$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json) Hash identifier: 6TkGbFbDmrCV9RU8xGkz11MD/yJTnXgzWIf/Jp6KAqo= Subject key identifier: E8:00:B6:D7:20:F1:BE:B0:1E:2D:2F:85:73:CA:86:99:0E:26:FD:D6 Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Certificate serial: 1FB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft Manifest number: 1FAB Signing time: Sat 18 May 2024 16:20:52 +0000 Manifest this update: Sat 18 May 2024 16:20:51 +0000 Manifest next update: Sat 25 May 2024 16:20:51 +0000 Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: CD2Ek0X/CilbTMgNUaDMTCBr7h27p0p4NYlXAtYpDVU=) 2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: hFvoTK4OtAWXeUzfRY08E0R6vhbINiOuVhDEOiD6rEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8114 (0x1fb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Validity Not Before: May 18 16:20:51 2024 GMT Not After : May 25 16:20:51 2024 GMT Subject: CN=6648d563-7c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:cb:55:c1:a4:e7:6b:06:84:7d:a8:c2:9b: b8:aa:64:84:1d:ae:2a:2a:11:c1:5b:fa:83:83:0f: f7:a3:e4:02:3b:f6:68:96:e4:c8:05:d4:92:92:ce: b3:e6:a0:90:f1:26:72:dc:f2:27:74:d0:10:7f:24: be:71:70:30:d9:40:39:53:2f:fd:19:29:b2:58:1c: b7:3a:f2:62:84:a6:7e:bc:1f:89:b3:a6:6b:c2:7f: 06:7f:7b:9e:0b:30:89:08:5d:a3:89:84:70:44:38: 31:7b:78:b9:fc:51:c1:f3:3d:a2:08:3a:40:68:08: 61:ad:ca:a9:1b:bf:f5:d0:99:e0:d7:5f:f2:21:35: a7:3e:9b:28:0f:e6:ea:70:fa:57:e1:56:06:b1:56: 92:00:00:d5:76:60:e9:fb:65:9d:76:fe:d3:71:e4: 76:29:d5:8a:fe:49:a9:d6:4d:28:16:7b:14:bb:bb: 26:6f:8e:af:91:24:b9:51:93:5a:df:17:a3:38:3c: 70:56:1a:a9:45:83:84:f7:bc:f6:5e:d3:a7:4f:16: 96:c8:16:53:ed:1b:ca:08:f1:a7:b1:2c:be:03:d5: 71:09:d4:13:94:73:85:d7:94:d1:b2:c1:54:09:36: 2b:e6:a6:cf:bd:1a:1e:61:62:f4:c9:20:94:1b:2f: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:B6:D7:20:F1:BE:B0:1E:2D:2F:85:73:CA:86:99:0E:26:FD:D6 X509v3 Authority Key Identifier: keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3b:b8:a6:74:35:0e:de:c9:81:92:1c:00:4c:7c:fb:d9:22: 24:93:1e:d0:97:88:2b:ac:8b:a6:73:44:5f:a7:0f:33:d3:15: 5e:1e:09:45:ad:b9:4f:d8:a8:08:0b:12:2c:06:9c:12:42:5a: 40:3f:99:42:de:04:da:1f:85:7f:17:eb:55:4b:1c:1a:3d:78: 57:a9:ea:fe:28:6b:1a:5c:eb:2a:90:8c:d1:b3:e7:12:60:d2: 8d:50:a9:23:79:cf:97:60:a4:67:51:62:4b:82:90:1e:bf:29: 78:00:11:d2:60:a1:30:fe:08:db:1a:ae:d0:83:8b:c2:b4:d1: 6e:73:c1:53:02:0c:20:11:32:97:02:48:d8:d6:03:c0:3f:ca: 32:af:00:32:5a:1b:81:15:f2:80:05:87:31:85:95:32:d4:45: 17:bb:40:b9:8a:64:0c:37:a2:a2:25:5b:f3:66:1f:00:e8:8d: 68:55:d9:8b:94:cb:92:de:84:b0:d9:d5:b6:79:1f:a4:cf:4f: 16:9b:b5:5c:e5:50:fa:7c:75:46:bb:f2:2b:fb:57:1e:fd:07: 01:be:8a:00:1d:e9:9f:a0:e4:ad:bf:b2:40:77:98:f7:70:8d: 3b:4f:aa:56:0c:d5:d0:40:39:75:9c:d9:02:3a:3d:41:b4:3a: cc:96:a7:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB QzFDM0E1RTcwHhcNMjQwNTE4MTYyMDUxWhcNMjQwNTI1MTYyMDUxWjAYMRYwFAYD VQQDEw02NjQ4ZDU2My03YzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16HLVcGk52sGhH2owpu4qmSEHa4qKhHBW/qDgw/3o+QCO/ZoluTIBdSSks6z 5qCQ8SZy3PIndNAQfyS+cXAw2UA5Uy/9GSmyWBy3OvJihKZ+vB+Js6Zrwn8Gf3ue CzCJCF2jiYRwRDgxe3i5/FHB8z2iCDpAaAhhrcqpG7/10Jng11/yITWnPpsoD+bq cPpX4VYGsVaSAADVdmDp+2Wddv7TceR2KdWK/kmp1k0oFnsUu7smb46vkSS5UZNa 3xejODxwVhqpRYOE97z2XtOnTxaWyBZT7RvKCPGnsSy+A9VxCdQTlHOF15TRssFU CTYr5qbPvRoeYWL0ySCUGy8qeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgAttcg 8b6wHi0vhXPKhpkOJv3WMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x aC11dGhFell4Q2FzSERwZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrO7imdDUO3smBkhwATHz72SIkkx7Ql4grrIumc0Rfpw8z0xVeHglF rblP2KgICxIsBpwSQlpAP5lC3gTaH4V/F+tVSxwaPXhXqer+KGsaXOsqkIzRs+cS YNKNUKkjec+XYKRnUWJLgpAevyl4ABHSYKEw/gjbGq7Qg4vCtNFuc8FTAgwgETKX AkjY1gPAP8oyrwAyWhuBFfKABYcxhZUy1EUXu0C5imQMN6KiJVvzZh8A6I1oVdmL lMuS3oSw2dW2eR+kz08Wm7Vc5VD6fHVGu/Ir+1ce/QcBvooAHemfoOStv7JAd5j3 cI07T6pWDNXQQDl1nNkCOj1BtDrMlqff -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org