$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: +l1KaaXB2cUP+GX8B43i9S/zIT6qhjTD+wfT2vTJauc= Subject key identifier: FE:D6:93:8F:6B:15:70:55:0E:61:9D:D7:5E:0D:7A:09:55:F9:2C:17 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 0110 Signing time: Fri 03 May 2024 05:25:36 +0000 Manifest this update: Fri 03 May 2024 05:25:36 +0000 Manifest next update: Fri 10 May 2024 05:25:36 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: 8mgOHr+7YWLLHOLSqWrypxEAG+OT4kKR8zYS3Jk8McI=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: 3+Upn21KBIIQ52u+KXtC8fitbPdwy4fWqI6j9Dzm3Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: May 3 05:25:36 2024 GMT Not After : May 10 05:25:36 2024 GMT Subject: CN=66347550-d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:c7:1e:b5:d8:98:27:ff:d2:44:e7:e4:86: 45:3a:4c:51:45:7b:e5:5e:ae:ac:2b:fe:5f:74:62: 02:2b:9a:a4:a1:2d:96:8b:11:81:1d:ba:87:79:67: 44:17:6a:6e:a8:86:8a:54:d8:38:7d:f1:41:77:a4: ad:5e:4b:a6:13:19:d0:63:78:c1:4c:d6:12:2d:ea: 1a:ac:90:e7:6a:49:c5:6f:2f:2b:2b:f6:c8:37:11: 7c:b1:08:f3:89:30:23:e3:32:4b:16:91:96:a1:32: 49:9c:b5:24:9b:b5:c0:b6:c6:75:59:66:4a:9b:85: 32:df:20:60:48:ac:a4:27:24:e7:ca:75:a8:41:1f: 71:6e:ee:5a:64:4f:a4:f2:f4:e4:85:86:e4:1a:95: 12:db:3a:df:86:d1:6c:77:e6:27:66:8a:f6:d6:02: ee:dd:49:69:9d:db:c4:31:c8:b8:34:d9:70:ac:a5: 81:26:78:d6:8a:6c:49:cf:e5:21:29:03:95:e7:37: 4e:91:0f:fe:dd:ce:9f:7a:a5:ae:2e:de:d8:61:f9: 1d:87:c9:15:2c:ba:17:91:76:31:a6:1b:68:5b:cf: ad:e8:9a:0a:97:76:38:9a:61:e4:e7:d8:b9:53:d7: 38:d8:45:e7:c6:fa:31:61:99:b4:2e:06:ed:8e:b3: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D6:93:8F:6B:15:70:55:0E:61:9D:D7:5E:0D:7A:09:55:F9:2C:17 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:02:b7:62:3a:41:2b:f2:4b:dd:cb:9c:23:09:bb:c8:51:13: a7:59:04:9f:1c:3e:ac:89:23:47:9a:af:66:77:73:99:a5:98: 97:29:f1:13:d9:3a:1c:5f:ca:35:60:5d:29:e7:f7:de:be:51: 4d:ed:84:a7:31:26:bc:56:72:00:88:4c:4a:55:c2:5e:0b:77: a5:15:44:cb:e5:c7:2b:f2:23:cd:55:e1:a1:35:fb:54:6a:e2: ca:58:5d:f6:26:90:d1:84:4c:cb:ef:ba:bc:4a:9e:ef:1d:46: d4:36:4f:7e:cd:2e:9c:74:79:cd:19:f6:21:c7:a4:5e:f2:fb: a0:48:25:98:fe:6b:b1:61:bd:fc:58:a3:af:73:be:0f:bd:bb: d1:f0:2e:40:57:6d:3a:db:a7:0d:b1:e7:9b:e1:70:09:82:d9: 3f:a3:08:33:73:f2:4e:4f:15:35:ef:35:75:35:e2:f8:e6:c1: 3f:95:02:6e:66:46:ae:7d:74:14:a2:e6:b1:45:50:a0:27:e5: ed:23:64:b3:87:dd:5d:2a:1d:47:0b:29:30:59:10:e5:2c:d4: a1:14:eb:ef:3f:11:54:4a:7e:c2:28:b9:ab:77:e6:73:c9:50: a2:5a:cb:87:e6:29:15:b0:39:a3:3d:eb:f5:64:49:53:f0:7b: c3:04:1d:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjQwNTAzMDUyNTM2WhcNMjQwNTEwMDUyNTM2WjAYMRYwFAYD VQQDEw02NjM0NzU1MC1kMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT3HHrXYmCf/0kTn5IZFOkxRRXvlXq6sK/5fdGICK5qkoS2WixGBHbqHeWdE F2puqIaKVNg4ffFBd6StXkumExnQY3jBTNYSLeoarJDnaknFby8rK/bINxF8sQjz iTAj4zJLFpGWoTJJnLUkm7XAtsZ1WWZKm4Uy3yBgSKykJyTnynWoQR9xbu5aZE+k 8vTkhYbkGpUS2zrfhtFsd+YnZor21gLu3UlpndvEMci4NNlwrKWBJnjWimxJz+Uh KQOV5zdOkQ/+3c6feqWuLt7YYfkdh8kVLLoXkXYxphtoW8+t6JoKl3Y4mmHk59i5 U9c42EXnxvoxYZm0LgbtjrMnwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7Wk49r FXBVDmGd114NeglV+SwXMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvArdiOkEr8kvdy5wjCbvIUROnWQSfHD6siSNHmq9md3OZpZiXKfET 2TocX8o1YF0p5/fevlFN7YSnMSa8VnIAiExKVcJeC3elFUTL5ccr8iPNVeGhNftU auLKWF32JpDRhEzL77q8Sp7vHUbUNk9+zS6cdHnNGfYhx6Re8vugSCWY/muxYb38 WKOvc74PvbvR8C5AV20626cNseeb4XAJgtk/owgzc/JOTxU17zV1NeL45sE/lQJu ZkaufXQUouaxRVCgJ+XtI2Szh91dKh1HCykwWRDlLNShFOvvPxFUSn7CKLmrd+Zz yVCiWsuH5ikVsDmjPev1ZElT8HvDBB1y -----END CERTIFICATE-----Generated at Fri May 3 06:18:28 2024 by rpki-client on console-ams.rpki-client.org