$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: zz5PkiSxzKqmRYFLQEg3583yL/EeIKGsTjaJ7kN4hlU= Subject key identifier: 3D:83:A9:07:69:56:A8:D8:1C:79:8B:C0:EE:3A:71:53:03:7D:A7:B3 Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0D61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0D5A Signing time: Tue 30 Apr 2024 18:54:37 +0000 Manifest this update: Tue 30 Apr 2024 18:54:37 +0000 Manifest next update: Tue 07 May 2024 18:54:37 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: U6XeZd8QCybkCBnSQbqNnbIFQml5EDcyM5gcCsMZKB0=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: Rv5KdZYUUJXCu7wDvbb7pgmO3r2+H7sPCodZxryWYjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: Apr 30 18:54:37 2024 GMT Not After : May 7 18:54:37 2024 GMT Subject: CN=66313e6d-e2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:a9:a2:3d:38:a2:d0:a8:ef:a1:5f:3d:cc: fc:a1:1d:d7:8e:ff:33:64:a1:64:97:5d:50:f4:e0: bb:7c:bf:80:0e:02:b1:71:81:2b:e4:fb:f9:ae:2b: f8:a4:72:48:0a:0f:34:d5:f7:8e:14:54:02:e7:57: 61:fc:c5:dd:fb:73:ce:3c:7f:84:0d:16:53:eb:03: af:7a:27:63:76:b1:3d:fa:4b:70:89:78:c3:44:8e: 62:df:43:b4:22:60:ac:b1:b4:40:48:98:7c:e2:e7: b0:7a:c5:b7:20:59:8b:f7:f7:16:ae:c0:fd:ec:41: 3f:ba:05:b5:09:31:a4:5d:da:ea:d1:5f:27:a3:42: 5c:88:03:a1:a5:94:3f:08:58:9c:d2:d5:be:66:24: 65:66:be:d7:b8:66:f3:42:4b:cf:1b:90:55:7d:8a: fe:25:10:75:a5:08:60:25:2a:3b:6e:e1:bd:fa:d9: de:74:82:fc:38:6d:00:b1:bf:b1:67:dc:7c:c9:6e: ab:44:f6:a0:b3:d7:97:71:50:03:ae:44:8a:b3:67: 76:d8:a2:c7:83:4b:0e:1f:62:09:5e:d5:61:dd:9b: 77:0b:6b:17:9a:48:f7:3e:31:ed:f9:72:fa:cd:c7: c9:32:3f:18:46:47:3d:70:cf:c1:f9:7a:8f:df:7c: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:83:A9:07:69:56:A8:D8:1C:79:8B:C0:EE:3A:71:53:03:7D:A7:B3 X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ff:38:11:08:a9:df:d0:ce:f6:8a:6d:d4:f9:65:6a:3d:f1: a4:8b:8a:32:0c:45:30:f3:e3:22:7a:87:58:3c:b8:cd:52:1b: ea:e8:a4:e9:d8:6f:2f:7e:f0:5d:88:be:77:39:de:ea:64:0e: 20:a3:ca:19:91:c5:a3:b8:e2:c4:64:5d:c4:47:2e:ff:9a:60: 88:08:9f:31:96:15:3e:4e:98:6e:3e:45:52:d5:8c:32:db:72: 93:d1:7f:e9:a2:91:fd:0a:be:88:48:b9:82:68:47:14:12:7d: 9b:00:91:d6:6b:05:e4:9b:87:9e:07:f7:4a:a9:95:c6:48:b8: ae:71:08:8f:a8:29:6c:47:75:7f:e1:b7:30:f6:6c:43:9f:44: 7a:29:60:d3:cb:d1:ea:f5:d3:3a:9d:78:1e:fe:54:82:05:f9: c5:ee:83:02:b1:d1:42:84:f2:d9:ad:42:08:6f:58:f3:1a:fd: cf:7b:c9:97:ec:78:a7:36:4c:8e:63:8f:58:12:7b:e3:a8:ce: 66:06:0f:b0:0d:98:fc:5a:cb:39:f4:9b:e3:8f:5e:ae:30:9e: 50:d6:04:78:0b:5c:a1:4b:a2:11:c9:fe:fc:89:83:bc:24:6d: b1:3c:0e:ba:25:32:9f:32:92:01:2d:ec:2b:0e:5f:02:29:cf: 6c:21:27:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjQwNDMwMTg1NDM3WhcNMjQwNTA3MTg1NDM3WjAYMRYwFAYD VQQDEw02NjMxM2U2ZC1lMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveipoj04otCo76FfPcz8oR3Xjv8zZKFkl11Q9OC7fL+ADgKxcYEr5Pv5riv4 pHJICg801feOFFQC51dh/MXd+3POPH+EDRZT6wOveidjdrE9+ktwiXjDRI5i30O0 ImCssbRASJh84uewesW3IFmL9/cWrsD97EE/ugW1CTGkXdrq0V8no0JciAOhpZQ/ CFic0tW+ZiRlZr7XuGbzQkvPG5BVfYr+JRB1pQhgJSo7buG9+tnedIL8OG0Asb+x Z9x8yW6rRPags9eXcVADrkSKs2d22KLHg0sOH2IJXtVh3Zt3C2sXmkj3PjHt+XL6 zcfJMj8YRkc9cM/B+XqP33zzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2DqQdp VqjYHHmLwO46cVMDfaezMB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj/zgRCKnf0M72im3U+WVqPfGki4oyDEUw8+MieodYPLjNUhvq6KTp 2G8vfvBdiL53Od7qZA4go8oZkcWjuOLEZF3ERy7/mmCICJ8xlhU+TphuPkVS1Ywy 23KT0X/popH9Cr6ISLmCaEcUEn2bAJHWawXkm4eeB/dKqZXGSLiucQiPqClsR3V/ 4bcw9mxDn0R6KWDTy9Hq9dM6nXge/lSCBfnF7oMCsdFChPLZrUIIb1jzGv3Pe8mX 7HinNkyOY49YEnvjqM5mBg+wDZj8Wss59Jvjj16uMJ5Q1gR4C1yhS6IRyf78iYO8 JG2xPA66JTKfMpIBLewrDl8CKc9sISf9 -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:59 2024 by rpki-client on console-ams.rpki-client.org