$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json) Hash identifier: XsubgRSXQt9qnyzCof3TmuPezrR7MdhtvRI48xznUJU= Subject key identifier: CB:A7:B5:D3:77:57:37:72:CF:6F:E9:09:24:E1:B4:6C:59:5C:BD:90 Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft Manifest number: 03EB Signing time: Sun 19 May 2024 02:16:06 +0000 Manifest this update: Sun 19 May 2024 02:16:05 +0000 Manifest next update: Sun 26 May 2024 02:16:05 +0000 Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: mvypcKNSbUIiV0W6jeMJGbIcqs8A2LIxiRjqvSK+Ivo=) 2: 2110795ED38E11EDADA86381C4F9AE02.roa (hash: FHUq+25RfAvRmoSq3J8qQEYuDgSuE+HIM5BAWKCMjTw=) 3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: TKURtbuyw+rLaFGaGCgTfbbgIniMdN+medlsLVxiAIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: May 19 02:16:05 2024 GMT Not After : May 26 02:16:05 2024 GMT Subject: CN=664960e5-ec95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:fd:17:3d:bf:d1:ee:cf:25:ed:28:9a:be: 58:61:4c:7b:21:ea:cc:6e:af:87:7a:da:e8:21:01: a8:12:0d:f6:9e:3d:0d:c1:3e:f1:a8:0a:a4:3c:e8: aa:41:9e:12:eb:6a:f2:8f:00:90:6a:d8:92:b1:6d: 1c:f8:06:11:9e:e5:44:ff:75:30:ec:a3:01:a9:e3: eb:89:7a:3d:36:68:6d:87:fd:f2:0d:aa:f3:75:66: 74:98:dd:dc:c2:ee:5a:13:b8:22:7e:23:b5:8e:c2: aa:92:80:b0:f2:d5:b7:94:dd:61:f8:ba:32:ef:07: 5d:39:75:90:f0:9e:86:3c:40:52:87:37:5c:e9:6b: dd:a5:4f:4b:2f:2c:ab:3c:16:14:f4:e4:3a:8b:87: 5c:cb:cb:e0:1a:04:7d:74:e1:72:a6:56:b5:fb:56: 7b:fd:6f:32:dc:51:ec:85:d6:6d:de:13:23:44:56: ba:09:aa:32:ae:1a:6b:18:0d:f0:61:1c:2a:c3:a1: a4:4a:9a:af:76:da:25:ee:cf:bd:65:ee:4e:75:aa: b9:fa:92:5b:76:8b:b8:a0:37:9e:d4:9e:4d:dd:98: 7c:19:d6:d1:28:3f:56:c4:b7:6c:8d:6d:ee:7b:54: c9:27:e9:a8:f1:0d:00:70:3b:c0:d1:ca:3a:23:85: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A7:B5:D3:77:57:37:72:CF:6F:E9:09:24:E1:B4:6C:59:5C:BD:90 X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b8:b9:29:dc:48:d0:76:b2:65:b8:b0:67:88:8b:1a:b6:b4: 81:ce:25:6e:83:55:61:32:08:ea:94:b2:66:54:33:88:7c:cf: 16:26:d6:52:f8:04:74:85:a1:8f:61:03:5f:62:54:09:d1:82: 62:7a:6e:5d:7e:5b:03:e9:e8:59:15:d2:7c:ea:69:b1:2a:df: 91:c2:f6:f5:9a:64:e5:c5:b6:81:c7:4f:32:cf:7a:57:96:cc: 4d:a1:1b:35:d6:a8:31:4b:ee:d5:ad:3f:70:f1:a1:3d:96:9e: 6d:27:f1:2b:23:be:52:81:6d:05:59:c2:9e:e7:11:8f:54:00: 6d:00:17:99:09:28:e5:6c:00:35:7e:46:58:8d:1d:5d:c4:51: f4:78:f7:d7:ee:7c:57:db:10:7c:2f:2a:42:0d:cb:f5:13:6b: cd:15:03:50:7b:e4:c7:11:7c:c9:27:04:09:ef:c1:0f:60:31: 11:30:20:e6:ca:65:b1:7d:3d:f4:c3:10:a5:56:ce:4a:72:80: 56:9c:7b:80:d5:b1:d7:33:72:a8:c1:50:b3:50:3d:71:09:69: 09:6e:72:93:54:db:6f:a1:85:17:b2:91:1a:11:67:02:58:f7: 4f:6e:9b:6a:e5:2b:bf:94:a1:06:21:dc:a4:93:64:85:6d:1d: e3:9e:41:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjQwNTE5MDIxNjA1WhcNMjQwNTI2MDIxNjA1WjAYMRYwFAYD VQQDEw02NjQ5NjBlNS1lYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2j9Fz2/0e7PJe0omr5YYUx7IerMbq+HetroIQGoEg32nj0NwT7xqAqkPOiq QZ4S62ryjwCQatiSsW0c+AYRnuVE/3Uw7KMBqePriXo9Nmhth/3yDarzdWZ0mN3c wu5aE7gifiO1jsKqkoCw8tW3lN1h+Loy7wddOXWQ8J6GPEBShzdc6WvdpU9LLyyr PBYU9OQ6i4dcy8vgGgR9dOFypla1+1Z7/W8y3FHshdZt3hMjRFa6CaoyrhprGA3w YRwqw6GkSpqvdtol7s+9Ze5Odaq5+pJbdou4oDee1J5N3Zh8GdbRKD9WxLdsjW3u e1TJJ+mo8Q0AcDvA0co6I4WvFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuntdN3 Vzdyz2/pCSThtGxZXL2QMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf MFhXLUF2U1VsbWlpRkRjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADuLkp3EjQdrJluLBniIsatrSBziVug1VhMgjqlLJmVDOIfM8WJtZS +AR0haGPYQNfYlQJ0YJiem5dflsD6ehZFdJ86mmxKt+Rwvb1mmTlxbaBx08yz3pX lsxNoRs11qgxS+7VrT9w8aE9lp5tJ/ErI75SgW0FWcKe5xGPVABtABeZCSjlbAA1 fkZYjR1dxFH0ePfX7nxX2xB8LypCDcv1E2vNFQNQe+THEXzJJwQJ78EPYDERMCDm ymWxfT30wxClVs5KcoBWnHuA1bHXM3KowVCzUD1xCWkJbnKTVNtvoYUXspEaEWcC WPdPbptq5Su/lKEGIdykk2SFbR3jnkE5 -----END CERTIFICATE-----Generated at Sun May 19 02:59:15 2024 by rpki-client on console-ams.rpki-client.org