$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json) Hash identifier: IzfOXi9WDF+aL3Ws0gWNP9psUyjZce48Sc6KHE4nFWU= Subject key identifier: 8E:3A:DE:6A:C9:3A:1D:93:14:3B:EA:21:52:F5:AE:BF:19:00:29:28 Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft Manifest number: 013A Signing time: Tue 07 May 2024 04:58:12 +0000 Manifest this update: Tue 07 May 2024 04:58:11 +0000 Manifest next update: Tue 14 May 2024 04:58:11 +0000 Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: xvJcH3N3huIA8WBk8cc7/coaEkHAw7RNVBMz/OqDVKI=) 2: 7B00C6B83F1D11ED8A66DC5AC4F9AE02.roa (hash: KPNRN2l98EuF8Ewgh7SUZqkCjXIafys8x7wmUM5XfwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Validity Not Before: May 7 04:58:11 2024 GMT Not After : May 14 04:58:11 2024 GMT Subject: CN=6639b4e4-4b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:1c:53:80:91:d9:e0:f4:67:1e:3f:73:d1: 69:47:5c:62:de:21:ad:ad:5a:8e:4e:73:24:e4:88: a7:4a:8c:de:99:9e:a3:75:1e:13:40:b6:b4:93:2b: 07:66:de:dd:f5:a1:bd:69:91:c8:7e:bf:ef:1c:ed: 1d:1f:f4:77:f1:89:c5:c5:5b:28:5c:4c:b9:27:16: 3d:62:82:90:a6:e9:19:c4:74:73:fa:bf:3c:42:a4: 2a:8b:c7:81:90:03:72:9b:3a:3b:03:f2:0b:da:d8: 02:00:d3:e6:5a:98:5d:fe:ba:ad:77:41:d2:b6:ba: a0:ba:cd:e1:0f:b5:fd:f3:9e:1e:29:14:52:61:72: fb:f0:bb:c6:59:2a:a9:29:76:ec:e8:9d:a8:ba:36: 72:47:81:36:b6:a2:a5:86:58:23:fd:a6:81:ce:85: d5:62:9c:23:3f:c1:9c:32:d7:c3:5a:4e:cc:2c:e6: 75:58:fc:4d:84:ce:33:16:71:10:80:14:0c:13:16: ca:23:31:8e:b7:32:b5:3d:31:2d:35:75:4b:3f:c5: 67:38:92:62:b7:71:8e:e0:f6:04:30:b1:f1:f6:58: f5:52:f4:b1:8a:d6:61:86:dc:ea:0d:f5:7a:53:49: 7c:21:36:5c:f6:42:38:d2:96:6a:52:3e:41:01:8f: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3A:DE:6A:C9:3A:1D:93:14:3B:EA:21:52:F5:AE:BF:19:00:29:28 X509v3 Authority Key Identifier: keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:33:5c:04:cb:77:df:0d:19:1b:6b:7a:5b:2a:30:47:7b:06: b9:0d:a3:89:5b:ae:ee:2c:9a:a2:37:53:e2:99:9e:35:d7:e3: 49:33:63:5a:51:89:8c:04:37:8a:db:1e:3a:08:d7:cc:df:09: 21:5b:e8:c4:d8:db:be:dd:c0:31:89:cc:8e:be:18:6f:f3:05: bd:3c:b3:6e:2e:43:8d:bc:07:79:de:3e:86:3e:0a:8b:71:28: df:1c:b8:cc:93:ba:dd:f7:04:fe:c9:51:dc:49:d2:c0:f0:66: e9:a9:67:8b:9e:f6:7c:e4:55:22:2f:b7:50:02:c2:c9:e1:d4: 59:5e:c7:cc:8b:6a:7d:5a:92:9b:67:76:40:49:88:41:94:ed: ef:4a:48:fc:12:a5:36:11:80:a6:b1:7b:cf:3d:4e:db:0d:76: 54:89:6a:8b:26:ca:2c:2f:49:c5:bf:80:8a:78:94:8c:d0:5d: 17:2f:f2:e4:12:69:12:6c:1b:85:8c:2a:3b:4e:a1:3a:8b:0c: e8:f2:a4:8a:e2:d5:4a:fe:c4:ea:14:7c:39:d2:1a:7f:26:30: 4a:9a:3c:8f:b9:90:c5:4a:b6:f1:6d:8f:5c:3e:b6:d6:26:5f: d1:b4:6f:9d:3e:9d:c9:4c:a4:a0:c1:2e:db:60:d0:35:3f:cc: 21:7d:67:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNDIxMTAvBgNVBAUTKDAyN0YwNTUyNTE0RjI0NEE5NEVFM0YwNjU3MkE0QUY3 MzM1NjU3MzcwHhcNMjQwNTA3MDQ1ODExWhcNMjQwNTE0MDQ1ODExWjAYMRYwFAYD VQQDEw02NjM5YjRlNC00YjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L0cU4CR2eD0Zx4/c9FpR1xi3iGtrVqOTnMk5IinSozemZ6jdR4TQLa0kysH Zt7d9aG9aZHIfr/vHO0dH/R38YnFxVsoXEy5JxY9YoKQpukZxHRz+r88QqQqi8eB kANymzo7A/IL2tgCANPmWphd/rqtd0HStrqgus3hD7X9854eKRRSYXL78LvGWSqp KXbs6J2oujZyR4E2tqKlhlgj/aaBzoXVYpwjP8GcMtfDWk7MLOZ1WPxNhM4zFnEQ gBQMExbKIzGOtzK1PTEtNXVLP8VnOJJit3GO4PYEMLHx9lj1UvSxitZhhtzqDfV6 U0l8ITZc9kI40pZqUj5BAY+GywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI463mrJ Oh2TFDvqIVL1rr8ZACkoMB8GA1UdIwQYMBaAFAJ/BVJRTyRKlO4/BlcqSvczVlc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA0Mi9BRTlCMUI2RTNF NEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpFcVU3ajhHVnlwSzl6TldW emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FuOEZVbEZQSkVxVTdqOEdWeXBLOXpOV1Z6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA0Mi9BRTlCMUI2RTNFNEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpF cVU3ajhHVnlwSzl6TldWemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6M1wEy3ffDRkba3pbKjBHewa5DaOJW67uLJqiN1PimZ411+NJM2Na UYmMBDeK2x46CNfM3wkhW+jE2Nu+3cAxicyOvhhv8wW9PLNuLkONvAd53j6GPgqL cSjfHLjMk7rd9wT+yVHcSdLA8GbpqWeLnvZ85FUiL7dQAsLJ4dRZXsfMi2p9WpKb Z3ZASYhBlO3vSkj8EqU2EYCmsXvPPU7bDXZUiWqLJsosL0nFv4CKeJSM0F0XL/Lk EmkSbBuFjCo7TqE6iwzo8qSK4tVK/sTqFHw50hp/JjBKmjyPuZDFSrbxbY9cPrbW Jl/RtG+dPp3JTKSgwS7bYNA1P8whfWdy -----END CERTIFICATE-----Generated at Tue May 7 05:34:25 2024 by rpki-client on console-ams.rpki-client.org