$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft File: AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json) Hash identifier: DxHW2C8nJcCf4KIIOkrWa40nl7eZRN33OjvPr56CEJM= Subject key identifier: CB:F4:54:DB:B7:9E:10:2E:B7:B7:C5:5C:94:46:21:42:36:8D:EC:45 Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 Certificate issuer: /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft Manifest number: 023A Signing time: Sat 01 Jun 2024 05:11:25 +0000 Manifest this update: Sat 01 Jun 2024 05:11:25 +0000 Manifest next update: Sat 08 Jun 2024 05:11:25 +0000 Files and hashes: 1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: jYARcXi3d+yJrFlvVuqILfDjflFYEUQ8X0ep4nYnf2k=) 2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: 6lKO86uUpzf/XstQn1lxWS6kyKi4kzxncYrwutyfQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Validity Not Before: Jun 1 05:11:25 2024 GMT Not After : Jun 8 05:11:25 2024 GMT Subject: CN=665aad7d-5a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:ab:bd:c9:57:62:65:4a:9b:3e:29:22:75: 7a:14:f2:81:03:17:d1:b3:1f:d7:05:02:9c:07:bc: 4a:ea:d9:b4:c0:80:a7:a7:02:27:1c:27:c1:d0:c5: 1f:53:9f:45:7c:9b:88:3e:03:b4:76:1b:16:f2:1c: 8e:b5:06:43:8c:15:04:8f:3a:54:bb:d7:6a:ea:30: a3:d3:b7:18:3d:7c:24:43:a7:ae:41:04:9a:24:69: af:5a:a6:f4:ef:42:a7:e8:d5:90:29:75:a6:b7:65: 37:43:58:bc:96:0e:77:a7:45:93:6f:88:f9:a7:c3: 4a:7e:5c:1a:a9:b0:1a:0f:c3:44:aa:26:15:00:0e: fe:50:2d:d9:4f:42:06:a7:25:49:b7:89:8a:f5:9d: fb:a9:27:fc:8a:cd:9b:b2:03:2f:51:e2:e3:67:84: eb:76:b5:93:70:4a:bc:42:7d:0d:46:3e:80:d6:5d: 03:76:20:2d:e7:6f:0f:23:06:d8:55:b9:56:32:98: a3:b2:8d:a3:de:94:d7:b2:30:3f:5a:71:d2:e6:46: b9:44:9c:b6:a5:40:2c:a3:b2:46:ab:15:d3:df:1c: 08:22:25:36:fb:dd:9c:ad:77:3f:50:50:4d:e7:ca: 54:de:61:8e:09:31:55:0a:0e:f8:59:f5:f3:c7:d7: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:54:DB:B7:9E:10:2E:B7:B7:C5:5C:94:46:21:42:36:8D:EC:45 X509v3 Authority Key Identifier: keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:93:42:17:19:38:a4:27:74:45:fa:d6:96:c5:e7:e0:b2:a0: b6:28:fe:ab:4e:22:e9:04:ba:9a:a2:c3:0f:55:3b:94:a4:1f: c4:ba:0e:0a:8d:ef:d2:5a:eb:1d:24:55:4c:7a:d4:eb:8e:64: c2:bc:fe:b2:19:a1:8e:8a:53:23:a0:2f:0b:55:4d:60:4f:d3: 73:0a:4f:11:7d:6f:10:00:59:0b:84:d7:c6:95:48:fa:85:e7: ba:62:8a:86:2e:e5:8b:40:59:9a:12:c8:b1:65:b7:db:e1:42: c6:45:17:7b:2d:db:96:11:fd:77:07:5c:11:50:11:a5:e8:b2: b9:c7:41:2e:83:32:a8:6a:85:f5:c8:8f:70:18:fa:e4:32:9e: 95:d8:f4:b7:e0:aa:79:ac:31:84:89:53:32:1e:2c:82:6a:dd: f7:4e:b5:5b:92:d9:e1:3f:43:ff:89:b7:71:5a:4e:65:ad:56: 99:df:e6:79:51:3e:77:7c:ab:53:69:e7:a2:09:81:85:45:6c: 48:3c:d0:23:79:97:8c:b4:81:ca:94:df:55:69:39:67:d4:37: 14:ed:75:dc:a6:4f:0d:cb:f5:0e:51:17:e2:5f:2f:71:b6:c6: a4:0b:55:3c:a3:8a:a2:81:23:e8:62:8f:61:ac:59:8b:80:f7: 0f:32:ce:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNkQxMTAvBgNVBAUTKDAwNDFFRkFCRkYzNDNDQzJFODNGQ0U5NkNFRDg5MDU5 RThGNEUyQzEwHhcNMjQwNjAxMDUxMTI1WhcNMjQwNjA4MDUxMTI1WjAYMRYwFAYD VQQDEw02NjVhYWQ3ZC01YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZyrvclXYmVKmz4pInV6FPKBAxfRsx/XBQKcB7xK6tm0wICnpwInHCfB0MUf U59FfJuIPgO0dhsW8hyOtQZDjBUEjzpUu9dq6jCj07cYPXwkQ6euQQSaJGmvWqb0 70Kn6NWQKXWmt2U3Q1i8lg53p0WTb4j5p8NKflwaqbAaD8NEqiYVAA7+UC3ZT0IG pyVJt4mK9Z37qSf8is2bsgMvUeLjZ4TrdrWTcEq8Qn0NRj6A1l0DdiAt528PIwbY VblWMpijso2j3pTXsjA/WnHS5ka5RJy2pUAso7JGqxXT3xwIIiU2+92crXc/UFBN 58pU3mGOCTFVCg74WfXzx9eouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv0VNu3 nhAut7fFXJRGIUI2jexFMB8GA1UdIwQYMBaAFABB76v/NDzC6D/Ols7YkFno9OLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM2RC8yMkU2OTJBQURD QjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBNTG9QODZXenRpUVdlajA0 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFSHZxXzgwUE1Mb1A4Nld6dGlRV2VqMDRzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM2RC8yMkU2OTJBQURDQjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBN TG9QODZXenRpUVdlajA0c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByk0IXGTikJ3RF+taWxefgsqC2KP6rTiLpBLqaosMPVTuUpB/Eug4K je/SWusdJFVMetTrjmTCvP6yGaGOilMjoC8LVU1gT9NzCk8RfW8QAFkLhNfGlUj6 hee6YoqGLuWLQFmaEsixZbfb4ULGRRd7LduWEf13B1wRUBGl6LK5x0EugzKoaoX1 yI9wGPrkMp6V2PS34Kp5rDGEiVMyHiyCat33TrVbktnhP0P/ibdxWk5lrVaZ3+Z5 UT53fKtTaeeiCYGFRWxIPNAjeZeMtIHKlN9VaTln1DcU7XXcpk8Ny/UOURfiXy9x tsakC1U8o4qigSPoYo9hrFmLgPcPMs4g -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:23 2024 by rpki-client on console-ams.rpki-client.org