$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft File: iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json) Hash identifier: S4A8K+0iq1yij5bgXiFteMMXToYz8rAELhbRnAvQkRw= Subject key identifier: F7:E0:91:38:76:A6:97:65:C6:A9:12:4E:FE:E4:34:E7:DE:FB:62:E4 Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF Certificate issuer: /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft Manifest number: 4B Signing time: Sun 15 Sep 2024 09:47:20 +0000 Manifest this update: Sun 15 Sep 2024 09:47:19 +0000 Manifest next update: Sun 22 Sep 2024 09:47:19 +0000 Files and hashes: 1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: JJ61W/Mt1qJUg983ce+aWMAcAuFzr0ICTmeJ85WGspM=) 2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: XVpTX+9SjXHhDtMpPyvxEeJ7NxK4ba3tAPiaJxOtkLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Validity Not Before: Sep 15 09:47:19 2024 GMT Not After : Sep 22 09:47:19 2024 GMT Subject: CN=66e6ad27-4b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:93:b8:2b:6e:bd:fd:b7:dd:fc:8d:a6:da: d1:2e:61:fb:fb:30:af:15:56:08:91:be:9d:44:4d: bd:f1:d3:4b:5a:d6:cf:08:2b:ef:c2:cb:4b:07:ba: 53:c6:c2:43:af:19:ba:c6:1b:ce:91:32:f3:35:0b: b5:94:13:ce:13:24:0b:c0:4d:ae:5a:24:82:e9:56: 1a:8b:11:8a:d1:38:78:4a:98:8c:1d:5e:14:fc:f8: 78:bb:ad:e2:60:31:24:09:79:2f:9c:63:a8:26:55: 4b:09:83:58:b0:a3:78:1a:2d:f8:4b:a1:5b:47:ec: 02:18:df:6d:c3:3a:15:31:80:62:4b:9f:b1:47:cf: 86:03:3d:76:72:8b:20:46:5f:72:de:71:ff:86:c3: 76:b5:29:e7:c4:30:f5:97:b8:d8:34:01:11:a0:05: a0:40:c9:5b:2c:19:3a:b7:4b:bf:6d:54:74:f3:de: 56:96:9b:c2:75:bd:08:9f:3d:bf:e4:33:b6:e9:bd: 3a:5b:aa:b4:a9:ad:88:6c:02:98:68:28:70:45:fb: 7d:59:ba:f0:bd:87:78:7d:81:ec:e7:59:07:92:23: 6d:66:b7:eb:2c:d1:6a:78:d6:c7:47:a3:06:28:0a: e9:1e:b9:69:d4:c9:da:84:fa:11:18:6b:74:61:0d: 00:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E0:91:38:76:A6:97:65:C6:A9:12:4E:FE:E4:34:E7:DE:FB:62:E4 X509v3 Authority Key Identifier: keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:76:da:7d:17:8b:47:8a:93:78:d3:09:3c:68:61:b9:24:dc: d1:64:cb:e6:23:ee:cd:33:76:10:02:68:8f:1e:00:87:d5:ec: 40:fc:b2:d7:8e:78:74:f8:19:79:44:6d:cf:16:1d:1f:a5:a9: 5e:b1:4f:ab:8c:80:b8:4a:df:15:e0:c3:17:ba:15:e9:3a:99: c5:9f:15:e3:64:ce:b3:37:cc:af:a6:00:6c:9e:ba:00:36:70: a4:88:2f:9e:d4:76:a7:95:c2:21:2d:0a:25:87:da:6e:8e:32: ae:5a:7b:70:c4:c3:12:44:c9:93:db:b4:39:b0:af:d5:9e:af: f3:c0:f2:20:42:3c:83:55:a9:60:14:81:29:70:78:2d:7b:7f: 13:76:b4:b2:22:a3:10:86:5e:ac:37:7f:0d:77:3f:15:20:07: fa:17:0f:05:ca:93:bf:7c:cf:bf:38:e7:d0:97:0d:34:c9:eb: 32:aa:20:65:b3:50:e0:1b:78:5a:23:7c:20:43:47:36:f4:70: c9:06:0a:82:73:f7:45:3c:3d:46:0a:4c:89:72:e5:92:2a:7b: eb:31:78:b3:97:7a:c3:51:63:e5:d8:be:ef:74:18:16:0e:e7: b9:ed:14:f0:aa:e5:c6:25:ae:5d:f4:22:b2:3d:f9:de:fa:53: 08:9e:cb:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QUQ5MDExMC8GA1UEBRMoODgwOTE4QTg3NTZGMDQ5MzFBMzJGNENFQTM0MUM0RjIz RkFENTBFRjAeFw0yNDA5MTUwOTQ3MTlaFw0yNDA5MjIwOTQ3MTlaMBgxFjAUBgNV BAMTDTY2ZTZhZDI3LTRiNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFaZO4K269/bfd/I2m2tEuYfv7MK8VVgiRvp1ETb3x00ta1s8IK+/Cy0sHulPG wkOvGbrGG86RMvM1C7WUE84TJAvATa5aJILpVhqLEYrROHhKmIwdXhT8+Hi7reJg MSQJeS+cY6gmVUsJg1iwo3gaLfhLoVtH7AIY323DOhUxgGJLn7FHz4YDPXZyiyBG X3Lecf+Gw3a1KefEMPWXuNg0ARGgBaBAyVssGTq3S79tVHTz3laWm8J1vQifPb/k M7bpvTpbqrSprYhsAphoKHBF+31ZuvC9h3h9geznWQeSI21mt+ss0Wp41sdHowYo CukeuWnUydqE+hEYa3RhDQDzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9+CROHam l2XGqRJO/uQ05977YuQwHwYDVR0jBBgwFoAUiAkYqHVvBJMaMvTOo0HE8j+tUO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBRDkwLzAzMDBDNTE0MEYw QTExRUY5MEM4QTEzMkM0RjlBRTAyL2lBa1lxSFZ2QkpNYU12VE9vMEhFOGotdFVP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUFrWXFIVnZCSk1hTXZUT28wSEU4ai10VU84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB RDkwLzAzMDBDNTE0MEYwQTExRUY5MEM4QTEzMkM0RjlBRTAyL2lBa1lxSFZ2QkpN YU12VE9vMEhFOGotdFVPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGt22n0Xi0eKk3jTCTxoYbkk3NFky+Yj7s0zdhACaI8eAIfV7ED8steO eHT4GXlEbc8WHR+lqV6xT6uMgLhK3xXgwxe6Fek6mcWfFeNkzrM3zK+mAGyeugA2 cKSIL57UdqeVwiEtCiWH2m6OMq5ae3DEwxJEyZPbtDmwr9Wer/PA8iBCPINVqWAU gSlweC17fxN2tLIioxCGXqw3fw13PxUgB/oXDwXKk798z78459CXDTTJ6zKqIGWz UOAbeFojfCBDRzb0cMkGCoJz90U8PUYKTIly5ZIqe+sxeLOXesNRY+XYvu90GBYO 57ntFPCq5cYlrl30IrI9+d76Uwiey+Q= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:16 2024 by rpki-client on console-ams.rpki-client.org