$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: mZTh8SjwL95e9iw1k4PtkKpaWV7OT/7Zq9stVosW2A4= Subject key identifier: 01:B9:DA:15:4F:AE:2B:3B:59:B8:54:51:7E:12:C3:51:F2:F7:EB:91 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0B97 Signing time: Fri 26 Apr 2024 19:12:27 +0000 Manifest this update: Fri 26 Apr 2024 19:12:27 +0000 Manifest next update: Fri 03 May 2024 19:12:27 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: pnjJp/eRORof8CO80x98n4vtG4rwAcQhZ74Y2aDpSsc=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: kEA084SR0ta0b1G24adapFfLOyD00Ilrf1P53QmRPys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Apr 26 19:12:27 2024 GMT Not After : May 3 19:12:27 2024 GMT Subject: CN=662bfc9b-e3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:10:fb:00:e7:4e:57:7b:64:b0:2b:4e:08: f6:8c:f3:ba:d0:4d:f8:1a:79:21:5e:41:d0:fe:e6: 16:f4:bd:28:c0:3d:9a:84:a6:c8:00:20:8f:da:62: 07:89:82:a0:63:32:0f:53:a5:1c:8d:36:ed:b3:01: e3:d7:1a:ba:0c:85:bd:41:be:7e:c6:9f:64:2f:60: 43:cf:58:b9:a3:f0:d3:5a:b6:ae:8f:68:cf:8a:08: 2b:76:a3:ff:6d:45:5b:83:02:76:63:c1:22:d6:9e: 3b:08:8d:c0:dd:fa:81:70:85:cc:b2:4d:df:b0:d1: 1f:59:11:3e:28:53:56:47:26:f0:e5:15:f1:b6:f3: 6e:5b:7c:e2:8d:b8:e9:e3:23:eb:cd:2d:03:05:4f: ac:36:99:63:52:52:80:89:20:ae:db:29:c2:37:8c: 3c:79:c9:c5:85:f5:3a:3d:36:8b:8c:2c:00:70:c1: 25:05:0d:09:f1:13:87:ac:2c:8c:ac:87:ff:10:af: 30:06:6f:7b:11:16:ee:00:72:ec:19:be:50:77:cc: f7:06:e5:31:3f:07:8b:a9:17:71:ac:8e:61:47:8e: ed:6c:a1:77:6d:ca:2e:59:28:30:e0:bc:67:9b:e0: 34:9d:02:ab:87:30:dc:69:69:7d:a7:42:f0:64:a1: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B9:DA:15:4F:AE:2B:3B:59:B8:54:51:7E:12:C3:51:F2:F7:EB:91 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:70:cc:ff:24:46:6c:b7:60:2d:b5:bd:35:e8:29:60:0e:81: 35:0a:3a:ed:4a:45:c3:c6:41:ed:31:54:a0:d6:c8:7a:87:4e: bf:1e:4d:5b:65:96:4f:67:0e:06:08:a1:04:0a:62:4d:c1:a7: 03:97:4a:a3:d1:8c:1c:a7:9a:42:9d:a5:40:18:9c:d8:36:dd: 5c:7e:46:4f:47:ee:1b:2b:48:61:29:8d:e6:cd:8a:a8:a6:89: 53:ad:45:17:04:cd:d3:f7:a1:02:ec:88:3d:15:82:35:46:a4: 39:04:29:5a:4b:3e:92:73:43:0e:c7:05:8f:c6:56:f0:2d:76: 65:ba:cf:b5:06:68:c5:f3:ea:4a:6d:c7:cc:9a:36:77:36:63: bf:cb:1e:1e:bd:c5:9f:83:88:6c:c8:ae:b7:fc:9f:cd:d3:d4: 9d:b1:43:28:54:de:d7:52:b4:34:e2:88:b1:0f:28:ac:3f:2b: 1a:3e:1a:b5:6a:c7:d3:12:ad:f9:54:22:44:e2:20:d1:4e:8f: 01:c3:8a:57:1e:84:e8:86:55:34:13:5e:62:bd:ed:10:42:c5: 50:4b:d4:df:b6:5d:3b:87:88:e4:f3:12:10:b8:62:cc:f0:73: 39:d6:99:54:9a:5f:3a:d5:91:c9:cc:95:29:15:59:e3:ca:c3: e9:2e:e2:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjQwNDI2MTkxMjI3WhcNMjQwNTAzMTkxMjI3WjAYMRYwFAYD VQQDEw02NjJiZmM5Yi1lM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYsQ+wDnTld7ZLArTgj2jPO60E34GnkhXkHQ/uYW9L0owD2ahKbIACCP2mIH iYKgYzIPU6UcjTbtswHj1xq6DIW9Qb5+xp9kL2BDz1i5o/DTWrauj2jPiggrdqP/ bUVbgwJ2Y8Ei1p47CI3A3fqBcIXMsk3fsNEfWRE+KFNWRybw5RXxtvNuW3zijbjp 4yPrzS0DBU+sNpljUlKAiSCu2ynCN4w8ecnFhfU6PTaLjCwAcMElBQ0J8ROHrCyM rIf/EK8wBm97ERbuAHLsGb5Qd8z3BuUxPweLqRdxrI5hR47tbKF3bcouWSgw4Lxn m+A0nQKrhzDcaWl9p0LwZKH0+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG52hVP ris7WbhUUX4Sw1Hy9+uRMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGcMz/JEZst2Attb016ClgDoE1CjrtSkXDxkHtMVSg1sh6h06/Hk1b ZZZPZw4GCKEECmJNwacDl0qj0Ywcp5pCnaVAGJzYNt1cfkZPR+4bK0hhKY3mzYqo polTrUUXBM3T96EC7Ig9FYI1RqQ5BClaSz6Sc0MOxwWPxlbwLXZlus+1BmjF8+pK bcfMmjZ3NmO/yx4evcWfg4hsyK63/J/N09SdsUMoVN7XUrQ04oixDyisPysaPhq1 asfTEq35VCJE4iDRTo8Bw4pXHoTohlU0E15ive0QQsVQS9Tftl07h4jk8xIQuGLM 8HM51plUml861ZHJzJUpFVnjysPpLuJd -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:24 2024 by rpki-client on console-ams.rpki-client.org