$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json) Hash identifier: AGWI2LyR8WnE0hURgTgFxjGbFA+K4vZv1RtRBscK+g4= Subject key identifier: 45:49:A3:9C:38:61:CE:73:8D:D8:92:4B:D5:21:6B:2F:48:C6:DD:2B Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft Manifest number: 0460 Signing time: Sun 05 May 2024 02:01:49 +0000 Manifest this update: Sun 05 May 2024 02:01:49 +0000 Manifest next update: Sun 12 May 2024 02:01:49 +0000 Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: TZCqKKee69+uLr8Fs6Cr7Yz1GX26EoXPWOeAetIBeMo=) 2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: YC1fkcNyqst3k86mmPxwO5+P7fBEQho6xbNQ1jSrZCw=) 3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: 5Qv/GfpqXwY3NhhpQzvpxYh0rG3P0tF9lungpJ0SxV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Validity Not Before: May 5 02:01:49 2024 GMT Not After : May 12 02:01:49 2024 GMT Subject: CN=6636e88d-62eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:e5:21:1b:2c:3a:79:0b:c4:8c:be:e4:76: 26:5c:ed:7f:cb:fb:43:62:38:5c:52:74:f8:3c:58: 51:97:2e:9c:0a:ae:8a:88:3c:a5:bc:1e:55:4a:15: 5c:f8:31:96:68:6a:ac:10:9b:01:52:b5:ec:f2:0f: dd:b0:cd:49:aa:e5:d4:b9:90:fe:d8:98:6e:14:b0: 05:f4:96:d3:44:3a:c0:ef:a2:ff:09:bc:e1:f4:21: 12:23:a9:50:52:e4:c6:7c:7e:9d:e8:fd:d7:e0:f6: ac:34:f1:13:79:15:aa:6d:40:6e:5a:18:29:64:ac: d1:09:ab:b4:9d:f4:7b:3e:2c:e5:45:ec:ff:70:fe: 3e:a3:d6:03:15:99:8e:ac:3e:5f:2e:46:85:47:85: 8c:7a:e8:ca:05:6d:ed:07:ff:18:1f:71:8e:ac:99: c9:a6:dd:8a:8a:d0:10:d3:c4:79:c5:7b:fe:f7:a8: 29:c1:62:91:1d:0f:50:c9:55:c4:89:1e:7c:73:b3: 27:ac:8a:86:97:4e:bf:77:b4:22:cc:b3:f9:4c:40: 77:2b:d4:1b:c7:a5:4c:0b:15:c0:f7:8a:60:ba:c1: 05:c8:0b:06:79:8c:a0:8e:06:9b:c0:11:89:14:6a: e5:83:8c:2c:f3:b8:ae:7c:c4:e5:08:9c:f7:6a:78: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:49:A3:9C:38:61:CE:73:8D:D8:92:4B:D5:21:6B:2F:48:C6:DD:2B X509v3 Authority Key Identifier: keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fd:36:1e:81:81:eb:2f:82:dc:c4:01:ab:d7:6c:22:47:1a: c2:4f:94:e7:0e:a6:b2:d5:7d:05:4d:1f:b1:8e:33:de:0a:9c: e2:45:9c:68:fe:ea:8c:12:87:0e:b9:98:58:09:cd:c6:08:94: 9e:2d:93:75:db:df:d1:87:64:13:0d:e0:5f:22:ba:25:74:e9: 30:a7:cf:3e:88:06:ce:e6:17:49:12:1a:a1:c0:2b:a9:19:e8: 40:24:85:fe:98:68:e0:c9:04:2f:80:7e:06:77:6b:14:17:1d: af:f7:f8:4f:99:22:02:6d:1f:30:64:2f:3c:de:b0:dc:aa:1d: fd:a4:46:8d:12:07:89:20:d4:34:18:b6:36:99:54:f4:ef:4c: 23:83:1a:ee:3d:18:37:00:8e:e6:77:eb:09:ce:0e:11:5e:90: 32:f7:31:13:49:36:05:37:6b:e7:68:8e:f0:31:f2:71:f3:e4: 6a:ad:d1:2d:5b:ab:fe:78:67:e4:b6:f3:bc:f2:5d:d2:82:f8: 5b:dd:91:f9:37:0a:a2:a7:11:92:a4:05:75:87:70:ac:40:1a: c2:d9:9a:48:7c:95:8c:5a:a6:03:fd:c2:2e:38:10:85:36:2e: 1f:a2:2b:12:f9:01:32:7f:17:ce:08:99:83:f6:0f:7c:a0:76: d6:7f:a1:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF ODg1RDdDNTAwHhcNMjQwNTA1MDIwMTQ5WhcNMjQwNTEyMDIwMTQ5WjAYMRYwFAYD VQQDEw02NjM2ZTg4ZC02MmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIHlIRssOnkLxIy+5HYmXO1/y/tDYjhcUnT4PFhRly6cCq6KiDylvB5VShVc +DGWaGqsEJsBUrXs8g/dsM1JquXUuZD+2JhuFLAF9JbTRDrA76L/Cbzh9CESI6lQ UuTGfH6d6P3X4PasNPETeRWqbUBuWhgpZKzRCau0nfR7PizlRez/cP4+o9YDFZmO rD5fLkaFR4WMeujKBW3tB/8YH3GOrJnJpt2KitAQ08R5xXv+96gpwWKRHQ9QyVXE iR58c7MnrIqGl06/d7QizLP5TEB3K9Qbx6VMCxXA94pgusEFyAsGeYygjgabwBGJ FGrlg4ws87iufMTlCJz3anhbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVJo5w4 Yc5zjdiSS9Uhay9Ixt0rMB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1 OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0VFMy85QTc3QUEyQTA1OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFL eWFrbVJNbHZlS2pvaGRmRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd/TYegYHrL4LcxAGr12wiRxrCT5TnDqay1X0FTR+xjjPeCpziRZxo /uqMEocOuZhYCc3GCJSeLZN129/Rh2QTDeBfIroldOkwp88+iAbO5hdJEhqhwCup GehAJIX+mGjgyQQvgH4Gd2sUFx2v9/hPmSICbR8wZC883rDcqh39pEaNEgeJINQ0 GLY2mVT070wjgxruPRg3AI7md+sJzg4RXpAy9zETSTYFN2vnaI7wMfJx8+RqrdEt W6v+eGfktvO88l3Sgvhb3ZH5NwqipxGSpAV1h3CsQBrC2ZpIfJWMWqYD/cIuOBCF Ni4foisS+QEyfxfOCJmD9g98oHbWf6ET -----END CERTIFICATE-----Generated at Sun May 5 03:09:55 2024 by rpki-client on console-ams.rpki-client.org