$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: gAo+1uMtxp3IjLoqMqZpSJyvXtkWjVWDr+sAJzjnGvk= Subject key identifier: 21:4B:9A:9C:53:46:DB:A9:46:BC:B7:FC:62:53:E1:4D:06:3D:F5:2A Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 06C3 Signing time: Sat 04 May 2024 23:14:08 +0000 Manifest this update: Sat 04 May 2024 23:14:08 +0000 Manifest next update: Sat 11 May 2024 23:14:08 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: EDFpLEexg8KNMR66ycJu0dUzXbXEoSAzdhg343P8YIY=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: YLnBBdEHbwfh9d/VxrGK1vhLnLXi/RrFFevgHHajgZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: May 4 23:14:08 2024 GMT Not After : May 11 23:14:08 2024 GMT Subject: CN=6636c140-ea6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:bd:c4:28:c5:23:2c:bf:a7:ba:87:8b:9b: 3d:bd:a7:c9:32:3a:58:8f:d4:98:b4:ae:f7:9c:92: 01:23:6a:94:ad:08:04:41:3d:bf:4b:45:cb:97:df: ba:61:97:34:cb:8a:03:f8:5e:bd:6e:01:de:3a:c9: 75:49:7c:7d:1a:83:8c:09:64:bb:98:2d:1a:8d:dd: f8:00:3b:81:d3:f9:2f:26:61:d6:76:06:11:8f:bb: 4c:10:27:b0:b0:c6:90:8c:8a:b5:aa:2f:10:ca:ca: 0d:4e:b8:ce:78:83:b0:b2:33:2a:f0:6f:33:c2:90: 49:3b:7e:78:c7:34:25:c8:2d:81:87:e1:be:da:4f: 7b:68:64:f6:a8:9d:58:c8:d1:93:a0:52:46:df:33: de:86:e0:f2:b8:78:69:b2:d3:ac:4b:84:ad:38:5c: a9:1f:04:37:20:b9:a8:64:4d:15:11:dc:26:c7:6b: cf:61:f4:7c:e2:fa:e9:01:32:0c:41:66:ba:58:63: 08:48:92:86:9f:6f:cb:e0:d8:d2:f9:5b:7e:3a:c8: 1b:c3:c1:d1:82:c5:18:a9:53:54:b0:54:a9:1f:64: be:b3:32:3c:ee:d6:60:f4:52:f4:49:f5:0c:5d:c9: 99:e2:78:47:8c:41:e4:1a:30:5d:bc:e5:38:90:67: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:9A:9C:53:46:DB:A9:46:BC:B7:FC:62:53:E1:4D:06:3D:F5:2A X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:16:05:4c:3c:7e:9f:f9:39:4a:6a:71:42:3d:b3:af:b7:88: 40:cf:31:b9:81:dd:85:08:5d:56:9d:c8:d9:8e:e5:60:af:d5: 46:ae:10:4c:7a:de:a1:2a:1a:4a:c3:a7:04:b4:39:10:b9:6f: e0:c1:06:f1:e6:d6:0f:e6:88:fb:f5:18:99:ab:2e:80:8d:d1: 61:71:2c:21:1d:75:78:ed:9e:20:8a:86:ce:26:9d:ba:4a:dd: bb:1f:5a:89:fc:db:b0:d0:e9:78:b4:20:25:1a:be:bd:40:3c: 62:22:73:50:ef:59:8d:34:ea:d5:a8:ec:25:8e:82:26:5d:39: be:04:c8:36:69:a3:ec:cb:a7:00:66:35:52:76:8c:01:5d:3b: 3d:9f:d6:a1:64:92:c2:da:46:e6:fd:12:bc:6d:1f:02:5c:69: 14:0b:b9:d6:ec:72:cc:9f:7b:9d:86:20:df:72:d1:7d:04:f3: 43:e4:54:3d:bb:bd:5d:42:81:15:d4:64:36:be:bb:28:d2:9e: 79:a4:e8:3b:c7:54:da:50:46:d7:a5:06:08:f0:1e:31:cf:f3: 2a:62:a9:77:7a:ab:60:6d:44:a8:08:de:65:38:cd:00:a8:c1: 17:27:6b:6a:b4:44:b5:6d:fd:53:53:e7:4b:54:22:c7:a2:75: f1:70:4c:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjQwNTA0MjMxNDA4WhcNMjQwNTExMjMxNDA4WjAYMRYwFAYD VQQDEw02NjM2YzE0MC1lYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jC9xCjFIyy/p7qHi5s9vafJMjpYj9SYtK73nJIBI2qUrQgEQT2/S0XLl9+6 YZc0y4oD+F69bgHeOsl1SXx9GoOMCWS7mC0ajd34ADuB0/kvJmHWdgYRj7tMECew sMaQjIq1qi8QysoNTrjOeIOwsjMq8G8zwpBJO354xzQlyC2Bh+G+2k97aGT2qJ1Y yNGToFJG3zPehuDyuHhpstOsS4StOFypHwQ3ILmoZE0VEdwmx2vPYfR84vrpATIM QWa6WGMISJKGn2/L4NjS+Vt+Osgbw8HRgsUYqVNUsFSpH2S+szI87tZg9FL0SfUM XcmZ4nhHjEHkGjBdvOU4kGfJPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFLmpxT RtupRry3/GJT4U0GPfUqMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXFgVMPH6f+TlKanFCPbOvt4hAzzG5gd2FCF1WncjZjuVgr9VGrhBM et6hKhpKw6cEtDkQuW/gwQbx5tYP5oj79RiZqy6AjdFhcSwhHXV47Z4giobOJp26 St27H1qJ/Nuw0Ol4tCAlGr69QDxiInNQ71mNNOrVqOwljoImXTm+BMg2aaPsy6cA ZjVSdowBXTs9n9ahZJLC2kbm/RK8bR8CXGkUC7nW7HLMn3udhiDfctF9BPND5FQ9 u71dQoEV1GQ2vrso0p55pOg7x1TaUEbXpQYI8B4xz/MqYql3eqtgbUSoCN5lOM0A qMEXJ2tqtES1bf1TU+dLVCLHonXxcEyJ -----END CERTIFICATE-----Generated at Sun May 5 00:14:43 2024 by rpki-client on console-ams.rpki-client.org