$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: J78eMXYCFMw/cF71BaOkt2A8hmtH2Kf+w59eFWQpd5U= Subject key identifier: 63:5D:A9:82:36:92:54:18:38:DF:75:4C:0A:2E:20:FC:7D:0A:76:34 Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 87 Signing time: Fri 17 May 2024 07:11:31 +0000 Manifest this update: Fri 17 May 2024 07:11:30 +0000 Manifest next update: Fri 24 May 2024 07:11:30 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: 1tZiyKXDt0vo8ZcVy0wj/OwK4Wh2a0Ur75XZnNtkUfo=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: MKJ6wSfP6XkzEtx9sCGk4W8PlTZnlQN1NFofE/hMOCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: May 17 07:11:30 2024 GMT Not After : May 24 07:11:30 2024 GMT Subject: CN=66470323-1cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7a:a5:c9:3f:3d:8f:27:98:22:50:7c:5b:6e: 16:6e:bf:28:d1:6e:ba:fc:0e:49:4e:6f:37:15:fb: f6:2f:a9:b0:61:c7:cd:92:15:6e:28:67:72:f1:cf: a3:f8:44:36:6b:f6:c0:1e:ab:6d:e9:da:a0:84:dd: a4:da:b5:73:11:6d:3a:7f:0c:95:92:96:91:58:d4: fa:82:af:ed:3c:c7:1f:e1:8b:5f:26:7d:6e:85:44: 6e:c7:fa:d3:7e:11:15:7b:d3:ed:60:58:75:66:44: 5a:f5:bd:67:c4:aa:b6:a5:7d:9c:37:e1:23:9b:2d: 3f:29:cd:b0:17:c4:ff:fd:c4:eb:17:b5:d0:1a:48: 37:4f:50:23:b2:0b:f1:9e:b5:92:b5:32:cc:91:77: 6a:25:9f:ba:96:41:1d:da:dc:f1:8c:cb:f0:29:0d: 2c:cc:c4:48:78:1d:0e:46:c0:1e:c6:ba:ec:45:65: 54:2f:1c:c7:7f:ee:5c:4e:33:c7:8e:00:03:94:65: 1f:17:ed:1e:ef:2f:cf:7d:a7:65:ef:ac:a6:d8:58: ab:3a:c2:4d:2a:94:c1:93:3a:62:ca:03:d9:47:bb: fc:db:71:69:5b:72:1a:04:3d:b1:12:34:36:53:8d: a6:f1:dd:9a:d4:95:73:16:a4:5f:9f:8f:3a:a1:14: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5D:A9:82:36:92:54:18:38:DF:75:4C:0A:2E:20:FC:7D:0A:76:34 X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d2:06:c9:d2:e4:26:74:07:80:b2:0f:1e:c5:2b:5f:59:1e: 20:20:4f:29:e8:cf:4d:eb:b9:97:9a:06:72:ef:f6:40:a3:82: 2b:e4:5e:a6:ac:37:25:ba:b9:ba:a5:9e:49:2b:f6:fb:d6:16: 1c:ca:da:b6:93:c7:62:2e:c4:36:1a:f0:75:11:cc:56:b5:8d: b9:87:45:0d:cd:9a:17:b4:c9:77:8f:ba:69:37:88:83:7f:63: f4:2f:a8:ef:c5:aa:a4:75:a6:bb:bf:45:11:ba:4c:3e:38:c9: 44:e2:36:35:2f:26:4a:74:fd:00:4b:da:1b:51:a7:d0:9f:cb: 66:17:69:c2:cd:22:0d:09:f0:c3:30:7a:51:c5:e9:3a:58:2e: 86:29:6f:19:16:45:02:54:7a:6c:f9:e5:9e:08:b4:1f:30:48: a4:95:1b:2e:52:d1:23:dc:75:c7:6b:77:72:cc:f3:15:20:28: 58:19:b0:1d:62:6b:95:95:8e:8e:2e:3d:43:d0:57:01:a4:25: f0:75:a3:be:da:14:94:69:73:5e:12:33:a4:89:50:10:bb:da: ef:4c:d9:4b:a0:d3:f0:4b:c0:1f:77:c7:a5:83:d2:a0:98:54: b3:14:fa:1b:26:50:8a:28:db:66:f7:ac:16:4a:b0:0b:25:67: 2a:f4:b6:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjQwNTE3MDcxMTMwWhcNMjQwNTI0MDcxMTMwWjAYMRYwFAYD VQQDEw02NjQ3MDMyMy0xY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+HqlyT89jyeYIlB8W24Wbr8o0W66/A5JTm83Ffv2L6mwYcfNkhVuKGdy8c+j +EQ2a/bAHqtt6dqghN2k2rVzEW06fwyVkpaRWNT6gq/tPMcf4YtfJn1uhURux/rT fhEVe9PtYFh1ZkRa9b1nxKq2pX2cN+Ejmy0/Kc2wF8T//cTrF7XQGkg3T1Ajsgvx nrWStTLMkXdqJZ+6lkEd2tzxjMvwKQ0szMRIeB0ORsAexrrsRWVULxzHf+5cTjPH jgADlGUfF+0e7y/Pfadl76ym2FirOsJNKpTBkzpiygPZR7v823FpW3IaBD2xEjQ2 U42m8d2a1JVzFqRfn486oRTVjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNdqYI2 klQYON91TAouIPx9CnY0MB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx0gbJ0uQmdAeAsg8exStfWR4gIE8p6M9N67mXmgZy7/ZAo4Ir5F6m rDclurm6pZ5JK/b71hYcytq2k8diLsQ2GvB1EcxWtY25h0UNzZoXtMl3j7ppN4iD f2P0L6jvxaqkdaa7v0URukw+OMlE4jY1LyZKdP0AS9obUafQn8tmF2nCzSINCfDD MHpRxek6WC6GKW8ZFkUCVHps+eWeCLQfMEiklRsuUtEj3HXHa3dyzPMVIChYGbAd YmuVlY6OLj1D0FcBpCXwdaO+2hSUaXNeEjOkiVAQu9rvTNlLoNPwS8Afd8elg9Kg mFSzFPobJlCKKNtm96wWSrALJWcq9LbW -----END CERTIFICATE-----Generated at Fri May 17 08:52:46 2024 by rpki-client on console-ams.rpki-client.org