$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json) Hash identifier: rFMiuRfPS1ATp/kErKXR2npCWpkPuzbI749AQUpYS2o= Subject key identifier: 18:85:AB:F5:F9:C3:9B:6B:42:B4:52:FB:4E:96:3C:5F:A0:F4:50:20 Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft Manifest number: 0691 Signing time: Sat 04 May 2024 23:30:37 +0000 Manifest this update: Sat 04 May 2024 23:30:36 +0000 Manifest next update: Sat 11 May 2024 23:30:36 +0000 Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: h9iiinqKLhPJCuqK453mthhZ9F2IpyHzRE+6u7WQrt0=) 2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: ZuMU0Sazkhv5Z9hX8y5u26qVA1926pJyXGJmqjuPt0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Validity Not Before: May 4 23:30:36 2024 GMT Not After : May 11 23:30:36 2024 GMT Subject: CN=6636c51c-3e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:41:78:e6:09:c6:a9:11:5d:cf:ab:63:08: 8d:78:66:a5:53:fb:4f:17:98:f4:0a:c2:fe:34:aa: ba:ef:64:9d:89:94:c0:45:1e:c7:f5:56:dd:33:24: d7:b0:76:f0:97:4a:b3:0c:b1:5f:f6:4e:62:c3:fc: 4a:6b:33:9f:16:12:c9:32:f0:24:72:a9:c5:99:ea: ea:83:f9:c3:37:dd:1f:c5:e2:f4:9f:f0:ad:6b:eb: 7a:af:9b:10:c7:3d:14:ce:28:58:65:67:4e:63:8c: d7:cb:7b:0a:3b:aa:35:3f:2c:6a:2d:96:ab:87:55: 71:67:7d:a2:92:a2:42:ea:cc:48:94:3b:50:f5:a0: ee:32:00:3e:84:a1:18:84:62:fd:3c:ae:b7:d4:d5: 07:c3:7d:58:45:c4:67:7f:af:b0:96:91:7e:70:a5: 96:77:f0:cf:fd:a4:52:4b:de:0f:8f:56:4d:6e:1c: 64:12:8f:51:df:f1:0a:76:0a:20:8d:da:25:09:4b: 46:06:97:85:ca:34:08:36:60:d2:fe:8c:81:c7:a5: fd:60:07:92:04:53:61:6f:1c:9c:50:0c:49:4d:69: 50:37:e1:91:45:3b:db:2f:a6:1e:41:66:92:eb:f3: 8d:f9:fc:89:99:a6:9e:32:f3:9b:b5:77:76:c9:d6: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:85:AB:F5:F9:C3:9B:6B:42:B4:52:FB:4E:96:3C:5F:A0:F4:50:20 X509v3 Authority Key Identifier: keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8e:81:3b:58:d1:14:ac:b0:d8:9c:0e:a6:fe:9a:47:b7:c7: 53:3c:e4:0a:60:b1:bf:db:84:d8:e7:86:bf:39:04:a0:c4:da: e7:d7:9e:24:15:ee:7c:b2:3d:97:fe:1e:9e:4d:f8:68:82:4e: cb:a2:95:5c:74:40:09:d3:ca:2c:b2:6d:ea:65:02:f6:42:bb: 83:e6:82:86:e0:95:b7:cb:a0:9c:4d:d7:0b:8b:a6:50:c9:72: 83:c5:77:61:5a:6b:4c:c6:80:72:3b:71:13:d1:03:7a:12:af: 50:79:03:b7:0f:53:91:d8:cc:b0:10:4c:4e:11:da:de:80:58: 15:2c:4b:0d:1c:d8:84:d9:80:ec:71:69:8f:1e:95:fa:ce:b3: 4a:c3:ec:00:db:ba:83:01:cc:93:1b:c6:b0:b5:69:b0:45:24: af:c5:38:af:0a:82:34:28:cb:de:72:9b:17:fd:79:7c:d5:e6: 9e:35:40:31:94:e1:a1:cb:78:76:c7:a2:32:79:03:32:cf:b4: 16:15:f1:bf:52:47:bc:5d:77:a5:af:4e:4c:33:2a:e3:6f:36: 65:23:6e:f7:28:bd:02:a1:2c:98:b7:6d:a4:a1:d5:63:44:39: cd:4a:12:ad:5f:bc:83:48:81:6d:73:cc:38:71:20:42:71:da: 5e:27:83:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDQzUxMTAvBgNVBAUTKDM5MTFFMUVGQjAyQjAzNkY4MzVCRjY1OEUxMzY2MDFB Njc0MjE2OTMwHhcNMjQwNTA0MjMzMDM2WhcNMjQwNTExMjMzMDM2WjAYMRYwFAYD VQQDEw02NjM2YzUxYy0zZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMBBeOYJxqkRXc+rYwiNeGalU/tPF5j0CsL+NKq672SdiZTARR7H9VbdMyTX sHbwl0qzDLFf9k5iw/xKazOfFhLJMvAkcqnFmerqg/nDN90fxeL0n/Cta+t6r5sQ xz0UzihYZWdOY4zXy3sKO6o1PyxqLZarh1VxZ32ikqJC6sxIlDtQ9aDuMgA+hKEY hGL9PK631NUHw31YRcRnf6+wlpF+cKWWd/DP/aRSS94Pj1ZNbhxkEo9R3/EKdgog jdolCUtGBpeFyjQINmDS/oyBx6X9YAeSBFNhbxycUAxJTWlQN+GRRTvbL6YeQWaS 6/ON+fyJmaaeMvObtXd2ydac+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiFq/X5 w5trQrRS+06WPF+g9FAgMB8GA1UdIwQYMBaAFDkR4e+wKwNvg1v2WOE2YBpnQhaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NDNS80M0I1RUZEMDI0 MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEyLURXX1pZNFRaZ0dtZENG cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SSGg3N0FyQTItRFdfWlk0VFpnR21kQ0ZwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NDNS80M0I1RUZEMDI0MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEy LURXX1pZNFRaZ0dtZENGcE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxjoE7WNEUrLDYnA6m/ppHt8dTPOQKYLG/24TY54a/OQSgxNrn154k Fe58sj2X/h6eTfhogk7LopVcdEAJ08ossm3qZQL2QruD5oKG4JW3y6CcTdcLi6ZQ yXKDxXdhWmtMxoByO3ET0QN6Eq9QeQO3D1OR2MywEExOEdregFgVLEsNHNiE2YDs cWmPHpX6zrNKw+wA27qDAcyTG8awtWmwRSSvxTivCoI0KMvecpsX/Xl81eaeNUAx lOGhy3h2x6IyeQMyz7QWFfG/Uke8XXelr05MMyrjbzZlI273KL0CoSyYt22kodVj RDnNShKtX7yDSIFtc8w4cSBCcdpeJ4MS -----END CERTIFICATE-----Generated at Sun May 5 00:14:41 2024 by rpki-client on console-ams.rpki-client.org