$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json) Hash identifier: 2eHuIqqoOMfT++C+kRAblZZceL2NnhtPK4aQDK49+go= Subject key identifier: 1B:43:02:66:DB:BE:DA:9F:64:37:B0:9C:10:69:73:3A:66:4D:41:74 Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft Manifest number: 0B97 Signing time: Tue 30 Apr 2024 19:35:35 +0000 Manifest this update: Tue 30 Apr 2024 19:35:34 +0000 Manifest next update: Tue 07 May 2024 19:35:34 +0000 Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: pGr+q9VI+HyXhkMB1VBFHcfxlKvUE+wkSusomd1bAGg=) 2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: AVNjkoFWbdoZ3mYkyFU+MZFdfxVSMXxBvpkDPbahK84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Apr 30 19:35:34 2024 GMT Not After : May 7 19:35:34 2024 GMT Subject: CN=66314807-2c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:d9:20:cf:4b:78:a4:8d:61:45:e7:1f:cb: d6:d0:ce:11:92:ca:70:18:bd:9d:35:01:0d:21:09: 3b:0c:c2:0a:e8:8f:42:b6:b2:ca:52:0e:59:01:ab: b5:51:76:d5:33:ba:a8:2b:bc:b1:38:14:7c:a5:3b: f7:90:92:a7:41:bb:6f:08:0f:d1:70:f1:37:93:ff: 2a:ab:c3:ad:56:fa:d6:cf:66:24:1e:a0:af:06:59: cf:df:c9:f6:a7:20:be:0f:50:c2:50:42:ce:18:1c: c4:1b:9c:46:3f:17:75:4c:13:b9:a6:f1:83:e5:ef: 67:e8:86:5b:0d:46:1a:cb:ff:c5:d0:d4:b6:0b:7e: 3c:12:48:07:8e:38:62:5e:8b:22:c1:77:29:ce:f4: 40:a0:54:11:a2:19:65:db:63:21:88:10:75:14:e4: b5:f9:76:6a:d0:71:3d:27:72:1c:47:1b:41:1a:47: 13:ca:90:95:02:70:af:7a:ca:ed:c5:f0:58:f7:fc: 55:d5:35:0f:c1:ba:0e:62:c9:4f:b1:2e:20:39:3b: 81:d3:1d:73:eb:67:b3:d1:ac:45:8b:62:05:10:1e: 95:f5:6e:0a:b0:78:52:78:e7:ea:e0:c8:f8:31:92: 61:c9:90:41:19:30:81:4d:17:e6:b1:c8:3f:5d:af: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:02:66:DB:BE:DA:9F:64:37:B0:9C:10:69:73:3A:66:4D:41:74 X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8e:85:a2:54:d2:53:f0:60:b6:6b:16:f6:01:e5:c2:b6:a8: 10:e4:69:ac:e0:6c:5f:e8:b9:60:f6:a4:93:42:3d:8c:96:c7: 26:03:d8:67:72:36:f5:c3:1e:41:dc:35:f4:2a:bb:30:16:01: 2d:c2:45:82:93:bc:2d:94:3a:76:c8:43:ae:89:e0:33:ea:bd: 8c:bf:e3:5b:d4:eb:f0:91:c9:86:7d:4a:4e:17:a5:d2:a6:83: 08:9f:c8:87:31:f3:ce:e6:a1:ed:9c:b6:65:25:31:77:f5:58: 2b:8e:b7:3d:9c:ff:e7:1f:af:58:55:87:d4:f1:1b:a0:a8:4e: ac:72:9e:5e:31:d4:c3:02:36:31:98:a7:77:9f:3f:df:cf:4b: 6a:aa:1d:d8:91:73:bf:a9:a7:8a:38:23:9c:5a:00:ae:5c:57: 91:21:e9:e7:03:62:4f:e6:a7:23:62:cf:33:8d:ae:eb:5c:31: a2:ad:e2:c6:14:55:a8:84:40:0b:31:ff:a9:b9:ed:7f:81:bf: a2:93:98:eb:a7:f7:e8:48:d8:11:6f:7c:b4:5a:15:e9:40:e0: 41:6e:df:7f:9e:76:11:df:d0:5d:f6:83:be:ac:b0:d9:8c:ec: 53:53:38:4c:92:04:dd:86:f8:54:ef:5f:e9:1a:a6:a1:d5:43: bf:83:d6:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjQwNDMwMTkzNTM0WhcNMjQwNTA3MTkzNTM0WjAYMRYwFAYD VQQDEw02NjMxNDgwNy0yYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qzZIM9LeKSNYUXnH8vW0M4RkspwGL2dNQENIQk7DMIK6I9CtrLKUg5ZAau1 UXbVM7qoK7yxOBR8pTv3kJKnQbtvCA/RcPE3k/8qq8OtVvrWz2YkHqCvBlnP38n2 pyC+D1DCUELOGBzEG5xGPxd1TBO5pvGD5e9n6IZbDUYay//F0NS2C348EkgHjjhi XosiwXcpzvRAoFQRohll22MhiBB1FOS1+XZq0HE9J3IcRxtBGkcTypCVAnCvesrt xfBY9/xV1TUPwboOYslPsS4gOTuB0x1z62ez0axFi2IFEB6V9W4KsHhSeOfq4Mj4 MZJhyZBBGTCBTRfmscg/Xa8FhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtDAmbb vtqfZDewnBBpczpmTUF0MB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDJDRS8yQjBFNzI0MDAxMzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJz UGM4UzhIbGNyWERrd0oyV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvjoWiVNJT8GC2axb2AeXCtqgQ5Gms4Gxf6Llg9qSTQj2MlscmA9hn cjb1wx5B3DX0KrswFgEtwkWCk7wtlDp2yEOuieAz6r2Mv+Nb1OvwkcmGfUpOF6XS poMIn8iHMfPO5qHtnLZlJTF39Vgrjrc9nP/nH69YVYfU8RugqE6scp5eMdTDAjYx mKd3nz/fz0tqqh3YkXO/qaeKOCOcWgCuXFeRIennA2JP5qcjYs8zja7rXDGireLG FFWohEALMf+pue1/gb+ik5jrp/foSNgRb3y0WhXpQOBBbt9/nnYR39Bd9oO+rLDZ jOxTUzhMkgTdhvhU71/pGqah1UO/g9Zj -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:51 2024 by rpki-client on console-ams.rpki-client.org