$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: l5dhmqiN9PKcw5ZbS4tENFujgS4wYoNBt53mkOnfdLM= Subject key identifier: 11:1B:B3:B2:62:08:46:E0:12:16:25:2A:CE:94:F5:67:03:15:E0:D5 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 01CC Signing time: Fri 03 May 2024 04:29:14 +0000 Manifest this update: Fri 03 May 2024 04:29:14 +0000 Manifest next update: Fri 10 May 2024 04:29:14 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: NZMFQOC5M+Mc/d1C1A4m4t8tp0jiZ7HAAdvHflCBZo8=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: IIET7EYwWspwql9sc/JN8kiozR7Qi5MMWfPVZw350Q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: May 3 04:29:14 2024 GMT Not After : May 10 04:29:14 2024 GMT Subject: CN=6634681a-9908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:a1:fc:8d:18:a1:4c:7e:4c:8d:8f:49:64: 55:58:1d:da:b5:7a:b1:0e:01:a6:6b:62:b6:7d:76: 7d:3f:b4:ce:7f:cd:79:f5:65:57:67:49:a8:07:00: 89:52:85:68:bb:c1:cc:67:69:d2:e4:5c:3a:ad:6d: 85:cf:6f:bb:97:de:f9:74:7d:32:7c:f6:44:7c:59: f7:82:1b:df:f0:44:0c:81:50:2b:cd:75:d8:e1:82: 78:78:d9:f6:0d:ba:56:e0:3d:b1:e3:32:f1:3c:08: 20:75:eb:6b:ad:db:51:e3:a9:9f:ef:46:29:7f:5f: e8:db:ab:94:50:55:f1:11:3f:19:0b:5b:28:d7:b4: 7a:74:80:80:cd:dd:9b:09:81:4c:f8:53:d0:66:09: 7b:c9:94:f7:bd:38:76:87:dc:d2:57:16:12:71:20: fd:d9:68:76:88:25:c7:7c:0c:59:3d:89:c2:b3:b8: 04:16:f3:b9:43:b5:db:0e:0e:c1:44:0d:bf:93:9a: 8b:65:c2:8a:b6:d6:4d:5a:e6:8d:63:bf:37:2e:9c: b4:a9:16:02:13:72:c2:be:18:ba:43:68:4c:2e:75: 47:d5:1b:29:f8:a7:7b:af:74:1d:db:71:15:6e:e4: b8:7f:ba:37:f9:66:d5:ab:60:bd:80:db:fa:16:94: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1B:B3:B2:62:08:46:E0:12:16:25:2A:CE:94:F5:67:03:15:E0:D5 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d5:3b:2f:3d:9a:07:9f:3b:dd:a3:93:5c:f1:b7:2a:35:9b: da:89:9f:a9:72:83:57:a3:d1:1b:a7:f6:a2:51:78:fe:9f:41: c2:fc:da:e7:a1:9a:a8:ec:b7:b7:a2:a4:a0:fb:6f:ad:1b:6a: 8c:5b:c2:db:18:b2:4d:b0:c3:92:30:fb:06:ce:34:79:c4:98: 1c:bf:1a:e6:79:95:64:ca:b7:e3:e0:f0:c6:fb:fa:e2:f6:b2: 6b:b4:c5:50:5b:6a:fe:a6:c6:ef:d8:c4:87:43:9b:6a:5d:fc: 54:07:92:a8:97:be:5c:6d:0b:cf:be:9b:c2:5f:c0:0f:2b:ed: e2:29:0b:03:16:d5:a3:55:8a:b4:de:2b:dd:c5:f7:52:1b:e5: 56:a8:dc:a1:fd:35:0d:5d:81:5d:af:95:dc:44:ce:25:3f:fe: 54:c2:e7:aa:74:72:a3:87:57:c0:6c:81:2e:38:5c:44:91:fc: 0e:d5:12:bd:97:9c:a7:ff:42:7f:0e:6f:c1:b5:7e:4f:da:fc: 97:9c:cd:12:f7:62:cd:01:a7:21:22:86:1b:00:60:e8:a4:f3: 1c:29:f2:4b:32:7e:3e:3c:74:0f:b7:4b:4a:cd:00:0a:11:1d: a8:f2:d0:20:ce:46:ac:06:e9:0c:eb:00:67:19:c3:e6:a5:78: c9:ec:45:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjQwNTAzMDQyOTE0WhcNMjQwNTEwMDQyOTE0WjAYMRYwFAYD VQQDEw02NjM0NjgxYS05OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpqh/I0YoUx+TI2PSWRVWB3atXqxDgGma2K2fXZ9P7TOf8159WVXZ0moBwCJ UoVou8HMZ2nS5Fw6rW2Fz2+7l975dH0yfPZEfFn3ghvf8EQMgVArzXXY4YJ4eNn2 DbpW4D2x4zLxPAggdetrrdtR46mf70Ypf1/o26uUUFXxET8ZC1so17R6dICAzd2b CYFM+FPQZgl7yZT3vTh2h9zSVxYScSD92Wh2iCXHfAxZPYnCs7gEFvO5Q7XbDg7B RA2/k5qLZcKKttZNWuaNY783Lpy0qRYCE3LCvhi6Q2hMLnVH1Rsp+Kd7r3Qd23EV buS4f7o3+WbVq2C9gNv6FpQU5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEbs7Ji CEbgEhYlKs6U9WcDFeDVMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq1TsvPZoHnzvdo5Nc8bcqNZvaiZ+pcoNXo9Ebp/aiUXj+n0HC/Nrn oZqo7Le3oqSg+2+tG2qMW8LbGLJNsMOSMPsGzjR5xJgcvxrmeZVkyrfj4PDG+/ri 9rJrtMVQW2r+psbv2MSHQ5tqXfxUB5Kol75cbQvPvpvCX8APK+3iKQsDFtWjVYq0 3ivdxfdSG+VWqNyh/TUNXYFdr5XcRM4lP/5UwueqdHKjh1fAbIEuOFxEkfwO1RK9 l5yn/0J/Dm/BtX5P2vyXnM0S92LNAachIoYbAGDopPMcKfJLMn4+PHQPt0tKzQAK ER2o8tAgzkasBukM6wBnGcPmpXjJ7EUK -----END CERTIFICATE-----Generated at Fri May 3 05:32:35 2024 by rpki-client on console-ams.rpki-client.org