$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json) Hash identifier: dsA+D6hUFa5Y3UE7nQ3/wZLYSRC9CBC5HDvv02uSryg= Subject key identifier: DF:74:D3:8F:69:C2:FB:F2:9C:D7:CC:7D:15:AD:CA:26:70:C2:3D:1F Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Certificate serial: 0902 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft Manifest number: 08FD Signing time: Fri 26 Apr 2024 21:16:18 +0000 Manifest this update: Fri 26 Apr 2024 21:16:17 +0000 Manifest next update: Fri 03 May 2024 21:16:17 +0000 Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: bIvaE+6V7ooHXq8K0kqlqg8VHixlDvlSLDJ6YJafkao=) 2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: bowd2B0tA4ibjD34KXZjrzNTGjmQ2OPcAbE7DjOnSAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Validity Not Before: Apr 26 21:16:17 2024 GMT Not After : May 3 21:16:17 2024 GMT Subject: CN=662c19a1-bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:47:c5:e3:f1:40:46:37:66:4f:a2:e2:ef: 20:ff:73:65:3b:37:4e:24:59:1e:93:b4:ed:c6:23: 80:6d:38:dc:4f:f2:39:b8:43:38:1f:5a:01:5f:03: da:11:82:2b:98:8e:55:21:da:6f:71:8b:95:cb:d1: 16:66:bd:de:2e:bb:e5:eb:8b:6c:a4:2b:85:10:d5: 57:90:7d:3a:23:e8:b7:a4:6f:c7:66:d1:50:50:45: a1:bd:aa:2f:4a:f6:46:1d:7c:07:19:3b:35:de:a9: 65:bb:54:6e:5d:57:03:18:07:ff:a0:d5:2c:58:17: e6:6b:c0:10:11:5d:fe:27:3e:2e:9f:e5:2a:7a:35: ba:b9:4e:85:a4:5e:3e:7d:3b:04:79:c6:f6:d9:ca: 38:c8:2d:13:40:e8:83:dd:15:50:13:2f:47:c1:b6: 59:fd:2f:e8:ee:d5:f1:9d:73:e1:5b:53:b1:9c:79: 83:1c:91:8a:a3:36:64:61:4d:d5:2e:2b:1b:b5:2d: 95:25:22:34:e7:11:19:7e:8d:45:05:11:8b:3d:67: fe:7c:56:f6:c1:5d:5e:63:26:0c:5b:68:45:c5:18: fb:59:87:34:5b:c3:c8:33:d2:c7:b6:70:20:dc:a1: 61:80:ae:3a:42:98:ba:7c:48:d1:4e:8f:e0:5b:b1: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:74:D3:8F:69:C2:FB:F2:9C:D7:CC:7D:15:AD:CA:26:70:C2:3D:1F X509v3 Authority Key Identifier: keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:59:82:86:74:3f:52:2f:c7:96:78:1f:f5:9f:65:e2:0b:13: fa:b7:33:14:17:f2:db:08:1f:4b:ff:d3:d7:4a:13:f5:29:c4: b4:f2:88:4e:b6:a6:79:a0:db:b7:b3:74:cd:e7:95:58:ba:c3: 9d:9f:5e:ec:2c:74:a5:3c:51:16:e1:fb:ff:8f:19:3b:d2:97: 2e:6e:92:5d:6d:d7:96:c0:5c:74:11:59:0e:51:e3:b7:34:20: 6c:0f:69:db:ac:ff:cb:1f:c4:91:53:56:8d:c9:7d:42:ce:3c: 47:33:aa:e3:dc:c7:0f:be:05:6c:44:5e:f5:25:f0:af:e5:85: 32:ab:35:2f:d9:22:29:a6:0f:de:53:4f:6a:08:26:51:06:00: 69:bf:64:32:0b:0e:da:e9:72:0b:6f:5a:82:20:72:4d:00:e6: 42:f7:06:3f:15:1f:78:dc:15:ea:f1:ff:e4:b9:33:40:7f:dd: d2:af:07:0f:11:c4:8f:75:43:7a:43:31:e4:b0:4e:f7:cb:c0: 78:e5:61:94:84:e3:8c:06:4e:83:e8:b3:bf:b3:a9:5b:10:eb: d7:c6:c2:9c:2b:30:57:e2:ea:0e:19:e0:02:25:6e:5c:a9:96: 44:2e:6a:4d:26:14:66:e5:ed:b5:46:04:0e:ed:27:df:c9:3c: 15:c7:72:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYxOEIxMTAvBgNVBAUTKDY5NjkxRjU1MTY0OTUyRjJGNEYxRkVFODA0QUExNTgz NUZGRTg2RDUwHhcNMjQwNDI2MjExNjE3WhcNMjQwNTAzMjExNjE3WjAYMRYwFAYD VQQDEw02NjJjMTlhMS1iYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIVHxePxQEY3Zk+i4u8g/3NlOzdOJFkek7TtxiOAbTjcT/I5uEM4H1oBXwPa EYIrmI5VIdpvcYuVy9EWZr3eLrvl64tspCuFENVXkH06I+i3pG/HZtFQUEWhvaov SvZGHXwHGTs13qllu1RuXVcDGAf/oNUsWBfma8AQEV3+Jz4un+UqejW6uU6FpF4+ fTsEecb22co4yC0TQOiD3RVQEy9HwbZZ/S/o7tXxnXPhW1OxnHmDHJGKozZkYU3V LisbtS2VJSI05xEZfo1FBRGLPWf+fFb2wV1eYyYMW2hFxRj7WYc0W8PIM9LHtnAg 3KFhgK46Qpi6fEjRTo/gW7HGvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN90049p wvvynNfMfRWtyiZwwj0fMB8GA1UdIwQYMBaAFGlpH1UWSVLy9PH+6ASqFYNf/obV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjE4Qi85QkEyQjI1NDgw M0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2TDA4ZjdvQktvVmcxXy1o dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXa2ZWUlpKVXZMMDhmN29CS29WZzFfLWh0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjE4Qi85QkEyQjI1NDgwM0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2 TDA4ZjdvQktvVmcxXy1odFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANWYKGdD9SL8eWeB/1n2XiCxP6tzMUF/LbCB9L/9PXShP1KcS08ohO tqZ5oNu3s3TN55VYusOdn17sLHSlPFEW4fv/jxk70pcubpJdbdeWwFx0EVkOUeO3 NCBsD2nbrP/LH8SRU1aNyX1CzjxHM6rj3McPvgVsRF71JfCv5YUyqzUv2SIppg/e U09qCCZRBgBpv2QyCw7a6XILb1qCIHJNAOZC9wY/FR943BXq8f/kuTNAf93SrwcP EcSPdUN6QzHksE73y8B45WGUhOOMBk6D6LO/s6lbEOvXxsKcKzBX4uoOGeACJW5c qZZELmpNJhRm5e21RgQO7SffyTwVx3Lk -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:07 2024 by rpki-client on console-ams.rpki-client.org