$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: yUmW6sRmCLfAPtyCCnqeDIZ0FJ8awgz9iEP3iTgPk6w= Subject key identifier: F9:8E:2A:4C:5A:47:7F:EC:3B:4A:F3:61:9F:E4:39:01:85:97:FF:D8 Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 08B8 Signing time: Fri 26 Apr 2024 21:27:41 +0000 Manifest this update: Fri 26 Apr 2024 21:27:40 +0000 Manifest next update: Fri 03 May 2024 21:27:40 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: zvypuZ1VYOUNAs/yVdq8BU1cW0rstwxYpjAt/cUJI/o=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: 5CFKnjcy5F9IXxk31F+vn5LjvcxiJFwvGmhruhqdGmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Apr 26 21:27:40 2024 GMT Not After : May 3 21:27:40 2024 GMT Subject: CN=662c1c4c-f582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:75:98:a3:8b:67:5b:ef:e5:cf:04:88:24: e8:26:0a:9b:5e:21:42:22:39:0a:f9:7b:cc:7d:0c: 27:da:2d:af:45:14:46:34:fa:a4:32:53:a4:a7:79: 68:5d:29:37:78:73:df:dd:f6:2b:70:4e:80:be:03: 68:bc:ff:9a:2d:aa:24:a8:28:75:9a:ea:b3:1a:9d: cc:a6:67:2c:62:30:29:20:95:b8:01:d8:e8:b2:46: 11:47:19:94:a7:b4:d6:c6:56:9a:ff:87:53:47:6f: 47:13:4f:0d:73:3c:82:60:b4:a7:d3:e7:0b:86:d5: da:16:c8:63:fa:b2:1c:4b:24:22:35:f1:f5:cc:5d: 60:85:0e:83:b3:3b:6b:cb:d9:66:00:42:78:7c:41: 24:30:7b:af:b0:f2:17:c7:2c:66:a7:d3:ff:e0:01: ae:d6:f5:95:68:54:d0:84:ce:35:a4:7b:d1:27:bf: f1:a6:fb:d4:87:f2:96:2b:78:6f:db:fc:7d:a5:01: e5:c4:1a:85:ca:1c:11:0a:27:08:85:27:44:de:39: 1a:26:0b:63:b2:0a:5e:f7:33:8d:59:18:0f:5f:77: ca:e7:9f:b9:94:59:95:16:68:05:ea:3b:a4:ff:00: 93:a9:84:8c:cb:fe:20:99:f4:b3:11:28:31:78:c5: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8E:2A:4C:5A:47:7F:EC:3B:4A:F3:61:9F:E4:39:01:85:97:FF:D8 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:70:cf:ba:f2:18:8c:d5:95:0c:ec:c0:d2:b9:a6:52:0f:e2: 5e:67:6c:4e:09:d3:d7:bf:e4:ed:91:81:26:04:2b:24:c3:a3: a5:07:bb:7f:05:45:ec:37:62:7e:15:9e:2a:26:57:cf:4d:78: 61:e2:50:42:fe:e8:d7:51:7e:e3:0e:9d:2b:51:b1:52:5d:8f: 87:a3:fd:19:4c:6a:9d:1f:00:e5:d4:54:d5:05:8b:2e:de:96: 34:69:ef:a2:38:75:f3:82:8a:c7:a0:6f:74:7f:3f:60:96:b0: 5e:d7:a2:0b:70:0d:8f:c6:eb:71:bb:eb:19:12:91:80:c8:87: 06:b1:b4:49:95:79:2f:09:94:69:8a:07:cd:3f:09:93:a3:c4: 34:f6:26:2d:a8:70:20:58:79:aa:d7:8e:e1:33:1f:0e:99:0a: d3:43:5a:93:05:a1:f8:6d:f6:83:67:28:2b:e2:b4:c7:2b:20: 40:72:3b:9b:ec:1e:b1:99:d7:4d:da:c5:41:c9:63:27:6f:c1: 8d:8a:d7:5e:2e:7e:33:7b:3b:1a:76:2b:f9:40:4f:d3:ee:29: 7c:ba:d3:fc:4f:44:72:1f:78:db:cf:48:b2:ca:44:6c:c6:13: 21:61:3c:86:e1:b3:e8:a0:a8:b0:f0:f0:85:b3:7f:e1:66:18: 8d:64:32:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjQwNDI2MjEyNzQwWhcNMjQwNTAzMjEyNzQwWjAYMRYwFAYD VQQDEw02NjJjMWM0Yy1mNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUt1mKOLZ1vv5c8EiCToJgqbXiFCIjkK+XvMfQwn2i2vRRRGNPqkMlOkp3lo XSk3eHPf3fYrcE6AvgNovP+aLaokqCh1muqzGp3MpmcsYjApIJW4AdjoskYRRxmU p7TWxlaa/4dTR29HE08NczyCYLSn0+cLhtXaFshj+rIcSyQiNfH1zF1ghQ6Dsztr y9lmAEJ4fEEkMHuvsPIXxyxmp9P/4AGu1vWVaFTQhM41pHvRJ7/xpvvUh/KWK3hv 2/x9pQHlxBqFyhwRCicIhSdE3jkaJgtjsgpe9zONWRgPX3fK55+5lFmVFmgF6juk /wCTqYSMy/4gmfSzESgxeMX2CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmOKkxa R3/sO0rzYZ/kOQGFl//YMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFcM+68hiM1ZUM7MDSuaZSD+JeZ2xOCdPXv+TtkYEmBCskw6OlB7t/ BUXsN2J+FZ4qJlfPTXhh4lBC/ujXUX7jDp0rUbFSXY+Ho/0ZTGqdHwDl1FTVBYsu 3pY0ae+iOHXzgorHoG90fz9glrBe16ILcA2Pxutxu+sZEpGAyIcGsbRJlXkvCZRp igfNPwmTo8Q09iYtqHAgWHmq147hMx8OmQrTQ1qTBaH4bfaDZygr4rTHKyBAcjub 7B6xmddN2sVByWMnb8GNitdeLn4zezsadiv5QE/T7il8utP8T0RyH3jbz0iyykRs xhMhYTyG4bPooKiw8PCFs3/hZhiNZDLb -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org