$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: pCZ6fF+DeXm9rVYQpCAXxeNNoRUYVOi9x9rvYceXraU= Subject key identifier: 85:05:FF:FF:C6:7D:17:44:1B:E7:AE:E5:4F:75:B5:4C:B5:07:E5:4F Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 0247 Signing time: Sun 19 May 2024 03:56:17 +0000 Manifest this update: Sun 19 May 2024 03:56:17 +0000 Manifest next update: Sun 26 May 2024 03:56:17 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: btZ8VsgwZowp8V2yhSWk1fMg5YrY0uJtX1u4Lr+9PQ4=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: qKHZYttZhzC9Evlbim29ZU7R9c1u9nSp1o5mnPSnBOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: May 19 03:56:17 2024 GMT Not After : May 26 03:56:17 2024 GMT Subject: CN=66497861-c0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:f4:fc:7b:e6:04:83:d8:4a:84:b7:60:de: 37:c9:57:24:f7:da:53:0d:5d:fc:1d:19:a4:5f:37: 25:59:6d:89:37:74:d5:49:aa:27:cc:48:46:f5:fa: a8:ad:9b:e1:f4:b0:af:cf:34:9d:1c:b4:a1:68:e6: 12:78:76:44:76:2a:be:35:90:e0:e2:2c:27:0e:0a: db:65:3e:4b:da:2d:32:40:03:df:5a:95:ec:02:41: b4:3f:71:7b:f3:1d:41:84:a1:ad:ee:a5:cf:f8:dc: af:65:03:cc:18:32:c6:a4:42:aa:81:69:66:7f:ea: 76:9a:ba:08:c1:96:2b:3b:c5:08:1c:7f:6b:90:6f: 4f:81:ef:8a:96:b4:34:ed:54:7c:7b:46:7c:c5:ab: e6:ac:67:6b:89:5f:cd:d3:38:ee:29:58:a4:10:ab: 62:5e:d6:69:12:cd:c3:c5:5d:91:7c:9f:17:98:7e: 1b:1f:76:a0:1f:47:13:16:01:fe:a1:07:a2:5f:fc: 26:15:32:b2:7e:bc:d6:89:3f:8e:0a:fb:c9:9c:19: 3c:dc:40:40:3f:01:fd:99:37:94:67:e8:5f:a9:9b: b5:95:eb:b9:9e:c6:9f:de:41:91:ed:47:f1:ef:20: 24:7e:cb:1a:08:5c:3a:6d:fe:ed:d3:c3:68:93:5f: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:05:FF:FF:C6:7D:17:44:1B:E7:AE:E5:4F:75:B5:4C:B5:07:E5:4F X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:51:ca:a5:49:3e:ac:63:9f:7f:cf:cc:0d:a8:5e:50:98:b2: 97:0c:aa:51:0a:4f:28:70:56:ec:83:34:c9:38:a0:55:98:9d: 3f:b2:83:3c:21:74:fe:6e:b9:1d:55:94:ec:b1:25:ab:a6:74: c4:f8:a5:58:f9:97:a7:77:c2:21:4d:a2:d7:6c:d5:25:13:95: b4:9f:d3:ce:e9:60:90:1f:dd:1d:6c:12:cf:21:19:a0:3d:fe: a5:15:2c:df:1f:4e:76:89:37:f3:f1:ca:a8:96:94:74:15:50: 4d:30:4e:a4:2f:ad:b2:8e:8e:18:01:58:f5:9f:80:9b:a1:de: ca:62:9b:1b:2d:56:1c:fc:14:ca:99:e3:e1:1a:6f:95:14:2d: 2a:c7:46:c7:5c:2d:34:20:c6:fa:ba:05:bb:40:13:d6:78:91: 75:af:88:17:47:c1:f9:59:f3:b8:1b:1e:0d:63:d7:83:4f:75: 4d:56:6e:d6:8c:a6:25:ad:cc:02:f2:95:11:c0:6a:e0:e9:22: ef:0d:2f:0b:6e:69:60:15:f2:b9:d9:85:fe:50:95:5a:de:0b: 26:ef:8b:d4:e7:d6:c1:96:98:82:1b:ed:f8:4e:4d:ad:5d:7a: fb:e4:11:8c:c4:8c:01:5a:07:be:df:5c:6a:70:e2:b7:f7:58: d6:e8:dc:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjQwNTE5MDM1NjE3WhcNMjQwNTI2MDM1NjE3WjAYMRYwFAYD VQQDEw02NjQ5Nzg2MS1jMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zP0/HvmBIPYSoS3YN43yVck99pTDV38HRmkXzclWW2JN3TVSaonzEhG9fqo rZvh9LCvzzSdHLShaOYSeHZEdiq+NZDg4iwnDgrbZT5L2i0yQAPfWpXsAkG0P3F7 8x1BhKGt7qXP+NyvZQPMGDLGpEKqgWlmf+p2mroIwZYrO8UIHH9rkG9Pge+KlrQ0 7VR8e0Z8xavmrGdriV/N0zjuKVikEKtiXtZpEs3DxV2RfJ8XmH4bH3agH0cTFgH+ oQeiX/wmFTKyfrzWiT+OCvvJnBk83EBAPwH9mTeUZ+hfqZu1leu5nsaf3kGR7Ufx 7yAkfssaCFw6bf7t08Nok1/7zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUF///G fRdEG+eu5U91tUy1B+VPMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbUcqlST6sY59/z8wNqF5QmLKXDKpRCk8ocFbsgzTJOKBVmJ0/soM8 IXT+brkdVZTssSWrpnTE+KVY+Zend8IhTaLXbNUlE5W0n9PO6WCQH90dbBLPIRmg Pf6lFSzfH052iTfz8cqolpR0FVBNME6kL62yjo4YAVj1n4Cbod7KYpsbLVYc/BTK mePhGm+VFC0qx0bHXC00IMb6ugW7QBPWeJF1r4gXR8H5WfO4Gx4NY9eDT3VNVm7W jKYlrcwC8pURwGrg6SLvDS8LbmlgFfK52YX+UJVa3gsm74vU59bBlpiCG+34Tk2t XXr75BGMxIwBWge+31xqcOK391jW6Nzh -----END CERTIFICATE-----Generated at Sun May 19 04:22:03 2024 by rpki-client on console-fra.rpki-client.org