$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: asSqUpjNkIqcN/+jxioVjCIHkZ2DTGIyjRYIHw8eXVY= Subject key identifier: 2A:C6:0D:A8:5A:7D:33:03:5C:CF:4D:68:95:5B:78:CD:8B:DF:9F:C0 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0B03 Signing time: Mon 06 May 2024 20:08:48 +0000 Manifest this update: Mon 06 May 2024 20:08:47 +0000 Manifest next update: Mon 13 May 2024 20:08:47 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: ARuExavVwUx0OJ2mRGCljuTRlEpekh30kMysSO5wfjY=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: TQmQSnccYn9RdDaPIWHz3I+xXgULEgcde15Yil802tY=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: cAygPF0dsBX1wYUCyZIW25KS6kuT3P0mPGPIqFTVNDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: May 6 20:08:47 2024 GMT Not After : May 13 20:08:47 2024 GMT Subject: CN=663938d0-4aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:3e:b3:19:d1:91:7f:7b:50:ae:45:75:03: 65:57:53:ad:1c:e8:30:9e:97:2e:da:c2:e3:2f:88: 6a:e2:ba:5c:77:fd:ca:8d:5b:6a:8a:2c:28:f9:fd: 13:16:e5:b3:9f:d9:f2:6d:4a:f5:b2:1f:51:14:cf: 37:f5:94:fd:ff:c2:37:c4:66:84:4a:d0:36:36:28: 88:0f:e7:cf:69:f6:92:10:bb:c3:4a:c5:6f:0c:fb: e8:a9:15:2d:60:a9:38:b3:87:f7:0c:2e:a0:f5:77: a9:d1:d6:c8:b6:3e:e2:58:c2:fd:25:00:17:d9:f8: 02:b5:03:1a:33:5a:8e:bb:2b:64:9d:66:26:18:7a: d1:0f:8d:a9:d0:fe:0c:c9:ce:b8:d8:01:da:cb:7f: 98:33:91:ef:f1:56:76:69:da:17:34:1d:31:e3:40: f1:a3:28:47:cb:ea:2d:5d:8f:14:42:37:a0:d6:15: f0:e4:7f:e5:93:70:3b:1f:f7:1c:87:ab:cb:08:d6: 4a:0c:65:c1:06:d9:ab:a5:1e:78:93:44:ad:30:0a: 64:28:29:8b:d4:ba:52:83:69:a3:67:03:66:cf:e7: 1b:19:52:f6:30:8e:68:bf:89:d1:69:dc:e6:50:9d: 48:9a:8b:4e:3d:bc:c9:09:b2:91:19:9f:b6:9f:ab: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:0D:A8:5A:7D:33:03:5C:CF:4D:68:95:5B:78:CD:8B:DF:9F:C0 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:00:96:d9:9a:21:fc:5d:b9:22:bc:32:ba:72:31:9d:54:61: e2:d0:42:7f:b7:58:30:1b:5b:90:b1:50:c6:da:f2:66:9b:86: 9d:fb:d0:d2:fc:2d:ee:43:af:74:1e:62:ce:43:e1:92:51:66: c2:69:34:ef:be:e6:71:68:a4:46:4d:1f:6a:b9:36:f5:8f:c8: 57:08:ca:72:05:4c:24:4a:ed:97:2d:a5:67:7a:cb:a4:fb:64: 3c:fa:5d:04:0e:35:d7:23:21:a8:f6:04:b9:35:d1:44:63:e6: df:38:1f:e1:af:54:21:69:f2:6f:c2:78:94:dc:18:e0:23:c5: 4e:8b:d8:0f:60:b6:b3:c6:5e:dd:2e:34:da:b3:a3:9f:c8:00: 44:73:c1:ba:79:0f:70:d4:27:0c:a1:6d:5b:88:33:72:08:3d: 57:7c:3f:f2:6c:f1:30:8d:aa:ca:e3:bc:5b:4c:3e:80:85:d5: 1b:ea:ff:3e:0c:bf:74:ff:88:d9:a4:2c:1f:8f:12:26:50:8a: bc:e4:bf:21:41:1a:b5:5c:86:11:07:d4:2d:d1:aa:99:b8:08: 3d:0a:c4:8e:31:58:4e:a9:e0:df:e6:0e:66:e2:f0:5d:02:95: f6:52:06:52:b2:34:7d:8d:e1:2f:b7:e7:13:35:db:e1:ec:de: ed:16:9e:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjQwNTA2MjAwODQ3WhcNMjQwNTEzMjAwODQ3WjAYMRYwFAYD VQQDEw02NjM5MzhkMC00YWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIk+sxnRkX97UK5FdQNlV1OtHOgwnpcu2sLjL4hq4rpcd/3KjVtqiiwo+f0T FuWzn9nybUr1sh9RFM839ZT9/8I3xGaEStA2NiiID+fPafaSELvDSsVvDPvoqRUt YKk4s4f3DC6g9Xep0dbItj7iWML9JQAX2fgCtQMaM1qOuytknWYmGHrRD42p0P4M yc642AHay3+YM5Hv8VZ2adoXNB0x40DxoyhHy+otXY8UQjeg1hXw5H/lk3A7H/cc h6vLCNZKDGXBBtmrpR54k0StMApkKCmL1LpSg2mjZwNmz+cbGVL2MI5ov4nRadzm UJ1ImotOPbzJCbKRGZ+2n6veYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrGDaha fTMDXM9NaJVbeM2L35/AMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoAJbZmiH8XbkivDK6cjGdVGHi0EJ/t1gwG1uQsVDG2vJmm4ad+9DS /C3uQ690HmLOQ+GSUWbCaTTvvuZxaKRGTR9quTb1j8hXCMpyBUwkSu2XLaVnesuk +2Q8+l0EDjXXIyGo9gS5NdFEY+bfOB/hr1QhafJvwniU3BjgI8VOi9gPYLazxl7d LjTas6OfyABEc8G6eQ9w1CcMoW1biDNyCD1XfD/ybPEwjarK47xbTD6AhdUb6v8+ DL90/4jZpCwfjxImUIq85L8hQRq1XIYRB9Qt0aqZuAg9CsSOMVhOqeDf5g5m4vBd ApX2UgZSsjR9jeEvt+cTNdvh7N7tFp7X -----END CERTIFICATE-----Generated at Mon May 6 22:40:57 2024 by rpki-client on console-ams.rpki-client.org