$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json) Hash identifier: VgTyWt9tM/MNVfJC+BCONoYhMEWcSpvxQfkuDCXJQzY= Subject key identifier: 90:CB:42:78:F1:AE:B2:FA:C7:6F:A8:19:74:F4:2C:73:E2:97:7E:E1 Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Certificate serial: 0FA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft Manifest number: 0F74 Signing time: Sat 04 May 2024 18:19:53 +0000 Manifest this update: Sat 04 May 2024 18:19:53 +0000 Manifest next update: Sat 11 May 2024 18:19:53 +0000 Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: 0mbhbsrWAF2ENJEu3EWcuRprH3OiLMHravQPOn21pYo=) 2: 446826648F3511EE8864C25EC4F9AE02.roa (hash: azjhCYtaU7rnc9Y0DERGMgiCTal02Kbh/k65yAtbGzU=) 3: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: 2BdelQMuoX+M2ZfQcZ+3aYS5cASDjANIG1Gg1/tTowM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4002 (0xfa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Validity Not Before: May 4 18:19:53 2024 GMT Not After : May 11 18:19:53 2024 GMT Subject: CN=66367c49-9dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:68:be:24:4e:99:1b:37:b5:aa:13:6e:de: 80:a6:a0:c7:c4:07:f6:bc:a9:a9:50:de:44:ed:3c: 77:fd:1c:0b:a6:90:8f:3a:8a:36:eb:1c:49:97:9f: 64:61:0a:58:de:68:0b:3e:e4:96:63:11:5c:13:f9: 46:5b:92:bb:16:ea:a9:8c:ca:60:34:bf:cb:77:d1: af:a3:35:02:14:4f:17:45:93:af:d5:f5:84:2c:9c: 32:01:03:b3:92:f7:a7:7d:b6:06:85:04:6a:a1:70: c4:48:11:d0:96:c8:87:84:a8:0a:25:99:cc:cf:b0: 8a:5b:46:62:19:33:12:46:2b:5a:f2:85:09:41:09: 08:d4:e6:05:33:da:6b:c5:58:37:b5:94:9b:3f:b8: db:90:e6:61:c2:f4:08:c1:64:ae:7f:d1:76:8d:99: 0e:ce:80:54:34:2d:01:54:82:e1:eb:d6:9a:3e:db: b5:c3:6d:d0:58:20:3f:dd:04:b9:58:b9:a3:fa:79: bf:7d:37:9a:36:83:db:8e:ed:35:35:e6:eb:ac:67: 8e:85:7c:41:23:fb:c1:4b:12:ff:b7:a9:cd:c8:b1: 88:c1:75:4a:f9:c4:a0:9e:67:c2:44:b4:cf:48:97: e9:43:b9:5b:eb:1b:5c:07:98:88:c1:c7:6a:5d:38: f3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CB:42:78:F1:AE:B2:FA:C7:6F:A8:19:74:F4:2C:73:E2:97:7E:E1 X509v3 Authority Key Identifier: keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6a:17:f4:24:c8:23:ad:9e:62:03:bd:97:ee:ec:8e:b8:2b: 71:9a:d3:6c:93:0e:a8:2c:8e:51:a7:2a:a8:45:9e:a2:27:f5: 9a:61:0b:60:03:48:a9:e7:73:11:02:10:1f:74:b0:44:8d:ef: 21:ae:7d:a8:4c:36:62:f5:81:31:95:ad:33:e1:ba:3e:7b:85: 3f:29:2c:0c:65:ed:e1:83:24:ab:0b:68:31:75:0b:01:5a:01: 31:d4:76:6a:a0:c9:b4:27:bd:16:99:ed:21:51:e9:35:7b:23: 1c:62:2e:a6:6a:26:a7:a4:e6:a2:38:b0:78:80:5d:6e:17:6e: 60:97:15:74:c3:27:c3:77:0c:67:62:79:7c:b1:f2:f0:f2:2a: 59:28:37:29:e0:cd:28:5c:35:af:04:01:f8:1d:60:a1:3c:5d: ab:c2:d2:49:4e:d3:7a:fe:51:67:11:ef:53:2f:e4:2f:20:24: 29:6e:86:60:90:f9:ef:40:d6:b8:7b:c5:f8:ec:1b:de:fe:47: ab:44:67:04:a4:17:82:14:ec:28:f6:f1:0b:c0:ba:61:80:93: 39:2e:95:60:aa:e1:c7:24:b1:04:ee:fc:07:b4:6f:45:31:0d: 99:a0:05:21:d8:bb:e9:23:27:8f:bd:95:da:22:21:32:77:6b: 67:1b:ff:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw RDEzQUFBNTIwHhcNMjQwNTA0MTgxOTUzWhcNMjQwNTExMTgxOTUzWjAYMRYwFAYD VQQDEw02NjM2N2M0OS05ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhRoviROmRs3taoTbt6ApqDHxAf2vKmpUN5E7Tx3/RwLppCPOoo26xxJl59k YQpY3mgLPuSWYxFcE/lGW5K7FuqpjMpgNL/Ld9GvozUCFE8XRZOv1fWELJwyAQOz kvenfbYGhQRqoXDESBHQlsiHhKgKJZnMz7CKW0ZiGTMSRita8oUJQQkI1OYFM9pr xVg3tZSbP7jbkOZhwvQIwWSuf9F2jZkOzoBUNC0BVILh69aaPtu1w23QWCA/3QS5 WLmj+nm/fTeaNoPbju01NebrrGeOhXxBI/vBSxL/t6nNyLGIwXVK+cSgnmfCRLTP SJfpQ7lb6xtcB5iIwcdqXTjzewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDLQnjx rrL6x2+oGXT0LHPil37hMB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0 NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDREMS9FRjA5NThFRTQ0NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014 NmFyd19YY3FjeWdORTZxbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGahf0JMgjrZ5iA72X7uyOuCtxmtNskw6oLI5RpyqoRZ6iJ/WaYQtg A0ip53MRAhAfdLBEje8hrn2oTDZi9YExla0z4bo+e4U/KSwMZe3hgySrC2gxdQsB WgEx1HZqoMm0J70Wme0hUek1eyMcYi6maianpOaiOLB4gF1uF25glxV0wyfDdwxn Ynl8sfLw8ipZKDcp4M0oXDWvBAH4HWChPF2rwtJJTtN6/lFnEe9TL+QvICQpboZg kPnvQNa4e8X47Bve/kerRGcEpBeCFOwo9vELwLphgJM5LpVgquHHJLEE7vwHtG9F MQ2ZoAUh2LvpIyePvZXaIiEyd2tnG/9u -----END CERTIFICATE-----Generated at Sat May 4 19:58:35 2024 by rpki-client on console-ams.rpki-client.org