$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft File: A6PIek8tglWUdvcc-u5ST_URNXk.mft (raw, json) Hash identifier: GXQIxtWEt5z93F6vJ1Evyfoyl2qUbfLo215TEqloLxg= Subject key identifier: FC:D8:FF:70:79:79:79:B5:CB:70:1E:8C:9D:E6:9F:02:7F:83:67:C9 Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 0A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft Manifest number: 0A2D Signing time: Thu 02 May 2024 20:38:54 +0000 Manifest this update: Thu 02 May 2024 20:38:54 +0000 Manifest next update: Thu 09 May 2024 20:38:54 +0000 Files and hashes: 1: A6PIek8tglWUdvcc-u5ST_URNXk.crl (hash: fzpV04Cu1e8Ifnmf9UWYNG1iaoYcEJ7HHSLHRuBd28E=) 2: 6553D6106C2B11EA87ED1160C4F9AE02.roa (hash: 1XLwyu48JVPZ8mtVCNJp5XWePHj2GBYvHY0+JA2KV4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: May 2 20:38:54 2024 GMT Not After : May 9 20:38:54 2024 GMT Subject: CN=6633f9de-d979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:71:2a:89:c5:df:96:8e:25:bf:5c:db:f1: c4:64:c1:ad:25:f4:f1:0a:e9:7f:cd:29:bb:e4:e3: 75:ac:a2:45:8d:ae:d8:f0:33:2a:6c:dc:f0:ae:bd: 67:29:c6:e8:b9:17:d9:64:11:48:d7:8d:9d:45:ea: 94:df:cf:d2:92:38:9b:8f:f6:00:9c:5c:db:71:61: 59:15:33:50:51:ed:c1:bc:b0:ed:c8:85:1b:e3:83: 72:9b:62:e7:b1:0b:99:45:4c:40:0f:44:9e:9f:10: 6b:5e:2b:fe:cc:67:f7:e0:44:6a:db:2b:11:b0:d0: e7:0d:ff:4f:8b:4b:16:54:9b:ef:19:3e:3d:ea:ee: 65:e2:16:85:90:96:7a:dc:ef:4b:67:c6:84:54:84: c9:42:f2:17:a7:53:c3:f1:95:b8:33:a0:6a:16:3e: 09:10:ff:94:7d:2a:48:e0:2c:7b:80:3c:54:22:df: c2:a3:81:84:b8:a7:19:fe:05:51:e8:cb:c8:52:30: aa:c3:df:d6:82:f9:9f:49:83:a2:67:06:e2:0e:ff: 08:cb:ef:89:7f:5a:b7:56:62:f9:75:6d:74:5d:3b: 52:1c:b2:d8:ae:7c:48:22:f1:5c:8f:e8:14:ba:b8: 28:92:19:60:1a:3f:8a:16:49:64:b9:f1:6d:65:39: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D8:FF:70:79:79:79:B5:CB:70:1E:8C:9D:E6:9F:02:7F:83:67:C9 X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cd:af:df:04:cf:7c:a4:6e:49:8b:32:94:97:47:35:aa:1b: a9:32:b6:de:71:d7:a3:28:2e:ea:df:1e:a6:c5:20:05:e8:c3: fe:90:cc:59:b3:03:ae:11:b8:e1:7a:56:f1:1e:57:5a:a4:6c: 8a:09:1d:f0:31:d9:15:df:d1:ef:60:ed:ad:11:cf:9b:81:4d: c8:53:bb:04:a8:94:7e:4f:65:69:c6:93:87:e7:3e:de:fe:6c: 81:3d:8f:42:8f:41:2c:22:26:53:c2:ae:7c:13:f2:4d:c8:cc: 82:03:86:ce:d8:d0:7e:cf:a4:dd:a9:d8:4a:64:3f:03:96:dd: 81:fd:cc:31:b7:12:d6:b9:1f:f7:86:de:fd:8c:56:a5:ac:26: bd:64:77:2a:78:02:d5:e4:c5:33:53:85:ff:2a:52:d4:b8:9e: 1b:e5:5a:e1:7f:6c:46:48:ee:f7:dd:f6:dd:f5:ac:a1:20:ac: f3:97:ac:06:d9:f9:0d:91:aa:15:c2:36:bb:51:00:ae:cd:e5: a6:25:32:c4:fb:d2:79:9f:ba:19:90:5a:b2:4d:30:ac:29:31: ba:9b:40:11:8a:75:3d:1e:78:02:9e:cb:cb:67:1b:01:84:15: 95:0d:0f:64:e8:33:e1:1f:4f:6c:d5:8c:d8:b9:fb:5b:ce:52: e2:08:42:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjQwNTAyMjAzODU0WhcNMjQwNTA5MjAzODU0WjAYMRYwFAYD VQQDEw02NjMzZjlkZS1kOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HhxKonF35aOJb9c2/HEZMGtJfTxCul/zSm75ON1rKJFja7Y8DMqbNzwrr1n KcbouRfZZBFI142dReqU38/Skjibj/YAnFzbcWFZFTNQUe3BvLDtyIUb44Nym2Ln sQuZRUxAD0SenxBrXiv+zGf34ERq2ysRsNDnDf9Pi0sWVJvvGT496u5l4haFkJZ6 3O9LZ8aEVITJQvIXp1PD8ZW4M6BqFj4JEP+UfSpI4Cx7gDxUIt/Co4GEuKcZ/gVR 6MvIUjCqw9/WgvmfSYOiZwbiDv8Iy++Jf1q3VmL5dW10XTtSHLLYrnxIIvFcj+gU urgokhlgGj+KFklkufFtZTnZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzY/3B5 eXm1y3AejJ3mnwJ/g2fJMB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NENBRC85RkQ5N0EwODQ1QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGds V1VkdmNjLXU1U1RfVVJOWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7za/fBM98pG5JizKUl0c1qhupMrbecdejKC7q3x6mxSAF6MP+kMxZ swOuEbjhelbxHldapGyKCR3wMdkV39HvYO2tEc+bgU3IU7sEqJR+T2VpxpOH5z7e /myBPY9Cj0EsIiZTwq58E/JNyMyCA4bO2NB+z6TdqdhKZD8Dlt2B/cwxtxLWuR/3 ht79jFalrCa9ZHcqeALV5MUzU4X/KlLUuJ4b5Vrhf2xGSO733fbd9ayhIKzzl6wG 2fkNkaoVwja7UQCuzeWmJTLE+9J5n7oZkFqyTTCsKTG6m0ARinU9HngCnsvLZxsB hBWVDQ9k6DPhH09s1YzYuftbzlLiCELS -----END CERTIFICATE-----Generated at Thu May 2 22:28:54 2024 by rpki-client on console-ams.rpki-client.org