$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft File: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json) Hash identifier: uxdOkCvVh3DxFzkZFQhCSMmTBw1Jmj18JwzgOvs0cJM= Subject key identifier: 97:85:D8:07:B0:30:FA:FC:F8:E7:43:99:C8:A5:50:95:96:06:02:8E Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 Certificate issuer: /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft Manifest number: 118A Signing time: Thu 02 May 2024 20:48:06 +0000 Manifest this update: Thu 02 May 2024 20:48:06 +0000 Manifest next update: Thu 09 May 2024 20:48:05 +0000 Files and hashes: 1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: etcWoEJHE8efDcHPPrguuRQ71LNN/hX7+heRCy01N2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Validity Not Before: May 2 20:48:06 2024 GMT Not After : May 9 20:48:05 2024 GMT Subject: CN=6633fc06-fbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:9b:25:9a:9a:f2:67:36:d6:bb:ef:e2:b4: 09:25:1a:bf:d3:50:b2:27:b5:77:1d:f7:99:f3:1f: 8f:6a:9b:3f:17:15:63:76:89:77:f9:8f:2c:68:48: 32:a7:14:f2:01:03:ef:ce:2f:2d:34:fc:b0:76:d3: 95:6b:aa:a1:84:77:10:09:d4:d9:5f:23:44:99:05: 3e:e8:b0:6e:61:52:1d:b2:5d:b1:7c:11:33:8c:5e: fb:8b:a6:f0:70:0f:94:ef:0c:0b:b0:e0:d0:98:77: a3:d2:17:2b:f1:07:27:e4:8f:01:63:a4:a7:b4:b9: 3d:97:44:99:27:44:cf:27:69:5b:a1:c9:e5:da:2f: d0:fe:3c:07:1c:1b:ee:d4:0d:78:1d:e5:55:3e:75: 3b:35:89:09:01:a6:69:b6:29:67:b2:d4:f6:46:2a: 53:6e:f7:c2:00:ea:bd:40:69:43:22:9e:dc:92:ec: 9c:dd:93:9a:7b:38:33:07:f2:91:fb:77:cf:ba:45: ae:d8:17:7f:3a:7c:cc:82:68:75:66:37:d4:19:a1: 0d:07:16:60:5c:c2:d9:78:fe:de:58:31:46:26:a0: 9d:a7:b6:06:08:8a:d1:44:ad:f3:d9:f9:e7:de:30: 29:74:36:a9:c2:4b:b9:6d:85:45:83:12:cc:db:2d: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:D8:07:B0:30:FA:FC:F8:E7:43:99:C8:A5:50:95:96:06:02:8E X509v3 Authority Key Identifier: keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7d:19:e6:ae:93:a0:7d:1b:c7:dd:9f:08:56:ec:be:ff:51: b7:10:bb:1b:50:de:59:88:8e:06:e4:4e:ea:72:4b:1b:63:be: a5:38:ab:21:26:82:9e:aa:6e:8e:b7:2e:7d:08:cc:45:80:63: f1:b3:5c:ba:a5:f4:59:a9:85:ac:6f:df:c2:d7:17:92:43:1d: 8a:1d:16:47:78:a5:77:8e:cb:b7:21:ca:a6:19:52:1b:74:f8: f9:d2:2e:81:a4:e1:2f:f8:5d:1b:98:bc:fe:bf:b5:24:1e:e8: 07:c6:37:35:64:e8:fa:74:1e:df:71:12:ed:4d:ad:e1:b6:fc: 4f:02:d7:d6:93:a5:2f:03:01:54:d0:08:fe:e3:00:e2:61:93: 33:21:1d:c6:b3:b0:05:10:40:f9:cb:41:b5:09:37:f5:84:21: 36:4f:21:3b:dd:11:ef:e6:d0:1d:6d:60:b9:e9:3f:26:99:65: 7a:75:d7:bb:db:21:10:fa:1e:37:2b:c5:fe:d6:8f:33:82:46: 81:67:44:7d:ee:76:93:3f:e2:ed:82:58:97:6a:d5:5e:4b:db: 01:35:9d:ee:49:84:f3:94:bd:e4:1b:95:9f:8d:08:7a:4f:56: 52:f9:5e:14:b8:3f:09:8b:52:78:41:f7:a8:b3:71:88:88:f1: 34:48:f7:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDExRDhEOERDNUQ5Njc4REUwMzMwOTY3QTJGMzgxRDRG NjdCQjU1QjYwHhcNMjQwNTAyMjA0ODA2WhcNMjQwNTA5MjA0ODA1WjAYMRYwFAYD VQQDEw02NjMzZmMwNi1mYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C2bJZqa8mc21rvv4rQJJRq/01CyJ7V3HfeZ8x+Paps/FxVjdol3+Y8saEgy pxTyAQPvzi8tNPywdtOVa6qhhHcQCdTZXyNEmQU+6LBuYVIdsl2xfBEzjF77i6bw cA+U7wwLsODQmHej0hcr8Qcn5I8BY6SntLk9l0SZJ0TPJ2lbocnl2i/Q/jwHHBvu 1A14HeVVPnU7NYkJAaZptilnstT2RipTbvfCAOq9QGlDIp7ckuyc3ZOaezgzB/KR +3fPukWu2Bd/OnzMgmh1ZjfUGaENBxZgXMLZeP7eWDFGJqCdp7YGCIrRRK3z2fnn 3jApdDapwku5bYVFgxLM2y1R3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeF2Aew MPr8+OdDmcilUJWWBgKOMB8GA1UdIwQYMBaAFBHY2NxdlnjeAzCWei84HU9nu1W2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VONERNSlo2THpnZFQyZTdW YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkalkzRjJXZU40RE1KWjZMemdkVDJlN1ZiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VO NERNSlo2THpnZFQyZTdWYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOfRnmrpOgfRvH3Z8IVuy+/1G3ELsbUN5ZiI4G5E7qcksbY76lOKsh JoKeqm6Oty59CMxFgGPxs1y6pfRZqYWsb9/C1xeSQx2KHRZHeKV3jsu3IcqmGVIb dPj50i6BpOEv+F0bmLz+v7UkHugHxjc1ZOj6dB7fcRLtTa3htvxPAtfWk6UvAwFU 0Aj+4wDiYZMzIR3Gs7AFEED5y0G1CTf1hCE2TyE73RHv5tAdbWC56T8mmWV6dde7 2yEQ+h43K8X+1o8zgkaBZ0R97naTP+LtgliXatVeS9sBNZ3uSYTzlL3kG5WfjQh6 T1ZS+V4UuD8Ji1J4Qfeos3GIiPE0SPch -----END CERTIFICATE-----Generated at Thu May 2 22:28:53 2024 by rpki-client on console-ams.rpki-client.org