$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: GfhAqPpDof5gnvJF1o7a3DwJ0v3S3piIFKAwK0eN/l8= Subject key identifier: 9B:A1:AC:E9:26:FC:E5:6F:DB:F7:F2:CC:0D:E1:2C:1F:29:D6:C7:B0 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 342B Signing time: Sat 18 May 2024 15:01:41 +0000 Manifest this update: Sat 18 May 2024 15:01:41 +0000 Manifest next update: Sat 25 May 2024 15:01:41 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: mp7dORpv7s8mxxvbEyK7+T57kMcyseWm0pD9jkLrmIQ=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: 5zSkSiugOoY5TYS3YLBQCyzdyuEohpAoeTQRqPemxwE=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Q7QgCxcrqrAuTcI4oW6DGa/bnDi5/PhPMZL5D6AENRE=) 4: BB8E79F23D7211ED80C24116C4F9AE02.roa (hash: +L9Cf33nyGrHTrz4j4s1FaBfegpfjRmrOdgPoxTte6k=) 5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: 3x+5sbyRU2aCiCZ6M1S/W1BfRFMabVIxvtBAxXel6XU=) 6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: AfttFmJ1kA3jiZgPp2BzL4vpB5maknzliQYjo2LjGho=) 7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: C24xAwQ8MLMpMRt3jGw1uKg/XcxV57rHOMlU+NGZQfE=) 8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: kUDuCUYicrGvgRITJrTBq20wuNFvXeR0OMNP5dDOXv4=) 9: 74DADDB8F5B911EB90F4A13DC4F9AE02.roa (hash: 523/P1e8nnT24j2mcVLntz4Z4oEcpwAzADiS4XGiHq0=) 10: 347735B4C00511EE82324069C4F9AE02.roa (hash: 7T/gwLn5JsujNeCTQC4nPkRboKCTWpsTiYGd4X+xRDo=) 11: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: pnMsr3WIwLLBGugSoyMKC/Vhxsbts4ivWI9ZJvyficY=) 12: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: IGTkOLg+0zhbuqlV/B6kNymvpH1smEUeFYb29BKwYpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: May 18 15:01:41 2024 GMT Not After : May 25 15:01:41 2024 GMT Subject: CN=6648c2d5-db9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:a9:87:e6:26:be:89:28:72:ad:67:bb:4d: c9:60:29:0e:92:b7:a2:c1:42:af:b6:7f:b6:30:05: a5:a3:1f:4b:c0:35:c0:a7:97:17:b2:5c:53:d5:60: e6:1d:5c:ca:ba:4e:47:6b:ca:9c:93:15:54:fb:8b: 0a:e4:ba:b6:64:83:ed:41:0e:33:53:e4:c1:79:4b: 3e:56:62:af:a2:be:15:b3:92:a6:18:9a:5a:58:c1: 68:90:d5:64:a1:e8:f1:64:6c:7c:e4:d8:f0:e6:50: b9:9b:92:1e:0d:1a:3a:2d:57:c6:d4:32:f7:3c:a4: cc:9e:da:75:d3:c0:c4:ed:b3:6a:7e:3d:4b:fc:90: dc:be:e5:44:9c:80:dc:cd:90:df:46:b1:bf:93:1f: f9:8e:24:7f:ab:63:1b:9d:d9:9b:5e:a8:63:c3:99: e6:87:86:dc:4d:63:bb:63:87:9c:8f:71:69:19:42: 79:a8:91:af:f4:22:75:8d:1a:cf:29:6e:1a:d6:27: 10:70:5d:bf:4e:43:f9:e1:0e:84:69:dc:c7:45:e1: 9a:bf:a0:2f:15:d9:18:e6:08:9d:5f:0d:81:a9:25: 9e:5d:8b:b2:3a:09:83:a5:0b:ad:1f:8d:c0:b9:db: 0d:f4:9c:9a:20:bd:22:eb:54:5e:7f:67:52:65:10: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A1:AC:E9:26:FC:E5:6F:DB:F7:F2:CC:0D:E1:2C:1F:29:D6:C7:B0 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d0:c9:22:61:ec:0c:4a:5c:bc:ea:e6:ad:2e:5b:d4:c3:e4: 76:d6:fe:9c:a9:fb:7e:8a:df:9a:9d:cb:e7:df:0e:dd:7d:ed: f6:fd:8f:eb:76:09:f0:a8:eb:29:f0:5a:30:b8:01:b2:a8:eb: 5d:8a:56:94:f6:a7:ec:97:c9:1a:53:96:1f:da:d7:98:99:dd: 32:14:f9:c2:70:d7:9e:7b:e7:05:d2:61:11:36:94:81:11:c6: b2:34:f2:71:d3:9a:b2:55:24:23:00:aa:7f:80:66:00:3c:c5: 9d:fd:24:c0:fb:e7:c9:00:3d:d2:d0:e1:37:d1:96:35:20:6c: 90:50:b0:09:b0:ea:30:bd:0a:c8:7f:69:2b:3b:2c:42:4b:4a: 2c:ed:61:5e:b3:45:a2:72:76:54:62:b1:38:ab:76:1d:0b:37: b2:cf:f3:a5:fc:6d:dd:ba:4a:01:c2:f5:18:f0:06:6d:78:5e: 6e:e1:be:db:d7:34:78:c6:13:af:e2:f8:26:78:26:6f:bb:aa: d0:e2:68:6c:c4:3e:31:fa:43:a6:e2:69:89:ad:b4:f0:1e:27: bd:ef:79:11:89:20:26:f0:cf:d2:34:2b:4e:0e:9c:e0:47:e2: 6e:52:a4:07:bc:95:05:c2:bd:88:47:f2:88:80:b2:8c:db:dc: a7:3a:21:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjQwNTE4MTUwMTQxWhcNMjQwNTI1MTUwMTQxWjAYMRYwFAYD VQQDEw02NjQ4YzJkNS1kYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJSph+Ymvokocq1nu03JYCkOkreiwUKvtn+2MAWlox9LwDXAp5cXslxT1WDm HVzKuk5Ha8qckxVU+4sK5Lq2ZIPtQQ4zU+TBeUs+VmKvor4Vs5KmGJpaWMFokNVk oejxZGx85Njw5lC5m5IeDRo6LVfG1DL3PKTMntp108DE7bNqfj1L/JDcvuVEnIDc zZDfRrG/kx/5jiR/q2MbndmbXqhjw5nmh4bcTWO7Y4ecj3FpGUJ5qJGv9CJ1jRrP KW4a1icQcF2/TkP54Q6EadzHReGav6AvFdkY5gidXw2BqSWeXYuyOgmDpQutH43A udsN9JyaIL0i61Ref2dSZRBaZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuhrOkm /OVv2/fyzA3hLB8p1sewMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz0MkiYewMSly86uatLlvUw+R21v6cqft+it+ancvn3w7dfe32/Y/r dgnwqOsp8FowuAGyqOtdilaU9qfsl8kaU5Yf2teYmd0yFPnCcNeee+cF0mERNpSB EcayNPJx05qyVSQjAKp/gGYAPMWd/STA++fJAD3S0OE30ZY1IGyQULAJsOowvQrI f2krOyxCS0os7WFes0WicnZUYrE4q3YdCzeyz/Ol/G3dukoBwvUY8AZteF5u4b7b 1zR4xhOv4vgmeCZvu6rQ4mhsxD4x+kOm4mmJrbTwHie973kRiSAm8M/SNCtODpzg R+JuUqQHvJUFwr2IR/KIgLKM29ynOiFl -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org