$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft File: AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json) Hash identifier: 0wOCzSNczTs44VfwLXp2ES6AD0PzhX3p8Kg7SGOClZU= Subject key identifier: D0:CE:9D:12:F2:E3:1F:52:1D:9D:C9:20:51:43:DE:53:12:92:74:3E Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft Manifest number: 041A Signing time: Sun 19 May 2024 02:03:58 +0000 Manifest this update: Sun 19 May 2024 02:03:57 +0000 Manifest next update: Sun 26 May 2024 02:03:57 +0000 Files and hashes: 1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: htyb4YYgjN5IwcqY97LtfARPFvTskgB5ul1A0mcZiCo=) 2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: 4pCEg43C3YXhwnTLmmwZT0tjSLlfqno83qPsCxPv2wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Validity Not Before: May 19 02:03:57 2024 GMT Not After : May 26 02:03:57 2024 GMT Subject: CN=66495e0d-762d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f1:d1:fb:58:6f:a0:f1:77:1f:e8:23:8f:af: 2d:4e:79:33:87:5e:ef:69:1f:eb:58:4c:a7:a3:29: be:e8:84:40:31:44:1e:4a:9a:30:c8:94:e2:02:0d: 09:fc:c9:50:07:6f:79:2a:af:95:d5:0d:9a:ac:17: af:44:87:92:a2:7f:8c:fa:eb:4c:e5:a2:69:14:9c: f7:e1:6e:b1:d2:33:40:74:8d:fe:8f:58:63:44:3c: 3f:90:82:5a:ed:95:26:1d:72:eb:a4:fc:78:75:0c: 61:36:3b:5e:a1:f5:d7:80:30:db:f6:a1:52:13:0a: 62:9f:b1:d0:31:b2:8f:a0:6a:3d:33:a3:40:8c:e0: da:18:f7:1a:cd:83:56:74:01:4f:94:11:f3:12:41: d4:16:91:a6:7f:8c:14:5e:9f:89:33:a5:a7:18:8b: 19:e0:c6:5d:99:8a:f2:57:99:5e:b9:9c:04:50:d5: 25:93:d7:b8:f3:af:1c:5b:70:a7:88:31:20:ed:30: 32:f1:46:ae:e7:40:10:7e:fb:82:41:07:e6:2e:e4: 66:c8:56:28:b8:ed:a0:a7:3a:9b:2d:44:27:bf:a3: 73:57:73:30:ca:72:71:18:96:b8:de:e7:05:c0:ca: da:10:14:78:0f:70:ca:fb:78:6d:ce:d4:e7:3c:7c: 6c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CE:9D:12:F2:E3:1F:52:1D:9D:C9:20:51:43:DE:53:12:92:74:3E X509v3 Authority Key Identifier: keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:37:26:b0:5f:dd:bb:b5:0d:a6:d5:70:53:ad:c2:40:0b:e8: 41:a2:e2:c8:da:8d:23:21:a5:69:28:31:f2:a7:05:c9:bc:3f: 16:52:b1:d7:2c:ee:c2:84:40:2b:cb:54:c3:54:5c:d0:a1:43: da:c7:7f:9b:58:58:b0:f7:36:b2:ad:5b:39:ff:51:d7:8c:3a: 63:9b:9a:36:d5:a1:c4:36:19:1a:59:86:e9:95:26:d9:b1:5b: f4:9c:9e:2f:5b:a5:79:20:3c:a0:8a:a6:e8:b2:cc:03:72:5b: 78:ee:7d:be:c6:bb:a1:a0:ab:9f:1c:8a:5a:ed:3a:97:be:46: c8:a9:3a:41:5b:10:a0:d9:f1:b7:db:03:cd:e0:69:c3:12:b1: fc:23:8b:35:d4:e9:96:75:a2:e8:c1:db:86:88:e6:63:54:39: c0:ba:92:b3:c0:01:74:56:98:4e:8b:60:20:b5:31:a4:8c:53: 46:cc:4d:97:5d:fb:ec:dc:03:01:cd:85:cd:b6:47:8d:0a:9f: 35:45:99:44:c7:6c:1e:89:c8:0b:e5:ed:60:a2:af:42:f7:8f: c0:4f:15:34:01:57:86:6b:fc:09:13:b2:50:fb:14:bd:6f:8b: 11:25:34:b5:88:e1:1c:f5:1d:c3:7b:29:3d:26:f6:83:dc:14: 47:1c:bc:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx QjRBMUM4QzQwHhcNMjQwNTE5MDIwMzU3WhcNMjQwNTI2MDIwMzU3WjAYMRYwFAYD VQQDEw02NjQ5NWUwZC03NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PHR+1hvoPF3H+gjj68tTnkzh17vaR/rWEynoym+6IRAMUQeSpowyJTiAg0J /MlQB295Kq+V1Q2arBevRIeSon+M+utM5aJpFJz34W6x0jNAdI3+j1hjRDw/kIJa 7ZUmHXLrpPx4dQxhNjteofXXgDDb9qFSEwpin7HQMbKPoGo9M6NAjODaGPcazYNW dAFPlBHzEkHUFpGmf4wUXp+JM6WnGIsZ4MZdmYryV5leuZwEUNUlk9e4868cW3Cn iDEg7TAy8Uau50AQfvuCQQfmLuRmyFYouO2gpzqbLUQnv6NzV3MwynJxGJa43ucF wMraEBR4D3DK+3htztTnPHxs6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDOnRLy 4x9SHZ3JIFFD3lMSknQ+MB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5 TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODI3MS84MUY5RTJEMDFDNDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1y ZmdqWElQVEFsbVFiU2h5TVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClNyawX927tQ2m1XBTrcJAC+hBouLI2o0jIaVpKDHypwXJvD8WUrHX LO7ChEAry1TDVFzQoUPax3+bWFiw9zayrVs5/1HXjDpjm5o21aHENhkaWYbplSbZ sVv0nJ4vW6V5IDygiqbosswDclt47n2+xruhoKufHIpa7TqXvkbIqTpBWxCg2fG3 2wPN4GnDErH8I4s11OmWdaLowduGiOZjVDnAupKzwAF0VphOi2AgtTGkjFNGzE2X Xfvs3AMBzYXNtkeNCp81RZlEx2weicgL5e1goq9C94/ATxU0AVeGa/wJE7JQ+xS9 b4sRJTS1iOEc9R3Deyk9JvaD3BRHHLyR -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org