$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.mft File: cdMyYEzVOOpyaYevfm_ouHD0L-Q.mft (raw, json) Hash identifier: 9K3NEYGyb9BTnOBmtVxLblE2kZ9Dxa1zcrzjObdxb30= Subject key identifier: 44:6C:5C:05:3B:25:6E:5F:2F:55:A5:28:C6:4F:37:30:1D:51:82:41 Authority key identifier: 71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4 Certificate issuer: /CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4 Certificate serial: 098E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.mft Manifest number: 0987 Signing time: Sat 18 May 2024 20:56:56 +0000 Manifest this update: Sat 18 May 2024 20:56:56 +0000 Manifest next update: Sat 25 May 2024 20:56:56 +0000 Files and hashes: 1: cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl (hash: rubBdLhN95s8ByG5xxmAhOwrnT/GD+o+EnKcsosq9tE=) 2: FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa (hash: HRBdyA46Zp6dmWGqG8DFeOY5VyJI8Xlf00QazAl9dpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2446 (0x98e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4 Validity Not Before: May 18 20:56:56 2024 GMT Not After : May 25 20:56:56 2024 GMT Subject: CN=66491618-1356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:16:a5:df:8d:dc:34:dd:4b:f5:76:6e:48: 5b:8a:90:eb:12:7f:08:85:43:17:61:65:23:d0:5b: 37:8a:30:86:90:44:7d:9e:3f:52:07:81:67:3c:79: c4:df:cc:3f:4c:7b:61:ba:7d:9c:a8:57:67:f7:27: fc:92:80:62:07:d1:af:07:42:dd:db:b4:5e:c6:a5: 91:d1:41:5c:7b:1c:23:9d:41:8d:7a:36:d2:12:b1: 97:55:43:52:80:fc:5c:90:71:59:e6:3c:7b:4c:01: 5f:85:4b:de:5d:e0:d1:b0:5b:bd:7b:7f:29:c1:11: cc:fe:df:b4:e6:e1:17:f7:ba:f8:32:27:29:65:df: ec:ed:d2:3c:6c:3e:11:5b:ef:af:8d:b1:75:1b:2a: f8:72:b0:6d:d1:d4:64:47:03:b5:b7:29:ab:98:d6: 82:ce:d8:10:ae:ef:8e:75:7e:95:df:e8:5b:ef:a5: bc:6f:25:8a:1e:75:63:e2:89:a3:b1:f1:7a:fd:5a: c7:0b:74:4f:32:2e:2b:4d:c2:ca:36:22:21:9e:1d: a1:6d:b6:f8:15:f6:3f:87:56:89:9c:11:11:2c:1c: 41:69:cf:81:59:1a:94:5d:59:55:e8:89:a1:a4:8e: 17:3c:2e:78:5b:86:e5:08:80:81:c3:c8:dd:12:4f: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6C:5C:05:3B:25:6E:5F:2F:55:A5:28:C6:4F:37:30:1D:51:82:41 X509v3 Authority Key Identifier: keyid:71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:26:f5:0c:db:ef:6e:05:b1:ef:13:ab:c7:dd:b4:e4:24: 0c:fe:22:ba:b0:66:e2:9b:fe:77:83:c9:de:7f:33:9c:38:f0: 32:cd:a5:69:77:11:da:a4:ca:92:10:ff:e5:3c:cf:b0:dc:c6: 77:a0:91:69:63:a8:00:db:83:7a:89:9e:5f:b2:21:c2:4c:19: 33:ad:38:9b:32:2d:6e:c4:09:dc:5d:4f:41:b6:47:fc:ff:63: 54:f5:05:67:8a:a1:4c:2d:cb:ca:59:12:3a:30:4c:eb:4f:92: 75:33:9a:7d:67:b8:92:2d:42:0f:1b:35:5a:b6:8c:61:65:a9: 1a:8e:e9:01:bd:57:c9:01:78:39:e7:3a:55:4f:68:1d:ab:48: 24:8a:8a:07:8a:50:10:15:cd:ec:76:45:78:f4:5d:ea:1a:c7: 6a:31:22:ee:b4:a6:cc:de:e1:20:44:14:2f:5c:9e:27:27:41: c2:b3:19:f6:df:bd:8a:97:98:9d:d2:e6:c8:ff:da:be:84:5a: fe:f2:ca:5f:b4:8b:9c:5d:30:5f:e2:00:e4:79:27:ab:90:b3: c5:66:3d:b4:27:d3:a6:8d:c2:47:c9:a4:45:07:8b:f9:fc:ab: 90:ee:c5:03:06:81:f6:48:41:71:8b:e8:cc:09:e9:72:44:61: ce:e5:16:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0EwREQxMTAvBgNVBAUTKDcxRDMzMjYwNENENTM4RUE3MjY5ODdBRjdFNkZFOEI4 NzBGNDJGRTQwHhcNMjQwNTE4MjA1NjU2WhcNMjQwNTI1MjA1NjU2WjAYMRYwFAYD VQQDEw02NjQ5MTYxOC0xMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VYWpd+N3DTdS/V2bkhbipDrEn8IhUMXYWUj0Fs3ijCGkER9nj9SB4FnPHnE 38w/THthun2cqFdn9yf8koBiB9GvB0Ld27RexqWR0UFcexwjnUGNejbSErGXVUNS gPxckHFZ5jx7TAFfhUveXeDRsFu9e38pwRHM/t+05uEX97r4MicpZd/s7dI8bD4R W++vjbF1Gyr4crBt0dRkRwO1tymrmNaCztgQru+OdX6V3+hb76W8byWKHnVj4omj sfF6/VrHC3RPMi4rTcLKNiIhnh2hbbb4FfY/h1aJnBERLBxBac+BWRqUXVlV6Imh pI4XPC54W4blCICBw8jdEk9GzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERsXAU7 JW5fL1WlKMZPNzAdUYJBMB8GA1UdIwQYMBaAFHHTMmBM1TjqcmmHr35v6Lhw9C/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTBERC8yMTQzM0NEMjY4 MzMxMUVBQThBNzMyNzhDNEY5QUUwMi9jZE15WUV6Vk9PcHlhWWV2Zm1fb3VIRDBM LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NkTXlZRXpWT09weWFZZXZmbV9vdUhEMEwtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTBERC8yMTQzM0NEMjY4MzMxMUVBQThBNzMyNzhDNEY5QUUwMi9jZE15WUV6Vk9P cHlhWWV2Zm1fb3VIRDBMLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMcyb1DNvvbgWx7xOrx9205CQM/iK6sGbim/53g8nefzOcOPAyzaVp dxHapMqSEP/lPM+w3MZ3oJFpY6gA24N6iZ5fsiHCTBkzrTibMi1uxAncXU9Btkf8 /2NU9QVniqFMLcvKWRI6MEzrT5J1M5p9Z7iSLUIPGzVatoxhZakajukBvVfJAXg5 5zpVT2gdq0gkiooHilAQFc3sdkV49F3qGsdqMSLutKbM3uEgRBQvXJ4nJ0HCsxn2 372Kl5id0ubI/9q+hFr+8spftIucXTBf4gDkeSerkLPFZj20J9OmjcJHyaRFB4v5 /KuQ7sUDBoH2SEFxi+jMCelyRGHO5RZC -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org