$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: 8PC7uHr1wAc68kl/NE+hrHLJXekGF1H5iKHTlD9SYxI= Subject key identifier: C8:AE:1A:3D:D2:F4:13:79:43:A9:FB:F2:9E:C7:AB:0A:BE:99:FB:0F Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1E49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1E3A Signing time: Sat 04 May 2024 16:28:52 +0000 Manifest this update: Sat 04 May 2024 16:28:51 +0000 Manifest next update: Sat 11 May 2024 16:28:51 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: P8kFDqCYROpsT15oCeIw3Jq5lFnkdGYJ8YgS/1FKQNk=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: US2vOOdOmbwjdOKwSlqRIv0aYXlY/MBwxivjRy+yLM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7753 (0x1e49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: May 4 16:28:51 2024 GMT Not After : May 11 16:28:51 2024 GMT Subject: CN=66366244-7162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:18:5b:70:46:fa:db:a6:56:19:f9:36:20: b5:e5:a5:54:c1:84:59:eb:29:ed:97:53:81:b7:31: 02:33:e2:26:7e:de:4c:57:0a:42:7c:57:f6:ce:90: f9:19:11:20:ac:c8:95:85:21:d0:6f:15:74:49:2f: ae:6a:ae:eb:c4:b1:85:a1:8e:6e:e8:ff:2f:e8:5e: 28:18:92:5a:27:04:ff:6f:32:2d:3c:9b:c6:7b:17: 95:5f:36:00:5a:db:e7:82:13:78:f5:f7:10:f9:08: 6d:74:8e:af:35:20:8a:6d:3d:13:d3:fc:9c:a0:8c: b5:cd:72:8b:e9:63:63:d8:5e:32:2d:79:c8:ce:25: 7c:87:25:08:37:d6:a2:77:21:85:fb:84:f2:50:51: 71:51:0c:71:93:12:76:e6:fb:c9:85:b7:b5:36:0c: 2e:ec:06:bd:5f:15:24:e0:72:62:0b:1b:ab:95:c0: 3a:3d:e0:f3:7f:94:01:ce:8a:19:1b:ac:79:8b:e3: f1:0d:04:dd:f1:83:c0:54:98:16:9d:50:6f:40:24: 18:18:31:7f:0a:4d:99:bf:6d:91:e8:27:8d:0e:6d: 86:c7:9e:1b:3f:4f:c5:a7:34:3e:a8:f7:f1:3a:c0: 86:9e:6b:26:7d:c5:14:96:7d:80:5e:c0:51:da:d9: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AE:1A:3D:D2:F4:13:79:43:A9:FB:F2:9E:C7:AB:0A:BE:99:FB:0F X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:13:c1:4f:61:02:9d:dd:67:91:dc:18:57:ea:47:aa:fc:0c: f5:22:ac:12:7d:55:d1:28:10:84:3b:bd:f8:5c:cc:96:dc:8c: 38:22:d6:a2:e7:83:12:92:2e:0d:f3:e2:80:e3:54:04:d9:20: 51:60:5d:d0:dc:19:1f:c4:0d:f8:69:52:a8:7b:77:0b:a1:8a: 31:33:fb:2a:62:7f:c7:12:14:a2:14:75:09:51:14:40:58:d0: 0d:51:77:89:93:76:da:c4:de:dd:bf:a8:84:bc:89:81:54:be: 7c:2b:4a:9e:2d:c6:2b:3a:ce:4c:db:8b:da:05:48:a8:56:97: eb:e3:34:f2:97:3c:57:cb:5b:62:bb:5e:dc:9f:62:8e:64:60: 21:04:e7:df:61:0c:94:e6:2e:84:f4:98:fb:cd:84:64:3b:60: 30:7f:ea:2d:84:df:cc:dc:61:cb:5c:13:33:d1:57:87:66:02: f9:fe:25:9f:5e:29:49:27:68:18:e4:17:a8:00:f8:a7:b5:a4: 31:69:ed:44:a8:11:d9:ce:d5:1f:1e:ac:df:d6:96:74:0a:b0: 50:82:f1:c3:2a:b5:86:c1:87:67:a7:c7:77:30:91:f5:d1:4f: 47:8a:29:2f:a2:6e:0e:fa:88:5a:c3:63:2b:d3:de:e7:62:82: 35:09:e0:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjQwNTA0MTYyODUxWhcNMjQwNTExMTYyODUxWjAYMRYwFAYD VQQDEw02NjM2NjI0NC03MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vYYW3BG+tumVhn5NiC15aVUwYRZ6yntl1OBtzECM+Imft5MVwpCfFf2zpD5 GREgrMiVhSHQbxV0SS+uaq7rxLGFoY5u6P8v6F4oGJJaJwT/bzItPJvGexeVXzYA WtvnghN49fcQ+QhtdI6vNSCKbT0T0/ycoIy1zXKL6WNj2F4yLXnIziV8hyUIN9ai dyGF+4TyUFFxUQxxkxJ25vvJhbe1Ngwu7Aa9XxUk4HJiCxurlcA6PeDzf5QBzooZ G6x5i+PxDQTd8YPAVJgWnVBvQCQYGDF/Ck2Zv22R6CeNDm2Gx54bP0/FpzQ+qPfx OsCGnmsmfcUUln2AXsBR2tmvAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiuGj3S 9BN5Q6n78p7Hqwq+mfsPMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcE8FPYQKd3WeR3BhX6keq/Az1IqwSfVXRKBCEO734XMyW3Iw4Itai 54MSki4N8+KA41QE2SBRYF3Q3BkfxA34aVKoe3cLoYoxM/sqYn/HEhSiFHUJURRA WNANUXeJk3baxN7dv6iEvImBVL58K0qeLcYrOs5M24vaBUioVpfr4zTylzxXy1ti u17cn2KOZGAhBOffYQyU5i6E9Jj7zYRkO2Awf+othN/M3GHLXBMz0VeHZgL5/iWf XilJJ2gY5BeoAPintaQxae1EqBHZztUfHqzf1pZ0CrBQgvHDKrWGwYdnp8d3MJH1 0U9Hiikvom4O+ohaw2Mr097nYoI1CeBi -----END CERTIFICATE-----Generated at Sat May 4 17:44:38 2024 by rpki-client on console-ams.rpki-client.org