$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft File: stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json) Hash identifier: iaX+Z5o9BVQ/AuYsQ5lYo61tdzJHcELRmJy9TZ0+SFo= Subject key identifier: 91:E4:49:FD:52:2F:C6:58:46:0D:04:49:B1:49:B9:96:B2:F0:1C:CF Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 Certificate issuer: /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft Manifest number: 0729 Signing time: Sat 18 May 2024 22:27:55 +0000 Manifest this update: Sat 18 May 2024 22:27:54 +0000 Manifest next update: Sat 25 May 2024 22:27:54 +0000 Files and hashes: 1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: HqQhF2dbOxhVtX0fEgkZIIiTdrzqS5E+g8G+H979oww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Validity Not Before: May 18 22:27:54 2024 GMT Not After : May 25 22:27:54 2024 GMT Subject: CN=66492b6b-6d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:d3:4c:20:21:57:a3:d5:64:df:01:fd:f7: ed:fc:57:99:15:a1:66:04:c0:cc:fe:b9:3f:72:bd: 6b:dd:64:8f:64:75:e3:e7:ef:99:8f:59:f4:0d:31: 09:81:bc:0d:3a:11:1e:a7:bd:6e:df:35:69:2b:42: 60:b5:49:39:c7:ff:95:5c:2b:4b:29:ce:dd:27:ed: 1c:4c:11:c7:6e:24:ab:7b:22:a8:90:8f:1e:ab:d5: 86:94:5d:6f:62:70:b3:4b:75:37:5b:28:d0:43:75: 3c:f3:b6:41:78:a2:ac:3e:95:e5:29:5c:93:95:91: 78:05:7c:87:f8:e0:03:cf:74:bd:86:80:c8:33:0a: 89:7e:43:05:c7:fe:8f:20:91:b5:e2:9e:78:f0:a4: 6c:90:f8:35:c7:cf:a2:9e:d0:71:83:af:be:4e:df: a5:4f:3b:f3:5f:a2:a3:d0:04:15:3f:b1:8d:25:e9: c4:54:97:20:e0:d9:86:13:90:ab:9f:9e:9f:78:d5: 3f:bb:20:b1:20:b9:8f:e1:d1:b1:3b:25:e4:e8:cd: 97:68:3b:3a:dd:34:de:da:1c:ae:b7:e9:b8:96:3d: 2a:cd:03:8c:14:2e:f3:ef:3a:38:ef:3d:da:0e:8c: 2b:70:af:7b:c0:8c:31:b4:a6:0b:cd:cd:84:fb:a0: b4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:49:FD:52:2F:C6:58:46:0D:04:49:B1:49:B9:96:B2:F0:1C:CF X509v3 Authority Key Identifier: keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a2:90:19:de:36:73:63:a1:f7:7b:7d:ae:a6:56:8d:0e:3d: b7:d2:67:ba:58:c0:ec:0a:16:c4:1c:01:7c:af:22:72:16:5e: c8:70:94:a9:31:3a:16:43:3b:a9:c2:2d:41:1a:5d:5b:1a:49: d9:9e:7a:3d:11:e2:d1:0e:4e:ad:33:52:86:d6:73:b0:b7:7b: 21:10:25:fe:ee:24:5b:77:30:8b:d1:56:a9:a7:b6:93:0d:5f: 8c:7c:f9:d3:19:ec:13:52:47:ea:85:72:16:6f:18:bd:d8:82: 2d:ed:cf:11:49:4a:41:12:0f:58:f2:fd:00:dd:77:7e:c7:73: 19:37:ce:1f:a4:3e:3a:7c:8f:a6:45:04:70:64:87:0d:e3:8c: 3a:36:1f:5d:19:69:41:8c:e0:0b:71:49:4b:ab:b0:5c:0c:0f: ce:69:f1:bd:16:87:3d:d1:a7:e0:1c:dd:f2:57:61:a1:3b:2d: ed:88:c1:70:38:9c:c1:84:b6:62:e5:47:9f:db:ce:31:b8:f2: 7a:bf:af:f5:10:06:71:c9:9b:75:10:4c:d4:ee:7f:60:9d:97: 6e:32:e2:7b:6d:6e:8d:76:ce:86:00:47:83:a0:75:0d:40:a9: 30:34:93:9d:4d:bf:b0:cf:8f:45:11:e7:39:1b:1c:11:75:b3: 3b:e3:b3:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJGRDIxMTAvBgNVBAUTKEIyREE2Q0EyRjE3RURERUVCNEM0NTAzMzYxRjREODgy MjgwQkNBODgwHhcNMjQwNTE4MjIyNzU0WhcNMjQwNTI1MjIyNzU0WjAYMRYwFAYD VQQDEw02NjQ5MmI2Yi02ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBLTTCAhV6PVZN8B/fft/FeZFaFmBMDM/rk/cr1r3WSPZHXj5++Zj1n0DTEJ gbwNOhEep71u3zVpK0JgtUk5x/+VXCtLKc7dJ+0cTBHHbiSreyKokI8eq9WGlF1v YnCzS3U3WyjQQ3U887ZBeKKsPpXlKVyTlZF4BXyH+OADz3S9hoDIMwqJfkMFx/6P IJG14p548KRskPg1x8+intBxg6++Tt+lTzvzX6Kj0AQVP7GNJenEVJcg4NmGE5Cr n56feNU/uyCxILmP4dGxOyXk6M2XaDs63TTe2hyut+m4lj0qzQOMFC7z7zo47z3a DowrcK97wIwxtKYLzc2E+6C0kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHkSf1S L8ZYRg0ESbFJuZay8BzPMB8GA1UdIwQYMBaAFLLabKLxft3utMRQM2H02IIoC8qI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkZEMi9DODFCMjYyOEU1 RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNlNjB4RkF6WWZUWWdpZ0x5 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0cHNvdkYtM2U2MHhGQXpZZlRZZ2lnTHlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkZEMi9DODFCMjYyOEU1RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNl NjB4RkF6WWZUWWdpZ0x5b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6opAZ3jZzY6H3e32uplaNDj230me6WMDsChbEHAF8ryJyFl7IcJSp MToWQzupwi1BGl1bGknZnno9EeLRDk6tM1KG1nOwt3shECX+7iRbdzCL0Vapp7aT DV+MfPnTGewTUkfqhXIWbxi92IIt7c8RSUpBEg9Y8v0A3Xd+x3MZN84fpD46fI+m RQRwZIcN44w6Nh9dGWlBjOALcUlLq7BcDA/OafG9Foc90afgHN3yV2GhOy3tiMFw OJzBhLZi5Uef284xuPJ6v6/1EAZxyZt1EEzU7n9gnZduMuJ7bW6Nds6GAEeDoHUN QKkwNJOdTb+wz49FEec5GxwRdbM747Pe -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org