$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: c95rmwM6wTNC2CLLdlRZPVqoTV68WMGoZRa074x8CVs= Subject key identifier: F8:2D:A3:CE:19:10:79:4C:09:A2:E9:D9:4B:21:82:A5:3F:A3:72:F7 Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0B51 Signing time: Sat 18 May 2024 19:40:52 +0000 Manifest this update: Sat 18 May 2024 19:40:52 +0000 Manifest next update: Sat 25 May 2024 19:40:52 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: EsqpU+SFs6deFwt2VTM9WEbhqmFtCPZoj7J5pl/+9l0=) 2: CB5012460F6311EABC47D53EC4F9AE02.roa (hash: 2uhaFp2nWFeo3Y3jnekedFo/w13cWaAn7I9VwpKEhvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: May 18 19:40:52 2024 GMT Not After : May 25 19:40:52 2024 GMT Subject: CN=66490444-3ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:6e:c0:88:8f:5c:05:77:c4:f0:4e:bc:db: ca:8f:df:bb:4f:d8:d2:e8:a2:3a:44:47:8d:19:d7: aa:f7:0d:c0:3c:c5:02:3c:60:8b:78:4e:e9:da:4a: bc:cc:25:63:98:61:fa:1e:d2:ed:5f:35:55:18:3a: d4:b1:26:f4:bb:5a:c5:dd:76:ac:29:45:df:57:8e: e2:b5:38:98:d7:2d:60:fd:de:49:82:37:b4:dd:0e: 13:03:2d:3c:36:a4:a6:f8:2c:e5:d4:4c:eb:a7:b0: 7f:b8:e1:8a:a8:8c:10:5d:bc:32:1f:47:4c:bd:13: 71:00:55:40:21:c8:fd:02:50:89:f5:e6:74:fb:3b: d4:5a:78:f2:e9:ba:0b:58:b5:90:a1:39:6a:6a:87: 08:73:f7:bd:05:24:29:9a:af:26:aa:33:40:4c:98: bc:dd:a2:9d:10:a5:d3:e7:f9:1a:3a:72:15:27:3f: c6:8b:c2:37:b7:2f:5e:38:48:e3:96:67:e6:e5:69: 51:ae:1a:7b:1b:19:78:5f:0d:34:05:f8:ab:f0:bc: ce:44:50:85:23:8c:bc:49:23:d6:15:9c:6d:f1:33: 97:4f:7d:01:6a:5e:ed:a7:da:53:91:89:67:3d:c5: 9d:56:72:13:28:96:66:ee:00:94:c0:0f:f9:66:cf: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2D:A3:CE:19:10:79:4C:09:A2:E9:D9:4B:21:82:A5:3F:A3:72:F7 X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0d:73:c0:b3:46:81:0d:75:58:f9:29:4e:0c:c0:21:4b:6c: 36:5f:75:08:0a:fc:63:5f:35:44:8b:04:45:ce:7e:21:a2:3d: 8f:b9:76:09:16:99:7d:43:a4:b8:7f:ff:37:36:e6:06:5d:ce: ab:3b:5a:e1:55:d8:01:9b:64:f5:d1:32:12:da:6a:ca:82:7b: e7:71:15:e4:4d:e1:93:71:c3:4d:c6:a8:22:84:26:04:2b:49: b1:12:df:e0:75:d4:f1:d8:1e:da:33:61:00:d1:35:03:a5:d5: d4:93:e5:d5:d8:eb:f4:71:c9:23:4e:80:66:19:5c:8e:b1:56: 6d:2e:f3:58:28:1c:92:b5:0b:89:e3:ba:b6:a3:ef:e3:3a:ca: f3:38:4c:e4:5f:33:2c:c5:4c:1c:8d:71:e6:38:03:97:9b:94: ad:27:82:1e:53:ed:49:b6:d6:2d:48:48:be:69:65:98:7c:db: a3:a0:82:ed:87:10:58:57:1e:38:52:c5:73:fe:cb:19:4a:23: fe:b3:5e:f9:4f:73:a9:bc:c1:48:7f:44:96:44:ca:68:d5:b3: cc:70:23:3e:a3:9e:3f:17:7c:32:35:03:0e:1a:d0:8c:a7:6f: 96:8d:21:c1:5e:c6:50:0d:e8:75:9a:01:4f:ba:59:3d:fc:ce: 13:1d:ba:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjQwNTE4MTk0MDUyWhcNMjQwNTI1MTk0MDUyWjAYMRYwFAYD VQQDEw02NjQ5MDQ0NC0zY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWxuwIiPXAV3xPBOvNvKj9+7T9jS6KI6REeNGdeq9w3APMUCPGCLeE7p2kq8 zCVjmGH6HtLtXzVVGDrUsSb0u1rF3XasKUXfV47itTiY1y1g/d5Jgje03Q4TAy08 NqSm+Czl1Ezrp7B/uOGKqIwQXbwyH0dMvRNxAFVAIcj9AlCJ9eZ0+zvUWnjy6boL WLWQoTlqaocIc/e9BSQpmq8mqjNATJi83aKdEKXT5/kaOnIVJz/Gi8I3ty9eOEjj lmfm5WlRrhp7Gxl4Xw00Bfir8LzORFCFI4y8SSPWFZxt8TOXT30Bal7tp9pTkYln PcWdVnITKJZm7gCUwA/5Zs9qbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgto84Z EHlMCaLp2UshgqU/o3L3MB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCDXPAs0aBDXVY+SlODMAhS2w2X3UICvxjXzVEiwRFzn4hoj2PuXYJ Fpl9Q6S4f/83NuYGXc6rO1rhVdgBm2T10TIS2mrKgnvncRXkTeGTccNNxqgihCYE K0mxEt/gddTx2B7aM2EA0TUDpdXUk+XV2Ov0cckjToBmGVyOsVZtLvNYKByStQuJ 47q2o+/jOsrzOEzkXzMsxUwcjXHmOAOXm5StJ4IeU+1JttYtSEi+aWWYfNujoILt hxBYVx44UsVz/ssZSiP+s175T3OpvMFIf0SWRMpo1bPMcCM+o54/F3wyNQMOGtCM p2+WjSHBXsZQDeh1mgFPulk9/M4THbq7 -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org