$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: XB71/21MUd7AAsf684mQQ6W/PZVL12Wzp7j4UHjNBD8= Subject key identifier: D1:77:17:40:F0:C2:E5:91:60:65:B3:7B:1B:E6:0C:63:7E:15:8F:A4 Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 02CA Signing time: Fri 03 May 2024 03:30:35 +0000 Manifest this update: Fri 03 May 2024 03:30:35 +0000 Manifest next update: Fri 10 May 2024 03:30:35 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: V7qbQOaQhHxGCHz1WUTftu+LfjIiLXZrdskDflOou2w=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: /TuZ9+B/iKL8Wdr/M4Xrg2SYzklBnsQLva2o/WSmeOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: May 3 03:30:35 2024 GMT Not After : May 10 03:30:35 2024 GMT Subject: CN=66345a5b-e05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:85:14:75:83:2a:c3:fc:b4:57:61:74:09: a1:d9:79:a5:b5:b3:cb:fd:c5:ac:eb:e0:0f:d2:bc: 95:ce:a1:2a:7f:63:39:05:a2:b7:81:41:c0:33:a6: 11:9e:e7:a7:d7:72:16:07:1b:6f:25:d1:2b:25:27: ca:9f:20:1f:29:d0:2e:f9:fc:14:38:79:f1:f0:b8: cd:95:91:c2:50:50:d4:36:d0:0d:0a:39:33:b7:77: f3:ab:ec:cf:0e:50:54:49:d4:1c:b8:5b:ce:ba:59: 03:f8:6c:53:74:21:59:6c:3e:79:8b:83:b1:e2:ab: a6:00:9f:4b:7d:20:f2:12:ea:8e:a3:ef:92:d9:d3: bd:9f:a0:c0:42:cc:2a:d0:e9:75:5c:ed:9a:1d:b6: 16:2e:5b:f7:89:a9:b7:c0:7f:e4:16:19:9a:71:8c: a0:83:5d:d7:42:d7:da:86:2b:af:32:5e:04:3a:89: 72:64:6c:29:0b:f7:86:7b:3b:3d:fa:9e:40:13:42: 51:8c:49:c2:20:c6:7f:71:22:88:3a:bc:5d:1c:c9: 80:16:df:86:08:b0:f0:a2:02:22:35:d8:92:99:06: f0:93:fe:d2:b8:f4:79:25:08:33:48:c3:d3:2a:0c: 03:c6:e6:44:34:64:0f:88:93:0c:ac:bc:a6:d8:9b: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:77:17:40:F0:C2:E5:91:60:65:B3:7B:1B:E6:0C:63:7E:15:8F:A4 X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0a:23:72:87:06:97:c4:19:07:8a:8a:25:aa:fa:62:8c:b9: 43:7d:1e:fa:31:29:0b:ee:d4:f2:15:0b:34:dd:d1:b3:a3:91: 90:2d:4c:37:51:55:c9:1e:1d:df:d4:21:a6:b7:0e:b2:76:21: 8a:a7:c5:d0:9c:08:df:7a:3a:3a:48:9b:c6:22:c2:5d:66:ff: 73:5d:bb:47:97:1e:d7:8f:48:bf:0b:1f:05:fb:68:d0:99:fd: 31:60:f6:91:e0:99:04:56:9e:03:e6:6f:db:e9:63:2e:3c:4b: 07:5d:90:39:0b:79:2a:c8:a3:0b:ac:16:d7:29:e3:d9:95:3b: ba:a0:04:95:91:1b:a4:46:8b:ca:af:02:d0:87:72:fc:be:05: 73:d4:9d:85:b1:e3:56:28:3f:b6:c6:96:9a:75:9f:3b:63:fe: 8a:49:fa:5b:09:ce:1a:94:0f:5f:f8:a8:31:44:13:6c:8a:fe: 22:51:41:75:a8:fb:e1:90:6f:3c:cc:3b:38:66:e7:0d:49:d0: d8:c6:a5:e3:11:24:8d:18:12:65:21:2e:47:05:7a:98:83:38: ea:cf:43:c9:6b:18:68:b5:33:1e:61:a2:b2:3d:ae:73:19:28: 6e:c3:00:24:13:4e:31:24:91:2e:7e:52:e5:8e:ef:f9:05:a2: b1:de:27:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjQwNTAzMDMzMDM1WhcNMjQwNTEwMDMzMDM1WjAYMRYwFAYD VQQDEw02NjM0NWE1Yi1lMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1+FFHWDKsP8tFdhdAmh2XmltbPL/cWs6+AP0ryVzqEqf2M5BaK3gUHAM6YR nuen13IWBxtvJdErJSfKnyAfKdAu+fwUOHnx8LjNlZHCUFDUNtANCjkzt3fzq+zP DlBUSdQcuFvOulkD+GxTdCFZbD55i4Ox4qumAJ9LfSDyEuqOo++S2dO9n6DAQswq 0Ol1XO2aHbYWLlv3iam3wH/kFhmacYygg13XQtfahiuvMl4EOolyZGwpC/eGezs9 +p5AE0JRjEnCIMZ/cSKIOrxdHMmAFt+GCLDwogIiNdiSmQbwk/7SuPR5JQgzSMPT KgwDxuZENGQPiJMMrLym2JuApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF3F0Dw wuWRYGWzexvmDGN+FY+kMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOCiNyhwaXxBkHioolqvpijLlDfR76MSkL7tTyFQs03dGzo5GQLUw3 UVXJHh3f1CGmtw6ydiGKp8XQnAjfejo6SJvGIsJdZv9zXbtHlx7Xj0i/Cx8F+2jQ mf0xYPaR4JkEVp4D5m/b6WMuPEsHXZA5C3kqyKMLrBbXKePZlTu6oASVkRukRovK rwLQh3L8vgVz1J2FseNWKD+2xpaadZ87Y/6KSfpbCc4alA9f+KgxRBNsiv4iUUF1 qPvhkG88zDs4ZucNSdDYxqXjESSNGBJlIS5HBXqYgzjqz0PJaxhotTMeYaKyPa5z GShuwwAkE04xJJEuflLlju/5BaKx3ido -----END CERTIFICATE-----Generated at Fri May 3 04:45:10 2024 by rpki-client on console-fra.rpki-client.org