$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json) Hash identifier: bjC3O90vsXrU0rj9aYntcCgvFnyoSpdDMlOni6qky/k= Subject key identifier: 2A:2D:C9:DD:91:F0:C2:22:DD:92:CD:C0:6B:AD:75:13:7E:7D:AF:CC Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft Manifest number: 08E8 Signing time: Wed 24 Apr 2024 21:23:31 +0000 Manifest this update: Wed 24 Apr 2024 21:23:30 +0000 Manifest next update: Wed 01 May 2024 21:23:30 +0000 Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: rn65Z4V85F678WBJ+J5MlLSkPomQKtMcbeX77MB8rgk=) 2: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: Ow7NzKfObtU3nJ+PTgO9i8wtAOwCWAeJAoXGlU+XOYA=) 3: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: +ZoYuDO9wAVloWs+RKSdtnSjreDZ79KVPWBVCdqCAGk=) 4: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: Q5obTQjwhx08MlU24mGh4MlMfXOpa3C7cJfd8GFAt6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Validity Not Before: Apr 24 21:23:30 2024 GMT Not After : May 1 21:23:30 2024 GMT Subject: CN=66297852-dfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:44:99:ab:52:85:90:13:70:a0:1a:3c:02:39: 7c:a2:5e:b3:8a:a4:4f:45:a2:5d:8d:c2:29:29:51: d7:46:a8:66:6e:3c:44:9e:b4:37:94:40:1f:d6:3d: 9f:94:a8:9a:e7:83:39:35:81:a4:af:ca:16:67:e6: 64:82:47:76:00:3a:4a:35:3e:58:e9:a9:7f:77:b6: 9e:3e:47:5b:06:e7:d0:28:96:75:27:fb:80:d2:26: 54:c2:e7:87:46:ed:d2:3e:42:ba:50:ba:e0:8a:a0: b8:6b:3d:94:bb:f0:40:42:2c:ae:84:6a:9e:02:61: 98:bb:c7:be:b3:6c:61:23:c4:11:ee:78:53:a3:61: 7c:d0:ab:9e:a6:18:9b:ac:29:a3:dd:15:a1:0c:b6: 7d:5b:03:db:ab:8b:62:5f:40:38:4f:b4:fd:f8:0e: 29:9f:c8:93:51:d3:a4:18:6e:a1:ac:bb:38:94:27: e2:ac:55:b3:0f:16:11:9e:a9:72:2b:5c:9c:62:80: 2d:ac:99:dd:62:8b:53:7c:7a:c8:64:6e:7b:0b:4e: 5e:26:52:f4:fb:d4:50:20:6a:f8:44:95:4b:40:a1: b5:1f:da:92:74:45:40:fd:c1:76:40:c9:02:f3:06: dc:1a:b1:cb:52:63:65:0e:a2:ca:bb:e9:b7:6c:8e: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:C9:DD:91:F0:C2:22:DD:92:CD:C0:6B:AD:75:13:7E:7D:AF:CC X509v3 Authority Key Identifier: keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:49:f4:e2:52:b7:3d:d4:fc:0a:f9:e4:d5:be:6b:48:43:51: 84:04:39:f0:8a:9f:14:00:1f:a3:5e:88:0f:f0:b0:69:7c:47: 2e:ac:40:b7:80:d6:61:4e:4d:da:ed:fc:f5:a3:7d:35:dc:27: 2a:70:4a:01:b7:46:b5:3d:be:41:66:31:85:52:03:e3:bb:3a: 9e:ea:62:c9:c9:34:e4:28:56:6d:3e:7a:7d:fb:a2:20:1b:42: e6:58:90:04:62:e0:19:2e:0f:97:9b:ff:ff:a6:ae:f8:5e:b1: ee:fc:33:57:d2:89:46:79:b2:97:7a:83:cc:81:4a:97:48:38: 3a:02:ff:1c:11:b8:37:47:9f:b9:1e:b5:bd:f6:fd:d2:41:4b: c7:f3:07:d9:3f:b3:a2:06:96:fc:fb:b9:0a:e1:08:a9:14:4a: 0a:6e:b6:1d:a8:88:db:53:fb:d2:45:ca:c7:3b:33:fb:88:1b: f7:39:b5:ad:41:01:68:11:26:09:78:a4:33:b3:86:14:b6:e3: 23:a3:8f:b8:b9:02:ef:22:80:b7:4d:29:2b:99:3f:f8:5b:c8: 60:5b:07:e4:3b:77:ae:d8:3b:5e:8e:fc:56:15:9c:6f:9a:75: a0:e3:b5:e2:c8:17:49:4a:a8:53:91:6c:ad:86:c9:60:aa:6c: 27:1a:be:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx RDZEOTc1OTIwHhcNMjQwNDI0MjEyMzMwWhcNMjQwNTAxMjEyMzMwWjAYMRYwFAYD VQQDEw02NjI5Nzg1Mi1kZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ESZq1KFkBNwoBo8Ajl8ol6ziqRPRaJdjcIpKVHXRqhmbjxEnrQ3lEAf1j2f lKia54M5NYGkr8oWZ+Zkgkd2ADpKNT5Y6al/d7aePkdbBufQKJZ1J/uA0iZUwueH Ru3SPkK6ULrgiqC4az2Uu/BAQiyuhGqeAmGYu8e+s2xhI8QR7nhTo2F80Kuephib rCmj3RWhDLZ9WwPbq4tiX0A4T7T9+A4pn8iTUdOkGG6hrLs4lCfirFWzDxYRnqly K1ycYoAtrJndYotTfHrIZG57C05eJlL0+9RQIGr4RJVLQKG1H9qSdEVA/cF2QMkC 8wbcGrHLUmNlDqLKu+m3bI6uCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCotyd2R 8MIi3ZLNwGutdRN+fa/MMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0 RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY2Ni82MjNDRDZFNDg0RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIy d3hkdUhmZE9rSWdkYlpkWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACSfTiUrc91PwK+eTVvmtIQ1GEBDnwip8UAB+jXogP8LBpfEcurEC3 gNZhTk3a7fz1o3013CcqcEoBt0a1Pb5BZjGFUgPjuzqe6mLJyTTkKFZtPnp9+6Ig G0LmWJAEYuAZLg+Xm///pq74XrHu/DNX0olGebKXeoPMgUqXSDg6Av8cEbg3R5+5 HrW99v3SQUvH8wfZP7OiBpb8+7kK4QipFEoKbrYdqIjbU/vSRcrHOzP7iBv3ObWt QQFoESYJeKQzs4YUtuMjo4+4uQLvIoC3TSkrmT/4W8hgWwfkO3eu2DtejvxWFZxv mnWg47XiyBdJSqhTkWythslgqmwnGr6d -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:03 2024 by rpki-client on console-fra.rpki-client.org