$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: gJ5BUQpLrX05pA0dWNgQ8Mhju3VWIbQWWLshE7Zwx0c= Subject key identifier: 8E:F8:9B:5E:FA:32:FF:D8:74:45:A3:0F:03:2F:4A:D7:06:41:37:BD Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 012A Signing time: Fri 03 May 2024 05:08:42 +0000 Manifest this update: Fri 03 May 2024 05:08:41 +0000 Manifest next update: Fri 10 May 2024 05:08:41 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: 5SQsAZgmUm8+T0J+S1PUwSHiykESlqH95LuxZ6yMXc0=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: D6tQlG23D/injlTMjJzlRWilmhPrsP6m+ODUZtrQ44I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: May 3 05:08:41 2024 GMT Not After : May 10 05:08:41 2024 GMT Subject: CN=66347159-b752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:07:ec:4f:87:3c:77:10:90:bc:1b:b2:b5: 4a:d2:ec:b9:8b:17:b5:d8:5e:ee:1e:cf:a6:bd:d8: 1c:f5:88:00:a0:59:c0:bf:bb:61:2e:b6:e3:a6:01: e9:f8:78:9a:5e:e6:81:b7:3f:3e:34:8d:c2:c7:2f: 04:2b:a3:c2:47:b6:83:bb:9f:12:26:b2:a7:1d:29: bd:84:bb:9e:a4:3d:71:91:c4:b0:2a:ad:05:31:c6: 07:13:3b:27:8d:09:ef:91:83:78:7f:8e:ae:c3:fd: de:e8:72:60:6b:6b:b0:69:57:a6:c7:49:1e:ab:65: ee:1a:3e:88:65:98:ba:79:b0:b8:f3:d1:ba:89:38: 17:64:33:66:2a:e5:20:4a:e8:85:00:04:0d:05:d9: 37:72:54:98:e7:79:43:57:4b:5d:0a:61:59:b1:c8: e9:a2:3c:9a:65:22:01:a3:28:20:df:cc:81:1d:ea: 57:75:f4:7d:28:a4:5f:b7:f9:60:80:b8:18:25:28: 03:53:e1:a4:8b:d9:91:9c:be:4b:cc:e3:d3:50:08: 2a:1e:b5:9e:29:a9:5c:14:89:fa:41:5e:5f:31:7e: 13:73:f9:00:b1:d2:b6:7e:2a:5e:a6:f5:37:1e:ea: 3a:4a:2d:7f:e8:1b:1c:74:09:1d:10:48:62:b5:72: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F8:9B:5E:FA:32:FF:D8:74:45:A3:0F:03:2F:4A:D7:06:41:37:BD X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a2:a9:97:43:0f:a8:78:f4:90:c7:2b:a4:39:5d:7f:09:0c: 83:64:c1:a8:b0:f6:27:92:b6:c1:46:22:d8:e1:15:31:fc:30: 16:6c:54:e5:5a:48:7d:65:e2:b2:0a:7d:cb:0c:0b:31:94:c8: b4:6c:3f:41:68:b2:ff:ed:33:86:91:c5:6f:ed:67:ee:32:97: 1f:0b:29:a7:2b:df:60:f0:a5:35:a4:7c:b5:c8:49:95:e9:73: 66:28:42:d8:44:2c:f0:89:9e:29:f2:35:78:c3:b6:75:f1:66: db:6b:e6:4d:58:87:7f:6c:1e:98:85:84:42:8a:73:59:d0:25: b3:dc:9f:8e:c5:43:43:29:ff:3a:84:2a:71:fb:c4:7a:7f:25: 98:43:62:c5:67:11:7d:72:64:3f:23:82:f4:d8:b6:00:57:d9: 18:6c:47:71:a6:c0:90:5c:1a:f8:82:6c:14:83:b8:cc:2b:39: 00:c2:13:a8:8b:f7:68:d1:a4:68:df:d7:a4:b7:3f:46:8f:52: fc:a6:b2:63:82:b7:9e:16:49:d0:6a:25:0b:51:32:98:9b:cd: 22:9c:9f:00:6e:52:f5:0c:14:50:7f:aa:4e:aa:43:4f:c0:d4: 67:9d:c1:e9:80:42:0e:e0:ef:4a:95:8d:c7:7a:23:3a:dd:99: c7:45:f4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjQwNTAzMDUwODQxWhcNMjQwNTEwMDUwODQxWjAYMRYwFAYD VQQDEw02NjM0NzE1OS1iNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLIH7E+HPHcQkLwbsrVK0uy5ixe12F7uHs+mvdgc9YgAoFnAv7thLrbjpgHp +HiaXuaBtz8+NI3Cxy8EK6PCR7aDu58SJrKnHSm9hLuepD1xkcSwKq0FMcYHEzsn jQnvkYN4f46uw/3e6HJga2uwaVemx0keq2XuGj6IZZi6ebC489G6iTgXZDNmKuUg SuiFAAQNBdk3clSY53lDV0tdCmFZscjpojyaZSIBoygg38yBHepXdfR9KKRft/lg gLgYJSgDU+Gki9mRnL5LzOPTUAgqHrWeKalcFIn6QV5fMX4Tc/kAsdK2fipepvU3 Huo6Si1/6BscdAkdEEhitXIG0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI74m176 Mv/YdEWjDwMvStcGQTe9MB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnoqmXQw+oePSQxyukOV1/CQyDZMGosPYnkrbBRiLY4RUx/DAWbFTl Wkh9ZeKyCn3LDAsxlMi0bD9BaLL/7TOGkcVv7WfuMpcfCymnK99g8KU1pHy1yEmV 6XNmKELYRCzwiZ4p8jV4w7Z18Wbba+ZNWId/bB6YhYRCinNZ0CWz3J+OxUNDKf86 hCpx+8R6fyWYQ2LFZxF9cmQ/I4L02LYAV9kYbEdxpsCQXBr4gmwUg7jMKzkAwhOo i/do0aRo39ektz9Gj1L8prJjgreeFknQaiULUTKYm80inJ8AblL1DBRQf6pOqkNP wNRnncHpgEIO4O9KlY3HeiM63ZnHRfTi -----END CERTIFICATE-----Generated at Fri May 3 06:18:53 2024 by rpki-client on console-ams.rpki-client.org