$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: gla3I1yOXnCqu7jwDERPiVCxztb+vxN83WnMIG3/vvk= Subject key identifier: B8:06:BF:E4:86:1E:7C:EA:D0:05:00:D9:A4:28:86:1F:99:11:DF:A4 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 0F88 Signing time: Thu 02 May 2024 18:11:42 +0000 Manifest this update: Thu 02 May 2024 18:11:41 +0000 Manifest next update: Thu 09 May 2024 18:11:41 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: IQljOaWbW/jooPq//suttLRJZeaNGRJAkSm40BN3pig=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 1WgHu7gwVe3qgqJ+RVqyr2qFjsMKsHJgrsGEzkZiuNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: May 2 18:11:41 2024 GMT Not After : May 9 18:11:41 2024 GMT Subject: CN=6633d75e-88a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:58:d4:0b:1c:fe:f2:3a:08:2d:75:00:51: 58:bf:2a:5d:37:93:06:2a:26:43:20:12:ec:7b:46: 1f:ee:df:1e:b6:7d:ec:5a:b2:aa:54:ea:bc:16:10: c9:fd:72:44:4e:bb:81:10:8f:4e:8e:2b:72:8b:fc: 9d:31:65:63:ed:77:87:4c:1d:d1:68:61:33:c6:f6: 90:c7:2b:5d:19:80:09:3b:77:be:b1:98:5b:ae:91: 87:97:6a:55:59:f5:11:a9:bd:d1:dd:27:6b:76:24: 6a:01:46:df:b1:10:c6:a7:f5:89:24:12:c9:a4:a0: 50:a4:a7:d9:d7:7b:97:60:7e:20:3a:73:33:ec:e4: c4:0e:06:18:ea:95:6c:9c:74:d4:9e:70:14:2a:fd: 06:88:0d:5a:94:25:9d:63:ef:92:65:15:75:b7:52: 2a:53:a4:6e:57:86:e5:ec:c4:20:bf:56:c8:28:47: 0d:f9:d5:bc:3c:b0:94:22:87:a8:8c:74:9b:08:bb: c3:4c:69:2e:ba:9e:f1:dc:e4:8c:11:c2:63:eb:c6: ab:f3:2d:b8:13:bd:af:87:b6:46:6c:e3:f6:58:6f: 01:15:dd:08:58:cc:65:a5:1d:4a:8c:da:44:ba:80: 00:5a:a2:25:ac:60:7e:bd:8d:64:b3:14:36:da:5f: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:06:BF:E4:86:1E:7C:EA:D0:05:00:D9:A4:28:86:1F:99:11:DF:A4 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:a1:9d:16:5c:46:4b:f5:b2:84:30:ba:e5:a9:b9:62:81: 3c:c8:cf:1b:f6:eb:76:34:47:46:d8:c8:ec:49:cf:d4:05:6a: 4c:7b:9a:f2:5a:9f:b6:f4:17:e0:1b:46:bc:2d:8d:2b:a0:51: 8d:24:30:60:18:c7:3a:84:b5:1a:77:b5:61:19:fb:e9:c0:4d: 8a:6f:80:d2:cc:14:d8:57:34:42:d1:49:aa:50:8b:5f:6b:81: 9f:b8:38:21:49:ad:b5:fd:af:b8:1a:98:a3:9a:92:56:0b:04: 42:21:aa:2f:7e:05:98:b8:72:a9:c5:6b:9a:4c:09:92:e4:76: c9:08:55:90:99:36:17:b1:d0:c4:34:55:3c:d1:f0:0a:97:9c: 82:d7:37:50:9c:2c:b9:2c:15:0d:b5:ac:af:0a:02:a0:8a:42: 3d:ac:5a:ee:ea:49:1a:dd:5b:06:a3:3d:ba:34:6d:12:2a:a7: 64:93:3e:4b:9d:b4:eb:87:ad:46:4a:2f:2e:d3:70:ed:c4:81: 3c:e4:c3:12:b9:3f:01:49:e4:08:76:4d:bd:87:50:10:64:a5: ab:05:97:73:a8:78:7f:8d:04:c5:9e:c9:01:0f:94:d0:70:fb: 15:23:8c:16:2b:92:97:3a:ba:f8:8a:0e:a7:57:57:c7:49:e2: 8b:0f:28:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjQwNTAyMTgxMTQxWhcNMjQwNTA5MTgxMTQxWjAYMRYwFAYD VQQDEw02NjMzZDc1ZS04OGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq11Y1Asc/vI6CC11AFFYvypdN5MGKiZDIBLse0Yf7t8etn3sWrKqVOq8FhDJ /XJETruBEI9Ojityi/ydMWVj7XeHTB3RaGEzxvaQxytdGYAJO3e+sZhbrpGHl2pV WfURqb3R3SdrdiRqAUbfsRDGp/WJJBLJpKBQpKfZ13uXYH4gOnMz7OTEDgYY6pVs nHTUnnAUKv0GiA1alCWdY++SZRV1t1IqU6RuV4bl7MQgv1bIKEcN+dW8PLCUIoeo jHSbCLvDTGkuup7x3OSMEcJj68ar8y24E72vh7ZGbOP2WG8BFd0IWMxlpR1KjNpE uoAAWqIlrGB+vY1ksxQ22l/h0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgGv+SG Hnzq0AUA2aQohh+ZEd+kMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcKGdFlxGS/WyhDC65am5YoE8yM8b9ut2NEdG2MjsSc/UBWpMe5ry Wp+29BfgG0a8LY0roFGNJDBgGMc6hLUad7VhGfvpwE2Kb4DSzBTYVzRC0UmqUItf a4GfuDghSa21/a+4GpijmpJWCwRCIaovfgWYuHKpxWuaTAmS5HbJCFWQmTYXsdDE NFU80fAKl5yC1zdQnCy5LBUNtayvCgKgikI9rFru6kka3VsGoz26NG0SKqdkkz5L nbTrh61GSi8u03DtxIE85MMSuT8BSeQIdk29h1AQZKWrBZdzqHh/jQTFnskBD5TQ cPsVI4wWK5KXOrr4ig6nV1fHSeKLDyhs -----END CERTIFICATE-----Generated at Thu May 2 20:04:26 2024 by rpki-client on console-ams.rpki-client.org