$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft File: RiOppNLqhemPtaEaDSywgDiHjw8.mft (raw, json) Hash identifier: bNYDFx5TQg2UtAZm8QCTxF3y/XeuDE80hSI/mU/0rxs= Subject key identifier: 44:B8:BB:BA:B8:DC:60:8E:81:67:6A:DC:30:AD:98:3E:97:FE:1F:4E Authority key identifier: 46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F Certificate issuer: /CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft Manifest number: 0B0B Signing time: Sat 18 May 2024 19:53:41 +0000 Manifest this update: Sat 18 May 2024 19:53:40 +0000 Manifest next update: Sat 25 May 2024 19:53:40 +0000 Files and hashes: 1: RiOppNLqhemPtaEaDSywgDiHjw8.crl (hash: atHtd4ZMCycTs7+xCiyQuYn4ZAGzlSGA5UGeURaaOcw=) 2: 75E6DD481BDA11EAB3F45D44C4F9AE02.roa (hash: Xtv6Y9TIp58J/Deaopnkugbsn8m8i/vuYl6S4nR1F6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Validity Not Before: May 18 19:53:40 2024 GMT Not After : May 25 19:53:40 2024 GMT Subject: CN=66490745-a1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:98:e7:27:a6:7d:12:2e:63:f6:c5:57:34: ae:71:28:12:31:b4:44:c3:6c:00:bb:6c:a9:23:6b: 4a:df:44:24:34:b7:52:bd:3c:f7:fc:b0:24:75:3c: de:5e:f1:22:56:f1:3b:67:42:28:be:ad:4e:53:b6: 75:54:96:7c:23:d4:36:ed:0a:a2:4d:8a:a0:85:75: 41:d7:37:d2:97:e3:c2:92:27:35:66:be:13:bc:06: b1:7f:6c:7b:5a:4a:d4:77:01:26:d0:35:a1:05:75: 28:dd:c9:a7:87:9d:78:08:0f:b8:d7:86:7e:72:d5: 5f:68:e7:2d:d2:05:5a:27:0e:6e:f8:3e:cf:7c:52: 7e:c6:e6:14:58:cf:3a:c5:fe:be:9d:9a:c6:65:fa: f8:8a:e9:ec:65:67:4b:5d:c0:8d:eb:c6:e9:4b:3c: 2c:7b:c8:11:a8:40:07:ce:b6:08:a1:11:a6:5c:6d: 45:6a:fd:5d:65:31:12:e0:b0:f3:d0:21:72:83:62: 73:14:da:f3:40:ed:a1:1f:a4:22:20:62:3f:10:0f: 44:93:9e:0a:ee:32:48:02:ab:11:4c:89:e8:e9:25: 9d:6b:00:56:41:14:f0:29:06:a0:db:92:0f:c8:06: e9:cf:89:ae:83:3f:31:e9:a2:03:61:b9:5a:9f:2b: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B8:BB:BA:B8:DC:60:8E:81:67:6A:DC:30:AD:98:3E:97:FE:1F:4E X509v3 Authority Key Identifier: keyid:46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:a8:17:70:02:29:c6:d7:64:4e:b9:d3:78:96:cc:d2:04:d5: 57:38:0a:bb:1c:19:a0:5d:a0:e0:f4:3c:12:0c:ec:e9:8a:55: 01:06:3d:1b:ea:64:15:14:ec:cc:fa:f9:bb:65:64:18:89:29: 8d:03:8e:11:ef:e1:03:ff:58:42:3e:0f:09:f8:64:3f:56:e6: fd:06:64:cf:2e:86:a5:ff:cf:6b:96:b9:2d:28:96:0f:3d:dd: 60:c7:8e:ec:05:52:9e:9e:73:43:e3:9b:a8:b4:89:8f:24:44: 9b:53:ef:fe:e9:0f:50:17:77:2a:9a:23:5f:5c:33:6b:42:c3: 01:a6:b8:5b:64:9b:ca:3a:06:0e:75:f1:76:16:07:76:6a:0c: 67:7b:c0:8e:c6:e8:58:cc:ca:3f:b7:2f:b1:53:bb:81:33:53: 2f:9d:76:0d:49:38:2b:ab:38:41:00:73:d7:fc:66:bf:74:42: ec:01:af:39:37:da:25:c2:9d:87:18:12:3f:e3:09:9b:6e:f7: 0d:98:31:28:86:27:a8:0e:64:6f:76:95:fb:b5:f1:c9:9d:16: 0a:d3:b0:bb:bc:7d:e7:dc:d0:66:b8:9c:f7:84:50:ea:bc:9a: 75:f3:f2:c1:5b:5b:b2:cf:68:11:b9:73:bf:04:50:0d:57:7b: 30:44:ee:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDQ2MjNBOUE0RDJFQTg1RTk4RkI1QTExQTBEMkNCMDgw Mzg4NzhGMEYwHhcNMjQwNTE4MTk1MzQwWhcNMjQwNTI1MTk1MzQwWjAYMRYwFAYD VQQDEw02NjQ5MDc0NS1hMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FWY5yemfRIuY/bFVzSucSgSMbREw2wAu2ypI2tK30QkNLdSvTz3/LAkdTze XvEiVvE7Z0Iovq1OU7Z1VJZ8I9Q27QqiTYqghXVB1zfSl+PCkic1Zr4TvAaxf2x7 WkrUdwEm0DWhBXUo3cmnh514CA+414Z+ctVfaOct0gVaJw5u+D7PfFJ+xuYUWM86 xf6+nZrGZfr4iunsZWdLXcCN68bpSzwse8gRqEAHzrYIoRGmXG1Fav1dZTES4LDz 0CFyg2JzFNrzQO2hH6QiIGI/EA9Ek54K7jJIAqsRTIno6SWdawBWQRTwKQag25IP yAbpz4mugz8x6aIDYblanysrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES4u7q4 3GCOgWdq3DCtmD6X/h9OMB8GA1UdIwQYMBaAFEYjqaTS6oXpj7WhGg0ssIA4h48P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9EMDA0OUY4NjFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhlbVB0YUVhRFN5d2dEaUhq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JpT3BwTkxxaGVtUHRhRWFEU3l3Z0RpSGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9EMDA0OUY4NjFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhl bVB0YUVhRFN5d2dEaUhqdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAqBdwAinG12ROudN4lszSBNVXOAq7HBmgXaDg9DwSDOzpilUBBj0b 6mQVFOzM+vm7ZWQYiSmNA44R7+ED/1hCPg8J+GQ/Vub9BmTPLoal/89rlrktKJYP Pd1gx47sBVKennND45uotImPJESbU+/+6Q9QF3cqmiNfXDNrQsMBprhbZJvKOgYO dfF2Fgd2agxne8COxuhYzMo/ty+xU7uBM1MvnXYNSTgrqzhBAHPX/Ga/dELsAa85 N9olwp2HGBI/4wmbbvcNmDEohieoDmRvdpX7tfHJnRYK07C7vH3n3NBmuJz3hFDq vJp18/LBW1uyz2gRuXO/BFANV3swRO7n -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org