$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: Ja5sj+ONV4rO35LL+xBiBE/FMB5I9xJ0UaiKUdLZq9w= Subject key identifier: E9:D4:CD:26:D9:91:02:88:A4:3F:25:A3:61:42:1A:4D:8B:96:AD:FB Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0A04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 09FD Signing time: Tue 30 Apr 2024 20:59:30 +0000 Manifest this update: Tue 30 Apr 2024 20:59:29 +0000 Manifest next update: Tue 07 May 2024 20:59:29 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: MTzj6XjFWUDxpsTPMLtT6a6wHHOAKB12UfzCrsXWQlw=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QoMzWv+zlvph7lrjhvkUoh86qb7MSEvRWB21jNC66Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Apr 30 20:59:29 2024 GMT Not After : May 7 20:59:29 2024 GMT Subject: CN=66315bb1-41bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8c:72:c6:da:7b:41:08:7b:1e:46:27:c8:cf: a2:c7:01:9c:28:6d:0c:d3:fc:e4:22:62:31:d1:af: 95:aa:03:d1:d2:5f:d2:e9:c1:2b:e8:bf:24:f2:4a: 9f:a1:6d:48:64:a3:84:97:08:8a:90:6b:8a:b2:9a: 3b:41:49:90:b6:89:d3:b5:78:0c:77:d1:e5:56:58: b2:4b:93:3f:5c:8c:d9:8c:a6:dc:d0:72:3a:ed:9e: eb:71:89:8c:e3:6d:96:cb:fc:8f:fd:76:f5:61:7d: 7e:d8:c7:41:c1:b9:de:e8:14:44:2e:b3:8f:93:81: f8:8b:ef:a4:b5:c0:e3:58:2e:59:1e:25:b6:5e:a7: 5d:1b:01:6f:4b:d3:da:14:35:ff:72:47:09:86:78: b4:f6:fb:77:03:e8:bf:34:b1:1e:f9:a7:0c:90:45: 87:dc:91:20:3b:b8:61:ab:f9:8e:9c:8d:df:5c:61: bb:55:ca:2d:47:fe:9b:40:af:e8:30:08:11:ff:8c: 9e:4c:4d:78:fb:13:56:d5:b0:bc:d3:80:d1:36:66: 4d:6a:62:f7:77:4f:c9:b2:20:a8:3f:03:e5:18:36: 8f:65:bb:88:52:c1:bd:76:03:ee:c5:6e:bb:a8:2e: 4c:3d:c3:05:b1:c9:36:a4:68:e9:9d:98:3b:93:98: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D4:CD:26:D9:91:02:88:A4:3F:25:A3:61:42:1A:4D:8B:96:AD:FB X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:59:98:88:d2:80:3a:37:d4:84:1a:f7:4b:06:81:3d:6e:ea: 78:0e:4d:1f:32:b4:f2:3d:84:31:2d:b8:af:76:f6:ee:75:01: 62:18:07:c4:95:a7:3a:34:13:89:49:d0:ab:7f:27:0c:39:b3: a9:c8:d9:67:3e:62:70:77:25:63:7b:24:ee:fa:c7:db:db:f2: 65:1b:d4:0d:6a:f9:32:91:01:61:2d:25:86:e2:91:94:e0:e4: 90:cb:74:ec:b3:85:43:64:a4:a0:32:15:40:ba:ef:34:7e:89: 7d:9d:a3:ae:f6:ab:90:c4:17:87:e6:e9:bf:67:6b:c3:a6:db: 7b:0a:ec:b8:9b:cb:35:19:ba:4f:75:2a:2b:be:58:fc:ab:a7: eb:34:87:8f:cc:d0:87:5f:a0:bd:06:34:40:b5:a2:11:cc:72: 56:79:ff:5a:fe:20:08:6f:5f:aa:8a:7b:f1:af:32:86:81:69: cd:8f:46:1c:94:f9:04:85:f2:17:28:b8:2e:6b:1e:9f:8a:7d: ea:a2:33:c5:70:4b:fb:f4:20:bb:45:03:a4:2a:8d:8c:ba:24: 8d:75:d5:b6:df:5e:4a:50:0c:c8:8b:06:f4:50:2c:e7:16:b0: 74:b0:a2:45:e1:19:8f:43:67:06:7e:21:21:12:1b:1a:7e:59: b5:91:55:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjQwNDMwMjA1OTI5WhcNMjQwNTA3MjA1OTI5WjAYMRYwFAYD VQQDEw02NjMxNWJiMS00MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9oxyxtp7QQh7HkYnyM+ixwGcKG0M0/zkImIx0a+VqgPR0l/S6cEr6L8k8kqf oW1IZKOElwiKkGuKspo7QUmQtonTtXgMd9HlVliyS5M/XIzZjKbc0HI67Z7rcYmM 422Wy/yP/Xb1YX1+2MdBwbne6BRELrOPk4H4i++ktcDjWC5ZHiW2XqddGwFvS9Pa FDX/ckcJhni09vt3A+i/NLEe+acMkEWH3JEgO7hhq/mOnI3fXGG7VcotR/6bQK/o MAgR/4yeTE14+xNW1bC804DRNmZNamL3d0/JsiCoPwPlGDaPZbuIUsG9dgPuxW67 qC5MPcMFsck2pGjpnZg7k5iNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnUzSbZ kQKIpD8lo2FCGk2Llq37MB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiWZiI0oA6N9SEGvdLBoE9bup4Dk0fMrTyPYQxLbivdvbudQFiGAfE lac6NBOJSdCrfycMObOpyNlnPmJwdyVjeyTu+sfb2/JlG9QNavkykQFhLSWG4pGU 4OSQy3Tss4VDZKSgMhVAuu80fol9naOu9quQxBeH5um/Z2vDptt7Cuy4m8s1GbpP dSorvlj8q6frNIePzNCHX6C9BjRAtaIRzHJWef9a/iAIb1+qinvxrzKGgWnNj0Yc lPkEhfIXKLguax6fin3qojPFcEv79CC7RQOkKo2MuiSNddW2315KUAzIiwb0UCzn FrB0sKJF4RmPQ2cGfiEhEhsaflm1kVUo -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:07 2024 by rpki-client on console-ams.rpki-client.org