$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: mzgy05cttLN7AOua/lXmagu0IrTPvFRS3pWnPlpFHM8= Subject key identifier: D3:05:5F:2A:2A:35:B4:02:52:32:01:55:0E:42:03:18:E6:85:47:F7 Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 012B Signing time: Sun 19 May 2024 05:03:00 +0000 Manifest this update: Sun 19 May 2024 05:02:59 +0000 Manifest next update: Sun 26 May 2024 05:02:59 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: FacCK/dctFVvGpXXzEdn11AEl+KhLU7L6P09xck9KEs=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: v1AbgrTjpoKEWPICN/6NLKI67YPRRco4GM7ZzFjypCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: May 19 05:02:59 2024 GMT Not After : May 26 05:02:59 2024 GMT Subject: CN=66498803-1e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:aa:9c:61:64:4d:20:a4:26:57:23:06:01:c1: 21:c9:39:45:6e:0d:e8:1d:58:00:ae:33:28:cf:ee: 1e:ef:9f:03:78:75:03:f1:20:16:cd:d4:29:9e:4a: 14:5d:24:1b:25:26:30:6f:3c:5e:b9:3e:1a:cd:93: c2:0d:c8:f7:ac:3b:b7:d5:61:1b:7c:21:d4:db:03: 9a:98:b7:30:2c:bd:9e:a6:72:f5:77:9f:94:23:fd: e6:b5:18:e0:e3:05:de:30:48:50:f9:97:1b:a9:40: ec:3c:b0:a3:25:64:5b:52:d8:9f:a4:39:b5:1e:64: cf:a9:01:e6:83:68:b1:ee:55:cb:5d:d2:18:3c:78: 09:b9:85:3f:f2:34:c1:e9:0c:57:f9:02:90:fa:9c: 56:19:32:10:b1:ec:39:4e:7c:83:a1:fd:8f:b9:f8: 77:6c:0e:17:2d:9c:a2:2b:8f:63:1c:63:f8:c1:9e: f4:ea:a6:eb:30:44:be:3b:cd:4b:9c:e6:87:b4:5e: ba:e3:b9:ef:06:90:ca:f5:1a:d4:ff:98:6b:62:d6: a7:9b:60:38:03:a5:c2:6a:b8:44:a2:76:1a:13:21: 84:f4:c0:85:54:5f:18:f3:fb:5b:79:48:84:92:57: 53:db:63:88:f4:ac:80:34:72:8e:36:b5:88:d3:87: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:05:5F:2A:2A:35:B4:02:52:32:01:55:0E:42:03:18:E6:85:47:F7 X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:86:45:f7:6c:19:56:8b:d9:f5:76:75:11:36:e1:2a:97:0d: 5f:b2:ab:5e:5d:d8:6e:b4:56:e5:5b:59:fc:af:26:32:5e:3f: 18:6d:b2:fd:a0:6b:b3:c7:c7:1e:95:34:ac:f7:74:1d:e8:dc: b2:b8:27:39:4b:59:a2:59:7f:d6:d5:04:d3:d7:da:fb:00:b3: 59:65:5f:26:69:03:33:0a:89:3d:1e:76:c4:58:8c:8f:a4:89: a5:ad:42:54:03:02:ba:e6:30:85:a0:4f:1a:96:2e:78:db:dc: a7:73:3a:6b:df:09:bc:49:54:06:cc:ad:cd:ca:97:ed:ce:74: 8b:e2:ff:13:e7:8c:15:66:5a:a6:c0:66:0c:87:52:a8:5f:c2: 7d:05:50:74:29:cd:86:d5:c1:7d:06:78:46:c7:5c:6c:ee:71: ed:25:80:cd:df:29:ba:10:bb:7b:6d:27:5b:58:51:41:69:ff: c8:b4:2a:4a:41:c9:83:5f:5c:1a:bd:1e:80:ad:30:40:3a:44: c2:e3:9b:62:ac:25:e8:c3:c1:f2:5e:88:da:fd:3e:db:60:af: f6:86:69:e9:cf:0d:30:0c:86:f3:27:1b:97:05:b3:c2:e6:88: 83:b1:6b:3d:c9:af:d2:6f:a0:9f:9c:ad:78:52:79:9c:5f:01: a0:e9:01:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjQwNTE5MDUwMjU5WhcNMjQwNTI2MDUwMjU5WjAYMRYwFAYD VQQDEw02NjQ5ODgwMy0xZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkaqcYWRNIKQmVyMGAcEhyTlFbg3oHVgArjMoz+4e758DeHUD8SAWzdQpnkoU XSQbJSYwbzxeuT4azZPCDcj3rDu31WEbfCHU2wOamLcwLL2epnL1d5+UI/3mtRjg 4wXeMEhQ+ZcbqUDsPLCjJWRbUtifpDm1HmTPqQHmg2ix7lXLXdIYPHgJuYU/8jTB 6QxX+QKQ+pxWGTIQsew5TnyDof2Pufh3bA4XLZyiK49jHGP4wZ706qbrMES+O81L nOaHtF6647nvBpDK9RrU/5hrYtanm2A4A6XCarhEonYaEyGE9MCFVF8Y8/tbeUiE kldT22OI9KyANHKONrWI04fukQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMFXyoq NbQCUjIBVQ5CAxjmhUf3MB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAhkX3bBlWi9n1dnURNuEqlw1fsqteXdhutFblW1n8ryYyXj8YbbL9 oGuzx8celTSs93Qd6NyyuCc5S1miWX/W1QTT19r7ALNZZV8maQMzCok9HnbEWIyP pImlrUJUAwK65jCFoE8ali5429ynczpr3wm8SVQGzK3NypftznSL4v8T54wVZlqm wGYMh1KoX8J9BVB0Kc2G1cF9BnhGx1xs7nHtJYDN3ym6ELt7bSdbWFFBaf/ItCpK QcmDX1wavR6ArTBAOkTC45tirCXow8HyXoja/T7bYK/2hmnpzw0wDIbzJxuXBbPC 5oiDsWs9ya/Sb6CfnK14UnmcXwGg6QGV -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org