$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: n9CKbfD17nwIOutn7owpCluQKPMRRNl1VEfZTgOK9rU= Subject key identifier: D3:92:62:08:DC:7B:7D:BE:F9:E7:C7:5D:FA:5E:AB:E2:C0:2B:EE:E7 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 02E8 Signing time: Sun 19 May 2024 03:20:49 +0000 Manifest this update: Sun 19 May 2024 03:20:49 +0000 Manifest next update: Sun 26 May 2024 03:20:49 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: IF0JY1pfqBdWXJWDyKDoI2yx0KPAG0l6xchGCkyQ4iQ=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: krhsFK4PFWTrjNJ4p9/c55q/gQAKBPQnFLQMSNIsQfk=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: jcldHkQ5FFmg/MXlqtsVZ+VaudO8txN/6DH5hAk06uA=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: FkQAfdMiMVRkFmDG7OCPPtDI1TM4+1FS9ZFrS9JgM34=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 4ZluWaRFJyFeOP9xnmq3elh/rOt90VuN3X6ZFi8v76c=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: 2xYkc0CBHJO1BA1IWYUatPbE+AVeAURXevuFcb34wYs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: J+kNwKbZA9+MvDuLAMY45SZRzBH7dIz40cdBHlCeLTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: May 19 03:20:49 2024 GMT Not After : May 26 03:20:49 2024 GMT Subject: CN=66497011-1484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:d1:92:3e:d5:3f:2b:52:1c:4d:19:da:94: 66:49:8e:36:7c:03:2e:57:fb:0a:e1:0f:b2:44:58: 18:eb:8b:f7:a8:79:8b:b5:95:29:a3:b8:39:84:67: 60:c6:4b:ef:0d:52:3b:03:19:ca:52:c7:69:c1:08: ef:8c:df:48:7d:52:71:8c:5e:45:37:5c:d7:7e:40: 39:42:cf:07:c5:31:e6:d1:00:47:fc:80:18:25:04: cd:77:96:9b:bd:4c:43:63:85:3e:0b:26:ae:c4:82: 0f:c5:da:6e:63:8c:f7:72:03:b6:72:33:dc:87:9a: 0f:56:fb:57:75:19:cc:d3:70:52:71:e1:cc:a9:94: 54:b4:66:f2:1f:5b:b5:7b:39:5f:d2:68:84:e2:d9: a7:6d:49:6b:5d:f5:78:1e:e2:df:e1:9e:7e:1d:ca: 25:ca:90:3a:9e:eb:ec:55:93:ea:66:1e:50:84:f2: 7d:7d:0b:71:dc:aa:52:c5:c0:bb:08:9f:59:1b:74: 03:2e:85:41:f6:f7:47:ab:d7:e4:36:a4:3e:9c:b3: 1c:11:47:b0:05:dc:b8:af:e8:98:57:d6:4a:07:79: ce:ea:7f:ea:5f:66:46:f4:71:84:e7:87:26:e5:7f: 5d:70:d3:b3:05:87:e4:0e:d0:4d:e4:76:c0:77:8d: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:92:62:08:DC:7B:7D:BE:F9:E7:C7:5D:FA:5E:AB:E2:C0:2B:EE:E7 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:39:98:89:21:70:57:b8:9c:88:dd:fc:47:a4:f3:2f:5d:64: f1:59:0e:fa:82:86:0e:2a:86:05:29:64:3b:dd:7a:ae:ca:f2: bd:64:22:77:c1:2f:f8:79:48:00:40:43:f2:3b:6b:23:57:67: 17:05:90:ac:43:18:5c:98:42:d9:55:15:0f:be:70:06:53:3a: a0:80:8d:fa:42:e1:be:63:27:b9:7e:18:3e:7a:51:41:0e:21: d9:27:3f:d6:01:27:41:4b:3b:fc:b7:61:4b:79:c3:ec:5a:96: 54:66:ca:04:7f:de:35:86:66:09:f1:38:96:71:b7:99:33:3e: af:19:9b:65:e8:c9:2d:a3:8e:5a:f6:ac:30:62:14:93:37:5e: 7f:b3:a6:f0:41:ac:ea:9a:aa:be:ec:62:91:66:24:c6:ea:67: 73:fa:b8:af:79:a4:cc:f1:38:fe:79:90:0e:66:75:44:b8:83: 68:cf:81:ce:34:7f:ac:f0:97:e1:99:9c:f7:6d:05:8f:7d:86: a8:7e:d8:c6:50:7c:30:2e:35:f4:69:89:a5:11:19:2e:61:25: e1:af:b1:b2:ad:95:8e:cf:3a:2f:d1:da:c5:32:e6:44:db:63: ca:d8:9a:65:d5:f3:7c:4e:37:6a:29:27:7e:82:74:58:9d:40: 9e:f0:35:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjQwNTE5MDMyMDQ5WhcNMjQwNTI2MDMyMDQ5WjAYMRYwFAYD VQQDEw02NjQ5NzAxMS0xNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU/Rkj7VPytSHE0Z2pRmSY42fAMuV/sK4Q+yRFgY64v3qHmLtZUpo7g5hGdg xkvvDVI7AxnKUsdpwQjvjN9IfVJxjF5FN1zXfkA5Qs8HxTHm0QBH/IAYJQTNd5ab vUxDY4U+CyauxIIPxdpuY4z3cgO2cjPch5oPVvtXdRnM03BSceHMqZRUtGbyH1u1 ezlf0miE4tmnbUlrXfV4HuLf4Z5+HcolypA6nuvsVZPqZh5QhPJ9fQtx3KpSxcC7 CJ9ZG3QDLoVB9vdHq9fkNqQ+nLMcEUewBdy4r+iYV9ZKB3nO6n/qX2ZG9HGE54cm 5X9dcNOzBYfkDtBN5HbAd41H3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOSYgjc e32++efHXfpeq+LAK+7nMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsOZiJIXBXuJyI3fxHpPMvXWTxWQ76goYOKoYFKWQ73XquyvK9ZCJ3 wS/4eUgAQEPyO2sjV2cXBZCsQxhcmELZVRUPvnAGUzqggI36QuG+Yye5fhg+elFB DiHZJz/WASdBSzv8t2FLecPsWpZUZsoEf941hmYJ8TiWcbeZMz6vGZtl6Mkto45a 9qwwYhSTN15/s6bwQazqmqq+7GKRZiTG6mdz+riveaTM8Tj+eZAOZnVEuINoz4HO NH+s8JfhmZz3bQWPfYaoftjGUHwwLjX0aYmlERkuYSXhr7GyrZWOzzov0drFMuZE 22PK2Jpl1fN8TjdqKSd+gnRYnUCe8DWp -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org