$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: TxGg3IgNZ2o1tqmxJPH9wFwNcZZd4MgaTRRy4DES+zo= Subject key identifier: 59:BA:DE:6B:1D:AD:75:22:A3:79:EE:CB:6E:B6:ED:E8:1A:4C:F8:7F Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 021A Signing time: Sun 19 May 2024 04:09:34 +0000 Manifest this update: Sun 19 May 2024 04:09:33 +0000 Manifest next update: Sun 26 May 2024 04:09:33 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: zkMaP50N5ttyYeIfGi2L5F6b8l35Xa9EJtLd7FMmazw=) 2: 4F505AA0070B11ED930D5F18C4F9AE02.roa (hash: uznldHTlxZglNS1Obt5L7o+FE66BnBQMEM7HyJiB/Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: May 19 04:09:33 2024 GMT Not After : May 26 04:09:33 2024 GMT Subject: CN=66497b7d-c326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:c9:76:96:81:8a:39:88:b2:86:55:86:43: a0:f1:7d:4d:54:39:d7:06:c3:80:55:1c:18:2d:99: 0b:7d:ff:4e:14:28:a1:5c:97:de:95:e5:1c:48:67: a9:43:21:22:af:69:c2:24:32:8b:87:65:70:ae:09: 3c:01:f7:18:53:93:5a:1d:85:b2:6e:b2:4f:a8:da: fd:e2:14:d9:b3:43:8f:1a:76:ab:8b:d6:f5:a2:e4: 20:ac:4b:2e:01:9c:95:cd:90:08:3d:7d:7e:c0:47: 7a:5d:71:e4:d0:a6:32:8c:6e:35:aa:18:cd:24:84: ab:f7:b1:b5:bb:85:30:61:40:13:06:4e:6a:17:05: 63:20:23:d1:cf:5f:43:d6:3d:c5:be:ee:1f:0a:2e: 64:af:5e:79:9d:31:36:c5:a6:b8:21:fb:c6:6b:cf: 10:f6:6d:b7:f4:a2:2c:c2:3b:ee:8b:ee:9d:40:04: 98:a2:6f:a1:49:6e:9f:45:01:d1:23:3d:f6:de:54: af:5c:a5:37:4c:72:e9:43:82:73:b9:f5:18:f0:a7: 76:96:2c:d7:5d:ed:67:27:9d:84:78:f6:d4:15:7d: e4:df:1a:32:63:4d:03:d0:7b:9e:be:05:fa:e6:ac: 5e:67:f3:b0:22:b5:99:7c:21:75:76:96:a6:1f:e5: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BA:DE:6B:1D:AD:75:22:A3:79:EE:CB:6E:B6:ED:E8:1A:4C:F8:7F X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:44:51:5f:ce:e9:70:be:06:c8:1c:a4:47:67:70:92:c4:a6: 7a:5b:39:26:0a:04:32:d3:9f:8b:4b:a8:57:71:ff:98:9a:5e: 00:18:23:d9:a0:68:00:09:28:21:37:c8:80:0b:2d:07:c1:d5: bc:cc:28:8c:b7:43:8f:af:ad:7f:21:64:3e:38:70:13:76:f5: 96:1e:aa:24:80:d9:a8:89:0b:de:b5:98:10:af:4b:4e:f3:76: f6:5a:1f:5a:e3:6c:fc:2a:d2:f2:06:ae:98:bd:d7:88:e6:21: 27:d5:2f:68:b8:ed:28:a5:18:2f:15:0a:4c:69:87:7d:c2:71: 9d:92:dc:64:da:e9:df:c1:d5:b7:ef:11:ba:63:50:96:17:4c: 97:46:95:95:02:40:e1:63:80:eb:b0:7c:53:9e:05:68:e4:80: 83:0a:4b:1b:f8:3a:53:49:9b:28:e0:17:4c:f4:85:cc:b8:03: 57:b8:08:76:f2:5c:f8:be:a6:f6:c0:6f:57:39:3d:ad:93:b3: e0:78:78:94:e7:a0:ba:1e:32:d2:d4:57:0a:51:c3:f5:0f:0c: 60:b6:58:53:c9:99:c7:37:62:9d:f2:b1:82:e8:08:0e:9c:1c: 15:cd:9f:36:45:5b:7c:04:1b:3f:1a:94:11:45:ae:aa:56:d4: 87:65:e2:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjQwNTE5MDQwOTMzWhcNMjQwNTI2MDQwOTMzWjAYMRYwFAYD VQQDEw02NjQ5N2I3ZC1jMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+zJdpaBijmIsoZVhkOg8X1NVDnXBsOAVRwYLZkLff9OFCihXJfeleUcSGep QyEir2nCJDKLh2Vwrgk8AfcYU5NaHYWybrJPqNr94hTZs0OPGnari9b1ouQgrEsu AZyVzZAIPX1+wEd6XXHk0KYyjG41qhjNJISr97G1u4UwYUATBk5qFwVjICPRz19D 1j3Fvu4fCi5kr155nTE2xaa4IfvGa88Q9m239KIswjvui+6dQASYom+hSW6fRQHR Iz323lSvXKU3THLpQ4JzufUY8Kd2lizXXe1nJ52EePbUFX3k3xoyY00D0HuevgX6 5qxeZ/OwIrWZfCF1dpamH+XVeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm63msd rXUio3nuy2627egaTPh/MB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVRFFfzulwvgbIHKRHZ3CSxKZ6WzkmCgQy05+LS6hXcf+Yml4AGCPZ oGgACSghN8iACy0HwdW8zCiMt0OPr61/IWQ+OHATdvWWHqokgNmoiQvetZgQr0tO 83b2Wh9a42z8KtLyBq6YvdeI5iEn1S9ouO0opRgvFQpMaYd9wnGdktxk2unfwdW3 7xG6Y1CWF0yXRpWVAkDhY4DrsHxTngVo5ICDCksb+DpTSZso4BdM9IXMuANXuAh2 8lz4vqb2wG9XOT2tk7PgeHiU56C6HjLS1FcKUcP1DwxgtlhTyZnHN2Kd8rGC6AgO nBwVzZ82RVt8BBs/GpQRRa6qVtSHZeK7 -----END CERTIFICATE-----Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org