$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft File: XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (raw, json) Hash identifier: gQbESz2H3DeOdXlhMo68lSyfntuAl09mGPkglgLdib0= Subject key identifier: BF:58:DF:4C:AB:A1:93:C1:58:EA:D3:70:37:D1:07:49:6B:B8:87:85 Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD Certificate issuer: /CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Certificate serial: 2442 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft Manifest number: 2442 Signing time: Sat 18 May 2024 14:16:44 +0000 Manifest this update: Sat 18 May 2024 14:16:44 +0000 Manifest next update: Sat 25 May 2024 14:16:44 +0000 Files and hashes: 1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl (hash: /e7W+gLbMqivX0bceXX6n6h7YpUSZfoG1hFk9Wf1BGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9282 (0x2442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Validity Not Before: May 18 14:16:44 2024 GMT Not After : May 25 14:16:44 2024 GMT Subject: CN=6648b84c-c243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:be:8c:ce:97:f9:3e:53:00:20:14:96:23: cb:d0:6f:74:fb:ee:fe:b3:41:86:ae:1e:6c:db:8a: 76:9d:d6:be:06:63:42:02:f0:0c:51:4f:99:7a:99: 17:a7:52:9c:cf:76:01:dc:a9:2e:2f:5c:4d:85:cd: 24:ab:10:ad:b5:ea:3e:61:df:af:eb:31:59:61:75: cc:bc:ce:02:e3:72:a3:3b:2d:97:8a:5b:7a:dc:44: 12:9f:50:84:55:07:c5:60:7f:51:61:ac:56:a4:c8: 87:3c:7b:13:38:34:ab:86:bc:72:99:75:d4:08:e2: 6f:22:d7:06:a1:59:8e:8e:8d:b0:cf:19:ad:5d:99: 4d:a4:c8:60:c9:ac:60:a0:da:1f:85:e5:cf:f1:38: fa:1a:cf:81:3e:ea:41:d0:a5:dd:80:04:14:d4:ab: 42:1c:e5:03:38:e3:18:fa:74:0e:fb:86:70:08:8d: ff:34:bf:c8:18:b0:12:19:be:a5:ff:78:91:d7:e7: 98:48:4c:bb:c6:16:a8:97:cf:c0:ef:67:92:b4:f6: c4:94:b5:6f:bf:73:91:eb:55:a3:71:10:b6:72:8e: 35:c2:6e:e3:6e:d9:95:15:61:01:87:2c:1e:23:78: 41:36:77:8c:2d:79:c0:cd:37:5c:e6:21:b8:ee:70: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:58:DF:4C:AB:A1:93:C1:58:EA:D3:70:37:D1:07:49:6B:B8:87:85 X509v3 Authority Key Identifier: keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:1e:2e:a3:3c:fe:18:64:88:14:f6:a0:11:53:68:6d:1c:0c: 97:ab:2b:21:76:7b:e3:b5:8e:08:50:c8:1e:c6:fa:c6:9b:dc: 32:85:a0:de:cb:0c:80:db:3d:4f:1d:ef:5f:ad:5f:b1:47:4d: c7:5a:88:0f:39:01:f4:91:43:80:eb:80:b7:02:e4:b8:bf:99: ac:81:f0:95:9d:90:66:72:ed:1b:f4:7e:6d:12:1f:63:7c:28: a6:e1:ad:4e:16:5d:cf:87:5b:bc:e8:a1:35:fc:a9:be:d9:24: 64:27:03:60:6f:03:f3:db:9d:1d:14:70:22:dd:94:f9:82:fb: e2:11:b5:d9:7a:37:cc:75:bf:95:2c:24:eb:53:ea:f8:b0:37: fa:fa:70:67:4b:89:17:68:fc:14:e2:6c:14:50:35:2d:18:d8: 46:53:23:ef:ab:75:55:5f:60:2f:5e:45:f0:25:71:70:00:db: 63:c9:d7:47:8f:68:a5:fd:88:33:c4:06:0b:22:63:b3:3c:ff: 33:e1:a7:54:15:10:c4:1a:3c:a0:77:a2:d0:12:06:10:9c:52: 9e:8f:aa:dc:6d:96:63:29:b2:5c:2e:48:b8:e9:f9:62:7b:68: d2:b1:94:5a:fd:d4:d8:8b:3f:75:af:9f:d4:08:7c:e4:13:e1: 70:cc:91:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDVDQjI5OEJDMUE3MDUwMTc4MDVDNTYxRjA5MEEwRDQ3 OTUwRTZBQkQwHhcNMjQwNTE4MTQxNjQ0WhcNMjQwNTI1MTQxNjQ0WjAYMRYwFAYD VQQDEw02NjQ4Yjg0Yy1jMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5G+jM6X+T5TACAUliPL0G90++7+s0GGrh5s24p2nda+BmNCAvAMUU+ZepkX p1Kcz3YB3KkuL1xNhc0kqxCtteo+Yd+v6zFZYXXMvM4C43KjOy2Xilt63EQSn1CE VQfFYH9RYaxWpMiHPHsTODSrhrxymXXUCOJvItcGoVmOjo2wzxmtXZlNpMhgyaxg oNofheXP8Tj6Gs+BPupB0KXdgAQU1KtCHOUDOOMY+nQO+4ZwCI3/NL/IGLASGb6l /3iR1+eYSEy7xhaol8/A72eStPbElLVvv3OR61WjcRC2co41wm7jbtmVFWEBhywe I3hBNneMLXnAzTdc5iG47nCPiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9Y30yr oZPBWOrTcDfRB0lruIeFMB8GA1UdIwQYMBaAFFyymLwacFAXgFxWHwkKDUeVDmq9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8zRjM0MjAzRTI5 MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VCZUFYRllmQ1FvTlI1VU9h cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hMS1l2QnB3VUJlQVhGWWZDUW9OUjVVT2FyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8zRjM0MjAzRTI5MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VC ZUFYRllmQ1FvTlI1VU9hcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGHi6jPP4YZIgU9qARU2htHAyXqyshdnvjtY4IUMgexvrGm9wyhaDe ywyA2z1PHe9frV+xR03HWogPOQH0kUOA64C3AuS4v5msgfCVnZBmcu0b9H5tEh9j fCim4a1OFl3Ph1u86KE1/Km+2SRkJwNgbwPz250dFHAi3ZT5gvviEbXZejfMdb+V LCTrU+r4sDf6+nBnS4kXaPwU4mwUUDUtGNhGUyPvq3VVX2AvXkXwJXFwANtjyddH j2il/YgzxAYLImOzPP8z4adUFRDEGjygd6LQEgYQnFKej6rcbZZjKbJcLki46fli e2jSsZRa/dTYiz91r5/UCHzkE+FwzJEm -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org