$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: +w3Qzg2C7PRU16Irm1T3TYVD3bgG5J2c/yBZolPJUkg= Subject key identifier: 7A:E5:F9:C9:E3:24:A9:FB:7B:3C:E5:8C:06:5A:C4:89:07:A0:23:5B Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: BA Signing time: Sun 19 May 2024 06:28:57 +0000 Manifest this update: Sun 19 May 2024 06:28:56 +0000 Manifest next update: Sun 26 May 2024 06:28:56 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: syw5g4em78xwYpTvnrR8e5+C0YblGtnKGwM9ux6YRs4=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: 8fhVAOrBtPoFZLM3BfANhmyQiq3l6EdqiAUT4gYpGG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: May 19 06:28:56 2024 GMT Not After : May 26 06:28:56 2024 GMT Subject: CN=66499c29-d5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:c6:f8:2c:a0:f9:5a:7b:97:8c:fb:dd:2f: e6:a4:1d:38:11:17:43:dd:62:3d:a1:d6:ce:ae:b4: 04:8e:62:e0:0b:33:fe:4a:4d:5d:db:ed:19:13:ac: 66:49:7a:73:0e:74:2b:1e:f9:16:c4:dd:91:3c:c1: 4d:8f:94:6f:30:79:ae:9b:bc:de:d7:06:8c:c1:d4: 19:af:dc:70:04:9a:60:f8:e6:2a:fd:29:d8:0b:a1: d7:58:09:a3:f8:63:ca:c1:eb:b3:ec:88:c6:f0:ff: 84:a5:7e:0f:9c:af:45:ec:3b:c9:13:54:10:f9:30: 62:b6:18:0c:ee:1d:06:8c:85:7b:1f:b9:be:c5:89: 36:56:d6:1f:be:e5:d0:20:da:72:f8:b6:61:7d:af: 82:c5:13:1f:39:c8:da:87:3a:03:a8:54:27:39:85: da:6b:ea:c6:a0:68:cf:a1:9e:99:74:05:87:7a:0f: bb:7c:f7:b1:f8:92:4f:b5:85:33:1f:24:78:7e:e7: af:95:f6:83:57:a9:e8:84:d7:82:3e:38:5f:b3:fb: 1c:10:65:86:37:5c:12:20:a1:ec:22:7d:ae:2a:1a: 16:d5:b8:77:88:0a:d2:c2:46:26:ac:2d:c9:e1:d0: a6:b6:e4:59:9e:9f:b9:e0:f2:01:63:97:31:ee:d1: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:F9:C9:E3:24:A9:FB:7B:3C:E5:8C:06:5A:C4:89:07:A0:23:5B X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2b:8e:65:9d:65:4d:bb:eb:79:e7:ac:a1:9e:0e:17:4c:5e: 75:30:0f:a7:0c:cf:7c:26:ac:8c:75:e9:fd:05:7d:5f:15:d3: 09:41:71:f8:e6:44:7e:5e:7b:e0:56:bb:32:9e:fb:f5:4b:72: 28:42:67:28:71:65:5b:da:b9:1e:83:8e:d7:74:c5:f8:bd:64: 64:cd:3d:af:0e:a6:a7:2a:92:cf:5c:d1:2e:e6:d4:a1:0a:37: 90:1f:c9:68:5c:b7:83:ae:87:25:82:a7:aa:41:b2:fd:b9:ab: 8e:89:19:b6:cd:0d:29:ac:f6:3b:50:ae:bc:70:45:21:6c:f5: 53:ae:ba:6b:99:8a:46:b9:77:a9:95:4f:b9:84:a0:14:e9:42: 10:35:03:c7:8e:14:81:4a:c2:33:e9:d8:b5:d9:99:60:e5:2a: 1e:79:89:9a:6c:4c:8a:2c:c8:24:2d:1b:24:7e:c8:c3:f4:65: f3:e1:fd:ca:20:74:27:4c:cf:6b:c1:f0:6f:af:1d:33:b5:fb: 08:c3:83:9f:e3:5e:91:0e:ed:c6:de:53:ba:9a:d7:72:0d:c7: 14:33:88:71:3a:b6:68:0e:c0:f6:bd:60:46:e8:1d:17:fd:89: d1:3e:d0:db:a6:37:8a:ba:61:18:80:3a:b6:7c:ee:a6:97:c9: 46:90:61:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjQwNTE5MDYyODU2WhcNMjQwNTI2MDYyODU2WjAYMRYwFAYD VQQDEw02NjQ5OWMyOS1kNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n/G+Cyg+Vp7l4z73S/mpB04ERdD3WI9odbOrrQEjmLgCzP+Sk1d2+0ZE6xm SXpzDnQrHvkWxN2RPMFNj5RvMHmum7ze1waMwdQZr9xwBJpg+OYq/SnYC6HXWAmj +GPKweuz7IjG8P+EpX4PnK9F7DvJE1QQ+TBithgM7h0GjIV7H7m+xYk2VtYfvuXQ INpy+LZhfa+CxRMfOcjahzoDqFQnOYXaa+rGoGjPoZ6ZdAWHeg+7fPex+JJPtYUz HyR4fuevlfaDV6nohNeCPjhfs/scEGWGN1wSIKHsIn2uKhoW1bh3iArSwkYmrC3J 4dCmtuRZnp+54PIBY5cx7tEoNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrl+cnj JKn7ezzljAZaxIkHoCNbMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDK45lnWVNu+t556yhng4XTF51MA+nDM98JqyMden9BX1fFdMJQXH4 5kR+XnvgVrsynvv1S3IoQmcocWVb2rkeg47XdMX4vWRkzT2vDqanKpLPXNEu5tSh CjeQH8loXLeDroclgqeqQbL9uauOiRm2zQ0prPY7UK68cEUhbPVTrrprmYpGuXep lU+5hKAU6UIQNQPHjhSBSsIz6di12Zlg5SoeeYmabEyKLMgkLRskfsjD9GXz4f3K IHQnTM9rwfBvrx0ztfsIw4Of416RDu3G3lO6mtdyDccUM4hxOrZoDsD2vWBG6B0X /YnRPtDbpjeKumEYgDq2fO6ml8lGkGFw -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org