$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json) Hash identifier: n4BuRSBoho1CGbYAVBMQomFKfLcimloE/HGrHU6/rSM= Subject key identifier: 00:50:E3:1F:58:49:85:13:ED:EC:42:3E:D8:0D:61:A2:0A:BE:13:31 Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft Manifest number: AF Signing time: Wed 01 May 2024 06:54:35 +0000 Manifest this update: Wed 01 May 2024 06:54:34 +0000 Manifest next update: Wed 08 May 2024 06:54:34 +0000 Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: eVUqRK+r8nDLrkrEZKRweDR9IuC7IBOmsScc5j2ykP4=) 2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: uv6jy/uFEL5jZ1Gl51pVfAHaXeAfetzhiQtTXI43g2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Validity Not Before: May 1 06:54:34 2024 GMT Not After : May 8 06:54:34 2024 GMT Subject: CN=6631e72a-cc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:be:c8:26:d3:ea:d3:c5:b4:1c:99:4b:2b: d7:db:86:b0:7d:1f:bc:67:60:63:88:7a:0d:71:a8: e0:40:65:31:22:68:4f:18:03:03:99:fe:b5:72:ed: b7:7e:2b:58:7e:24:e0:02:e2:e9:4f:31:07:af:9f: ea:9a:c5:0a:1c:f9:38:11:95:5d:13:32:43:7a:62: 45:bf:60:d4:21:5f:63:09:71:c1:27:d2:f1:2c:08: bc:71:bd:92:7c:4d:96:1d:18:98:b5:64:d3:8b:3f: 87:09:fd:98:e7:51:c6:05:f7:03:4d:68:98:67:d7: a1:fc:28:15:ec:9e:ff:63:bc:ca:4b:7d:f2:79:75: 15:08:86:9c:b2:e2:38:20:0e:c0:a8:76:9d:d4:ea: 0c:a3:e8:da:1c:fc:ce:76:2a:b7:9d:2a:9d:45:a3: d4:e2:c3:0d:bf:0e:12:5b:a8:86:5a:cb:3d:0e:5d: f6:47:45:94:4c:e5:d0:0e:44:5d:56:dc:02:59:ca: c5:98:5c:86:fb:e9:c0:6e:1c:08:16:5f:f9:07:ca: 93:9f:09:0a:16:1a:75:ee:6c:26:c0:cd:04:37:bc: 52:ea:45:a8:ef:ad:f5:a8:f3:59:52:3d:c5:98:1e: ad:2b:77:ed:aa:3a:d3:dc:63:96:a1:18:ab:4f:ce: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:50:E3:1F:58:49:85:13:ED:EC:42:3E:D8:0D:61:A2:0A:BE:13:31 X509v3 Authority Key Identifier: keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d2:6a:47:9f:d6:0b:64:9a:61:ee:a3:2c:6c:60:26:c2:4e: 26:bd:48:d9:d8:1b:37:8b:5a:56:3a:27:5c:89:ef:20:73:f9: 16:10:5d:6f:40:01:be:67:b3:5d:1d:67:16:e8:c8:b6:2e:c9: c5:8a:2e:17:3f:3d:c8:f4:29:d8:07:b5:2a:5d:0b:63:f2:9b: 04:a5:05:11:a7:d5:c3:94:ee:a2:50:88:fc:9c:87:6b:ce:27: cc:65:d5:fa:d9:4b:71:14:24:54:99:45:26:9d:30:dd:24:f5: a0:ce:0f:39:da:4b:a4:43:a0:a5:bb:72:e4:e4:f5:04:c0:47: e2:c6:ec:30:67:dd:06:ba:bd:a1:3e:74:94:ff:b6:10:a3:d5: 76:a0:ac:ef:b0:24:12:a3:d6:57:4d:b9:a7:79:29:25:72:3e: f4:52:6a:e3:4d:31:1b:cc:b1:0d:6e:f5:f0:82:12:cb:40:fd: 98:cb:1e:d7:c9:c0:bc:2f:c6:a1:45:12:4e:08:91:c0:4e:47: b4:36:1e:17:fe:8c:cf:69:3c:88:69:3e:39:c4:4a:4a:64:86: d3:ab:c6:97:f0:f5:e4:42:06:ed:11:68:9d:c0:8f:d3:77:da: 50:d7:ee:b3:1d:fc:d1:bc:df:9f:4a:4d:c5:9a:73:e7:9a:c1: ff:dd:05:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC MDMxOTI2NjIwHhcNMjQwNTAxMDY1NDM0WhcNMjQwNTA4MDY1NDM0WjAYMRYwFAYD VQQDEw02NjMxZTcyYS1jYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz26+yCbT6tPFtByZSyvX24awfR+8Z2BjiHoNcajgQGUxImhPGAMDmf61cu23 fitYfiTgAuLpTzEHr5/qmsUKHPk4EZVdEzJDemJFv2DUIV9jCXHBJ9LxLAi8cb2S fE2WHRiYtWTTiz+HCf2Y51HGBfcDTWiYZ9eh/CgV7J7/Y7zKS33yeXUVCIacsuI4 IA7AqHad1OoMo+jaHPzOdiq3nSqdRaPU4sMNvw4SW6iGWss9Dl32R0WUTOXQDkRd VtwCWcrFmFyG++nAbhwIFl/5B8qTnwkKFhp17mwmwM0EN7xS6kWo7631qPNZUj3F mB6tK3ftqjrT3GOWoRirT85SNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABQ4x9Y SYUT7exCPtgNYaIKvhMxMB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR0mpHn9YLZJph7qMsbGAmwk4mvUjZ2Bs3i1pWOidcie8gc/kWEF1v QAG+Z7NdHWcW6Mi2LsnFii4XPz3I9CnYB7UqXQtj8psEpQURp9XDlO6iUIj8nIdr zifMZdX62UtxFCRUmUUmnTDdJPWgzg852kukQ6Clu3Lk5PUEwEfixuwwZ90Gur2h PnSU/7YQo9V2oKzvsCQSo9ZXTbmneSklcj70UmrjTTEbzLENbvXwghLLQP2Yyx7X ycC8L8ahRRJOCJHATke0Nh4X/ozPaTyIaT45xEpKZIbTq8aX8PXkQgbtEWidwI/T d9pQ1+6zHfzRvN+fSk3FmnPnmsH/3QVI -----END CERTIFICATE-----Generated at Wed May 1 07:23:56 2024 by rpki-client on console-ams.rpki-client.org