$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: gJqjkBFYqpUQZC2RWYDEeFLcUY6LANjGEIPPTaBCCAk= Subject key identifier: BC:B9:14:79:46:06:40:A4:6E:86:A2:96:A9:81:DB:60:31:91:17:D2 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0D38 Signing time: Sat 18 May 2024 18:41:42 +0000 Manifest this update: Sat 18 May 2024 18:41:42 +0000 Manifest next update: Sat 25 May 2024 18:41:42 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: N4SqCqjUFq8DQ2jvg33FOEUwdK+GnYOxk4iN/Zd/fnU=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: rftnrakAo3/bRNzFCzk3sB0wcEtmcOiHKBOtNhB/i7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: May 18 18:41:42 2024 GMT Not After : May 25 18:41:42 2024 GMT Subject: CN=6648f666-dbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:6f:c2:03:a0:0d:f0:4e:28:cd:a1:46:19: ff:70:fc:0b:de:6f:bc:24:29:c9:6a:2c:12:bd:38: 08:1c:7f:94:65:a6:e5:d5:d3:23:46:10:c9:8b:e7: 23:5c:b5:4d:a0:80:80:23:c6:79:b5:b6:d8:35:16: 88:82:0b:4f:ca:21:e7:e9:06:b2:91:52:87:d9:d6: a4:bf:e3:56:fc:2d:38:be:28:5e:87:4f:a1:5b:06: 4d:7d:11:8b:c6:33:d8:47:83:6b:1e:ae:33:7d:9c: f1:ae:c0:d1:b4:12:42:64:f6:e1:f1:b5:b7:f7:f1: d0:e5:dc:7a:af:18:fd:e2:7e:91:da:0c:61:a2:0b: 5a:90:4a:39:a0:ff:cb:63:c7:53:8e:f9:2c:77:1f: 5e:c5:6d:bf:8d:70:cd:78:ea:30:7d:d8:4c:0e:2f: 01:83:80:49:4a:51:b4:b7:bf:70:58:69:33:e0:bc: 34:a8:34:9a:0a:69:72:0d:ee:c2:fb:c8:d6:01:84: 25:03:3b:4d:1b:7d:27:13:3c:92:f6:a1:2d:5d:ec: b3:6a:8a:4c:d1:57:82:91:2a:9b:29:72:ba:33:71: 70:59:2a:26:a5:47:2f:50:a1:8a:c4:ef:73:35:9e: 51:3a:13:98:97:81:c9:06:24:fc:9d:dc:40:54:01: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B9:14:79:46:06:40:A4:6E:86:A2:96:A9:81:DB:60:31:91:17:D2 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e9:21:fa:9f:d0:37:28:e3:da:6b:54:0b:3e:e1:8e:5a:2d: 5f:9f:72:21:40:86:cd:aa:e2:99:5c:64:6e:44:83:9c:ff:3c: 63:58:f7:af:c0:01:04:49:28:0a:e2:bb:f0:c0:cb:d9:82:2b: 26:2f:b3:b1:32:9f:9f:07:46:bc:30:f0:6b:5c:7f:32:bd:37: fb:6b:7b:43:2e:8e:09:89:5d:f2:94:d4:69:21:1b:46:00:08: c6:2e:88:1a:47:1b:2d:51:9f:a2:50:bd:4b:ef:0f:3b:23:6c: d0:5a:d0:79:0b:c3:28:99:1d:32:9f:7e:b2:37:55:2f:0b:89: 0a:91:a3:22:94:38:ac:8f:5e:0f:75:c4:e4:cf:02:aa:a4:d9: 9c:6e:25:e0:0a:5a:6e:de:53:e7:34:a6:4b:9d:89:02:cf:8b: cf:a0:88:f1:53:0d:8e:21:a6:73:f1:18:7a:1b:95:2e:65:9b: ec:f4:f0:af:53:e6:b9:e5:5a:6a:d2:fb:ed:50:a1:1a:0d:5b: ef:7c:81:35:8c:e2:e7:e8:2e:3e:a1:e3:7b:f4:78:fa:92:fc: 60:1f:d0:97:76:bc:14:4c:ec:4a:b1:c7:0c:24:58:e2:c0:7d: 18:89:ad:8c:2d:7d:91:f0:2f:ae:15:cd:5d:ce:93:7c:3e:15: 22:da:3a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjQwNTE4MTg0MTQyWhcNMjQwNTI1MTg0MTQyWjAYMRYwFAYD VQQDEw02NjQ4ZjY2Ni1kYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfBvwgOgDfBOKM2hRhn/cPwL3m+8JCnJaiwSvTgIHH+UZabl1dMjRhDJi+cj XLVNoICAI8Z5tbbYNRaIggtPyiHn6QaykVKH2dakv+NW/C04viheh0+hWwZNfRGL xjPYR4NrHq4zfZzxrsDRtBJCZPbh8bW39/HQ5dx6rxj94n6R2gxhogtakEo5oP/L Y8dTjvksdx9exW2/jXDNeOowfdhMDi8Bg4BJSlG0t79wWGkz4Lw0qDSaCmlyDe7C +8jWAYQlAztNG30nEzyS9qEtXeyzaopM0VeCkSqbKXK6M3FwWSompUcvUKGKxO9z NZ5ROhOYl4HJBiT8ndxAVAHh0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy5FHlG BkCkboailqmB22AxkRfSMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi6SH6n9A3KOPaa1QLPuGOWi1fn3IhQIbNquKZXGRuRIOc/zxjWPev wAEESSgK4rvwwMvZgismL7OxMp+fB0a8MPBrXH8yvTf7a3tDLo4JiV3ylNRpIRtG AAjGLogaRxstUZ+iUL1L7w87I2zQWtB5C8MomR0yn36yN1UvC4kKkaMilDisj14P dcTkzwKqpNmcbiXgClpu3lPnNKZLnYkCz4vPoIjxUw2OIaZz8Rh6G5UuZZvs9PCv U+a55Vpq0vvtUKEaDVvvfIE1jOLn6C4+oeN79Hj6kvxgH9CXdrwUTOxKsccMJFji wH0Yia2MLX2R8C+uFc1dzpN8PhUi2joH -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org