$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: mg4ssGKqZv1Qeg91qLy8OlmSk8nipONXHuX/+XcyjEQ= Subject key identifier: 1D:D8:01:ED:5A:B2:12:B9:B1:13:A5:DD:39:11:00:27:26:29:C9:59 Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: A7 Signing time: Fri 17 May 2024 06:48:55 +0000 Manifest this update: Fri 17 May 2024 06:48:54 +0000 Manifest next update: Fri 24 May 2024 06:48:54 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: e3tnWxqoYC69FpsHHDO+w7kbXhJw2yFJ3+xUp2+nVb4=) 2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: pUYwtk7H4SErO0RmecDKwte6PxJGNXwb2vfQgoNABbY=) 3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: qxnwJg8IFQzglpT6JsIB6JuKL16Bl6FnMy8IuEKj94o=) 4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: ZeCYlYIZOe18L8obkQDh8oWchb2x2gc6pA83/iYindw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: May 17 06:48:54 2024 GMT Not After : May 24 06:48:54 2024 GMT Subject: CN=6646fdd7-5c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:83:2d:8c:f7:b7:7c:e9:57:39:e6:cf:dc: 69:61:13:e5:38:95:38:07:e2:38:dd:46:19:e0:fe: 18:6e:0a:02:6d:d4:71:24:e1:7b:3f:79:b9:57:17: d1:c8:6e:17:fa:19:b9:e8:c9:b4:0d:be:e7:42:83: 98:d5:40:9c:69:92:3d:1a:5a:68:bc:f0:03:bf:53: ff:08:6a:b7:18:ac:09:dd:8f:e7:d5:85:61:e1:bd: ba:1f:8b:3f:55:92:48:2f:0c:05:71:43:51:11:6d: 1c:fd:e7:cb:00:a2:dd:37:48:75:d8:59:19:c5:26: ca:13:7e:a3:72:5f:ba:7b:fe:b5:8f:07:5c:ae:bb: d5:05:bc:c4:fa:9b:ed:cf:ef:0b:76:b6:8d:3a:31: 34:28:74:5b:7e:e7:17:10:11:24:bf:77:d2:8e:93: 17:f5:53:f6:0e:1d:be:e4:05:10:85:e7:8c:a2:6f: b3:d5:e8:5e:30:e4:47:83:b2:a6:f4:c7:1a:4e:7d: c6:91:2c:4c:57:c2:2a:68:b9:1a:34:ad:29:4d:02: 7e:f9:42:5f:b9:65:bf:8c:92:ce:84:27:3e:1d:90: 5b:54:48:5b:e0:63:1b:10:9d:aa:5f:f1:fd:bb:a3: e0:93:a5:49:a1:d0:7f:5c:ca:af:71:78:be:ba:df: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D8:01:ED:5A:B2:12:B9:B1:13:A5:DD:39:11:00:27:26:29:C9:59 X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e5:6e:9e:8e:48:53:c4:6c:85:8b:63:b2:6c:f1:cf:e0:64: 19:44:6a:1e:2f:b6:e7:d1:e8:a7:c4:ba:0e:56:17:96:ba:d5: 83:cf:cf:78:24:a3:b1:56:44:77:43:a3:cb:85:ba:65:f0:86: 7f:8d:d6:14:1d:67:aa:f6:dc:7e:a2:e2:3e:23:5a:f6:a7:9d: d8:0e:6e:66:67:9d:7b:af:2b:27:23:31:44:3a:05:87:4b:0f: de:6a:98:05:e6:14:7a:65:3e:90:93:70:a8:d6:50:ab:fd:d9: 0d:48:ec:a5:6b:26:63:72:46:1e:50:2e:39:4f:63:0a:2e:c9: 00:83:f6:dc:79:23:81:20:63:17:c0:55:29:f1:e6:aa:f1:c4: 0a:84:6c:bf:02:37:2b:d0:3f:65:55:a4:e7:14:d6:51:9d:5e: 9c:cd:67:1e:72:fb:cf:75:30:00:6d:87:8c:52:94:f4:18:c4: 1e:b6:50:4b:bf:0d:70:47:1c:60:f5:a4:77:e5:57:5c:63:c8: 0e:79:b7:d4:a4:e8:5d:c9:8e:32:dd:e2:21:48:ee:54:71:b1: 77:a0:f4:60:b7:43:e1:f3:1a:38:83:fa:77:a4:fe:6d:91:4a: 6f:8d:34:e4:eb:45:be:70:38:41:9a:aa:9a:fa:8a:88:ac:d5: d3:87:10:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjQwNTE3MDY0ODU0WhcNMjQwNTI0MDY0ODU0WjAYMRYwFAYD VQQDEw02NjQ2ZmRkNy01YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjqDLYz3t3zpVznmz9xpYRPlOJU4B+I43UYZ4P4YbgoCbdRxJOF7P3m5VxfR yG4X+hm56Mm0Db7nQoOY1UCcaZI9GlpovPADv1P/CGq3GKwJ3Y/n1YVh4b26H4s/ VZJILwwFcUNREW0c/efLAKLdN0h12FkZxSbKE36jcl+6e/61jwdcrrvVBbzE+pvt z+8LdraNOjE0KHRbfucXEBEkv3fSjpMX9VP2Dh2+5AUQheeMom+z1eheMORHg7Km 9McaTn3GkSxMV8IqaLkaNK0pTQJ++UJfuWW/jJLOhCc+HZBbVEhb4GMbEJ2qX/H9 u6Pgk6VJodB/XMqvcXi+ut8wyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3YAe1a shK5sROl3TkRACcmKclZMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo5W6ejkhTxGyFi2OybPHP4GQZRGoeL7bn0einxLoOVheWutWDz894 JKOxVkR3Q6PLhbpl8IZ/jdYUHWeq9tx+ouI+I1r2p53YDm5mZ517rysnIzFEOgWH Sw/eapgF5hR6ZT6Qk3Co1lCr/dkNSOylayZjckYeUC45T2MKLskAg/bceSOBIGMX wFUp8eaq8cQKhGy/Ajcr0D9lVaTnFNZRnV6czWcecvvPdTAAbYeMUpT0GMQetlBL vw1wRxxg9aR35VdcY8gOebfUpOhdyY4y3eIhSO5UcbF3oPRgt0Ph8xo4g/p3pP5t kUpvjTTk60W+cDhBmqqa+oqIrNXThxBx -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org