$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json) Hash identifier: xN2YPnMPvsfo5L6Lk1ni0jQtWqRYVDA63dW2mN82bvs= Subject key identifier: F9:AA:62:C5:B8:A1:DF:66:0F:85:6C:CB:D5:7F:C1:54:9C:5F:FF:EF Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Certificate serial: 0CA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft Manifest number: 0C81 Signing time: Thu 02 May 2024 18:58:46 +0000 Manifest this update: Thu 02 May 2024 18:58:46 +0000 Manifest next update: Thu 09 May 2024 18:58:46 +0000 Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: X94hrq0uNqnI07H3g9Zoxfe/K4ubcfaWf0d6k1ZXxXA=) 2: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: P80+uWRXwvIn4L5xncnAVkiDcuvOM72wP1XIN0RCgfo=) 3: A5B98912C77D11EB9DF68B6AC4F9AE02.roa (hash: 05zuRjf75fXjXAeo4t4GpINbZ90yUo1Y+dwQD0T3Pic=) 4: 25FE5A80EA4B11EC9ADD4880C4F9AE02.roa (hash: Tzm4qp5O30nPfExQ3FdwQ1VuUd6UMJOU0kqrYrw7PDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Validity Not Before: May 2 18:58:46 2024 GMT Not After : May 9 18:58:46 2024 GMT Subject: CN=6633e266-1b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:75:e2:e2:bb:48:cc:06:4d:b4:dc:54:03: 0e:f1:21:34:c6:7e:0e:c6:90:bc:6b:ee:66:2a:03: 33:8a:92:e6:20:39:fa:d3:67:3c:5d:62:b7:5f:c3: 55:59:66:0e:db:4c:46:2a:8a:be:54:a2:81:6a:22: 71:96:33:d8:d4:7f:62:fb:01:a5:3f:ce:91:29:f7: f0:8a:1c:c5:8c:bb:e4:34:de:46:6b:02:fe:86:63: bb:e5:fa:20:f8:e2:0b:9f:1c:1e:26:9e:f9:d9:ee: 4d:ff:5f:54:97:b7:ae:58:86:5a:1e:05:34:cb:ad: 73:ab:c3:fe:33:5c:cb:d8:17:71:78:fa:3d:78:45: af:7a:18:d4:ad:5d:72:a2:2c:2d:95:e9:fb:40:cd: 85:b5:a3:30:d5:96:cd:e6:9e:99:d9:63:53:c8:5c: b9:8c:78:b3:79:c6:fd:36:64:c1:07:c3:d0:d3:c3: ff:bd:49:45:1e:db:3c:6c:2a:06:c9:f5:18:95:ba: ff:d2:d6:87:24:c9:67:79:39:74:a3:9d:6a:0a:c6: 4e:51:9e:87:1f:19:6d:7c:b7:87:da:77:c4:e2:75: b8:21:97:67:03:bf:1e:71:92:f6:4a:26:68:49:0e: fc:4e:36:ff:f4:b1:df:b0:21:3e:0f:c9:6b:a1:9b: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AA:62:C5:B8:A1:DF:66:0F:85:6C:CB:D5:7F:C1:54:9C:5F:FF:EF X509v3 Authority Key Identifier: keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e9:28:e8:bb:0d:c1:67:97:cd:20:b9:15:71:b0:f8:00:aa: c8:f4:2e:9b:16:23:73:51:de:7d:85:44:bf:b9:e1:7c:de:29: 95:3e:5f:86:e1:88:42:0e:1f:89:cc:cb:f4:87:03:5c:7e:c1: 26:0b:59:c6:23:1f:1e:6e:2f:ba:31:58:77:ef:af:cc:71:c1: fb:bc:d3:73:95:2d:23:33:ef:37:37:f8:8e:2d:8b:4b:6d:e4: 28:14:81:6c:05:9a:cb:cc:3e:c5:bc:10:f2:da:b8:08:94:80: ef:ca:1c:61:91:16:53:c8:1a:36:e2:83:a2:a0:2c:75:d4:50: 7d:0f:4e:cc:65:9b:67:df:ff:21:27:ce:74:7d:56:c0:2f:6c: b6:29:70:a0:8c:8b:b5:a1:29:ab:d1:63:fe:09:d1:2e:ad:87: 02:c7:b5:b4:2a:54:58:5f:ec:39:85:c3:b6:73:4b:3d:71:a1: 73:5d:bd:31:ce:cf:c7:38:5c:5d:fd:e2:fd:07:8c:ea:2e:33: 31:e4:85:2f:a5:03:29:4f:09:1b:8d:c1:b0:fb:bf:3c:ae:79: 89:ef:c3:34:0b:f4:52:b4:ba:95:d3:8c:4f:c7:14:33:e3:c8: 92:6d:1f:58:4f:b4:29:2c:f3:97:e1:14:3f:3d:22:fb:e6:1d: f7:72:92:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzMEExMTAvBgNVBAUTKEVCODExQjE0ODhCMjBGMTI2NjRFNjQ4QTgyNjI0QTMw NTA2ODlGMjUwHhcNMjQwNTAyMTg1ODQ2WhcNMjQwNTA5MTg1ODQ2WjAYMRYwFAYD VQQDEw02NjMzZTI2Ni0xYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU914uK7SMwGTbTcVAMO8SE0xn4OxpC8a+5mKgMzipLmIDn602c8XWK3X8NV WWYO20xGKoq+VKKBaiJxljPY1H9i+wGlP86RKffwihzFjLvkNN5GawL+hmO75fog +OILnxweJp752e5N/19Ul7euWIZaHgU0y61zq8P+M1zL2BdxePo9eEWvehjUrV1y oiwtlen7QM2FtaMw1ZbN5p6Z2WNTyFy5jHizecb9NmTBB8PQ08P/vUlFHts8bCoG yfUYlbr/0taHJMlneTl0o51qCsZOUZ6HHxltfLeH2nfE4nW4IZdnA78ecZL2SiZo SQ78Tjb/9LHfsCE+D8lroZsOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmqYsW4 od9mD4Vsy9V/wVScX//vMB8GA1UdIwQYMBaAFOuBGxSIsg8SZk5kioJiSjBQaJ8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDMwQS9CODU0MjRGOEQ0 OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4Sm1UbVNLZ21KS01GQm9u eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RWJGSWl5RHhKbVRtU0tnbUpLTUZCb255VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDMwQS9CODU0MjRGOEQ0OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4 Sm1UbVNLZ21KS01GQm9ueVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf6Sjouw3BZ5fNILkVcbD4AKrI9C6bFiNzUd59hUS/ueF83imVPl+G 4YhCDh+JzMv0hwNcfsEmC1nGIx8ebi+6MVh376/MccH7vNNzlS0jM+83N/iOLYtL beQoFIFsBZrLzD7FvBDy2rgIlIDvyhxhkRZTyBo24oOioCx11FB9D07MZZtn3/8h J850fVbAL2y2KXCgjIu1oSmr0WP+CdEurYcCx7W0KlRYX+w5hcO2c0s9caFzXb0x zs/HOFxd/eL9B4zqLjMx5IUvpQMpTwkbjcGw+788rnmJ78M0C/RStLqV04xPxxQz 48iSbR9YT7QpLPOX4RQ/PSL75h33cpJN -----END CERTIFICATE-----Generated at Thu May 2 20:04:27 2024 by rpki-client on console-ams.rpki-client.org