$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: QA3xDAZ1h/vf8yTIcQ0BbN/KP9gTrAUiNxtNioE1Cx0= Subject key identifier: 42:42:7B:1E:77:1B:B0:97:73:0C:A8:B1:6A:A3:D6:5B:7C:0B:F6:FC Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 0120 Signing time: Sat 27 Apr 2024 05:02:51 +0000 Manifest this update: Sat 27 Apr 2024 05:02:50 +0000 Manifest next update: Sat 04 May 2024 05:02:50 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: Z1/jolWLYUfdNu3vgN/3wnyD7Fhc0paJ4I9adv0kQX0=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: 4c2Go2NdWW49HnnGM3f7US9onkJqciB7ngsY709AXRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: Apr 27 05:02:50 2024 GMT Not After : May 4 05:02:50 2024 GMT Subject: CN=662c86fa-8783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:40:6d:5e:df:ad:43:9c:4d:95:f4:b6:b3: 4d:5e:70:78:6e:96:08:10:6c:76:8c:e9:2f:0b:f1: 22:9b:79:2d:ee:e6:0d:63:2a:65:44:d7:70:c2:4d: 3c:3c:76:43:14:91:b1:7a:cb:17:d6:01:b7:20:08: 21:15:ac:64:ae:7e:c4:89:0a:77:68:0f:db:89:c3: d0:8e:5c:39:17:8a:19:78:b2:df:e6:bc:dd:18:d8: fb:97:1a:ca:e4:79:4a:4f:f9:dd:8e:4c:0e:2a:78: 22:7f:8f:1d:12:44:4c:6d:81:4c:3d:e8:e9:5b:f0: cc:7e:39:73:dd:75:de:3a:a8:62:eb:a2:87:ce:31: fd:24:5a:26:ff:ab:3c:7a:75:36:80:d0:c4:f2:ec: 80:9f:3c:6d:02:45:79:6a:3b:bc:1e:f2:07:67:7f: 86:f3:bc:aa:3f:cf:85:f2:ac:31:cb:f6:7b:c6:6b: a7:18:4f:19:31:71:9c:95:ed:82:1f:91:06:be:b5: 39:ff:7f:f3:62:a4:01:8a:53:49:72:c0:96:04:2f: 2a:4b:f0:a7:11:7c:19:ba:96:44:dc:d9:1a:d8:dd: 99:0c:69:47:25:ce:ca:62:9b:76:14:e0:98:ee:7c: 8f:61:14:62:4f:a4:79:2b:ed:c9:9a:05:57:c8:04: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:7B:1E:77:1B:B0:97:73:0C:A8:B1:6A:A3:D6:5B:7C:0B:F6:FC X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f3:03:8e:7f:a0:7a:58:1f:ad:a6:76:a7:3f:cc:1f:d4:c1: 07:b4:d2:28:7a:69:eb:ae:fc:f6:25:b5:c9:34:2d:53:b7:50: 70:1a:aa:f2:d6:09:bd:78:64:5e:61:f7:fe:3c:51:7c:62:92: 4e:76:2f:82:53:49:d3:06:e4:b7:30:2c:31:3f:41:99:d4:a8: b8:f9:14:e7:7d:73:ed:cb:27:c1:39:03:54:2a:0f:79:8c:c9: d0:38:a7:19:94:a9:83:71:ce:9d:e9:4b:79:82:52:81:e9:d2: 7a:62:ab:e3:5c:cf:db:a9:b6:4c:13:24:93:20:9c:1a:0a:0c: a9:7a:3c:ae:a7:93:97:4e:c9:e8:6f:23:81:d6:81:5b:dc:81: 0b:29:7f:66:d6:fb:78:64:ea:b1:78:68:eb:42:ef:27:26:a7: 17:70:86:a5:08:14:14:df:3d:76:7e:86:dc:b7:b3:35:8e:6a: 47:ca:cd:04:e0:f1:2a:9c:d2:ac:3a:09:f3:76:db:53:fd:c8: 0e:8c:c8:98:a4:65:0d:f0:df:98:d1:a8:a2:0f:8d:fe:4a:38: fa:ce:b2:ba:5e:90:02:f2:3e:f5:1e:70:9d:3d:c1:d4:d3:9f: b8:84:f1:84:40:10:2b:e0:82:fc:30:7f:8a:2f:4e:e2:d0:aa: 96:20:a2:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjQwNDI3MDUwMjUwWhcNMjQwNTA0MDUwMjUwWjAYMRYwFAYD VQQDEw02NjJjODZmYS04NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBNAbV7frUOcTZX0trNNXnB4bpYIEGx2jOkvC/Eim3kt7uYNYyplRNdwwk08 PHZDFJGxessX1gG3IAghFaxkrn7EiQp3aA/bicPQjlw5F4oZeLLf5rzdGNj7lxrK 5HlKT/ndjkwOKngif48dEkRMbYFMPejpW/DMfjlz3XXeOqhi66KHzjH9JFom/6s8 enU2gNDE8uyAnzxtAkV5aju8HvIHZ3+G87yqP8+F8qwxy/Z7xmunGE8ZMXGcle2C H5EGvrU5/3/zYqQBilNJcsCWBC8qS/CnEXwZupZE3Nka2N2ZDGlHJc7KYpt2FOCY 7nyPYRRiT6R5K+3JmgVXyASlKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJCex53 G7CXcwyosWqj1lt8C/b8MB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr8wOOf6B6WB+tpnanP8wf1MEHtNIoemnrrvz2JbXJNC1Tt1BwGqry 1gm9eGReYff+PFF8YpJOdi+CU0nTBuS3MCwxP0GZ1Ki4+RTnfXPtyyfBOQNUKg95 jMnQOKcZlKmDcc6d6Ut5glKB6dJ6YqvjXM/bqbZMEySTIJwaCgypejyup5OXTsno byOB1oFb3IELKX9m1vt4ZOqxeGjrQu8nJqcXcIalCBQU3z12fobct7M1jmpHys0E 4PEqnNKsOgnzdttT/cgOjMiYpGUN8N+Y0aiiD43+Sjj6zrK6XpAC8j71HnCdPcHU 05+4hPGEQBAr4IL8MH+KL07i0KqWIKI4 -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:40 2024 by rpki-client on console-ams.rpki-client.org