$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft File: bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft (raw, json) Hash identifier: BXodQiIw4nAWtndnAJ678QvvEM87x6/Xea2+lEJ47JE= Subject key identifier: ED:D1:C5:3D:2A:D8:08:F3:3B:BE:98:2E:82:80:A1:C7:68:88:B4:21 Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft Manifest number: 16 Signing time: Wed 15 May 2024 08:55:56 +0000 Manifest this update: Wed 15 May 2024 08:55:56 +0000 Manifest next update: Wed 22 May 2024 08:55:56 +0000 Files and hashes: 1: bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl (hash: VB8XdNSe3VPtr3WLIjdanu4ypSc5yhDLS8iigN0HAn8=) 2: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (hash: rsabR21jqtcvoz4XthX1FqvEg0esDGA7DmhhfFQxiEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: May 15 08:55:56 2024 GMT Not After : May 22 08:55:56 2024 GMT Subject: CN=6644789c-c6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:87:c4:bd:ef:41:95:b0:fc:87:1f:d4:32: 20:68:88:08:be:bc:1c:1a:8b:99:df:cb:52:0c:70: e9:8c:6a:0c:c8:5b:df:a0:25:40:14:33:60:91:69: 46:e1:21:9e:db:ae:64:97:16:c7:ae:ef:6c:50:dc: e6:6d:0e:5c:c4:fb:b0:d9:3e:88:05:18:12:dc:50: f1:c4:db:b2:5d:5e:40:b9:b7:b8:16:d0:0c:08:8a: 9a:ac:8a:d3:58:98:af:7e:dc:84:aa:bf:e2:b5:44: 1f:e7:37:64:77:c0:cc:a9:c2:a0:8f:dc:51:bd:cc: b5:d4:41:29:c8:4a:52:00:23:ce:52:f6:4c:d6:dd: 1c:ed:45:e6:ee:f0:00:3d:8f:fc:fe:55:8e:80:27: eb:c8:56:c6:14:98:38:3b:55:2d:61:28:37:35:34: 0a:17:94:11:8b:da:10:24:58:bc:96:55:fc:c3:73: 61:52:b5:06:ff:8b:44:a9:ba:f0:28:24:3e:a7:bb: 34:72:6c:54:16:cb:39:10:dd:27:b4:d6:a0:90:24: 26:16:7f:5d:33:cc:df:c3:6e:75:d2:1e:4f:5d:c6: 6d:1c:3a:f3:93:45:02:83:65:40:e9:2a:2b:4f:ac: aa:dc:1c:12:cc:0c:da:56:1b:82:5d:3e:96:95:4d: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D1:C5:3D:2A:D8:08:F3:3B:BE:98:2E:82:80:A1:C7:68:88:B4:21 X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:91:be:ab:00:7a:5d:19:06:87:c0:73:39:f7:b5:96:0a:6a: 8b:05:fa:b5:38:66:fe:0a:8d:a4:2e:0e:95:3b:e4:0a:d8:f6: c2:f2:82:ca:c1:02:33:47:df:e1:dc:dd:71:53:2f:8e:97:f3: f6:f6:5b:26:98:cb:79:19:e4:51:95:8f:df:2c:3c:7f:5a:ec: 07:51:91:05:b4:64:e5:27:4a:43:06:32:00:fa:ee:35:aa:cf: c8:48:12:30:60:5e:4b:f6:b0:5e:1b:9c:7a:58:28:ab:94:d0: f1:32:4b:27:77:b9:d0:ce:75:7b:b6:70:74:78:51:e6:c9:7d: ac:1a:54:c4:94:de:18:88:02:d3:9d:81:c7:79:ef:85:e0:0b: 05:a8:1d:ef:3b:43:64:a3:86:bf:4c:62:4b:3c:6a:23:3e:1f: 65:70:50:10:8d:ba:c9:20:6f:a6:82:bf:66:13:ef:ff:96:a6: 16:ff:70:65:51:86:99:dc:01:96:91:c9:6f:46:a3:2d:8d:8f: c4:3f:d3:9b:a7:54:07:b2:20:22:ca:6b:5d:2d:c1:ac:78:41: da:d7:c7:6e:57:ae:f9:c9:a1:e5:2e:a9:b6:db:12:70:b4:d0: c5:2b:40:5a:41:b2:1d:91:5c:52:d8:c5:db:a1:e1:6f:af:66: 21:e2:83:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REY4QTExMC8GA1UEBRMoNkM4REZBMDQzQzIyQjhBMjdFQUI2MDQ3MEFGNDA2NjAy NEE2ODQ0MDAeFw0yNDA1MTUwODU1NTZaFw0yNDA1MjIwODU1NTZaMBgxFjAUBgNV BAMTDTY2NDQ3ODljLWM2ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDYofEve9BlbD8hx/UMiBoiAi+vBwai5nfy1IMcOmMagzIW9+gJUAUM2CRaUbh IZ7brmSXFseu72xQ3OZtDlzE+7DZPogFGBLcUPHE27JdXkC5t7gW0AwIipqsitNY mK9+3ISqv+K1RB/nN2R3wMypwqCP3FG9zLXUQSnISlIAI85S9kzW3RztRebu8AA9 j/z+VY6AJ+vIVsYUmDg7VS1hKDc1NAoXlBGL2hAkWLyWVfzDc2FStQb/i0SpuvAo JD6nuzRybFQWyzkQ3Se01qCQJCYWf10zzN/DbnXSHk9dxm0cOvOTRQKDZUDpKitP rKrcHBLMDNpWG4JdPpaVTcZzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7dHFPSrY CPM7vpgugoChx2iItCEwHwYDVR0jBBgwFoAUbI36BDwiuKJ+q2BHCvQGYCSmhEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERjhBLzhGMDExQzZFRjM3 OTExRUVCN0U5REM2QUM0RjlBRTAyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkkzNkJEd2l1S0otcTJCSEN2UUdZQ1NtaEVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RjhBLzhGMDExQzZFRjM3OTExRUVCN0U5REM2QUM0RjlBRTAyL2JJMzZCRHdpdUtK LXEyQkhDdlFHWUNTbWhFQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqRvqsAel0ZBofAczn3tZYKaosF+rU4Zv4KjaQuDpU75ArY9sLygsrB AjNH3+Hc3XFTL46X8/b2WyaYy3kZ5FGVj98sPH9a7AdRkQW0ZOUnSkMGMgD67jWq z8hIEjBgXkv2sF4bnHpYKKuU0PEySyd3udDOdXu2cHR4UebJfawaVMSU3hiIAtOd gcd574XgCwWoHe87Q2Sjhr9MYks8aiM+H2VwUBCNuskgb6aCv2YT7/+Wphb/cGVR hpncAZaRyW9Goy2Nj8Q/05unVAeyICLKa10twax4QdrXx25XrvnJoeUuqbbbEnC0 0MUrQFpBsh2RXFLYxduh4W+vZiHigzM= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org