$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: HVzjxgHuqfqUE4rylph7BpbGHsHG9itI/414PY6Tm48= Subject key identifier: B6:2F:08:90:44:42:26:A3:43:15:57:0D:23:C0:6D:CA:23:DB:D1:06 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0A63 Signing time: Sat 04 May 2024 20:29:47 +0000 Manifest this update: Sat 04 May 2024 20:29:47 +0000 Manifest next update: Sat 11 May 2024 20:29:47 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: i9MhIfF5NY+Ak42Gsl51VFDTAB9UuzjZ8W9+F7GfzTM=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: d/u/tQyu7BiZM6HHupxtxJeaNSffsgItB1m87HqzAOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: May 4 20:29:47 2024 GMT Not After : May 11 20:29:47 2024 GMT Subject: CN=66369abb-80a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:e5:1f:69:a0:ac:6d:eb:2f:bc:36:fd:ba: 61:67:93:bb:9e:09:ec:3b:ee:51:c7:c6:be:6c:32: 08:89:8c:bf:d7:d9:af:35:c3:f3:62:aa:fd:43:0e: 51:58:f2:f4:7a:b2:e4:82:3b:77:72:d5:68:65:b5: f6:6d:f6:91:fa:1b:0e:ab:be:95:87:7d:ef:24:78: c8:0e:a8:67:d2:e9:5b:48:36:ec:fb:9f:b0:0e:af: 7a:49:ef:6b:c5:bd:f9:41:77:b5:3b:57:5e:a0:80: 38:33:27:8c:97:c4:29:df:d4:c4:59:fd:e6:6d:1f: 6f:54:fd:e2:40:75:61:f4:c3:48:ce:0e:a3:7e:59: 78:7f:89:8f:66:1f:2e:cf:87:ac:ba:92:a9:da:29: cd:fe:15:d7:4b:a3:4b:52:c7:4f:d9:c5:0a:7b:da: 02:6d:1f:84:be:46:85:a6:02:6e:e8:14:d6:e5:cb: 85:55:49:36:f3:20:f0:8d:e1:38:6c:bc:2a:f5:88: 34:75:d5:3e:0d:0b:33:09:72:79:8d:81:b2:0a:5a: 29:2f:39:c8:ff:1b:a8:17:09:9b:df:27:7e:27:5c: 79:5d:5b:70:c8:d8:5a:5f:d1:b5:c2:8a:c8:a1:e0: 10:b4:6a:b0:a6:0d:b1:6d:d3:e3:e4:25:6d:46:9a: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2F:08:90:44:42:26:A3:43:15:57:0D:23:C0:6D:CA:23:DB:D1:06 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7a:18:ee:2b:c6:c0:f1:7e:25:c6:d5:4a:84:61:ab:0a:27: eb:57:eb:13:e5:83:63:39:7f:c8:73:27:e9:cb:5b:a0:3d:17: 55:e1:89:0a:0f:da:2b:39:2c:ca:bd:f9:6a:5a:fc:45:4d:eb: f9:9c:e0:5f:70:50:6b:a6:83:24:81:a7:ef:da:ea:4f:3c:37: ef:95:53:cb:b9:92:c4:05:cc:60:31:e8:8f:b4:89:b7:d0:2a: e5:61:6f:d8:5a:26:88:81:fb:18:5c:0b:27:f7:4b:be:4e:4c: 62:4d:6c:f1:b8:86:53:c2:40:ab:da:26:84:48:6f:88:fc:0e: 5e:59:b6:39:c5:60:68:14:90:d3:88:6f:93:3c:7b:5e:ac:3d: 9d:47:ea:42:1c:15:78:73:d0:f2:88:88:bf:aa:85:59:31:cb: e7:33:8b:3f:85:5f:2b:40:d1:25:18:db:e2:cc:83:cc:05:96: 31:12:f8:64:f2:87:ac:7e:0f:ef:67:fd:84:18:3a:97:74:c1: fe:2a:eb:9a:6f:a3:10:dc:2e:62:a8:43:44:38:26:70:a3:c3: c3:ad:d4:24:7e:cf:7c:81:f8:96:bb:2f:d2:5f:51:dc:81:10: 56:8d:3c:7e:b8:90:c0:f2:02:b7:57:fe:6c:09:38:04:8f:05: 26:92:a7:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjQwNTA0MjAyOTQ3WhcNMjQwNTExMjAyOTQ3WjAYMRYwFAYD VQQDEw02NjM2OWFiYi04MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIblH2mgrG3rL7w2/bphZ5O7ngnsO+5Rx8a+bDIIiYy/19mvNcPzYqr9Qw5R WPL0erLkgjt3ctVoZbX2bfaR+hsOq76Vh33vJHjIDqhn0ulbSDbs+5+wDq96Se9r xb35QXe1O1deoIA4MyeMl8Qp39TEWf3mbR9vVP3iQHVh9MNIzg6jfll4f4mPZh8u z4esupKp2inN/hXXS6NLUsdP2cUKe9oCbR+EvkaFpgJu6BTW5cuFVUk28yDwjeE4 bLwq9Yg0ddU+DQszCXJ5jYGyClopLznI/xuoFwmb3yd+J1x5XVtwyNhaX9G1worI oeAQtGqwpg2xbdPj5CVtRpqDkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYvCJBE QiajQxVXDSPAbcoj29EGMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzehjuK8bA8X4lxtVKhGGrCifrV+sT5YNjOX/Icyfpy1ugPRdV4YkK D9orOSzKvflqWvxFTev5nOBfcFBrpoMkgafv2upPPDfvlVPLuZLEBcxgMeiPtIm3 0CrlYW/YWiaIgfsYXAsn90u+TkxiTWzxuIZTwkCr2iaESG+I/A5eWbY5xWBoFJDT iG+TPHterD2dR+pCHBV4c9DyiIi/qoVZMcvnM4s/hV8rQNElGNvizIPMBZYxEvhk 8oesfg/vZ/2EGDqXdMH+Kuuab6MQ3C5iqENEOCZwo8PDrdQkfs98gfiWuy/SX1Hc gRBWjTx+uJDA8gK3V/5sCTgEjwUmkqe6 -----END CERTIFICATE-----Generated at Sat May 4 21:19:29 2024 by rpki-client on console-ams.rpki-client.org