$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: qq67kwkz4QM+gU//rftBhcvwlasLXNTVO9jjAWwVoF4= Subject key identifier: 0A:C2:2A:F1:4D:21:D4:C9:2B:FF:1B:4E:A4:EE:32:07:FD:46:46:AC Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: E2 Signing time: Sun 19 May 2024 06:06:07 +0000 Manifest this update: Sun 19 May 2024 06:06:06 +0000 Manifest next update: Sun 26 May 2024 06:06:06 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: 5LzV5T55IC/ZfJGxVtXVGhP/HAg+Xmmjo/mmvEDFBcQ=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: E+oIn482BPyJkmibWcETKP/96GJSMoGPWaphK0YLOX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: May 19 06:06:06 2024 GMT Not After : May 26 06:06:06 2024 GMT Subject: CN=664996ce-133b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:80:a3:75:11:98:8b:4d:b0:41:94:97:e7: 86:03:d6:4f:55:5b:22:05:e7:b9:a9:1b:6a:30:e8: 92:53:7d:cb:b0:89:6b:b4:9e:53:10:2e:26:eb:23: 86:e9:b4:57:50:28:13:f8:4f:fd:6f:84:c4:2e:03: ea:6a:e2:64:9c:08:bd:63:7f:6f:e4:9d:f8:64:88: 06:18:81:f0:99:0f:84:ac:a3:8f:65:a5:25:f7:f3: 39:46:8a:63:47:11:f5:4e:51:0f:82:46:c7:63:76: 33:fc:b5:d6:60:28:67:c6:18:0d:79:70:79:a5:57: 50:fc:c6:82:ce:b3:85:33:bf:ca:86:31:59:d6:84: b5:d8:e5:5a:c8:13:40:f0:10:8f:8e:d9:87:09:82: c0:78:8e:45:d7:09:a5:23:91:56:5b:6f:c1:bb:61: 59:46:3e:77:85:a1:92:cd:a2:be:1d:e6:0e:68:f0: d5:e7:b1:ac:78:bc:b5:44:a1:51:50:56:2c:4c:cb: 11:0a:0a:4f:0a:a3:55:f6:2c:4f:00:52:0f:49:eb: 93:3e:4a:f7:ee:c9:aa:b2:20:1f:83:c8:27:af:a5: a7:5c:80:be:08:87:c2:8d:e6:b6:11:c6:fd:7a:06: ca:13:11:19:ad:b0:1f:de:d9:86:e9:5d:91:ab:11: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C2:2A:F1:4D:21:D4:C9:2B:FF:1B:4E:A4:EE:32:07:FD:46:46:AC X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c1:03:84:1d:79:97:47:d8:5c:24:4f:fc:c4:39:c1:86:17: 70:e5:8c:05:f3:39:98:30:28:3f:f8:4e:f2:7b:7d:0a:24:ce: c9:4e:e8:6a:ab:2e:43:05:08:9d:6a:b2:ce:eb:ab:83:27:b4: e8:22:05:5c:85:f1:70:ef:98:7b:20:20:67:50:93:dd:e2:48: 62:1e:9e:7f:58:2c:81:a6:1d:99:56:fb:67:e4:d2:dc:36:cb: f0:07:c1:68:62:ea:f1:6f:21:1b:81:93:15:cd:3e:76:dd:8f: cc:84:15:db:0f:61:a6:ad:4d:fb:9f:55:12:82:bd:36:23:98: 16:a7:cb:b0:a6:de:35:c3:05:57:4c:b3:58:07:59:ad:26:a7: f6:e6:d1:73:e3:17:c2:c8:f1:27:96:6b:17:c5:27:95:fd:b6: 84:70:9b:f3:b1:e9:4c:09:6d:ec:8a:b9:f2:8a:2c:89:e4:ef: 98:a9:13:b2:99:b9:2f:a2:d6:0f:46:ec:a2:d1:a0:82:e1:e4: 59:c7:76:62:3f:a1:30:8b:8a:b6:44:40:28:ee:e2:0b:d1:da: 8a:7c:5a:22:fa:4d:5d:0e:d2:8a:b6:70:57:80:08:4c:b3:41: 07:f4:0c:68:a9:e2:61:0a:bf:c3:92:66:3f:6f:51:4e:97:2a: 30:8c:5f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjQwNTE5MDYwNjA2WhcNMjQwNTI2MDYwNjA2WjAYMRYwFAYD VQQDEw02NjQ5OTZjZS0xMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUaAo3URmItNsEGUl+eGA9ZPVVsiBee5qRtqMOiSU33LsIlrtJ5TEC4m6yOG 6bRXUCgT+E/9b4TELgPqauJknAi9Y39v5J34ZIgGGIHwmQ+ErKOPZaUl9/M5Ropj RxH1TlEPgkbHY3Yz/LXWYChnxhgNeXB5pVdQ/MaCzrOFM7/KhjFZ1oS12OVayBNA 8BCPjtmHCYLAeI5F1wmlI5FWW2/Bu2FZRj53haGSzaK+HeYOaPDV57GseLy1RKFR UFYsTMsRCgpPCqNV9ixPAFIPSeuTPkr37smqsiAfg8gnr6WnXIC+CIfCjea2Ecb9 egbKExEZrbAf3tmG6V2RqxG80wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArCKvFN IdTJK/8bTqTuMgf9RkasMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiwQOEHXmXR9hcJE/8xDnBhhdw5YwF8zmYMCg/+E7ye30KJM7JTuhq qy5DBQidarLO66uDJ7ToIgVchfFw75h7ICBnUJPd4khiHp5/WCyBph2ZVvtn5NLc NsvwB8FoYurxbyEbgZMVzT523Y/MhBXbD2GmrU37n1USgr02I5gWp8uwpt41wwVX TLNYB1mtJqf25tFz4xfCyPEnlmsXxSeV/baEcJvzselMCW3sirnyiiyJ5O+YqROy mbkvotYPRuyi0aCC4eRZx3ZiP6Ewi4q2REAo7uIL0dqKfFoi+k1dDtKKtnBXgAhM s0EH9AxoqeJhCr/DkmY/b1FOlyowjF+R -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org