$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json) Hash identifier: FQpCAAhDyka6JNn9LkuL3j+ZEI9S5OeoMEF2/BDDxlk= Subject key identifier: 1B:BF:AB:5F:99:BB:E5:9D:58:FC:62:0C:9E:89:1F:A4:91:3A:7D:3D Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft Manifest number: 066C Signing time: Tue 30 Apr 2024 23:50:45 +0000 Manifest this update: Tue 30 Apr 2024 23:50:44 +0000 Manifest next update: Tue 07 May 2024 23:50:44 +0000 Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 6Pk0zKMfIxWU2CmsI3FZQpqo8TDeAiZuW9Dz4kJFqHw=) 2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: RX8p7S337poOOtLghqRoZ8Y7IsWIRt9DPeCAo24Qv80=) 3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: wOMjzzSSK6v2Uv8c05ziKNugLI/9r5gD5ccuCZLK+cQ=) 4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QQbK1ymZl9+2n4X4VHRwrL4hpj7Q/MR4kGWFkjStDqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: Apr 30 23:50:44 2024 GMT Not After : May 7 23:50:44 2024 GMT Subject: CN=663183d4-4a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:3b:7d:e6:94:df:66:59:2e:d9:ac:ed:09: 0c:a7:6d:6e:90:60:c2:15:57:bd:fa:ac:0a:4d:9c: 47:47:5f:70:e3:e9:09:f7:1b:bc:db:11:97:d6:f9: cc:b1:d1:e6:89:66:6b:3b:3b:c2:aa:c9:0b:16:2d: c4:69:bb:a1:b4:20:13:87:7f:de:9d:94:51:b1:68: 2a:33:3b:72:db:4f:95:6e:27:15:19:ff:4e:8a:ae: a9:b8:d1:77:43:64:71:e4:dd:d2:58:55:86:61:8e: 35:97:17:49:9c:e5:3d:64:2b:5c:20:7e:72:a3:8e: bb:58:00:e6:94:e4:6a:4c:46:ca:9f:d2:25:fb:ed: 94:09:6c:30:21:4d:99:15:4b:49:b3:5f:8b:20:73: 17:17:f5:59:89:fb:e7:94:6e:f0:bf:fc:30:59:30: 04:09:36:d4:cc:51:d6:7a:77:2e:ac:e3:98:67:2d: 75:8f:50:1c:75:cf:9b:d4:0d:34:60:ce:8b:a2:e2: b4:2a:68:f9:75:f8:10:b2:66:ee:38:a4:44:90:ac: 20:7d:2e:43:d2:37:c8:73:cc:40:28:49:fe:0c:4a: cf:70:37:a7:dd:ef:68:0a:07:38:c8:37:03:cf:3d: 54:5a:13:44:46:fc:6a:08:3a:ea:75:83:ba:dc:24: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BF:AB:5F:99:BB:E5:9D:58:FC:62:0C:9E:89:1F:A4:91:3A:7D:3D X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f6:0b:11:07:52:dc:e3:7e:1e:ad:e3:be:4a:97:7e:79:ea: d2:3e:22:d6:43:e3:80:cf:e7:2e:92:f1:d3:a4:0d:62:d7:8e: 54:1e:9f:6f:a8:67:b4:73:2e:8b:4e:e9:80:8c:1f:24:57:6f: 92:c1:a9:d0:47:9a:3a:a4:96:bc:ca:d8:e5:19:0d:82:4d:52: 2b:69:f4:04:3f:f6:80:46:28:ef:15:4e:cf:b7:7d:50:9f:fa: 01:21:d3:c0:c4:a1:ab:49:e3:b7:7d:ff:61:b2:99:4b:47:8b: 80:0d:0c:95:e8:31:74:17:65:32:c6:57:77:1b:0e:5a:ca:99: 4b:5c:05:9f:7e:d9:74:13:f7:ba:2f:03:e7:63:65:77:79:11: 5f:1e:9e:b5:17:63:a4:15:2f:9f:41:3b:72:b5:ac:45:e6:4e: 0b:65:db:a3:b1:70:ce:e2:75:f9:e0:e2:83:a8:f7:bc:9a:6f: dd:45:dd:76:97:7d:ed:53:db:52:62:c6:d8:7a:ca:23:d3:1a: 85:e3:c4:7d:85:80:65:bb:84:a5:ca:a3:42:c2:01:aa:f8:59: 1a:9a:c2:45:b9:aa:db:75:d4:e7:9f:02:83:0f:83:d4:24:fc: bd:28:59:56:da:20:62:0e:6a:34:49:f6:b1:9c:19:75:87:d5: 83:5f:e5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjQwNDMwMjM1MDQ0WhcNMjQwNTA3MjM1MDQ0WjAYMRYwFAYD VQQDEw02NjMxODNkNC00YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qA7feaU32ZZLtms7QkMp21ukGDCFVe9+qwKTZxHR19w4+kJ9xu82xGX1vnM sdHmiWZrOzvCqskLFi3EabuhtCATh3/enZRRsWgqMzty20+VbicVGf9Oiq6puNF3 Q2Rx5N3SWFWGYY41lxdJnOU9ZCtcIH5yo467WADmlORqTEbKn9Il++2UCWwwIU2Z FUtJs1+LIHMXF/VZifvnlG7wv/wwWTAECTbUzFHWencurOOYZy11j1Acdc+b1A00 YM6LouK0Kmj5dfgQsmbuOKREkKwgfS5D0jfIc8xAKEn+DErPcDen3e9oCgc4yDcD zz1UWhNERvxqCDrqdYO63CSIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBu/q1+Z u+WdWPxiDJ6JH6SROn09MB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5 TGllWUtXbHBlRm90ZDljMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv9gsRB1Lc434ereO+Spd+eerSPiLWQ+OAz+cukvHTpA1i145UHp9v qGe0cy6LTumAjB8kV2+SwanQR5o6pJa8ytjlGQ2CTVIrafQEP/aARijvFU7Pt31Q n/oBIdPAxKGrSeO3ff9hsplLR4uADQyV6DF0F2Uyxld3Gw5ayplLXAWfftl0E/e6 LwPnY2V3eRFfHp61F2OkFS+fQTtytaxF5k4LZdujsXDO4nX54OKDqPe8mm/dRd12 l33tU9tSYsbYesoj0xqF48R9hYBlu4SlyqNCwgGq+FkamsJFuarbddTnnwKDD4PU JPy9KFlW2iBiDmo0SfaxnBl1h9WDX+WL -----END CERTIFICATE-----Generated at Wed May 1 00:35:52 2024 by rpki-client on console-ams.rpki-client.org