$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: N79zQYNeDDC17oyo1EEpe2NYuvhbhi0qFZfOTuWfc6w= Subject key identifier: E2:67:AA:3A:C2:0E:95:C2:8B:71:D8:F3:BB:50:3C:BC:DF:E5:8B:AC Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 098D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 097D Signing time: Sat 18 May 2024 20:59:09 +0000 Manifest this update: Sat 18 May 2024 20:59:08 +0000 Manifest next update: Sat 25 May 2024 20:59:08 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: z9VVSPxDWWAPFIWAq+460HkLPDEmamp3rsz58Kj/N2M=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: CYluTFrgBey6y13Wc0qfpVx8mUC8dXDBrmvQpYKEaB4=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: f/OYcKgJTCnL8tuuo/kt3yp3h+qpGdrKS6DF6woKA8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2445 (0x98d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: May 18 20:59:08 2024 GMT Not After : May 25 20:59:08 2024 GMT Subject: CN=6649169c-b9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:94:b5:6a:4c:aa:ea:54:8d:ed:7b:25:50: ae:7c:c2:ad:73:5a:10:93:70:aa:32:e7:b3:54:15: 87:7f:8c:97:a2:d7:63:25:a4:73:9d:c6:77:56:d5: 30:a5:64:41:e9:5d:ad:0b:08:cb:39:ca:8d:31:b1: a0:d7:4e:63:e5:16:8a:57:38:53:d9:61:fc:4c:d4: c4:02:5e:b8:ca:2d:e1:36:67:c3:65:67:90:2d:3d: 3e:ee:88:ce:36:92:ec:df:8e:4a:6e:03:52:55:6f: a2:05:71:3e:a6:fe:36:47:a6:79:e7:53:01:c0:36: 43:1d:d1:52:ee:f2:ec:cc:f2:e1:18:d4:37:86:a2: ac:76:b8:c2:7c:fb:15:a0:0a:02:70:df:b2:da:89: da:7b:42:82:19:db:38:04:d6:65:d0:b1:a2:7e:7d: 02:11:35:02:eb:10:0d:63:24:5c:e7:42:9c:7a:b0: ba:7a:bf:64:39:84:1c:1c:d0:d8:a8:6b:ff:a7:bb: 64:ae:b3:a9:f7:9a:72:52:5a:38:c0:ef:83:8e:f3: 2f:91:0b:8e:fa:1b:1d:54:b8:16:03:cc:ea:1d:6d: f5:96:ed:96:7e:3f:8e:57:2c:69:db:c8:22:2b:f1: 14:7e:74:ba:ab:41:f2:d0:04:aa:86:70:bd:ac:14: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:67:AA:3A:C2:0E:95:C2:8B:71:D8:F3:BB:50:3C:BC:DF:E5:8B:AC X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8c:2d:2f:a5:49:f9:e8:ab:d5:dc:86:c5:81:7c:83:3d:b1: a7:9b:80:b9:5a:a0:30:13:8b:f9:01:55:43:ad:23:1c:f3:c6: 65:ba:cb:0e:a6:14:35:0f:82:e5:df:88:4b:9d:8e:9a:d3:49: 30:a9:3b:a1:e8:b7:55:5f:5d:a7:93:b3:fe:cf:7c:15:02:39: bc:bd:4d:54:cd:d6:c5:6f:88:4e:39:32:e5:90:83:bb:e3:00: b2:50:68:51:9e:d4:be:c0:14:b1:de:8a:30:ca:13:ee:e0:1f: 8a:cb:c7:54:d0:cc:12:27:cb:c5:74:f1:7d:bb:92:e8:57:33: 9a:b5:f8:04:b4:11:a4:a3:ce:2a:ab:95:1d:c1:e0:b2:b1:08: 90:8c:18:b5:c8:aa:87:c3:2a:17:8e:56:0c:7d:46:fc:f7:6f: 26:09:cb:28:76:a6:2f:2d:80:64:91:23:f5:ac:ab:8a:f2:74: b8:e0:57:01:56:6c:30:ed:0d:b9:75:02:33:e5:2d:ca:ac:19: 05:fe:72:03:bd:5b:55:00:90:32:1c:68:dd:c8:b1:1d:b2:bd: 49:09:70:bb:50:ba:a2:b2:3b:0f:fc:56:b5:3e:41:23:61:9c: 9d:25:79:39:b9:85:8e:54:5e:5a:ec:93:fc:ea:e8:0d:29:7a: c7:10:f4:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjQwNTE4MjA1OTA4WhcNMjQwNTI1MjA1OTA4WjAYMRYwFAYD VQQDEw02NjQ5MTY5Yy1iOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspaUtWpMqupUje17JVCufMKtc1oQk3CqMuezVBWHf4yXotdjJaRzncZ3VtUw pWRB6V2tCwjLOcqNMbGg105j5RaKVzhT2WH8TNTEAl64yi3hNmfDZWeQLT0+7ojO NpLs345KbgNSVW+iBXE+pv42R6Z551MBwDZDHdFS7vLszPLhGNQ3hqKsdrjCfPsV oAoCcN+y2onae0KCGds4BNZl0LGifn0CETUC6xANYyRc50KcerC6er9kOYQcHNDY qGv/p7tkrrOp95pyUlo4wO+DjvMvkQuO+hsdVLgWA8zqHW31lu2Wfj+OVyxp28gi K/EUfnS6q0Hy0ASqhnC9rBS0DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJnqjrC DpXCi3HY87tQPLzf5YusMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdjC0vpUn56KvV3IbFgXyDPbGnm4C5WqAwE4v5AVVDrSMc88ZlussO phQ1D4Ll34hLnY6a00kwqTuh6LdVX12nk7P+z3wVAjm8vU1UzdbFb4hOOTLlkIO7 4wCyUGhRntS+wBSx3oowyhPu4B+Ky8dU0MwSJ8vFdPF9u5LoVzOatfgEtBGko84q q5UdweCysQiQjBi1yKqHwyoXjlYMfUb8928mCcsodqYvLYBkkSP1rKuK8nS44FcB Vmww7Q25dQIz5S3KrBkF/nIDvVtVAJAyHGjdyLEdsr1JCXC7ULqisjsP/Fa1PkEj YZydJXk5uYWOVF5a7JP86ugNKXrHEPRb -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org