$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: 5LPKWtjWXt5pXwed8ICZOeY7neR1Tdez1BSgqSessOE= Subject key identifier: F7:EE:D7:AF:5F:22:A7:4A:54:87:E9:FB:55:81:3C:87:4E:C3:1A:EE Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 15 Signing time: Sun 19 May 2024 08:46:25 +0000 Manifest this update: Sun 19 May 2024 08:46:25 +0000 Manifest next update: Sun 26 May 2024 08:46:25 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: 0JwAVBePa2tFLs4eV0VBSv+2HdgfsoTipJ0kmRNCwRE=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: h7M3jvYcD4TnzeijvBah0qUC81qHwLqusYkjmL9+ZWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: May 19 08:46:25 2024 GMT Not After : May 26 08:46:25 2024 GMT Subject: CN=6649bc61-1319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:a0:be:16:e0:9a:ac:3b:bb:ed:9a:4b:61: c9:59:7a:1e:c8:01:ba:34:fe:d9:bf:74:a4:ea:13: 70:65:51:c4:9f:a4:a0:3f:45:9b:25:59:db:16:08: b5:1b:29:7b:14:32:4c:9c:30:62:ad:be:9a:72:72: 2c:89:be:e2:71:1b:ba:7c:2c:57:7f:ae:67:9c:45: dd:bf:67:36:da:0d:6f:b3:bd:a2:a8:a3:0c:a8:e7: cd:8e:de:c9:f3:46:a5:71:0b:5f:ad:1d:ae:36:31: 88:0b:46:ce:5e:18:c5:4f:90:40:77:68:61:eb:25: bc:29:6f:d4:19:3b:2c:70:d1:b6:8b:52:3c:d5:78: 5a:7b:55:ae:ed:f1:82:59:d9:13:f8:ee:ea:1c:cf: 26:4a:54:82:23:ff:68:dc:27:af:63:da:a2:be:b0: f2:7e:14:00:f1:b1:55:e0:60:bb:ba:93:f2:c0:2c: cc:50:04:32:68:45:21:ca:8b:a7:58:5a:e4:64:21: 13:09:91:59:09:fb:5c:09:51:55:3c:25:fe:af:fc: de:2c:2c:df:06:15:70:c0:55:a4:ed:54:c0:8e:b9: 34:51:d2:fe:97:f8:db:58:b5:c2:fd:a0:f7:ac:71: ce:c0:45:a2:e2:52:e7:b0:ad:c0:ff:1f:a2:dc:83: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:D7:AF:5F:22:A7:4A:54:87:E9:FB:55:81:3C:87:4E:C3:1A:EE X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:38:85:cb:95:3d:5a:58:ef:99:5b:d5:82:45:c2:90:6d:5d: f0:58:44:b3:52:15:bf:66:c6:d4:11:49:3e:60:4f:bc:cd:b4: 64:36:9e:c9:0f:d6:ae:bb:bc:fa:f6:d7:50:83:7c:30:b2:cd: 2e:9a:36:22:0a:b4:d8:b8:8c:96:c7:ab:f8:6f:0e:b9:36:dd: af:69:c7:68:49:63:97:de:5a:e1:65:dc:3d:0e:a9:0b:8e:b8: 99:72:aa:2e:05:ef:eb:2e:ae:ee:2c:63:e8:b9:1b:05:7c:af: dd:d2:ad:38:68:9c:6e:48:20:af:78:a0:33:08:47:d9:8f:66: ae:a0:98:aa:2a:87:46:93:e9:fd:03:82:8a:c8:1c:19:bf:09: 14:73:34:33:94:82:08:39:b3:db:94:b4:73:cc:15:53:53:04: d2:2d:8a:6a:41:37:60:05:40:2d:05:d4:6a:76:c8:af:61:4b: 80:ed:42:d7:92:a6:52:d1:81:c5:e5:3e:cb:73:d0:bc:84:76: a2:fb:b6:fe:9a:9c:97:2c:30:46:24:a6:d5:22:d6:b7:24:4a: ce:ca:47:98:a7:8c:0e:26:f2:b9:1e:44:00:ad:2b:f2:de:a0: 1f:a5:9b:00:84:dd:de:ae:9e:34:f9:4b:8e:a3:1c:b9:b1:2a: ff:52:99:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0EyNzExMC8GA1UEBRMoRENBRDY0NDcwNUNGMThDMjdEN0ZDMjAxNzM4NUQyM0VF NzIwMzk1NTAeFw0yNDA1MTkwODQ2MjVaFw0yNDA1MjYwODQ2MjVaMBgxFjAUBgNV BAMTDTY2NDliYzYxLTEzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyIKC+FuCarDu77ZpLYclZeh7IAbo0/tm/dKTqE3BlUcSfpKA/RZslWdsWCLUb KXsUMkycMGKtvppyciyJvuJxG7p8LFd/rmecRd2/ZzbaDW+zvaKoowyo582O3snz RqVxC1+tHa42MYgLRs5eGMVPkEB3aGHrJbwpb9QZOyxw0baLUjzVeFp7Va7t8YJZ 2RP47uoczyZKVIIj/2jcJ69j2qK+sPJ+FADxsVXgYLu6k/LALMxQBDJoRSHKi6dY WuRkIRMJkVkJ+1wJUVU8Jf6v/N4sLN8GFXDAVaTtVMCOuTRR0v6X+NtYtcL9oPes cc7ARaLiUuewrcD/H6LcgyJJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9+7Xr18i p0pUh+n7VYE8h07DGu4wHwYDVR0jBBgwFoAU3K1kRwXPGMJ9f8IBc4XSPucgOVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQTI3L0UyNjY0NkU0Rjcw MzExRUVBMzFGNUQ3QUM0RjlBRTAyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09W VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0sxa1J3WFBHTUo5ZjhJQmM0WFNQdWNnT1ZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QTI3L0UyNjY0NkU0RjcwMzExRUVBMzFGNUQ3QUM0RjlBRTAyLzNLMWtSd1hQR01K OWY4SUJjNFhTUHVjZ09WVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALY4hcuVPVpY75lb1YJFwpBtXfBYRLNSFb9mxtQRST5gT7zNtGQ2nskP 1q67vPr211CDfDCyzS6aNiIKtNi4jJbHq/hvDrk23a9px2hJY5feWuFl3D0OqQuO uJlyqi4F7+suru4sY+i5GwV8r93SrThonG5IIK94oDMIR9mPZq6gmKoqh0aT6f0D gorIHBm/CRRzNDOUggg5s9uUtHPMFVNTBNItimpBN2AFQC0F1Gp2yK9hS4DtQteS plLRgcXlPstz0LyEdqL7tv6anJcsMEYkptUi1rckSs7KR5injA4m8rkeRACtK/Le oB+lmwCE3d6unjT5S46jHLmxKv9SmVQ= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org