$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json) Hash identifier: ZfxbWnWi81/qTuk1i5QDBwE1PvkrsGX+MiYxtbFrHJo= Subject key identifier: 6C:DB:5A:9D:12:F1:2A:F2:05:28:E7:DE:AE:38:2D:78:CD:41:93:D3 Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft Manifest number: 039E Signing time: Sun 19 May 2024 02:35:01 +0000 Manifest this update: Sun 19 May 2024 02:35:00 +0000 Manifest next update: Sun 26 May 2024 02:35:00 +0000 Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: BSRDsZY35M5FhUEYkLXssrh4RlpdagQzdOnEB51XwaU=) 2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: olvikDhKtOHpoejSx0CBxdNeA8P8hk9v8NtYbJZS3cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Validity Not Before: May 19 02:35:00 2024 GMT Not After : May 26 02:35:00 2024 GMT Subject: CN=66496555-cc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:2d:5b:31:0c:8d:ab:9b:cc:c8:29:05:99: ff:f5:c5:52:41:f5:f6:e6:2c:ad:cc:bd:07:8b:76: 69:d2:4c:12:a0:16:c0:f7:4a:28:72:83:31:a3:96: b0:b4:34:76:1b:79:e2:c1:7a:83:d6:d5:96:01:80: dc:0a:29:31:00:65:7b:8a:90:bb:1a:12:f9:d2:cc: 78:db:8a:97:dd:73:e8:be:87:81:cb:1a:e7:c9:e3: 38:4b:3e:49:4d:dd:b7:7c:02:06:12:a3:0d:b9:53: 25:74:3f:91:45:80:c1:f6:35:84:a9:3f:1e:54:a4: 86:8d:8b:f0:60:ac:9f:67:aa:4e:ba:b4:6f:3a:40: f6:a4:37:79:0a:35:ad:51:e6:f5:20:2c:d4:2e:b6: af:52:bd:c1:9b:68:f0:f9:70:59:fc:53:64:a7:54: 30:d0:be:f8:bd:31:3a:de:36:37:1b:9e:6c:98:09: e5:e6:dd:90:00:4e:45:c2:f0:52:8a:69:63:95:d7: 14:ab:1a:da:1a:f7:17:e4:9f:59:74:0e:8b:cd:b8: 9c:5d:03:80:78:28:84:08:91:14:cb:a9:61:d8:b0: 35:30:d1:89:e7:df:28:a5:b7:19:8b:2c:6a:40:7c: 8a:00:d0:12:f3:3e:4b:06:75:26:99:36:11:0f:ba: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DB:5A:9D:12:F1:2A:F2:05:28:E7:DE:AE:38:2D:78:CD:41:93:D3 X509v3 Authority Key Identifier: keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:72:00:af:49:89:b6:58:42:f0:eb:a6:e8:a5:b3:3a:76:2f: 53:3e:47:38:47:c2:9f:4e:50:ef:6f:59:65:76:dc:6f:23:71: cd:8c:96:33:00:4a:46:ad:91:21:ed:e7:ad:97:6c:71:80:cc: 94:c3:df:c6:a0:5f:63:2e:57:8f:9e:db:b0:8a:34:2f:00:49: 4f:13:df:5f:4f:ec:8b:bc:bd:38:ba:ba:4a:9d:7b:9f:f7:16: ad:b2:51:80:25:87:05:27:36:c7:c8:0c:24:0a:a2:af:9d:6e: 36:6c:9f:21:10:37:3e:7f:ad:c0:0c:48:a2:07:ea:9d:ff:4c: a7:ac:3f:1a:b9:6e:c1:68:22:61:2f:c8:b1:87:f9:fd:94:c0: cf:10:a8:f7:45:04:01:a2:5a:37:d9:ed:35:d5:44:3a:cc:29: c9:20:01:ce:23:2d:f6:3f:24:3a:45:e2:d8:e6:7e:92:b8:d5: 54:99:64:fd:41:ce:9f:93:e2:13:5a:8e:82:e7:54:59:03:cb: df:2c:e4:0f:4a:11:a2:0c:6a:b1:cf:09:ee:46:2d:10:58:13: b1:18:8c:09:bb:3c:08:d0:e5:a0:55:60:b9:5f:97:c2:47:ee: 5c:9e:01:b9:65:a3:86:75:bd:50:e9:b9:9e:7e:43:2f:51:4e: 32:38:17:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz OUFBRjgyQ0EwHhcNMjQwNTE5MDIzNTAwWhcNMjQwNTI2MDIzNTAwWjAYMRYwFAYD VQQDEw02NjQ5NjU1NS1jYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyktWzEMjaubzMgpBZn/9cVSQfX25iytzL0Hi3Zp0kwSoBbA90oocoMxo5aw tDR2G3niwXqD1tWWAYDcCikxAGV7ipC7GhL50sx424qX3XPovoeByxrnyeM4Sz5J Td23fAIGEqMNuVMldD+RRYDB9jWEqT8eVKSGjYvwYKyfZ6pOurRvOkD2pDd5CjWt Ueb1ICzULravUr3Bm2jw+XBZ/FNkp1Qw0L74vTE63jY3G55smAnl5t2QAE5FwvBS imljldcUqxraGvcX5J9ZdA6LzbicXQOAeCiECJEUy6lh2LA1MNGJ598opbcZiyxq QHyKANAS8z5LBnUmmTYRD7qe3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzbWp0S 8SryBSjn3q44LXjNQZPTMB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDE2RC9GMDQyMDdBNDRGMDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFk ZVlDLUpZMlh4SWM1cXZnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOcgCvSYm2WELw66bopbM6di9TPkc4R8KfTlDvb1lldtxvI3HNjJYz AEpGrZEh7eetl2xxgMyUw9/GoF9jLlePntuwijQvAElPE99fT+yLvL04urpKnXuf 9xatslGAJYcFJzbHyAwkCqKvnW42bJ8hEDc+f63ADEiiB+qd/0ynrD8auW7BaCJh L8ixh/n9lMDPEKj3RQQBolo32e011UQ6zCnJIAHOIy32PyQ6ReLY5n6SuNVUmWT9 Qc6fk+ITWo6C51RZA8vfLOQPShGiDGqxzwnuRi0QWBOxGIwJuzwI0OWgVWC5X5fC R+5cngG5ZaOGdb1Q6bmefkMvUU4yOBcU -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org