$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: EW4rbng7RPxme7P3nSSkfAZ1hu5vrhdeIoQGUWrn6Zs= Subject key identifier: 52:0E:EA:F1:9C:B6:54:E1:93:50:B4:2A:C6:8D:70:9B:98:14:68:0B Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 10A9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 10A0 Signing time: Fri 26 Apr 2024 14:52:18 +0000 Manifest this update: Fri 26 Apr 2024 14:52:18 +0000 Manifest next update: Fri 03 May 2024 14:52:18 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: 8bg6ct7og69Q+jVL3XPycGIAdjKfGEEYCAByOosnu2c=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: q0X8VVPUBCg3+JTZ8U3XXWG+a7Z1JNYcZRC+LKoRn3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4265 (0x10a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Apr 26 14:52:18 2024 GMT Not After : May 3 14:52:18 2024 GMT Subject: CN=662bbfa2-0baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:6c:59:d0:0c:e6:e9:b5:60:a4:da:2d:ac: ec:00:be:3f:7f:b7:f9:0e:d8:fa:65:43:85:d2:48: 97:c2:f5:78:8a:88:b7:f0:a4:e7:8a:35:af:90:51: d3:42:44:3e:69:f4:b8:39:cd:6e:c3:37:80:f6:95: 86:b6:1f:41:11:b9:71:43:32:e9:7e:11:f9:87:0b: 9e:45:25:ab:a8:13:a4:0d:ad:cb:7a:4e:84:48:0d: e6:09:62:9d:39:1d:c1:6a:0b:eb:ed:cc:90:8e:03: 5b:0b:3f:c5:de:90:08:62:ae:2c:ca:dd:77:7a:8e: 9f:68:f1:60:b2:ff:a1:6d:3c:1a:22:cd:26:99:20: 74:03:ba:e2:4c:3a:77:53:70:dd:93:ec:8c:4b:cb: 97:ea:25:d1:0b:81:55:f1:b3:ba:7c:5b:e6:62:ce: d2:35:8a:5c:db:38:65:d8:6e:0b:49:7c:8f:bb:45: cc:cc:ce:31:da:81:8c:ee:23:ac:44:ba:16:57:bd: 7d:d6:3b:33:60:35:e8:82:19:f5:29:f2:e2:5a:0b: 88:96:81:d4:26:a9:69:7b:fe:0f:01:ba:56:dc:88: 90:8f:25:83:27:5b:2a:12:03:1a:f6:14:4b:2f:1e: 3d:38:f0:88:0b:70:74:72:96:a4:61:d2:99:90:d6: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0E:EA:F1:9C:B6:54:E1:93:50:B4:2A:C6:8D:70:9B:98:14:68:0B X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:bc:51:94:67:ce:d4:7d:06:17:34:42:19:72:ef:dc:e6:35: 46:6e:d3:f5:31:26:73:f2:c0:9c:86:15:92:b7:da:5a:ab:1e: 9c:ba:ee:76:86:10:23:31:d1:dc:d6:bc:7c:11:b0:00:a4:25: 12:56:1c:74:04:e8:b9:d2:b5:1f:f8:be:2c:8f:bd:cf:0f:91: dd:e8:46:65:d6:74:7c:33:6d:62:9c:94:e3:6b:c4:87:f2:b5: fe:fa:a6:a7:13:44:42:df:c1:a5:df:38:6c:9a:11:67:e8:db: 36:7c:6b:b9:c3:34:e9:12:7d:53:36:d4:58:28:26:4b:41:6d: 7d:cc:36:a8:f3:35:42:a3:a4:ce:58:a0:78:59:5f:d0:da:ed: 1f:90:19:b2:03:a9:27:88:e9:04:df:2c:41:0b:67:48:44:5e: 33:45:34:c5:a7:24:e8:19:f7:21:c5:a4:96:be:d4:4c:af:89: b0:10:91:9c:6a:ee:de:cd:f4:82:50:64:8b:d9:4c:ec:a7:1d: ef:9d:79:0f:21:4e:da:9b:5a:c0:93:9d:e2:34:2a:bd:f7:3e: bc:24:be:d4:85:1f:f8:94:86:03:42:3c:2f:bc:06:76:9d:6f: 9f:3b:ba:41:d1:e0:2d:f7:72:b2:f1:b5:70:65:cc:f6:46:8b: 43:ca:49:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjQwNDI2MTQ1MjE4WhcNMjQwNTAzMTQ1MjE4WjAYMRYwFAYD VQQDEw02NjJiYmZhMi0wYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBFsWdAM5um1YKTaLazsAL4/f7f5Dtj6ZUOF0kiXwvV4ioi38KTnijWvkFHT QkQ+afS4Oc1uwzeA9pWGth9BEblxQzLpfhH5hwueRSWrqBOkDa3Lek6ESA3mCWKd OR3Bagvr7cyQjgNbCz/F3pAIYq4syt13eo6faPFgsv+hbTwaIs0mmSB0A7riTDp3 U3Ddk+yMS8uX6iXRC4FV8bO6fFvmYs7SNYpc2zhl2G4LSXyPu0XMzM4x2oGM7iOs RLoWV7191jszYDXoghn1KfLiWguIloHUJqlpe/4PAbpW3IiQjyWDJ1sqEgMa9hRL Lx49OPCIC3B0cpakYdKZkNaMcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIO6vGc tlThk1C0KsaNcJuYFGgLMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNvFGUZ87UfQYXNEIZcu/c5jVGbtP1MSZz8sCchhWSt9paqx6cuu52 hhAjMdHc1rx8EbAApCUSVhx0BOi50rUf+L4sj73PD5Hd6EZl1nR8M21inJTja8SH 8rX++qanE0RC38Gl3zhsmhFn6Ns2fGu5wzTpEn1TNtRYKCZLQW19zDao8zVCo6TO WKB4WV/Q2u0fkBmyA6kniOkE3yxBC2dIRF4zRTTFpyToGfchxaSWvtRMr4mwEJGc au7ezfSCUGSL2Uzspx3vnXkPIU7am1rAk53iNCq99z68JL7UhR/4lIYDQjwvvAZ2 nW+fO7pB0eAt93Ky8bVwZcz2RotDyknM -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:36 2024 by rpki-client on console-ams.rpki-client.org