$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: sHOX2jzlJnIUMNeSDz7TmYOOpp737LV/BXlSNNeLWHg= Subject key identifier: B7:A9:A1:8A:A6:33:CD:AC:FE:B5:72:41:98:E9:03:72:01:3A:21:09 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 0606 Signing time: Sun 05 May 2024 00:03:35 +0000 Manifest this update: Sun 05 May 2024 00:03:35 +0000 Manifest next update: Sun 12 May 2024 00:03:35 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: U6kBc7KEt9bcG7mq4mb7PHpCL71BuLAI5uWxDhGQGq0=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: Inb9B715qZk5M1JWcplHdxcNsFhqmtb5cbAEnCl04ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: May 5 00:03:35 2024 GMT Not After : May 12 00:03:35 2024 GMT Subject: CN=6636ccd7-cccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3c:3e:0c:ac:6e:73:74:7c:4e:3f:b2:b8:9a: 9e:3c:58:2a:fa:f4:5e:f3:8f:65:57:95:63:24:b7: 74:19:4d:a0:1e:6f:13:44:54:a9:99:e7:49:45:26: 17:39:60:3f:f2:08:40:04:91:d4:51:9b:5e:fe:3f: c9:66:e9:f6:f1:cd:ed:99:9a:5b:9c:72:a6:49:f0: d6:22:ab:da:b3:07:93:86:cd:b0:f8:c5:f5:e4:7c: a0:85:ef:1a:49:7e:b6:ff:80:dd:c4:01:67:e1:aa: 31:a5:57:0a:73:70:4e:d3:2d:75:f1:f6:bc:96:7a: 81:ce:0b:26:67:68:fe:88:21:42:60:c0:94:85:26: cf:6d:d8:16:ab:53:fb:4b:cc:63:3b:8f:b5:30:fd: 72:7f:40:da:ac:34:11:d0:6c:53:93:e6:2d:a9:90: 14:32:6f:45:0a:de:75:e0:b9:b6:c7:8d:81:f6:04: e2:7e:c4:bf:1e:0e:2e:61:f7:88:d8:a2:83:14:fe: 10:93:02:9a:61:b5:7f:32:15:86:53:8d:56:2f:73: 95:ce:4f:95:e6:6b:69:62:6c:1a:80:c0:40:67:fc: 00:4e:3b:27:ab:08:11:cc:47:f5:50:a1:c7:79:5d: 98:99:9c:a0:59:a6:f1:c1:6d:34:59:6b:32:f8:54: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A9:A1:8A:A6:33:CD:AC:FE:B5:72:41:98:E9:03:72:01:3A:21:09 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:19:1b:ad:d5:52:93:60:61:df:cb:ba:4d:83:70:c8:0a:6a: c6:b5:80:0e:e1:91:e3:49:c2:69:fe:6d:2b:e4:ee:7d:0b:4e: 89:dc:eb:04:ef:78:62:3b:95:e7:6d:40:84:a7:05:d5:f4:bb: 54:3c:96:f4:a1:6a:04:47:c4:48:37:b6:c3:54:68:3d:fd:82: 46:b9:25:e5:0e:88:fd:f1:99:7f:da:5b:0b:34:52:de:32:76: ef:e9:ba:ab:ff:5e:be:a0:a6:6e:8e:8f:7a:bd:99:bb:60:af: fb:ac:13:ad:d8:f6:92:24:28:a3:1e:e6:0b:72:02:9c:d8:30: 16:df:7d:86:62:0b:7c:1b:ad:f0:85:28:d4:e0:c8:db:f3:84: 53:30:17:1c:36:65:6f:9d:6b:66:68:dd:60:04:af:60:0b:d3: 8d:f0:ee:4a:a0:ee:ec:ca:a7:45:a4:03:1c:3f:09:fa:75:f9: e9:67:fe:9a:84:2f:ec:f4:49:db:87:3d:74:0f:62:3a:c0:e1: e1:2b:7b:70:d1:80:a0:d6:66:65:ef:6c:2e:ba:0f:eb:e1:05: 77:d2:42:18:51:91:0d:73:1d:e9:5c:a1:95:44:33:dd:8d:9c: 39:e9:9b:1b:5d:98:fe:9a:61:f3:20:9d:6a:65:42:ac:9d:ec: e2:7e:25:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjQwNTA1MDAwMzM1WhcNMjQwNTEyMDAwMzM1WjAYMRYwFAYD VQQDEw02NjM2Y2NkNy1jY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTw+DKxuc3R8Tj+yuJqePFgq+vRe849lV5VjJLd0GU2gHm8TRFSpmedJRSYX OWA/8ghABJHUUZte/j/JZun28c3tmZpbnHKmSfDWIqvasweThs2w+MX15Hyghe8a SX62/4DdxAFn4aoxpVcKc3BO0y118fa8lnqBzgsmZ2j+iCFCYMCUhSbPbdgWq1P7 S8xjO4+1MP1yf0DarDQR0GxTk+YtqZAUMm9FCt514Lm2x42B9gTifsS/Hg4uYfeI 2KKDFP4QkwKaYbV/MhWGU41WL3OVzk+V5mtpYmwagMBAZ/wATjsnqwgRzEf1UKHH eV2YmZygWabxwW00WWsy+FRy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLepoYqm M82s/rVyQZjpA3IBOiEJMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8GRut1VKTYGHfy7pNg3DICmrGtYAO4ZHjScJp/m0r5O59C06J3OsE 73hiO5XnbUCEpwXV9LtUPJb0oWoER8RIN7bDVGg9/YJGuSXlDoj98Zl/2lsLNFLe Mnbv6bqr/16+oKZujo96vZm7YK/7rBOt2PaSJCijHuYLcgKc2DAW332GYgt8G63w hSjU4Mjb84RTMBccNmVvnWtmaN1gBK9gC9ON8O5KoO7syqdFpAMcPwn6dfnpZ/6a hC/s9Enbhz10D2I6wOHhK3tw0YCg1mZl72wuug/r4QV30kIYUZENcx3pXKGVRDPd jZw56ZsbXZj+mmHzIJ1qZUKsnezifiW6 -----END CERTIFICATE-----Generated at Sun May 5 01:13:21 2024 by rpki-client on console-ams.rpki-client.org