$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: BglUwgXGDvzNqEpMlaq10JE0PWx7joGM86pvM3qTO8U= Subject key identifier: 08:37:D4:38:D2:F5:10:98:83:31:DF:D0:8E:B9:69:41:87:1E:F0:87 Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 012A Signing time: Sun 19 May 2024 05:05:21 +0000 Manifest this update: Sun 19 May 2024 05:05:21 +0000 Manifest next update: Sun 26 May 2024 05:05:21 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: znwJoOLTHVw2f4S3D3dx0l33DwREcKxl35gRNSsbyfI=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: 4c2Go2NdWW49HnnGM3f7US9onkJqciB7ngsY709AXRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: May 19 05:05:21 2024 GMT Not After : May 26 05:05:21 2024 GMT Subject: CN=66498891-0549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:e6:2b:90:a7:dd:87:42:4c:1f:94:d8:b0: 7b:2a:79:4b:ff:62:80:fd:9b:03:f8:79:e7:ca:8e: 37:83:89:b1:af:05:00:7d:97:f6:7c:ca:ef:3a:14: 10:a3:a2:aa:22:c3:be:75:35:5d:46:cc:dd:dc:83: 3d:e6:d6:20:cd:2a:09:5b:24:77:13:23:23:5e:9d: a3:7a:c6:dc:1f:66:c8:a5:0b:23:e2:ca:15:d9:e6: cc:4e:09:77:90:76:89:fc:c4:33:4e:db:7c:cc:6b: 7d:41:e8:b2:8e:be:cd:ff:f8:3e:88:f5:9a:f5:e8: c1:44:8d:d7:01:f2:f3:db:33:39:17:5f:d4:e6:3b: 45:6b:64:91:70:44:ba:fa:8b:17:d0:9a:80:29:f5: c1:33:0a:e5:90:8d:3d:f5:93:ef:e7:38:8b:23:a3: 00:19:a4:6e:9e:ae:fe:b7:43:e9:ca:2e:6e:00:66: ca:e1:98:07:b6:8a:ca:e3:33:07:f8:81:d2:bc:75: 36:1f:78:2c:12:32:1f:58:e0:93:cf:5b:57:7c:29: 1a:34:d4:5f:e8:c9:7b:0f:d8:c1:2a:56:26:68:b4: 57:0e:38:39:26:af:fc:4f:c4:cf:e0:90:4a:c9:8f: 00:d8:fd:1a:f7:34:3b:84:d4:21:c8:cc:89:b0:c3: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:37:D4:38:D2:F5:10:98:83:31:DF:D0:8E:B9:69:41:87:1E:F0:87 X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0a:66:6b:ba:b5:42:41:6b:19:42:2d:be:d1:2c:ec:55:d6: d3:3a:c3:0f:ce:f7:e0:a9:22:4a:2d:d2:fc:c7:75:b5:80:cc: 5c:69:b1:05:10:36:86:7e:7e:96:6a:0e:6a:dc:65:68:0f:7c: 9f:27:be:9b:01:85:40:bd:06:68:bd:a6:f3:12:6b:54:d3:b4: c9:4c:24:75:c8:8b:1a:cf:58:9d:60:a0:88:48:0b:5b:07:46: b5:ef:36:b0:41:e0:69:73:bc:e8:aa:a0:64:dc:e9:9a:ee:af: d0:22:53:b7:e2:0f:10:97:fa:b5:8e:d0:f6:93:07:fb:e7:c8: ae:10:90:4d:d8:cb:f0:3e:00:e2:56:f7:a0:cf:e5:23:44:92: 86:fe:31:20:3e:8f:f0:55:42:d5:b2:ad:e0:d9:ba:5f:bf:9d: f6:b1:c4:65:52:7f:9d:b0:e1:1e:90:bc:60:c7:65:9b:17:66: 4f:36:34:d6:01:1b:3c:83:73:0c:f6:6f:e9:81:ab:4a:44:f2: 8f:80:88:4d:65:f7:7b:ce:34:25:b2:dd:01:35:d7:5a:af:e7: 47:be:b9:36:90:29:26:ab:4f:42:a7:5b:6f:f8:64:eb:3b:c0: 7a:86:c0:85:2d:87:80:14:36:71:57:c2:d1:7b:84:7a:f8:75: 77:53:d8:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjQwNTE5MDUwNTIxWhcNMjQwNTI2MDUwNTIxWjAYMRYwFAYD VQQDEw02NjQ5ODg5MS0wNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNDmK5Cn3YdCTB+U2LB7KnlL/2KA/ZsD+Hnnyo43g4mxrwUAfZf2fMrvOhQQ o6KqIsO+dTVdRszd3IM95tYgzSoJWyR3EyMjXp2jesbcH2bIpQsj4soV2ebMTgl3 kHaJ/MQzTtt8zGt9Qeiyjr7N//g+iPWa9ejBRI3XAfLz2zM5F1/U5jtFa2SRcES6 +osX0JqAKfXBMwrlkI099ZPv5ziLI6MAGaRunq7+t0Ppyi5uAGbK4ZgHtorK4zMH +IHSvHU2H3gsEjIfWOCTz1tXfCkaNNRf6Ml7D9jBKlYmaLRXDjg5Jq/8T8TP4JBK yY8A2P0a9zQ7hNQhyMyJsMPduQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg31DjS 9RCYgzHf0I65aUGHHvCHMB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMCmZrurVCQWsZQi2+0SzsVdbTOsMPzvfgqSJKLdL8x3W1gMxcabEF EDaGfn6Wag5q3GVoD3yfJ76bAYVAvQZovabzEmtU07TJTCR1yIsaz1idYKCISAtb B0a17zawQeBpc7zoqqBk3Oma7q/QIlO34g8Ql/q1jtD2kwf758iuEJBN2MvwPgDi Vvegz+UjRJKG/jEgPo/wVULVsq3g2bpfv532scRlUn+dsOEekLxgx2WbF2ZPNjTW ARs8g3MM9m/pgatKRPKPgIhNZfd7zjQlst0BNddar+dHvrk2kCkmq09Cp1tv+GTr O8B6hsCFLYeAFDZxV8LRe4R6+HV3U9ie -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org