$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json) Hash identifier: 9GS3+90+rAMoNud+XP6XdKNDtI/doqkyp5sOlAcCEQk= Subject key identifier: 6C:9C:DD:F5:91:63:5D:55:8A:F6:2E:50:AB:0F:A8:C0:B4:E0:D9:06 Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 1290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft Manifest number: 127C Signing time: Thu 02 May 2024 17:43:01 +0000 Manifest this update: Thu 02 May 2024 17:43:00 +0000 Manifest next update: Thu 09 May 2024 17:43:00 +0000 Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: o9KyWqJZojVXfVHWD09xcU1K6BAPbxqeT0QTTRVjXaQ=) 2: 3DCB68C8699A11ED98B1CA19C4F9AE02.roa (hash: d0lPQuu8WiKmVqIHmsQhH+qKgsfP0HH5kvhf0yP/Uio=) 3: 3C9FF554699A11ED98B1CA19C4F9AE02.roa (hash: BAGpvHqv4mqk/4UMdWdyuzergLrde3LFf+uyo/FYd+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4752 (0x1290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: May 2 17:43:00 2024 GMT Not After : May 9 17:43:00 2024 GMT Subject: CN=6633d0a4-d698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:69:57:83:ea:c7:c0:46:30:4c:b9:3d:4c:f8: cc:c5:5d:3a:25:6d:4b:67:87:b3:27:1c:12:3b:c7: 5a:bb:0a:7f:ca:f0:de:cb:dd:e4:e5:fc:f2:58:f6: 3a:80:05:85:1d:52:cf:7f:06:b4:05:04:ca:5d:1c: b2:35:c0:9b:76:1f:26:76:49:05:ac:5f:7f:0b:77: a7:e0:e0:83:40:12:0b:f4:22:8a:18:b9:08:2f:53: d6:ce:39:38:fd:26:b3:49:15:72:e7:87:24:4b:bc: e4:6b:c0:16:31:6f:9a:c0:f6:1f:8a:52:98:a0:ca: b7:5c:7b:f6:7e:1f:20:22:69:2c:a2:b7:09:e6:2e: 01:f7:d3:16:ed:ff:a1:6f:8c:fd:da:e9:1e:e6:d7: 5a:5c:01:d0:f4:98:f8:53:39:96:c0:cf:e7:78:35: a9:7c:77:86:4d:68:88:2d:b8:a1:f9:d2:74:41:9c: 2d:95:a6:72:5f:91:5f:3f:00:ce:63:81:ba:55:9a: 66:5c:a4:dd:73:b4:8b:05:6f:72:c4:ba:d9:ed:e8: 47:f6:d2:91:fb:70:ae:79:05:a2:d3:6c:b2:f6:c5: 77:99:4c:bc:85:70:67:f1:73:f5:d9:6a:99:35:56: af:c9:1f:0a:fa:ce:2c:aa:f3:70:39:a1:29:d3:28: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9C:DD:F5:91:63:5D:55:8A:F6:2E:50:AB:0F:A8:C0:B4:E0:D9:06 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:52:9c:74:8f:b8:94:ea:02:92:2e:76:12:19:dd:fe:f0:bf: 00:1b:39:5e:a5:02:77:25:10:c2:bf:49:fd:18:4f:a0:4e:76: be:d4:db:c8:58:89:25:91:56:f8:1d:fb:39:35:7e:8b:86:59: a1:68:51:3e:b5:11:ff:f0:6c:bf:a7:55:bd:a1:cc:19:02:d5: 16:1d:db:d8:21:14:9c:d8:9d:55:53:9b:49:61:45:a3:d7:d1: 0d:44:eb:29:35:be:65:92:ad:95:47:47:40:dc:ad:b5:5a:9b: 7c:4f:0c:ee:25:9e:58:2c:ae:f5:b3:f5:60:c8:03:d1:1a:3c: ec:b0:55:11:b5:bf:04:aa:13:21:18:fe:c1:e1:ae:ca:7c:23: d8:c3:d1:91:af:bd:17:50:79:7f:53:d4:bf:e1:dd:f0:29:50: 01:d2:88:d3:02:96:4e:35:b3:38:2b:b8:ab:3d:e8:33:4b:29: 96:dc:40:6a:39:94:ab:1f:fc:55:a0:8d:11:24:1d:ab:61:ca: b7:a3:39:b5:d2:16:df:42:08:e5:55:e8:87:73:a3:9f:4a:88: 6f:55:0a:15:fc:99:83:35:34:64:5b:3c:85:2c:f3:89:d4:db: 85:78:62:47:dd:16:81:69:ea:3e:65:d7:cf:bb:be:bd:ce:26: b4:10:90:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjQwNTAyMTc0MzAwWhcNMjQwNTA5MTc0MzAwWjAYMRYwFAYD VQQDEw02NjMzZDBhNC1kNjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GlXg+rHwEYwTLk9TPjMxV06JW1LZ4ezJxwSO8dauwp/yvDey93k5fzyWPY6 gAWFHVLPfwa0BQTKXRyyNcCbdh8mdkkFrF9/C3en4OCDQBIL9CKKGLkIL1PWzjk4 /SazSRVy54ckS7zka8AWMW+awPYfilKYoMq3XHv2fh8gImksorcJ5i4B99MW7f+h b4z92uke5tdaXAHQ9Jj4UzmWwM/neDWpfHeGTWiILbih+dJ0QZwtlaZyX5FfPwDO Y4G6VZpmXKTdc7SLBW9yxLrZ7ehH9tKR+3CueQWi02yy9sV3mUy8hXBn8XP12WqZ NVavyR8K+s4sqvNwOaEp0yhg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyc3fWR Y11VivYuUKsPqMC04NkGMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDlBRC82NTZERDI2QUE3NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhm TDBraGEzNjdBTlh3T21CY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiUpx0j7iU6gKSLnYSGd3+8L8AGzlepQJ3JRDCv0n9GE+gTna+1NvI WIklkVb4Hfs5NX6LhlmhaFE+tRH/8Gy/p1W9ocwZAtUWHdvYIRSc2J1VU5tJYUWj 19ENROspNb5lkq2VR0dA3K21Wpt8TwzuJZ5YLK71s/VgyAPRGjzssFURtb8EqhMh GP7B4a7KfCPYw9GRr70XUHl/U9S/4d3wKVAB0ojTApZONbM4K7irPegzSymW3EBq OZSrH/xVoI0RJB2rYcq3ozm10hbfQgjlVeiHc6OfSohvVQoV/JmDNTRkWzyFLPOJ 1NuFeGJH3RaBaeo+ZdfPu769zia0EJBi -----END CERTIFICATE-----Generated at Thu May 2 20:04:40 2024 by rpki-client on console-ams.rpki-client.org