$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: 37XFgYRFQ/Rl1iluZccV8T6w9BCMHuHK2LiaZJa6G6s= Subject key identifier: 81:A4:D5:6D:70:67:62:A1:4B:19:A0:CF:6C:A5:AC:A1:E9:0B:11:C8 Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 0713 Signing time: Sat 18 May 2024 22:41:45 +0000 Manifest this update: Sat 18 May 2024 22:41:45 +0000 Manifest next update: Sat 25 May 2024 22:41:45 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: 9nD4Boq9fhCX4qFINtzgKZDGqAX6UvuXYFTocHwwso0=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: bd4/8uksSz0JPVe0/MP4TV4QuwgHbxYqvp3g/9deP6E=) 3: 71050646F8BC11EA9EC9436CC4F9AE02.roa (hash: KuhIgGBj2jsGq33j4lnaL5AFce4+FbJJH8r5VaY7uT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: May 18 22:41:45 2024 GMT Not After : May 25 22:41:45 2024 GMT Subject: CN=66492ea9-2f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:4e:3a:3c:8d:a8:dc:23:9c:96:ba:96:98: 4d:bb:3f:05:ce:be:ff:1b:04:63:f2:8d:84:bd:2b: 73:63:b7:0a:01:9f:84:6a:90:f2:55:a7:15:83:1c: 0f:eb:ba:df:76:30:93:c9:a0:c8:d2:12:8f:7c:ae: 46:5b:bc:7f:40:cf:b5:bc:d6:45:76:72:dc:62:8c: cf:c5:aa:e9:fe:9c:f7:3f:bc:72:8d:9b:f7:d5:c2: 3a:b8:c8:6b:b6:3b:c4:24:9c:05:f5:e8:41:1c:a6: 23:a2:4f:b7:bd:78:df:b9:a9:0c:cb:51:a1:b4:2a: 68:a9:45:24:74:7e:82:b1:12:a0:73:fa:80:2b:c1: dc:9c:f5:71:db:31:a7:4d:34:8b:f6:96:9e:69:89: 47:4a:6b:1c:71:9e:57:b6:af:8e:1f:f9:85:52:95: 6d:8c:2f:07:b2:96:65:ec:9f:1b:75:3b:22:85:65: 9e:e4:67:48:62:e6:2b:07:0b:ac:e6:c6:27:2a:b4: 36:29:21:de:72:dc:a3:4b:22:36:72:cc:72:0d:b7: a4:e2:cb:75:62:39:c8:00:75:dd:38:f4:e2:02:6a: d6:37:28:81:c6:b0:b2:36:76:5a:35:a7:59:62:d4: 88:fa:82:26:0b:63:15:9e:d5:0c:77:45:92:6e:ab: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:D5:6D:70:67:62:A1:4B:19:A0:CF:6C:A5:AC:A1:E9:0B:11:C8 X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:84:7c:08:68:0d:55:7b:9d:4c:64:c2:50:e9:7e:a3:04:90: 07:6f:4c:02:b4:aa:d2:67:60:4c:e8:0a:3f:63:f6:a8:e3:b5: 89:3a:75:da:23:a6:46:9f:8c:75:6f:56:84:20:b0:65:42:e7: b1:cc:ad:86:81:63:b9:49:0f:c9:24:b1:3a:3a:5d:34:4d:b8: 04:ce:91:9a:69:18:e3:f2:3f:60:38:53:11:e2:20:a8:f2:ab: f0:e6:7f:47:84:7f:7b:86:23:1d:60:05:94:02:80:37:db:f8: 31:6e:b8:df:bd:fc:e4:16:ba:72:9e:d3:2d:b7:6b:eb:c9:fd: fc:25:63:b5:3d:0b:a6:27:77:67:b6:53:12:43:37:2a:bd:a6: 3a:b8:3c:02:27:1e:04:a5:cf:f9:f3:0b:9a:4f:e2:6e:1d:ff: d1:c7:fe:0a:a9:7f:bd:c6:01:08:c9:e1:a0:ed:b4:90:c4:aa: b8:28:67:1e:92:47:f1:af:9a:7c:da:3b:d9:0f:82:a5:a8:bb: d5:ec:c6:55:50:c8:12:66:1c:5e:a8:9e:34:23:c1:ac:66:c9: 5a:67:cc:47:88:8f:87:cf:af:fd:88:a0:fc:b8:74:73:7c:ec: 59:18:1e:a4:7b:1e:be:6c:94:8d:f4:e6:c6:4c:23:46:25:56: ee:4e:da:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjQwNTE4MjI0MTQ1WhcNMjQwNTI1MjI0MTQ1WjAYMRYwFAYD VQQDEw02NjQ5MmVhOS0yZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZlOOjyNqNwjnJa6lphNuz8Fzr7/GwRj8o2EvStzY7cKAZ+EapDyVacVgxwP 67rfdjCTyaDI0hKPfK5GW7x/QM+1vNZFdnLcYozPxarp/pz3P7xyjZv31cI6uMhr tjvEJJwF9ehBHKYjok+3vXjfuakMy1GhtCpoqUUkdH6CsRKgc/qAK8HcnPVx2zGn TTSL9paeaYlHSmsccZ5Xtq+OH/mFUpVtjC8HspZl7J8bdTsihWWe5GdIYuYrBwus 5sYnKrQ2KSHectyjSyI2csxyDbek4st1YjnIAHXdOPTiAmrWNyiBxrCyNnZaNadZ YtSI+oImC2MVntUMd0WSbqvrKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGk1W1w Z2KhSxmgz2ylrKHpCxHIMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThHwIaA1Ve51MZMJQ6X6jBJAHb0wCtKrSZ2BM6Ao/Y/ao47WJOnXa I6ZGn4x1b1aEILBlQuexzK2GgWO5SQ/JJLE6Ol00TbgEzpGaaRjj8j9gOFMR4iCo 8qvw5n9HhH97hiMdYAWUAoA32/gxbrjfvfzkFrpyntMtt2vryf38JWO1PQumJ3dn tlMSQzcqvaY6uDwCJx4Epc/58wuaT+JuHf/Rx/4KqX+9xgEIyeGg7bSQxKq4KGce kkfxr5p82jvZD4KlqLvV7MZVUMgSZhxeqJ40I8GsZslaZ8xHiI+Hz6/9iKD8uHRz fOxZGB6kex6+bJSN9ObGTCNGJVbuTtpw -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org