$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: aVthn0cVLkK8MqdXjzGzio2+1xT9Wr0/fZNoS3lwSJA= Subject key identifier: 08:B5:40:6E:4C:2C:A3:01:F4:48:2B:09:F7:1F:F1:41:C1:84:C3:49 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0A47 Signing time: Fri 31 May 2024 21:06:55 +0000 Manifest this update: Fri 31 May 2024 21:06:54 +0000 Manifest next update: Fri 07 Jun 2024 21:06:54 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: NxptX/ckcf4dVe1OzrR53iy5vRcw2kDtcKr/moRYlnI=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: 0JdU+wW3DbLqDAlaRW55sQz+ueavKSofaRZwuHvmJ1Y=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: rwmG/oJAx1zAmPwjA2elQAgXOn9qdtZH6NhrVFtoDw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: May 31 21:06:54 2024 GMT Not After : Jun 7 21:06:54 2024 GMT Subject: CN=665a3bef-e702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:c8:a7:34:af:32:a7:c0:50:d8:be:b6:07: 90:e5:18:5f:4e:35:19:6e:63:ac:bf:e8:29:07:2b: 57:d3:a4:7f:1f:de:e5:2f:bf:9e:4c:72:82:51:c4: bc:c4:4e:b8:c0:d3:79:59:88:1e:14:18:b5:f7:9f: 64:58:30:b8:4c:74:cc:de:ac:73:cf:76:6d:5e:8d: 59:d1:85:26:98:54:cd:ed:e8:18:c9:71:84:56:7b: ba:0b:86:8b:ec:6d:77:83:1e:1d:16:26:c7:4c:82: 41:69:7e:0c:e6:5f:2f:dc:0f:88:15:03:69:d8:27: ae:b1:fe:67:e0:cd:0d:dc:d6:e2:8d:3c:bd:c9:f0: 42:9a:ec:09:40:aa:df:ad:27:d5:e2:c9:46:98:df: 7c:98:e5:23:c5:95:00:da:93:34:85:42:4b:ce:76: 0d:70:93:3a:0d:74:74:e9:5d:2c:fc:59:7a:6c:68: db:0a:eb:98:ba:2e:c7:09:6e:25:e7:e2:9d:68:b2: 08:65:e2:8e:89:22:df:09:e5:03:39:ea:5f:e2:b8: f6:6e:b2:50:2f:8c:c5:7e:ab:04:5f:65:4c:a7:21: 0e:17:d6:78:6f:f6:29:45:bc:ab:c1:bb:27:01:63: 9d:ce:47:71:3c:65:12:39:11:fe:51:b2:b9:f3:93: 21:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B5:40:6E:4C:2C:A3:01:F4:48:2B:09:F7:1F:F1:41:C1:84:C3:49 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c4:29:40:6a:53:c1:85:88:9e:c0:8c:76:5f:73:bc:a5:15: bb:52:e0:ff:b1:ee:87:da:82:2f:db:9a:b7:14:43:24:11:5c: f1:fc:0e:ae:0f:bf:63:c7:73:dd:4f:6d:d9:7b:ac:e1:10:43: 62:3b:33:c9:19:ce:69:84:94:02:66:77:2a:a6:fc:08:16:ee: f0:84:d6:85:c9:bf:fe:d0:da:c8:94:c8:83:48:c5:02:8d:79: 11:c8:8c:34:86:8b:7c:6d:16:2f:5e:a2:fc:5a:68:ff:d8:43: 10:eb:cb:83:cc:62:d3:23:3e:e2:12:7b:18:6b:00:26:ec:dc: 1b:53:75:00:40:56:91:b6:38:b3:ec:68:c8:86:8f:b2:d0:67: 30:f3:84:77:85:dc:37:b4:c2:3a:5b:33:d2:af:2e:3c:d9:34: e1:fd:39:9d:1b:28:56:ee:15:dd:d5:4c:04:5a:f2:fe:85:1d: 51:73:37:a3:24:6c:7e:cd:3c:fc:77:60:2b:59:e0:03:74:8d: 5f:8c:c1:ef:7e:e0:ab:7f:9b:62:31:2f:63:1e:bd:0e:28:08: bc:de:3f:da:72:75:0c:07:35:7a:fa:d2:3a:61:ab:29:dd:7e: ee:48:6f:06:f4:4a:d3:52:24:3e:4c:5a:a4:24:0c:3f:9d:f5: 95:b3:1f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjQwNTMxMjEwNjU0WhcNMjQwNjA3MjEwNjU0WjAYMRYwFAYD VQQDEw02NjVhM2JlZi1lNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BLIpzSvMqfAUNi+tgeQ5RhfTjUZbmOsv+gpBytX06R/H97lL7+eTHKCUcS8 xE64wNN5WYgeFBi1959kWDC4THTM3qxzz3ZtXo1Z0YUmmFTN7egYyXGEVnu6C4aL 7G13gx4dFibHTIJBaX4M5l8v3A+IFQNp2Ceusf5n4M0N3NbijTy9yfBCmuwJQKrf rSfV4slGmN98mOUjxZUA2pM0hUJLznYNcJM6DXR06V0s/Fl6bGjbCuuYui7HCW4l 5+KdaLIIZeKOiSLfCeUDOepf4rj2brJQL4zFfqsEX2VMpyEOF9Z4b/YpRbyrwbsn AWOdzkdxPGUSORH+UbK585MhsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi1QG5M LKMB9EgrCfcf8UHBhMNJMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASxClAalPBhYiewIx2X3O8pRW7UuD/se6H2oIv25q3FEMkEVzx/A6u D79jx3PdT23Ze6zhEENiOzPJGc5phJQCZncqpvwIFu7whNaFyb/+0NrIlMiDSMUC jXkRyIw0hot8bRYvXqL8Wmj/2EMQ68uDzGLTIz7iEnsYawAm7NwbU3UAQFaRtjiz 7GjIho+y0Gcw84R3hdw3tMI6WzPSry482TTh/TmdGyhW7hXd1UwEWvL+hR1Rczej JGx+zTz8d2ArWeADdI1fjMHvfuCrf5tiMS9jHr0OKAi83j/acnUMBzV6+tI6Yasp 3X7uSG8G9ErTUiQ+TFqkJAw/nfWVsx/E -----END CERTIFICATE-----Generated at Fri May 31 22:13:03 2024 by rpki-client on console-fra.rpki-client.org