$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json) Hash identifier: mpBvNcaFzzfhF+qU3HyOJj6Qllikl2/UDp6AYwpO4WA= Subject key identifier: C8:18:F9:4A:1A:2C:3A:2C:A2:50:51:2F:C2:09:B8:97:E5:1E:09:EA Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft Manifest number: 05E0 Signing time: Sun 19 May 2024 00:02:23 +0000 Manifest this update: Sun 19 May 2024 00:02:23 +0000 Manifest next update: Sun 26 May 2024 00:02:23 +0000 Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: OdVZVBgGwchdF7PL91jSm48IRljNPUTLdW9Yq8SNyZI=) 2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: G0Z1hBSAadu8OlmCXadHF0WS+wiuqOrbeJFTILrE+Vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Validity Not Before: May 19 00:02:23 2024 GMT Not After : May 26 00:02:23 2024 GMT Subject: CN=6649418f-597e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:40:3a:60:7c:ee:37:9e:f3:81:aa:07:f5: 40:11:0b:c4:c7:07:7f:35:5f:b3:7a:88:65:ef:60: be:9a:36:30:90:b8:2c:aa:2e:86:cd:69:de:fa:4a: 08:83:87:5c:68:7d:1e:de:8c:07:d0:ed:6c:77:21: 16:99:26:c2:2c:e6:68:0c:2c:67:35:52:d3:8c:c8: a3:85:57:d6:13:8f:ec:f4:8f:93:26:68:8f:3e:dd: 82:66:d2:53:d7:3e:d8:0d:bf:d8:53:8b:b2:9f:9f: 6e:0f:3e:9e:00:81:89:05:8f:da:7f:77:55:ce:b8: 9c:5b:e1:05:a1:92:a2:b4:f3:d1:48:77:79:6c:ef: 7c:d7:63:41:9c:51:12:67:dc:8b:8d:d4:b1:b3:48: 18:c2:8b:a4:65:4e:63:33:67:cd:33:ca:10:eb:13: 22:1e:90:46:ae:73:f0:ad:25:2b:e5:78:1c:bc:36: c8:d4:1b:78:82:14:8a:42:76:50:6e:54:b0:61:91: 3e:93:bd:bd:e5:48:d9:12:b5:27:5a:08:9e:6f:f2: 48:ba:6e:1e:e8:3e:15:31:82:7f:3a:57:d1:a1:23: e0:d2:3e:1b:c6:94:2d:52:6f:d6:3f:0c:f2:aa:1b: b9:41:31:54:2f:e9:c2:3d:60:ff:ad:31:d4:5c:ac: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:18:F9:4A:1A:2C:3A:2C:A2:50:51:2F:C2:09:B8:97:E5:1E:09:EA X509v3 Authority Key Identifier: keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:18:8b:6f:63:dd:cd:b9:04:54:2f:7a:6f:b0:2d:db:f0:18: 36:58:38:4c:35:03:68:ae:72:a7:08:ff:97:5c:17:e7:14:10: 8f:c3:48:ac:f7:7a:7a:d8:6c:e4:ad:b6:36:dd:02:3a:d0:52: 67:3d:fb:c4:1a:71:e8:08:88:87:00:1e:ac:0c:e0:74:fe:34: da:3a:ba:e3:31:5b:0a:b0:28:ca:fb:85:05:62:93:6f:3b:24: e3:c9:99:f1:97:94:4e:e0:3d:08:51:93:d5:db:6c:c3:40:8e: 41:d9:60:a0:7d:c8:09:fb:36:57:36:02:03:02:e6:79:04:65: a8:ea:20:e5:8e:ed:16:97:a2:43:bf:63:79:8c:20:a2:21:6c: 38:cd:d7:c0:3b:8f:c4:f5:56:4d:4f:a1:ee:41:dd:aa:a6:6a: 8f:f1:5a:34:d9:44:c3:03:8d:85:2c:c9:72:16:e4:bc:20:7e: 98:f6:ec:11:05:f7:8b:94:9b:6e:d5:c6:ea:0b:3f:0f:ce:bb: d1:6a:8f:2c:93:d3:e5:dd:7a:12:8b:38:2b:72:e5:a5:62:c8: e9:05:2c:21:3d:45:42:8f:84:21:5f:f4:0d:af:fa:fa:67:f9: c3:3d:09:13:f0:71:f4:39:7c:78:e6:71:33:e3:5f:b4:e9:42: 6c:6b:a3:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC MUE4NzBCRUMwHhcNMjQwNTE5MDAwMjIzWhcNMjQwNTI2MDAwMjIzWjAYMRYwFAYD VQQDEw02NjQ5NDE4Zi01OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSpAOmB87jee84GqB/VAEQvExwd/NV+zeohl72C+mjYwkLgsqi6GzWne+koI g4dcaH0e3owH0O1sdyEWmSbCLOZoDCxnNVLTjMijhVfWE4/s9I+TJmiPPt2CZtJT 1z7YDb/YU4uyn59uDz6eAIGJBY/af3dVzricW+EFoZKitPPRSHd5bO9812NBnFES Z9yLjdSxs0gYwoukZU5jM2fNM8oQ6xMiHpBGrnPwrSUr5XgcvDbI1Bt4ghSKQnZQ blSwYZE+k7295UjZErUnWgieb/JIum4e6D4VMYJ/OlfRoSPg0j4bxpQtUm/WPwzy qhu5QTFUL+nCPWD/rTHUXKzQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgY+Uoa LDosolBRL8IJuJflHgnqMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl Nm10eUhJdVRrNS14cUhDLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwGItvY93NuQRUL3pvsC3b8Bg2WDhMNQNornKnCP+XXBfnFBCPw0is 93p62GzkrbY23QI60FJnPfvEGnHoCIiHAB6sDOB0/jTaOrrjMVsKsCjK+4UFYpNv OyTjyZnxl5RO4D0IUZPV22zDQI5B2WCgfcgJ+zZXNgIDAuZ5BGWo6iDlju0Wl6JD v2N5jCCiIWw4zdfAO4/E9VZNT6HuQd2qpmqP8Vo02UTDA42FLMlyFuS8IH6Y9uwR BfeLlJtu1cbqCz8PzrvRao8sk9Pl3XoSizgrcuWlYsjpBSwhPUVCj4QhX/QNr/r6 Z/nDPQkT8HH0OXx45nEz41+06UJsa6Pn -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org