:05:c9:63:d7:ea: e7:6b:08:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw Qzk0RTExN0QwHhcNMjQwNTE4MjEyODE1WhcNMjQwNTI1MjEyODE1WjAYMRYwFAYD VQQDEw02NjQ5MWQ2Zi01OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cqWu/NwuOLcP3buzwphlS55PBnYLPMTbQO+/Qrz5fiv+4yF6j2dl/c+crrY TsTb15msPX1zpyMhhh4NZptRJ3Uwdo7jhXDcyWK/BnooyYWHixW6N2Bcz7zgh9Sr 3xapX/OBWgoX9167qwmX9lhjieXd0vXa7EsNxUw5icBQsOHEsyiySZze/TOZO3bN DoYM0+Q5S0Wt7TjWUJzk3ip4oWYl5LMCh4LapI3yJgRV2+zuz0bl/ElEdiAinh2g du7xQjY0MrOa0JIA80jGroSR5G+VsspFmCriPf3KUyMnZw4WEcjKcYdIIuMfjcj6 5cTFfWd60oIKG1psoByyHnSUYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDyLDGE z0neC4vDW1iNsF6mCw+nMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNDQS81N0QyMzgwMjhGQTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1 ajhhNFl3bnRWek1NbE9FWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATaOS3HP6lYg0LepKyg53qU/yMm4oMzRYvkUcekv7t5ipHH2LP/eEE 2YPrXNm+3Ebd3++cVxDspP7T2DwamThVYFw0uG9pB7efClxJkxgM1NwXY2wJWykk jN2QRu0jH6KdGIzfSAfnsFqxRu0wQhFVKVGyj5maQez8ZJ87Wd0oAA8XZoFbg0Fb u/0WZgkpJGL3r5ixla8snc+caVYgtpy/So4k0ObYgS3LoNUZicIwIfMnrtIPTGN/ SIHWaCYVubJzFsRjGLpmWJgtpa/H4zxOR4TqTWGg1Tx2G1k2mv8Qkl7QrW8pJxnn qV92Q04HY0dxk8f9OytEBclj1+rnawiI -----END CERTIFICATE-----Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org