$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: dJAiElieF2NISqlgPNd2lKC2uF1ND+0Ok7uU8ghO+sE= Subject key identifier: 1F:B2:67:02:28:51:5D:C4:35:41:D0:CE:BE:2E:B2:71:B2:AB:A8:9B Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0472 Signing time: Sun 19 May 2024 01:49:14 +0000 Manifest this update: Sun 19 May 2024 01:49:13 +0000 Manifest next update: Sun 26 May 2024 01:49:13 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: Ln9MqnCJXHMHqJlaBG27RgL8Dm3+KIYLe5wO6e7cmZs=) 2: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: 35+QxJm9RFYDqjRpIoivBHkqNPl0lh0c+3NXYE1k3q8=) 3: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: QHrkzPB3XYYShkebDaV5iZFEb6asX/vHujmxDlC+XLs=) 4: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: WE5OMt+rDqoJCPg5JbhQjVU9pu+T1cVc8AMt1U8Dqa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: May 19 01:49:13 2024 GMT Not After : May 26 01:49:13 2024 GMT Subject: CN=66495a9a-d895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:23:49:c5:15:bd:3c:22:c4:ee:b4:f6:e7: 04:bd:a1:04:e7:b5:82:3d:6f:23:14:35:50:a3:ef: dc:50:61:a3:ff:d8:58:ea:52:e1:3c:f8:8b:65:d3: c9:81:d2:1c:40:b2:d0:a6:84:85:cd:b2:94:ec:9c: 87:fa:27:92:9f:9f:91:a4:54:63:9f:27:35:45:4a: 89:74:1e:e2:a7:c3:67:b3:21:64:23:0e:de:b9:b2: ca:f4:ef:8b:5f:ca:49:6b:dd:25:cf:43:31:a2:78: 56:2d:81:fb:2c:58:8e:e8:41:14:22:69:05:ce:a8: d1:77:2a:12:28:3b:b2:d4:df:f5:b7:8e:53:d1:82: 55:2a:33:a8:13:93:07:5f:8b:f1:e8:71:f6:46:c4: 82:7b:05:7b:35:c9:16:90:4a:be:d4:79:5c:e2:f5: e7:59:78:c4:b1:fa:6f:f9:ce:10:6b:0f:33:d1:a6: 1a:5d:df:be:f2:6c:40:23:68:76:5e:a1:a1:af:8e: 67:80:ec:55:24:68:2d:14:c0:04:f1:02:5d:06:59: 9f:a0:2a:76:9d:7a:96:7a:fb:d4:b5:04:32:58:48: 16:d4:4a:bf:54:ab:54:1c:d2:af:4b:f8:f9:0a:da: a3:d5:e5:6a:a8:1a:22:36:83:b1:99:77:78:f9:8a: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B2:67:02:28:51:5D:C4:35:41:D0:CE:BE:2E:B2:71:B2:AB:A8:9B X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:23:dc:b3:2c:c5:77:a7:1a:39:14:cf:aa:2a:a5:86:e9:89: 42:4c:cb:67:8d:e4:2b:a2:71:66:e1:7b:30:00:10:59:4f:78: 3e:2d:4e:86:4f:71:7c:0e:65:a9:31:6d:dc:ff:58:54:2d:aa: 00:67:e6:cb:84:ac:71:4d:55:c3:ae:4e:89:12:76:9a:cf:b0: dc:5a:98:59:0c:58:bf:73:31:c1:2b:33:ad:77:d5:32:16:54: 87:cf:d3:67:15:01:e6:a1:e0:29:1b:7b:6f:33:29:e6:0a:e6: 4e:4b:19:e8:12:df:49:5b:76:a2:ac:0c:ab:08:e2:c8:a1:e9: 8c:d3:46:d3:8e:24:77:bb:72:ee:1f:d8:94:c2:fc:d7:af:11: 28:70:31:c0:90:00:a2:be:89:2c:37:8f:52:f2:14:d0:da:16: ce:b9:c1:c4:cf:fb:14:41:15:db:82:6f:fd:34:7b:fa:f9:bd: 99:81:3d:e6:20:73:16:7e:7f:e0:ea:46:84:7c:52:1e:d2:52: 05:57:44:56:7d:8f:2b:be:f3:f7:87:2f:7f:e8:42:0d:4c:91: 85:4d:23:bc:b7:ff:d1:ca:51:ca:3c:50:8e:d9:f6:ea:20:fd: 55:25:79:5c:d9:75:ce:c3:6d:9a:46:c6:d3:17:18:e5:b5:6e: 39:7b:33:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjQwNTE5MDE0OTEzWhcNMjQwNTI2MDE0OTEzWjAYMRYwFAYD VQQDEw02NjQ5NWE5YS1kODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlsjScUVvTwixO609ucEvaEE57WCPW8jFDVQo+/cUGGj/9hY6lLhPPiLZdPJ gdIcQLLQpoSFzbKU7JyH+ieSn5+RpFRjnyc1RUqJdB7ip8NnsyFkIw7eubLK9O+L X8pJa90lz0MxonhWLYH7LFiO6EEUImkFzqjRdyoSKDuy1N/1t45T0YJVKjOoE5MH X4vx6HH2RsSCewV7NckWkEq+1Hlc4vXnWXjEsfpv+c4Qaw8z0aYaXd++8mxAI2h2 XqGhr45ngOxVJGgtFMAE8QJdBlmfoCp2nXqWevvUtQQyWEgW1Eq/VKtUHNKvS/j5 Ctqj1eVqqBoiNoOxmXd4+YqrUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+yZwIo UV3ENUHQzr4usnGyq6ibMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5I9yzLMV3pxo5FM+qKqWG6YlCTMtnjeQronFm4XswABBZT3g+LU6G T3F8DmWpMW3c/1hULaoAZ+bLhKxxTVXDrk6JEnaaz7DcWphZDFi/czHBKzOtd9Uy FlSHz9NnFQHmoeApG3tvMynmCuZOSxnoEt9JW3airAyrCOLIoemM00bTjiR3u3Lu H9iUwvzXrxEocDHAkACivoksN49S8hTQ2hbOucHEz/sUQRXbgm/9NHv6+b2ZgT3m IHMWfn/g6kaEfFIe0lIFV0RWfY8rvvP3hy9/6EINTJGFTSO8t//RylHKPFCO2fbq IP1VJXlc2XXOw22aRsbTFxjltW45ezNE -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org