$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json) Hash identifier: 8USBdriL98lfGwStobIQIQMc+SGn7FEORgOm22NSE/I= Subject key identifier: AE:36:06:0A:47:F9:07:4D:0D:E4:5C:8B:10:83:91:69:8C:6D:BC:AD Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft Manifest number: 0456 Signing time: Fri 03 May 2024 01:58:23 +0000 Manifest this update: Fri 03 May 2024 01:58:23 +0000 Manifest next update: Fri 10 May 2024 01:58:23 +0000 Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: 3tE+HGFkWcAx1M/VQr/KScXH8GuXjAReHt9FPYSTVSY=) 2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: waxDgjsSvTIC1yAg99PxNdSD6AsFvhhlz5Q0XX8Iie8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Validity Not Before: May 3 01:58:23 2024 GMT Not After : May 10 01:58:23 2024 GMT Subject: CN=663444bf-de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:50:dc:d8:c9:57:b4:12:88:a9:72:70:b5: 1c:53:76:83:a8:f8:ff:be:b8:bf:7e:8b:c4:60:31: 18:b3:1a:00:a8:93:64:33:02:fe:69:37:08:ae:0d: c9:27:b3:3c:68:61:52:cc:8f:88:b2:dd:f8:71:56: 5e:ad:0e:3e:92:90:d3:e4:19:2f:ed:eb:0c:14:f0: 03:43:5f:fc:ab:70:e5:ea:bf:44:e6:5a:a8:08:ae: 0a:0d:02:a2:d2:16:94:51:70:f9:dc:8c:4f:36:d7: 8c:d2:19:d5:13:83:3f:95:5f:c9:df:1a:34:d6:c8: 12:bc:39:5b:11:f5:62:2c:cb:1c:c8:b0:16:41:e2: c6:5e:e4:0a:b8:15:82:48:f8:20:9d:38:86:40:4e: d8:c3:86:30:43:7e:35:ab:52:ef:85:6d:7e:4e:d6: f8:4d:e7:9a:ee:14:16:59:c4:c5:b4:2c:77:ea:4e: 59:df:06:b6:e4:78:60:c1:fe:60:a7:c2:3b:50:f8: 99:9d:6e:cd:5d:78:e5:19:bf:ca:2c:77:10:31:57: 6a:1d:63:8e:fb:3c:eb:97:76:d2:f4:e9:88:cd:2d: 4d:c1:dc:6c:49:8b:b1:92:f5:fe:8f:91:f4:cc:46: de:33:5a:33:cb:28:78:b1:a4:07:da:61:eb:ae:10: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:06:0A:47:F9:07:4D:0D:E4:5C:8B:10:83:91:69:8C:6D:BC:AD X509v3 Authority Key Identifier: keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:bf:4e:b3:0c:c6:16:19:e0:c3:3f:d1:87:6c:a4:46:cd:99: 9b:13:4b:97:22:da:f3:4a:6c:58:74:df:28:2b:19:83:0d:c9: 2c:3c:4e:cc:38:aa:c2:7a:8f:7b:66:85:e2:8b:f9:62:55:07: 65:f3:25:01:da:ef:d6:77:6f:1f:ca:a5:5d:0c:08:0d:b7:e1: 63:ae:a9:60:0a:93:ab:48:01:18:41:27:78:77:00:d9:29:f4: a7:c4:71:43:83:cc:3e:06:d3:4d:ab:0b:90:ab:c8:7e:47:e0: 99:08:99:a7:1c:bc:25:94:71:c5:79:11:43:bf:7c:8f:19:63: 8b:e4:fa:66:42:99:7d:f1:79:72:30:55:3a:1f:70:b3:93:a7: d9:e4:1f:a9:4a:07:c3:16:62:03:18:5e:94:70:db:9e:d5:c2: 8c:6a:dc:bb:cd:94:8c:82:0e:d0:22:80:25:56:45:35:32:9d: f5:47:60:c1:5e:5f:7a:3c:f2:8d:36:85:49:c3:e8:85:6e:2d: 71:68:29:c9:29:97:93:5a:56:3b:d7:ae:48:61:69:d8:a6:79: ed:42:05:a1:5b:4d:03:40:99:6b:60:90:6b:1f:3a:c8:4b:83: af:9e:0c:f8:30:92:82:8a:d1:b1:61:83:3a:fa:cd:df:03:e7: 74:9b:91:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMkExMTAvBgNVBAUTKDk5MUIzNjJDNjZCOUExODAyOUE4REQ0MjgxNTVEOTdD NzZFMDEyMDkwHhcNMjQwNTAzMDE1ODIzWhcNMjQwNTEwMDE1ODIzWjAYMRYwFAYD VQQDEw02NjM0NDRiZi1kZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrVQ3NjJV7QSiKlycLUcU3aDqPj/vri/fovEYDEYsxoAqJNkMwL+aTcIrg3J J7M8aGFSzI+Ist34cVZerQ4+kpDT5Bkv7esMFPADQ1/8q3Dl6r9E5lqoCK4KDQKi 0haUUXD53IxPNteM0hnVE4M/lV/J3xo01sgSvDlbEfViLMscyLAWQeLGXuQKuBWC SPggnTiGQE7Yw4YwQ341q1LvhW1+Ttb4Teea7hQWWcTFtCx36k5Z3wa25Hhgwf5g p8I7UPiZnW7NXXjlGb/KLHcQMVdqHWOO+zzrl3bS9OmIzS1NwdxsSYuxkvX+j5H0 zEbeM1ozyyh4saQH2mHrrhAMEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK42BgpH +QdNDeRcixCDkWmMbbytMB8GA1UdIwQYMBaAFJkbNixmuaGAKajdQoFV2Xx24BIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQyQS8yRDJGODI2NjAx QjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9ZQXBxTjFDZ1ZYWmZIYmdF Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21SczJMR2E1b1lBcHFOMUNnVlhaZkhiZ0Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQyQS8yRDJGODI2NjAxQjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9Z QXBxTjFDZ1ZYWmZIYmdFZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgv06zDMYWGeDDP9GHbKRGzZmbE0uXItrzSmxYdN8oKxmDDcksPE7M OKrCeo97ZoXii/liVQdl8yUB2u/Wd28fyqVdDAgNt+FjrqlgCpOrSAEYQSd4dwDZ KfSnxHFDg8w+BtNNqwuQq8h+R+CZCJmnHLwllHHFeRFDv3yPGWOL5PpmQpl98Xly MFU6H3Czk6fZ5B+pSgfDFmIDGF6UcNue1cKMaty7zZSMgg7QIoAlVkU1Mp31R2DB Xl96PPKNNoVJw+iFbi1xaCnJKZeTWlY7165IYWnYpnntQgWhW00DQJlrYJBrHzrI S4Ovngz4MJKCitGxYYM6+s3fA+d0m5Gc -----END CERTIFICATE-----Generated at Fri May 3 03:10:50 2024 by rpki-client on console-ams.rpki-client.org