$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: CIQh2N616wwZdCy2NOruUN8BzuiYYR7SdXgdaKMsQms= Subject key identifier: 38:24:FB:24:A2:89:09:2B:AE:27:22:77:3A:2F:5E:17:C2:08:27:67 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 2302 Signing time: Fri 26 Apr 2024 16:10:17 +0000 Manifest this update: Fri 26 Apr 2024 16:10:16 +0000 Manifest next update: Fri 03 May 2024 16:10:16 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: ZMkTv0ZJ4aRybBiYUdqO1vc5Nh7LfKsEK0lN4L6cfQQ=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: mDuFCJlPDmckocR6ma03jYQ+PIoKh5owGtsBoIrTZaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8981 (0x2315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Apr 26 16:10:16 2024 GMT Not After : May 3 16:10:16 2024 GMT Subject: CN=662bd1e9-f1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:e8:99:43:a6:2c:3f:91:03:8e:41:61:3c: b4:c3:fb:0f:72:63:c0:2a:d5:a7:e2:2f:8c:85:a1: 30:f9:7c:d9:89:d3:bc:37:51:b2:a8:07:3e:56:9e: 54:71:84:fc:fb:01:14:35:fc:3b:b6:92:fe:ca:3e: 79:9b:cd:f0:40:16:9f:a7:f8:f4:80:c3:e0:f3:d4: 6f:b4:4a:47:9b:e8:d7:8b:c1:b2:b6:9a:30:f4:6e: 83:4d:d8:d3:93:de:7d:05:20:16:86:2e:d3:73:50: 25:78:2b:77:e6:30:be:19:6a:9c:00:d1:bf:8e:54: e1:5f:e5:87:8f:60:7d:40:12:d8:5d:41:f4:93:36: 4c:2d:79:e5:dc:f0:4b:81:b2:c5:99:6c:93:a6:d8: cc:2a:2e:bc:a4:98:0c:18:aa:f9:e1:1b:68:c7:f6: 46:1c:c5:66:a2:69:57:5c:46:49:70:5c:79:39:3f: d3:88:52:60:c1:54:81:a5:2e:25:14:db:44:ff:11: 56:9f:f0:37:64:3a:f5:88:8f:d3:c4:a8:43:85:e0: a6:79:39:32:c2:c6:12:a4:c5:20:60:06:df:19:dc: 57:d2:e8:ed:f3:e2:66:3d:b7:68:e2:77:be:62:c4: 5f:cc:f9:ba:e2:1a:77:3a:6e:9c:0f:49:c4:a1:47: 2c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:FB:24:A2:89:09:2B:AE:27:22:77:3A:2F:5E:17:C2:08:27:67 X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a0:02:0b:89:71:cf:12:5f:ef:ad:29:c1:07:59:99:1f:2b: a0:89:8a:ab:03:bd:89:d5:a2:cf:a1:2f:61:9f:6f:19:01:14: 5d:ff:1d:bd:7e:fc:7d:1b:54:80:49:66:b5:4f:8d:5c:ac:ba: ac:f0:e0:39:e7:69:14:41:66:f4:c0:5e:8a:3b:b0:d4:43:72: 1b:97:1d:da:77:21:47:93:b4:8b:72:fa:32:b2:80:9f:61:9f: d0:ef:d5:cd:fa:b4:df:75:98:52:13:73:20:c3:53:41:9e:11: 3a:c1:51:06:02:a0:cf:03:b6:7a:e4:68:04:4f:40:15:ea:bd: 9b:7e:48:d1:15:5e:2b:cf:bb:37:19:0d:f1:5a:a7:62:24:4c: a3:43:05:ca:56:9f:77:7a:33:17:37:23:82:ac:af:7c:0d:ce: 30:38:05:9d:48:10:4b:47:52:f1:bd:05:e2:d7:63:08:cb:4b: cd:81:83:ba:66:71:ed:c4:14:b9:06:85:78:af:5f:10:28:7f: 45:55:3a:46:43:7c:b4:ab:81:d5:fc:0d:3b:31:02:05:ff:cf: c8:43:0d:84:f1:f6:77:31:d2:a9:06:49:45:4c:27:dd:71:70: a6:82:30:9f:9a:29:4d:58:c8:2f:3c:ed:1a:8a:7a:0a:3d:16: 75:97:df:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjQwNDI2MTYxMDE2WhcNMjQwNTAzMTYxMDE2WjAYMRYwFAYD VQQDEw02NjJiZDFlOS1mMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEHomUOmLD+RA45BYTy0w/sPcmPAKtWn4i+MhaEw+XzZidO8N1GyqAc+Vp5U cYT8+wEUNfw7tpL+yj55m83wQBafp/j0gMPg89RvtEpHm+jXi8Gytpow9G6DTdjT k959BSAWhi7Tc1AleCt35jC+GWqcANG/jlThX+WHj2B9QBLYXUH0kzZMLXnl3PBL gbLFmWyTptjMKi68pJgMGKr54Rtox/ZGHMVmomlXXEZJcFx5OT/TiFJgwVSBpS4l FNtE/xFWn/A3ZDr1iI/TxKhDheCmeTkywsYSpMUgYAbfGdxX0ujt8+JmPbdo4ne+ YsRfzPm64hp3Om6cD0nEoUcsGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgk+ySi iQkrricidzovXhfCCCdnMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCroAILiXHPEl/vrSnBB1mZHyugiYqrA72J1aLPoS9hn28ZARRd/x29 fvx9G1SASWa1T41crLqs8OA552kUQWb0wF6KO7DUQ3Iblx3adyFHk7SLcvoysoCf YZ/Q79XN+rTfdZhSE3Mgw1NBnhE6wVEGAqDPA7Z65GgET0AV6r2bfkjRFV4rz7s3 GQ3xWqdiJEyjQwXKVp93ejMXNyOCrK98Dc4wOAWdSBBLR1LxvQXi12MIy0vNgYO6 ZnHtxBS5BoV4r18QKH9FVTpGQ3y0q4HV/A07MQIF/8/IQw2E8fZ3MdKpBklFTCfd cXCmgjCfmilNWMgvPO0ainoKPRZ1l98+ -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:13 2024 by rpki-client on console-ams.rpki-client.org