$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json) Hash identifier: JjPKhZPtOHfUAXEspvzHyLxkValmKyqi3YJ/cEnPiKA= Subject key identifier: 9C:FD:E3:1E:B4:F5:49:22:77:86:84:C5:99:26:FF:88:AC:DD:DF:E8 Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft Manifest number: 010D Signing time: Sat 01 Jun 2024 06:46:27 +0000 Manifest this update: Sat 01 Jun 2024 06:46:27 +0000 Manifest next update: Sat 08 Jun 2024 06:46:27 +0000 Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: XZU6TxGGTkNAVbJyCF/f23DHL2oMVO9H1BKuSSVBhFI=) 2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: vSh++brKS8c8WUXJO+5rDkLX3DWqeoEWQdE4cGGx0Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 06:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Validity Not Before: Jun 1 06:46:27 2024 GMT Not After : Jun 8 06:46:27 2024 GMT Subject: CN=665ac3c3-d640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:74:c0:2e:8c:d1:5d:84:68:5c:54:8e:17: 02:12:7e:8e:db:67:e6:25:3c:d4:34:d5:08:0b:fc: 9e:e6:84:a7:24:de:ea:50:df:0f:59:d0:fb:1e:76: 54:90:34:6c:cf:45:0b:a6:e0:97:8f:f4:b7:4e:ce: 4b:e9:9a:5e:5b:b2:f5:9a:59:30:4f:84:0e:e1:49: e8:0b:96:0c:b1:0c:3d:59:b2:97:2c:63:5d:b8:ad: 17:2d:fa:46:d6:14:aa:6e:42:4e:56:3b:61:ac:d6: 3d:4a:79:67:e0:ef:f9:c9:7e:32:33:c8:fb:8d:de: 50:ce:9e:bf:dc:d2:9b:ee:32:14:7d:7a:4a:cc:9a: c1:12:d5:2c:c6:3c:8c:3f:b0:21:be:1b:78:36:19: a0:18:b4:52:ec:a6:b9:ac:14:ea:5d:ed:e7:fb:6c: f8:70:1f:57:c4:7b:a2:d1:d9:05:4f:9a:ee:f7:04: 8f:bc:1b:db:78:18:b0:4a:94:5a:e3:b4:df:47:8c: 85:b8:79:b8:40:d6:40:d8:80:ce:c3:7c:41:4b:89: 62:a9:ae:e0:72:c6:9e:f2:ae:76:20:22:5e:1d:a8: 73:0f:94:3c:e5:56:a6:4d:3a:7d:aa:35:2e:7e:aa: a3:d2:27:92:54:78:1c:b7:7c:24:8e:70:1f:75:bc: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:E3:1E:B4:F5:49:22:77:86:84:C5:99:26:FF:88:AC:DD:DF:E8 X509v3 Authority Key Identifier: keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b1:c1:06:6d:a7:94:66:8c:9b:ea:b8:b0:04:ec:bd:cc:99: 22:30:fe:b8:95:ba:10:1b:44:08:13:bd:d4:48:b0:dd:63:9a: ce:4b:82:88:22:c5:5f:17:7a:73:00:d5:6d:ee:48:36:2c:47: 33:db:88:7a:13:07:6f:b9:64:97:db:e3:5b:1f:3f:08:97:bc: c1:2d:9a:10:f6:64:86:1f:85:4b:05:ec:07:e4:e7:f6:0c:97: 1c:ac:89:81:5a:9c:f6:7c:e4:13:b8:e0:22:a6:c5:94:3d:c4: 2a:b6:85:c7:28:c8:3e:81:59:51:58:76:60:d8:75:af:61:0a: be:d7:f0:15:40:9c:4e:11:e6:cb:d7:44:e6:78:ff:86:08:54: 4d:af:3e:c9:05:ed:2b:6d:5a:df:8e:f3:10:27:16:f2:b3:3e: ba:ff:ba:98:d2:71:9b:8d:d2:92:0e:3d:11:a0:8c:06:c6:d7: c0:38:8a:79:d2:ca:2c:72:4e:25:36:06:a9:12:6e:ad:f3:28: 48:3c:a0:75:84:7f:cb:f1:9b:1d:7a:d1:84:a5:a6:8e:86:3c: ef:e3:3e:a9:50:e9:02:fb:b5:4e:7f:c8:db:6a:09:96:f8:bf: 78:65:c9:81:56:cf:b5:cb:82:32:5d:7a:49:1a:56:74:a6:26: fa:68:a8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx NkY2NkNEQTkwHhcNMjQwNjAxMDY0NjI3WhcNMjQwNjA4MDY0NjI3WjAYMRYwFAYD VQQDEw02NjVhYzNjMy1kNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIp0wC6M0V2EaFxUjhcCEn6O22fmJTzUNNUIC/ye5oSnJN7qUN8PWdD7HnZU kDRsz0ULpuCXj/S3Ts5L6ZpeW7L1mlkwT4QO4UnoC5YMsQw9WbKXLGNduK0XLfpG 1hSqbkJOVjthrNY9Snln4O/5yX4yM8j7jd5Qzp6/3NKb7jIUfXpKzJrBEtUsxjyM P7Ahvht4NhmgGLRS7Ka5rBTqXe3n+2z4cB9XxHui0dkFT5ru9wSPvBvbeBiwSpRa 47TfR4yFuHm4QNZA2IDOw3xBS4liqa7gcsae8q52ICJeHahzD5Q85VamTTp9qjUu fqqj0ieSVHgct3wkjnAfdbzh+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz94x60 9Ukid4aExZkm/4is3d/oMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2 ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV MjU2c2lORmd0T0VXOW16YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXscEGbaeUZoyb6riwBOy9zJkiMP64lboQG0QIE73USLDdY5rOS4KI IsVfF3pzANVt7kg2LEcz24h6EwdvuWSX2+NbHz8Il7zBLZoQ9mSGH4VLBewH5Of2 DJccrImBWpz2fOQTuOAipsWUPcQqtoXHKMg+gVlRWHZg2HWvYQq+1/AVQJxOEebL 10TmeP+GCFRNrz7JBe0rbVrfjvMQJxbysz66/7qY0nGbjdKSDj0RoIwGxtfAOIp5 0sosck4lNgapEm6t8yhIPKB1hH/L8ZsdetGEpaaOhjzv4z6pUOkC+7VOf8jbagmW +L94ZcmBVs+1y4IyXXpJGlZ0pib6aKgT -----END CERTIFICATE-----Generated at Sat Jun 1 08:16:02 2024 by rpki-client on console-ams.rpki-client.org