$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft File: 7Wzqam0rBCFF_hLTKEPt_mfoono.mft (raw, json) Hash identifier: fhJWMAm+eKSSLkkPA555yAp4nqpuum675wY5Q6s0EpA= Subject key identifier: B5:27:42:C1:8B:AE:52:A5:11:1D:FA:32:6D:5C:A3:51:2D:BE:F8:76 Authority key identifier: ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A Certificate issuer: /CN=A9135EE5/serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft Manifest number: 0645 Signing time: Wed 01 May 2024 00:01:19 +0000 Manifest this update: Wed 01 May 2024 00:01:19 +0000 Manifest next update: Wed 08 May 2024 00:01:19 +0000 Files and hashes: 1: 7Wzqam0rBCFF_hLTKEPt_mfoono.crl (hash: wE1e3AG7yvg7Z0pkMijiGD+eKjyZFKD/2YFsLbPMLOA=) 2: A1C3E87AA5B011EE80D06016C4F9AE02.roa (hash: +E2zQ1+mW3QLXR08Z87JxwiqxKKJIZm7DWo08/aWfmY=) 3: 2E24C52846AF11EBA761792FC4F9AE02.roa (hash: ML75zRntIfnmfwBtC0/78IvusTOO6eT5Y77ItXk8144=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EE5/serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A Validity Not Before: May 1 00:01:19 2024 GMT Not After : May 8 00:01:19 2024 GMT Subject: CN=6631864f-0009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:05:d9:d5:d9:89:b2:7b:55:92:25:31:12: 81:7f:51:9c:9b:4d:b3:7c:c5:7c:55:67:ef:7a:30: 2d:57:3a:0c:b5:15:9d:c9:cb:31:d7:f7:25:1e:db: c1:09:ff:18:48:0d:09:82:76:40:08:7b:7a:39:51: be:53:75:3e:a1:2d:08:4c:5a:7e:6c:ac:b3:24:9f: 1f:82:92:37:ec:ed:b2:5a:bd:79:e0:22:51:1f:ef: 07:fe:6a:89:52:1b:02:4e:fb:6e:56:87:63:61:42: d4:d9:7a:c8:78:81:3f:77:be:ca:39:f3:ae:a7:a0: da:47:d3:d0:45:70:75:24:07:a9:d7:21:2a:df:e2: c7:b3:f9:f9:31:b4:77:bc:38:b7:a0:70:d8:fd:0b: 8a:70:5f:8d:73:6d:fd:93:f8:82:13:85:6f:a6:ff: 9b:03:b2:6f:49:ff:1e:9d:6c:e9:8d:3e:ee:54:10: cd:b1:60:49:3b:b4:15:e4:d6:9e:1b:44:c6:f1:c4: 6f:53:1f:af:62:9b:da:3f:15:b2:c0:3e:c5:0f:be: 65:c5:51:ff:35:4a:1c:ef:34:3d:bc:12:dc:c5:ac: 13:8c:e1:35:17:44:de:0d:df:1a:db:5d:0d:f4:0e: f6:7f:5c:24:5e:8f:b3:b9:a4:d1:a8:4c:d7:0c:fd: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:27:42:C1:8B:AE:52:A5:11:1D:FA:32:6D:5C:A3:51:2D:BE:F8:76 X509v3 Authority Key Identifier: keyid:ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:21:f6:f5:fe:c2:03:e0:18:bd:dc:c1:15:e9:aa:15:b0:91: dd:cc:27:53:0b:94:12:cb:0b:15:aa:2e:7b:c1:66:33:bb:b2: 0e:14:34:b0:29:8f:45:e0:85:1f:51:57:28:39:df:13:a2:7d: ea:fe:de:39:fc:b8:7f:25:d2:47:04:e0:4c:9e:65:69:ff:29: a2:8d:4b:0c:69:14:ed:5e:22:d1:a8:11:65:b4:3f:d5:72:35: 28:9e:0c:28:b2:13:c7:3b:3a:d1:2f:d1:14:1f:0f:af:b2:56: b8:f8:3f:62:f7:3b:40:c3:57:fa:a7:73:d7:7e:4f:c8:93:1b: 3e:22:9b:dd:bf:ef:9a:d2:92:02:49:6f:da:e3:cb:73:c8:7d: 0a:3f:16:2f:aa:22:b0:c4:25:42:6b:a2:9d:9d:8d:f0:91:c3: af:b3:02:e9:c2:39:d4:3f:c5:e2:3b:e2:f3:75:fb:72:4c:34: 94:4c:86:00:60:af:7d:1b:7e:3a:62:09:c7:b3:82:d0:2e:50: 54:d6:3d:0e:36:05:53:ba:7b:69:3c:00:8a:3f:88:18:e1:66: 68:10:d4:43:cb:3f:79:cd:04:e2:e1:d1:67:76:41:36:bf:46: f1:c1:8c:9a:a1:bd:81:52:ec:a6:dd:60:cb:61:e3:40:dd:4f: f8:9c:2f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFRTUxMTAvBgNVBAUTKEVENkNFQTZBNkQyQjA0MjE0NUZFMTJEMzI4NDNFREZF NjdFOEEyN0EwHhcNMjQwNTAxMDAwMTE5WhcNMjQwNTA4MDAwMTE5WjAYMRYwFAYD VQQDEw02NjMxODY0Zi0wMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaMF2dXZibJ7VZIlMRKBf1Gcm02zfMV8VWfvejAtVzoMtRWdycsx1/clHtvB Cf8YSA0JgnZACHt6OVG+U3U+oS0ITFp+bKyzJJ8fgpI37O2yWr154CJRH+8H/mqJ UhsCTvtuVodjYULU2XrIeIE/d77KOfOup6DaR9PQRXB1JAep1yEq3+LHs/n5MbR3 vDi3oHDY/QuKcF+Nc239k/iCE4Vvpv+bA7JvSf8enWzpjT7uVBDNsWBJO7QV5Nae G0TG8cRvUx+vYpvaPxWywD7FD75lxVH/NUoc7zQ9vBLcxawTjOE1F0TeDd8a210N 9A72f1wkXo+zuaTRqEzXDP1wRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUnQsGL rlKlER36Mm1co1Etvvh2MB8GA1UdIwQYMBaAFO1s6mptKwQhRf4S0yhD7f5n6KJ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVFNS84N0VENUEyRTQw M0UxMUVCQUY0QTQ2NUVDNEY5QUUwMi83V3pxYW0wckJDRkZfaExUS0VQdF9tZm9v bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdXenFhbTByQkNGRl9oTFRLRVB0X21mb29uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVFNS84N0VENUEyRTQwM0UxMUVCQUY0QTQ2NUVDNEY5QUUwMi83V3pxYW0wckJD RkZfaExUS0VQdF9tZm9vbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvIfb1/sID4Bi93MEV6aoVsJHdzCdTC5QSywsVqi57wWYzu7IOFDSw KY9F4IUfUVcoOd8Ton3q/t45/Lh/JdJHBOBMnmVp/ymijUsMaRTtXiLRqBFltD/V cjUongwoshPHOzrRL9EUHw+vsla4+D9i9ztAw1f6p3PXfk/Ikxs+Ipvdv++a0pIC SW/a48tzyH0KPxYvqiKwxCVCa6KdnY3wkcOvswLpwjnUP8XiO+LzdftyTDSUTIYA YK99G346YgnHs4LQLlBU1j0ONgVTuntpPACKP4gY4WZoENRDyz95zQTi4dFndkE2 v0bxwYyaob2BUuym3WDLYeNA3U/4nC/0 -----END CERTIFICATE-----Generated at Wed May 1 00:35:49 2024 by rpki-client on console-ams.rpki-client.org