$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: BnPAhGXR2oWsw3u+BUguGyfFc8x7Rwv5tgOXDB7ZTAU= Subject key identifier: DC:0C:C5:FD:FB:6B:5A:29:81:B9:82:22:A5:E9:15:80:B9:F9:EE:2D Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 051A Signing time: Fri 31 May 2024 01:38:15 +0000 Manifest this update: Fri 31 May 2024 01:38:14 +0000 Manifest next update: Fri 07 Jun 2024 01:38:14 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: RYkI0X49A8ruPvwEne/fuvWCBPvuJGXBxl7ur5J/MF0=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: kDKwD/o86ergDXAe0NyatKAKI9UEO3SoFPYlDX2xkxo=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: ea+xnebDiK5/cG8Dnkc9U+weTXeQAajoIL5rsjmuAH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: May 31 01:38:14 2024 GMT Not After : Jun 7 01:38:14 2024 GMT Subject: CN=66592a06-1c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d4:fe:cd:f1:a0:c1:53:95:18:1e:85:c7:71: f2:a6:c7:6c:7d:a3:10:4b:8f:27:0f:71:83:88:fd: 4c:ee:65:28:98:44:6c:44:ad:b6:f2:bb:48:c7:c3: d0:45:3a:82:99:5d:c9:74:55:9e:39:8d:ad:7e:29: 13:2a:2f:f5:cc:42:ce:3b:5d:45:b2:8c:24:7a:16: 77:ef:fd:c7:ac:fb:02:03:65:8d:a5:38:9a:d6:5e: 06:63:59:ad:3c:11:ec:c9:1b:ac:74:e5:3d:fd:c0: e5:bf:a1:95:58:20:34:65:48:0e:28:36:88:55:c9: e6:a8:df:f1:35:9d:2d:74:b1:4c:04:f1:8c:63:75: 9f:bb:ac:44:05:be:e3:96:dd:13:50:26:fa:19:e0: 88:b5:64:f4:93:b3:bf:56:cb:38:61:ca:31:79:0e: c5:27:e3:d1:c7:1b:a1:d7:cc:2a:96:50:a4:77:2d: 1c:34:53:7c:96:67:a9:23:32:55:a2:07:4a:02:fe: 32:7e:81:07:9a:6b:eb:cb:b4:83:80:ca:c5:d5:c9: 4a:73:c5:8c:d0:a7:29:67:a0:b5:62:2e:8f:85:d3: f0:8d:cd:4d:4e:a1:b6:ac:ce:98:96:8f:5b:b9:06: f9:c4:26:84:2e:c6:ba:e1:2e:8b:f6:bf:43:31:53: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0C:C5:FD:FB:6B:5A:29:81:B9:82:22:A5:E9:15:80:B9:F9:EE:2D X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a4:a0:54:7a:ad:2c:90:22:b0:b2:69:d5:c9:40:4d:38:53: 98:21:1d:6d:80:21:9e:6e:91:df:b1:72:f0:71:89:a3:40:84: 7e:bc:7a:87:64:a9:b6:48:2f:ca:02:23:18:f6:21:1c:bd:81: 8d:0b:80:71:ae:22:61:99:aa:ae:3d:86:79:00:75:fa:ce:39: fc:81:26:35:dc:a2:79:6b:4f:34:7c:5b:18:f3:bc:f5:26:5f: 86:e8:a8:f7:f9:1e:0c:41:3c:69:29:30:8a:86:ea:f1:ff:07: de:08:e5:64:f0:81:04:8b:c3:92:27:f9:e0:94:27:e1:82:fd: 92:f3:74:ae:4f:8c:97:c2:7d:1c:ac:5d:d2:56:a6:c9:aa:da: 8a:83:d0:99:f5:66:98:14:1e:34:82:64:11:36:b4:6e:21:54: b4:75:f5:33:33:b3:cf:98:33:5f:ee:19:54:67:8d:5e:14:f4: 07:28:30:fc:a7:c0:22:60:72:9c:d9:0c:1b:e0:18:13:de:f9: 2c:2c:8a:06:e4:43:93:6a:e1:7c:8a:e9:88:bc:9b:53:10:ab: ff:d5:de:58:49:2a:b8:46:70:88:ee:41:15:46:f1:c4:fe:0f: 4c:b4:37:b8:03:c8:c3:fc:c5:a3:c2:8e:e4:6f:2f:21:50:d5: e9:00:d6:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjQwNTMxMDEzODE0WhcNMjQwNjA3MDEzODE0WjAYMRYwFAYD VQQDEw02NjU5MmEwNi0xYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79T+zfGgwVOVGB6Fx3HypsdsfaMQS48nD3GDiP1M7mUomERsRK228rtIx8PQ RTqCmV3JdFWeOY2tfikTKi/1zELOO11FsowkehZ37/3HrPsCA2WNpTia1l4GY1mt PBHsyRusdOU9/cDlv6GVWCA0ZUgOKDaIVcnmqN/xNZ0tdLFMBPGMY3Wfu6xEBb7j lt0TUCb6GeCItWT0k7O/Vss4YcoxeQ7FJ+PRxxuh18wqllCkdy0cNFN8lmepIzJV ogdKAv4yfoEHmmvry7SDgMrF1clKc8WM0KcpZ6C1Yi6PhdPwjc1NTqG2rM6Ylo9b uQb5xCaELsa64S6L9r9DMVPriwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwMxf37 a1opgbmCIqXpFYC5+e4tMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCipKBUeq0skCKwsmnVyUBNOFOYIR1tgCGebpHfsXLwcYmjQIR+vHqH ZKm2SC/KAiMY9iEcvYGNC4BxriJhmaquPYZ5AHX6zjn8gSY13KJ5a080fFsY87z1 Jl+G6Kj3+R4MQTxpKTCKhurx/wfeCOVk8IEEi8OSJ/nglCfhgv2S83SuT4yXwn0c rF3SVqbJqtqKg9CZ9WaYFB40gmQRNrRuIVS0dfUzM7PPmDNf7hlUZ41eFPQHKDD8 p8AiYHKc2Qwb4BgT3vksLIoG5EOTauF8iumIvJtTEKv/1d5YSSq4RnCI7kEVRvHE /g9MtDe4A8jD/MWjwo7kby8hUNXpANbP -----END CERTIFICATE-----Generated at Fri May 31 02:50:44 2024 by rpki-client on console-fra.rpki-client.org