$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: uBnDfuusxCIBd7LmyLRtWe2BoY+HFMS5MKxseYfag30= Subject key identifier: D8:E0:6B:E7:0A:0D:58:18:5E:66:17:EC:00:3F:3D:BA:A3:2A:AD:3C Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0BDC Signing time: Tue 30 Apr 2024 19:20:52 +0000 Manifest this update: Tue 30 Apr 2024 19:20:52 +0000 Manifest next update: Tue 07 May 2024 19:20:52 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: hmDXNJqHiIWKRFrLdIm3htTYo5sq4nNuMl+c1PaZzjA=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: g99vYIlBB0cqZeMEiHdeFvS6arbrwduo3e2WdyIrbPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Apr 30 19:20:52 2024 GMT Not After : May 7 19:20:52 2024 GMT Subject: CN=66314494-e81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:94:38:ec:b5:4c:e4:75:17:0f:10:4b:59:a1: 14:90:75:2c:05:3a:b8:78:68:d8:32:eb:8b:ee:9d: ba:b7:48:6b:a4:f4:b0:c1:7b:9f:fa:4d:67:f8:66: f8:58:0e:35:ad:a1:0a:33:b4:bd:95:e3:a0:9b:15: be:e4:74:4a:24:a9:92:64:4d:2b:3b:20:54:c9:69: 52:ec:6b:a0:f4:b9:16:9e:36:67:39:fe:6d:2e:51: ea:5a:81:1e:92:4b:b9:80:cb:f8:36:1b:d7:c4:c5: 23:7e:c6:bf:40:7a:9c:2f:dc:f9:d4:06:34:f0:5f: 96:56:7f:f4:be:ed:19:b2:27:2f:41:91:25:05:75: 18:82:df:41:0a:51:63:15:f4:a2:e7:73:9a:39:72: 25:39:e6:3d:24:3b:ed:d8:5e:7e:bd:a5:83:f2:f2: b7:55:37:e2:57:31:77:5c:c1:f9:2b:5a:3e:df:c8: 3c:48:16:e6:d2:f5:0b:61:60:50:af:86:aa:96:f2: 08:09:ae:ff:23:2a:10:b5:21:f5:95:94:00:63:3a: 0e:ed:5a:07:4b:1e:29:48:63:77:fb:e3:1d:2f:5a: 88:1b:3c:5a:2d:cf:55:57:91:55:33:ec:57:c7:ff: f5:d0:a8:51:55:c9:ea:02:f8:97:80:52:cb:d6:a0: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E0:6B:E7:0A:0D:58:18:5E:66:17:EC:00:3F:3D:BA:A3:2A:AD:3C X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7b:2f:33:ae:53:92:d0:d9:97:fe:99:b2:2a:98:13:c5:83: 2f:e2:6d:2d:df:da:8b:f2:1e:dd:9a:22:8a:6e:ca:13:09:36: ab:df:ae:b8:ec:e5:98:50:56:12:39:bf:86:c4:ed:e0:b4:4f: f9:23:5f:21:69:0a:f8:94:37:9c:df:0a:fd:bf:74:e6:b6:51: 86:17:a2:3f:a2:33:a7:fd:82:62:8e:a4:de:ca:eb:29:73:a3: 2a:13:90:fb:e9:f4:ba:a7:8e:ea:35:47:97:ad:5b:83:40:de: 16:e2:ce:7e:9b:c5:1f:9f:45:73:89:57:6a:e2:f9:2a:d0:cf: 51:10:4e:4b:ba:72:2b:e5:4e:ef:be:7d:f4:8b:71:8d:20:b2: ce:e5:31:8f:6d:f0:4f:c5:94:67:1b:2f:63:8f:b5:f2:fe:7a: 7f:7e:4f:0e:86:d8:71:b7:03:70:5d:fe:2e:59:5c:a4:ee:82: 73:37:74:53:c7:ed:ec:91:85:3e:a1:b6:cd:62:39:f9:24:65: 58:5f:c8:f4:3b:be:1f:5e:69:6d:2c:0e:fb:95:d9:35:ae:55: 5c:65:a1:26:45:fb:80:d6:e8:39:b3:c5:1a:44:1b:97:06:a4: e9:99:27:d7:d0:3d:f7:dc:76:cc:70:b7:e5:ee:a1:4d:e0:61: a6:9d:41:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjQwNDMwMTkyMDUyWhcNMjQwNTA3MTkyMDUyWjAYMRYwFAYD VQQDEw02NjMxNDQ5NC1lODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JQ47LVM5HUXDxBLWaEUkHUsBTq4eGjYMuuL7p26t0hrpPSwwXuf+k1n+Gb4 WA41raEKM7S9leOgmxW+5HRKJKmSZE0rOyBUyWlS7Gug9LkWnjZnOf5tLlHqWoEe kku5gMv4NhvXxMUjfsa/QHqcL9z51AY08F+WVn/0vu0ZsicvQZElBXUYgt9BClFj FfSi53OaOXIlOeY9JDvt2F5+vaWD8vK3VTfiVzF3XMH5K1o+38g8SBbm0vULYWBQ r4aqlvIICa7/IyoQtSH1lZQAYzoO7VoHSx4pSGN3++MdL1qIGzxaLc9VV5FVM+xX x//10KhRVcnqAviXgFLL1qAtfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjga+cK DVgYXmYX7AA/PbqjKq08MB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ey8zrlOS0NmX/pmyKpgTxYMv4m0t39qL8h7dmiKKbsoTCTar3664 7OWYUFYSOb+GxO3gtE/5I18haQr4lDec3wr9v3TmtlGGF6I/ojOn/YJijqTeyusp c6MqE5D76fS6p47qNUeXrVuDQN4W4s5+m8Ufn0VziVdq4vkq0M9REE5LunIr5U7v vn30i3GNILLO5TGPbfBPxZRnGy9jj7Xy/np/fk8OhthxtwNwXf4uWVyk7oJzN3RT x+3skYU+obbNYjn5JGVYX8j0O74fXmltLA77ldk1rlVcZaEmRfuA1ug5s8UaRBuX BqTpmSfX0D333HbMcLfl7qFN4GGmnUFC -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:57 2024 by rpki-client on console-ams.rpki-client.org