$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: KGbkbYtBrGFojwMEGZRJlg0k2zR3ImS2KIZGI1LYZC4= Subject key identifier: D4:8D:3D:7B:62:48:1C:6E:9C:69:D2:25:1D:80:EB:BC:B2:32:B4:C5 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0851 Signing time: Thu 02 May 2024 21:56:13 +0000 Manifest this update: Thu 02 May 2024 21:56:12 +0000 Manifest next update: Thu 09 May 2024 21:56:12 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: h9J6SScw8sWLxVS3ETImfE5aU+rCGOu45nYiWlVAgCs=) 2: 5EE2D37A121011EDB028B50FC4F9AE02.roa (hash: M0r2GrmrfP23cRPeWlbRxVl5VdSzLJakkShDB4x+1bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: May 2 21:56:12 2024 GMT Not After : May 9 21:56:12 2024 GMT Subject: CN=66340bfd-ee2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:d3:b8:fa:bf:d4:9d:99:1f:d4:df:ce:b8: 0e:d0:e9:15:ae:dd:20:da:07:e5:a1:a4:3c:3e:8c: 04:30:37:18:8e:68:23:a6:4a:93:d2:c1:7c:84:95: 3c:c2:44:76:1d:40:46:89:64:89:58:cc:9b:59:51: d3:4f:3b:b8:cd:aa:7d:01:a2:c0:f3:51:11:6b:9c: 39:f9:d7:f8:b1:57:80:5d:c9:22:15:39:1f:6b:ca: 5e:4e:97:7d:b8:59:a7:28:30:e2:b7:76:e7:6b:69: da:0d:d6:e5:85:7d:75:29:c0:9b:d6:c8:00:83:e9: 53:9f:b0:43:a5:ce:83:58:97:42:33:cf:88:0c:b4: 3e:9f:38:23:83:17:aa:65:6d:e0:be:fa:7c:5f:ef: 22:9a:0e:c3:56:da:04:26:30:de:ad:dd:58:19:5b: 17:7a:96:f5:23:a1:db:da:10:eb:9c:80:4e:71:95: ba:3e:2f:96:58:fa:60:32:fa:3c:e7:38:1e:79:90: fb:14:89:00:23:5d:69:07:cd:e9:97:47:b5:1e:22: 7b:37:86:12:f0:7b:96:8e:ac:58:6c:f2:22:01:c0: b9:41:6c:25:66:a0:a4:2d:ac:f3:b9:3a:98:60:91: 58:6b:20:b5:ee:bf:50:c1:81:9b:8a:27:04:04:f3: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8D:3D:7B:62:48:1C:6E:9C:69:D2:25:1D:80:EB:BC:B2:32:B4:C5 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a8:30:9d:04:c3:30:35:ea:e7:d1:ab:b2:8a:f0:2f:78:28: bf:72:6b:3a:f0:73:7b:3c:c2:7e:dd:5d:33:b8:d0:fc:2d:3d: 6a:8f:52:6f:a6:67:03:c6:25:ef:70:9d:b3:b9:e5:41:73:40: 03:94:d1:18:33:e8:9c:4e:3d:59:f1:c2:79:20:fc:4c:29:cd: 99:e0:d0:9d:6e:4c:b3:ac:30:e7:94:0b:a4:4a:bd:43:78:cd: ea:5f:56:1b:d4:0b:e1:40:49:8f:3c:f7:5d:8b:7d:cf:fb:fc: a1:78:91:00:bb:18:13:15:5f:bc:b2:ed:64:19:c7:10:30:0e: 57:c9:11:ea:58:e5:c3:c5:d3:86:3c:3e:eb:01:9f:98:96:61: e0:22:6c:46:a5:32:40:9d:0c:b5:61:8d:1d:36:5f:ef:bb:a1: d4:bc:b2:38:78:55:e2:06:bb:7e:10:ce:98:1f:37:58:58:50: f2:53:91:4c:3c:98:c4:f5:9d:ea:01:ce:1f:6d:73:05:ab:77: 26:d8:39:5a:7b:e5:d7:35:e6:02:bb:e4:5c:13:8f:e7:1c:e6: 3e:2a:f2:af:f8:f1:f4:7c:c5:51:28:9e:77:1c:46:ff:29:9e: 8c:e5:f5:bd:95:25:89:dc:e9:a9:c4:f0:66:03:3b:67:58:9b: 20:4b:5d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjQwNTAyMjE1NjEyWhcNMjQwNTA5MjE1NjEyWjAYMRYwFAYD VQQDEw02NjM0MGJmZC1lZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSPTuPq/1J2ZH9TfzrgO0OkVrt0g2gfloaQ8PowEMDcYjmgjpkqT0sF8hJU8 wkR2HUBGiWSJWMybWVHTTzu4zap9AaLA81ERa5w5+df4sVeAXckiFTkfa8peTpd9 uFmnKDDit3bna2naDdblhX11KcCb1sgAg+lTn7BDpc6DWJdCM8+IDLQ+nzgjgxeq ZW3gvvp8X+8img7DVtoEJjDerd1YGVsXepb1I6Hb2hDrnIBOcZW6Pi+WWPpgMvo8 5zgeeZD7FIkAI11pB83pl0e1HiJ7N4YS8HuWjqxYbPIiAcC5QWwlZqCkLazzuTqY YJFYayC17r9QwYGbiicEBPPo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSNPXti SBxunGnSJR2A67yyMrTFMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjqDCdBMMwNern0auyivAveCi/cms68HN7PMJ+3V0zuND8LT1qj1Jv pmcDxiXvcJ2zueVBc0ADlNEYM+icTj1Z8cJ5IPxMKc2Z4NCdbkyzrDDnlAukSr1D eM3qX1Yb1AvhQEmPPPddi33P+/yheJEAuxgTFV+8su1kGccQMA5XyRHqWOXDxdOG PD7rAZ+YlmHgImxGpTJAnQy1YY0dNl/vu6HUvLI4eFXiBrt+EM6YHzdYWFDyU5FM PJjE9Z3qAc4fbXMFq3cm2Dlae+XXNeYCu+RcE4/nHOY+KvKv+PH0fMVRKJ53HEb/ KZ6M5fW9lSWJ3OmpxPBmAztnWJsgS13O -----END CERTIFICATE-----Generated at Thu May 2 22:28:51 2024 by rpki-client on console-ams.rpki-client.org