$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: f3rUnClQbmrlJBO11fIo451/DgDVS+mfh0ZOREJIB04= Subject key identifier: 51:C4:D8:F6:56:62:34:90:1E:25:55:D5:03:A6:4C:95:F5:1C:CA:2C Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 06C8 Signing time: Mon 24 Jun 2024 16:17:15 +0000 Manifest this update: Mon 24 Jun 2024 16:17:14 +0000 Manifest next update: Mon 01 Jul 2024 16:17:14 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: ove3KZqKMzX5khtc10txcdtFSjSL1B4rFhGyukap7pI=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: owavO0XDzj500YGpyqbmjhYipEKAfrWBHBWdBUgrtlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 14:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Jun 24 16:17:14 2024 GMT Not After : Jul 1 16:17:14 2024 GMT Subject: CN=66799c0a-ce21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:cc:93:e4:dc:28:72:56:2e:35:0e:18:f9: 3c:6a:61:8b:6d:9f:1f:59:6e:af:f2:40:0b:58:18: fb:f7:54:65:25:b3:a7:32:59:29:76:41:fe:f6:30: 2a:df:15:30:e3:d4:24:85:31:44:63:3b:f3:43:36: 2f:d6:0c:c6:46:3a:d7:3e:16:5b:70:9d:0b:3f:2c: 22:55:18:eb:6e:6b:0f:28:ab:d7:65:e5:f1:e0:8a: d7:cc:46:88:11:eb:c1:f4:cc:92:0b:19:c8:9d:8d: ba:9e:db:d1:3a:af:2d:58:53:7b:e1:6c:f9:38:93: 9f:4a:b0:d0:2d:fd:54:24:e9:d2:d7:db:12:8b:8c: 2c:cf:ad:96:76:4b:ec:38:83:d9:f3:26:c5:c9:84: 9b:3b:30:b5:40:c3:cf:cf:e6:0f:cc:f4:5a:57:96: b2:b0:f4:0e:69:0b:d8:4d:6e:69:7d:49:62:f8:d0: c8:b1:56:f8:27:c7:27:8b:27:74:c4:65:87:4c:4f: a8:8d:4a:3b:28:93:08:2d:5c:a3:46:88:67:56:95: ae:c3:0f:42:6f:f6:8c:cf:53:ae:63:9d:4a:23:a9: 62:79:dd:e7:81:93:7e:de:a8:ed:2b:34:73:e7:70: c2:b8:a9:6d:01:7a:1a:82:5a:37:cd:43:92:8f:91: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C4:D8:F6:56:62:34:90:1E:25:55:D5:03:A6:4C:95:F5:1C:CA:2C X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b7:9e:66:a0:ff:d2:23:7f:2d:4f:d5:a4:d9:62:c6:b2:f9: 4d:e4:cb:78:c4:5f:6e:07:43:c2:14:a9:31:4a:20:3c:c4:06: 58:1c:68:a4:d8:75:68:e3:9e:8b:5c:4b:2c:8b:b8:1f:b2:ff: 4e:57:5f:e6:72:a4:ef:c3:19:b7:f8:5e:14:78:8b:be:48:3b: 55:5f:b9:ad:c3:8f:0e:cf:fa:f3:5d:0a:b9:79:14:1b:c2:59: ea:42:b4:fe:8a:e6:4d:67:5a:06:9d:49:bf:18:b0:0b:de:24: 94:f5:e0:bb:cf:c2:be:20:4b:a2:5b:9e:2b:b9:63:c2:e7:b5: 07:0f:72:c2:c2:56:b7:e8:4b:3e:14:f6:ff:23:57:b4:28:ea: 25:3d:0d:84:85:1b:9f:57:c7:dd:11:e8:5a:2e:c6:01:93:25: 89:c7:ee:96:10:46:59:46:cb:cc:e6:99:22:48:0c:d7:6e:41: 4c:00:34:bd:af:17:1f:77:ec:7b:46:4e:2a:29:34:5c:f0:a8: 12:59:1c:b7:dd:38:0b:3a:3d:e3:32:e6:25:2e:22:a0:ce:59: a1:12:90:79:36:67:1d:b2:cd:cc:2a:2a:22:25:41:39:ce:27: c5:06:73:4e:ea:a2:d2:02:81:8c:7e:ad:de:20:b6:47:7f:7b: 59:06:32:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjQwNjI0MTYxNzE0WhcNMjQwNzAxMTYxNzE0WjAYMRYwFAYD VQQDEw02Njc5OWMwYS1jZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlvMk+TcKHJWLjUOGPk8amGLbZ8fWW6v8kALWBj791RlJbOnMlkpdkH+9jAq 3xUw49QkhTFEYzvzQzYv1gzGRjrXPhZbcJ0LPywiVRjrbmsPKKvXZeXx4IrXzEaI EevB9MySCxnInY26ntvROq8tWFN74Wz5OJOfSrDQLf1UJOnS19sSi4wsz62Wdkvs OIPZ8ybFyYSbOzC1QMPPz+YPzPRaV5aysPQOaQvYTW5pfUli+NDIsVb4J8cniyd0 xGWHTE+ojUo7KJMILVyjRohnVpWuww9Cb/aMz1OuY51KI6lied3ngZN+3qjtKzRz 53DCuKltAXoaglo3zUOSj5EIdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHE2PZW YjSQHiVV1QOmTJX1HMosMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgt55moP/SI38tT9Wk2WLGsvlN5Mt4xF9uB0PCFKkxSiA8xAZYHGik 2HVo456LXEssi7gfsv9OV1/mcqTvwxm3+F4UeIu+SDtVX7mtw48Oz/rzXQq5eRQb wlnqQrT+iuZNZ1oGnUm/GLAL3iSU9eC7z8K+IEuiW54ruWPC57UHD3LCwla36Es+ FPb/I1e0KOolPQ2EhRufV8fdEehaLsYBkyWJx+6WEEZZRsvM5pkiSAzXbkFMADS9 rxcfd+x7Rk4qKTRc8KgSWRy33TgLOj3jMuYlLiKgzlmhEpB5Nmcdss3MKioiJUE5 zifFBnNO6qLSAoGMfq3eILZHf3tZBjIB -----END CERTIFICATE-----Generated at Mon Jun 24 17:44:43 2024 by rpki-client on console-ams.rpki-client.org