$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft File: 0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft (raw, json) Hash identifier: izRQu0BJcHJV5PboCQUUPC4JrCeqxrJ0YHJkFWhOhHo= Subject key identifier: 8E:05:80:E6:13:AA:FA:04:17:59:18:EB:E7:EB:A8:78:3E:CC:54:0F Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2 Certificate issuer: /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft Manifest number: 012D Signing time: Fri 03 May 2024 05:37:32 +0000 Manifest this update: Fri 03 May 2024 05:37:31 +0000 Manifest next update: Fri 10 May 2024 05:37:31 +0000 Files and hashes: 1: 0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl (hash: X+T2yOtLLuCkPf5FrLS+55v2Sgk6aFJ5DCab81Zhvm0=) 2: E79D41A0C70411EE9E9EB032C4F9AE02.roa (hash: s4goZj2v2uEHIpZ4BQDPip2nEwynnwij7YEgmasBnCs=) 3: 3CFCDA78EB3D11EEA970C56CC4F9AE02.roa (hash: SdpRVAYlgZ7YhozqvF0KOpRUzXJyHMCPR33hz4Z0FJs=) 4: 3C4A76BCEB3D11EEA970C56CC4F9AE02.roa (hash: SDZ575SKz9wejI6Dj5xT70kvUuNLEJp8xF+890oTGvA=) 5: C9517AA8CB1A11EE9EB85B6AC4F9AE02.roa (hash: Mf9vw9zQwAOjOoeKAEVwlgh/2ZJONPKEGI8Inrgij5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2 Validity Not Before: May 3 05:37:31 2024 GMT Not After : May 10 05:37:31 2024 GMT Subject: CN=6634781c-354d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:94:52:29:72:53:17:46:04:2b:c0:c2:42:fd: f2:0f:53:bd:80:d4:c8:31:f8:83:1a:21:37:db:ca: fc:46:0a:45:b9:79:c0:42:5d:90:09:7c:e6:6c:4f: 29:96:53:bd:72:04:38:ba:34:86:21:d1:4c:87:c8: c6:17:b6:52:79:b4:4a:4b:99:d5:fc:56:e0:fc:f1: b7:f5:e7:21:0b:21:82:bf:e9:82:0c:ea:98:91:78: e6:a0:f2:71:a9:52:5c:c8:1b:08:f1:63:60:bf:af: c3:d9:fe:d4:5b:09:2d:ce:3c:f4:e2:39:1d:15:bd: e7:4c:ac:cf:f5:07:dd:08:48:34:96:bb:d6:9c:b5: a6:14:85:9c:cb:48:8c:79:2b:b3:10:73:6f:5c:d8: 7f:1d:a5:a1:49:28:b6:ce:87:0f:a7:dc:a2:fe:ca: ba:e1:cc:2a:a8:9a:0e:05:8a:49:80:ea:7e:5e:7b: e1:49:7d:da:c0:6e:31:64:fe:da:29:a0:7f:24:62: 20:64:e1:6b:82:85:39:d7:b8:ee:5c:c9:95:01:e5: 6d:11:d8:e9:c6:aa:d6:62:26:d8:d2:cc:72:7e:d7: ed:9e:37:39:66:d7:bc:b2:fc:7c:dd:e8:99:d6:55: 22:b3:01:00:07:60:0e:a7:1d:44:f7:f9:93:d0:f2: d3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:05:80:E6:13:AA:FA:04:17:59:18:EB:E7:EB:A8:78:3E:CC:54:0F X509v3 Authority Key Identifier: keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:ea:27:e1:2c:21:b9:b0:75:c2:c9:71:81:d3:f8:24:10: f8:44:ae:6a:98:b7:8f:a7:f6:1e:82:68:7e:2a:76:88:8c:72: da:f5:f4:71:d3:30:6a:66:db:75:2d:e6:40:5f:31:a4:2b:49: f0:0b:cc:ab:cd:43:d5:93:24:7d:b7:b6:8e:c1:b1:d3:79:fb: b3:fe:53:53:ab:c0:75:b2:3a:a5:2b:87:93:28:56:18:f5:03: 85:2a:02:df:6a:9a:82:f8:8d:df:cf:7d:3e:80:b1:40:78:1c: 40:fc:8c:56:e6:f5:d6:97:54:91:10:7a:c1:16:c9:73:dd:3f: de:00:d1:b0:8e:e3:a7:77:d4:f0:5f:60:cc:37:77:e5:dc:5b: ba:76:c0:20:d3:85:d5:3f:bb:e5:48:04:e4:09:bd:51:b9:9d: e6:4a:b8:f5:f2:b8:21:e7:ae:a4:4d:fc:8b:c5:16:b1:ef:c3: 8d:90:77:8c:d7:f4:3f:d5:34:b4:3e:b0:40:45:04:85:a5:ca: b1:02:a9:8b:78:61:94:28:35:08:87:9e:ab:da:f3:a4:e0:c5: 50:a8:4e:15:70:36:58:04:88:58:eb:ee:13:d3:e7:ba:62:84: f7:7b:4e:af:89:44:93:4a:50:da:58:75:cc:03:6f:79:21:4a: a2:28:f4:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDMDgxMTAvBgNVBAUTKEQxQjhFNjcxOTczNTU5MDIwRjg3MDNEMTdEQ0Q4OTI2 OTJFNjQwQTIwHhcNMjQwNTAzMDUzNzMxWhcNMjQwNTEwMDUzNzMxWjAYMRYwFAYD VQQDEw02NjM0NzgxYy0zNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pRSKXJTF0YEK8DCQv3yD1O9gNTIMfiDGiE328r8RgpFuXnAQl2QCXzmbE8p llO9cgQ4ujSGIdFMh8jGF7ZSebRKS5nV/Fbg/PG39echCyGCv+mCDOqYkXjmoPJx qVJcyBsI8WNgv6/D2f7UWwktzjz04jkdFb3nTKzP9QfdCEg0lrvWnLWmFIWcy0iM eSuzEHNvXNh/HaWhSSi2zocPp9yi/sq64cwqqJoOBYpJgOp+XnvhSX3awG4xZP7a KaB/JGIgZOFrgoU517juXMmVAeVtEdjpxqrWYibY0sxyftftnjc5Zte8svx83eiZ 1lUiswEAB2AOpx1E9/mT0PLTxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4FgOYT qvoEF1kY6+frqHg+zFQPMB8GA1UdIwQYMBaAFNG45nGXNVkCD4cD0X3NiSaS5kCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUMwOC84MTJBMkM1ODdE M0IxMUVEOThCRjlFNDhDNEY5QUUwMi8wYmptY1pjMVdRSVBod1BSZmMySkpwTG1R S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiam1jWmMxV1FJUGh3UFJmYzJKSnBMbVFLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUMwOC84MTJBMkM1ODdEM0IxMUVEOThCRjlFNDhDNEY5QUUwMi8wYmptY1pjMVdR SVBod1BSZmMySkpwTG1RS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdkeon4SwhubB1wslxgdP4JBD4RK5qmLePp/Yegmh+KnaIjHLa9fRx 0zBqZtt1LeZAXzGkK0nwC8yrzUPVkyR9t7aOwbHTefuz/lNTq8B1sjqlK4eTKFYY 9QOFKgLfapqC+I3fz30+gLFAeBxA/IxW5vXWl1SREHrBFslz3T/eANGwjuOnd9Tw X2DMN3fl3Fu6dsAg04XVP7vlSATkCb1RuZ3mSrj18rgh566kTfyLxRax78ONkHeM 1/Q/1TS0PrBARQSFpcqxAqmLeGGUKDUIh56r2vOk4MVQqE4VcDZYBIhY6+4T0+e6 YoT3e06viUSTSlDaWHXMA295IUqiKPQJ -----END CERTIFICATE-----Generated at Fri May 3 06:18:28 2024 by rpki-client on console-ams.rpki-client.org