$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: HRLaVnPBYfshcV3jUDDWpqwrb/n+6hSP574MA7s/uGI= Subject key identifier: 8C:4C:03:71:91:A1:D4:8A:A5:DF:18:F6:4C:C8:CA:9C:B4:D0:92:26 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 04FF Signing time: Sun 19 May 2024 01:11:15 +0000 Manifest this update: Sun 19 May 2024 01:11:15 +0000 Manifest next update: Sun 26 May 2024 01:11:15 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: Z2Jk2Rnn9bjBFTjZpyGFD2C7H7sJ/bKCRHsIgKlzqmk=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: yJT8uk9eFGiCrxSvq7jQiJupNQdNXKHbw5qSKvtIGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: May 19 01:11:15 2024 GMT Not After : May 26 01:11:15 2024 GMT Subject: CN=664951b3-8a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:25:c7:67:af:56:05:6a:48:97:8f:13:8d: da:44:08:23:5e:b3:db:f8:49:38:3b:12:66:a6:91: 6e:8e:5d:cd:98:ce:b7:2b:49:bf:f7:78:8c:f4:09: 52:2f:06:3d:c5:f8:b6:fc:95:77:72:a7:ec:92:c7: 75:6c:74:99:80:ff:88:f5:c7:f7:b8:81:67:9f:60: 0a:cf:85:07:0c:c7:b5:3a:d3:c9:e3:36:38:14:2a: 23:2a:ac:b1:89:a3:60:5a:6c:7f:fb:3a:e9:6b:dd: 96:36:2a:97:bc:11:93:80:cc:96:d5:9c:47:64:85: 9c:36:cb:65:4b:94:04:17:fe:55:f7:6c:75:e8:3b: f2:d2:02:b4:46:09:0c:3a:b2:20:18:d5:44:df:9d: 5b:f1:98:51:14:df:bd:37:ce:c5:9a:5f:f0:10:41: 13:b6:3d:f3:45:20:b5:f0:e7:ff:08:91:32:2e:fe: aa:7a:25:e2:f0:3f:82:48:bf:ec:eb:42:db:0b:cf: 69:72:dd:0d:13:a2:ce:8d:62:02:48:8f:f1:39:f1: f5:be:0a:38:87:a8:c9:8d:72:af:ae:bc:2b:68:fd: be:d1:f2:b6:f3:4b:eb:62:87:6b:f2:3c:39:69:55: dd:9f:63:fa:12:9c:fe:ac:de:ed:0f:0a:c6:f8:8b: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4C:03:71:91:A1:D4:8A:A5:DF:18:F6:4C:C8:CA:9C:B4:D0:92:26 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8a:7f:6f:99:5d:0f:30:d1:a4:91:ab:09:c1:a1:18:dd:ae: 82:86:c5:e2:44:e6:80:cf:a3:d5:62:e5:de:89:6b:db:00:0c: b1:b2:98:13:6d:54:50:43:83:cf:22:5a:d5:cd:48:f9:3c:88: af:ce:97:a4:e0:e5:69:a2:98:f8:58:8a:15:56:64:47:f1:f1: 8b:1d:28:63:f2:c8:e4:07:5a:dd:ac:42:7f:63:bf:82:9e:16: 10:28:22:2e:4f:35:ab:dd:11:46:ba:26:48:07:19:a1:af:44: ce:cb:0f:e1:9a:1a:a5:5d:5e:97:43:00:58:78:e9:6d:3b:6e: a8:80:90:15:b3:b9:9d:8b:78:65:1f:dc:24:4a:23:a8:7e:d2: 4c:33:85:d0:7a:87:52:e5:45:cb:57:4a:a9:fc:56:78:17:a7: fd:c3:f2:4f:a1:94:46:00:80:8c:58:aa:f6:40:9b:cf:a6:8c: a8:42:83:6b:df:a1:2e:a6:f9:d6:66:36:5c:0e:95:d3:56:4f: 44:01:29:ef:1d:20:c0:45:02:1e:a1:00:bc:84:40:70:e5:a1: b3:47:b0:f4:ac:d0:4c:1e:8e:52:b1:79:8a:4b:54:eb:3e:10: 05:ed:fd:aa:f4:27:28:19:a7:82:80:77:b2:16:ce:07:1a:a0: 14:cf:18:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjQwNTE5MDExMTE1WhcNMjQwNTI2MDExMTE1WjAYMRYwFAYD VQQDEw02NjQ5NTFiMy04YTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/Elx2evVgVqSJePE43aRAgjXrPb+Ek4OxJmppFujl3NmM63K0m/93iM9AlS LwY9xfi2/JV3cqfsksd1bHSZgP+I9cf3uIFnn2AKz4UHDMe1OtPJ4zY4FCojKqyx iaNgWmx/+zrpa92WNiqXvBGTgMyW1ZxHZIWcNstlS5QEF/5V92x16Dvy0gK0RgkM OrIgGNVE351b8ZhRFN+9N87Fml/wEEETtj3zRSC18Of/CJEyLv6qeiXi8D+CSL/s 60LbC89pct0NE6LOjWICSI/xOfH1vgo4h6jJjXKvrrwraP2+0fK280vrYodr8jw5 aVXdn2P6Epz+rN7tDwrG+IskqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxMA3GR odSKpd8Y9kzIypy00JImMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlin9vmV0PMNGkkasJwaEY3a6ChsXiROaAz6PVYuXeiWvbAAyxspgT bVRQQ4PPIlrVzUj5PIivzpek4OVpopj4WIoVVmRH8fGLHShj8sjkB1rdrEJ/Y7+C nhYQKCIuTzWr3RFGuiZIBxmhr0TOyw/hmhqlXV6XQwBYeOltO26ogJAVs7mdi3hl H9wkSiOoftJMM4XQeodS5UXLV0qp/FZ4F6f9w/JPoZRGAICMWKr2QJvPpoyoQoNr 36EupvnWZjZcDpXTVk9EASnvHSDARQIeoQC8hEBw5aGzR7D0rNBMHo5SsXmKS1Tr PhAF7f2q9CcoGaeCgHeyFs4HGqAUzxgg -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org