$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: bfEjax+KtYKcdbzOVZtDuTTEuZPiWsftBnG/VKiTeBI= Subject key identifier: 2F:6C:C8:02:0B:C3:7B:34:FA:60:06:1D:58:0F:F8:A3:F4:98:E5:D1 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 0613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 060F Signing time: Sat 18 May 2024 23:51:46 +0000 Manifest this update: Sat 18 May 2024 23:51:45 +0000 Manifest next update: Sat 25 May 2024 23:51:45 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: jXajIsCmCT97EzKM9ECYLbn/8SltB1Gkd+nHYN4gXbU=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: eZp0ZKgVDOfYu6Z9u1hdNjyGvm1tn8fssJQyWdAbSMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: May 18 23:51:45 2024 GMT Not After : May 25 23:51:45 2024 GMT Subject: CN=66493f12-a0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:f3:70:92:bc:54:e4:53:9a:a7:11:12:a7: c6:7a:1d:7a:cf:f2:04:a3:ae:de:1a:db:21:b0:0a: f8:0f:2f:b7:f2:a3:f0:5b:00:ff:a4:ad:28:56:df: 7d:a2:fb:f2:5c:da:3f:57:4c:c7:92:ee:94:85:27: 35:37:3e:c8:35:23:c9:ae:56:ca:bf:b0:6d:90:ce: 5a:b3:da:f3:37:80:f7:22:08:f6:ea:d2:22:f9:03: 3b:75:7c:34:49:bc:40:f8:8f:31:ae:8b:5d:f6:8b: b4:66:3c:0c:f6:ae:8d:dd:a9:e0:df:ba:05:56:d9: 80:56:72:70:ca:2b:0f:a0:cd:22:08:09:84:38:94: 05:b3:7f:01:93:fd:6a:4f:fd:23:2c:93:43:c3:38: a9:69:21:26:76:8b:4e:3d:d7:2b:66:5a:bd:2c:94: 84:5e:0c:e2:5f:68:d6:8e:43:f2:4b:d8:4d:6d:a7: e8:a4:05:08:9f:50:2f:16:f2:7b:fd:ce:1d:9e:14: e8:70:b9:c6:bb:76:db:ad:de:9f:30:37:13:fd:74: 14:ed:69:5b:fd:3f:bf:d9:41:fa:a4:62:3d:6e:a9: b3:45:d8:f0:46:ad:e2:8e:77:f1:c9:09:33:db:d0: 93:d6:06:b9:c2:ac:a6:9f:e6:40:42:2a:d7:db:bb: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6C:C8:02:0B:C3:7B:34:FA:60:06:1D:58:0F:F8:A3:F4:98:E5:D1 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b5:a0:10:c5:15:5a:26:02:20:c9:7a:b7:7a:1b:b8:21:b7: 7f:dc:e2:ce:91:b7:73:8b:82:92:e5:a8:b4:f9:5e:e0:7a:84: 5f:b1:1c:51:78:49:77:9c:60:58:94:ad:5a:15:d7:1c:72:5e: b5:5e:a0:25:15:d2:05:3d:54:f5:d0:0d:41:30:60:60:2b:5e: 7f:12:e7:e1:b9:2e:74:fc:9c:0a:cf:cf:dc:ee:ac:4d:fe:a6: 02:64:87:ce:23:2f:d8:2f:64:60:47:58:8f:77:ad:1b:87:83: c0:ab:3f:a8:fd:fa:ce:66:a8:fa:18:29:e0:58:28:75:ee:4f: 50:ed:7e:4e:3b:78:6c:cf:22:74:ba:33:41:1a:4d:66:c7:c3: 7d:2c:e5:f6:00:40:4e:a5:9e:c5:25:5f:d6:47:f0:3e:a0:f7: 99:bd:3b:e0:7c:d4:67:14:d6:1a:1e:95:35:f8:57:6d:2a:bd: 06:71:9a:8d:c9:17:0c:7f:de:b4:74:fb:cb:65:76:af:5d:da: 7b:6e:bf:ee:b7:00:19:6a:06:1d:6e:e4:4c:9e:3a:6d:e4:78: 7a:23:58:ea:c4:67:f0:27:56:cb:96:e6:27:3b:0b:bd:2c:5f: 78:7e:b1:81:14:c5:95:c0:98:57:15:a5:18:47:9b:41:8d:ea: bb:25:11:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjQwNTE4MjM1MTQ1WhcNMjQwNTI1MjM1MTQ1WjAYMRYwFAYD VQQDEw02NjQ5M2YxMi1hMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhzzcJK8VORTmqcREqfGeh16z/IEo67eGtshsAr4Dy+38qPwWwD/pK0oVt99 ovvyXNo/V0zHku6UhSc1Nz7INSPJrlbKv7BtkM5as9rzN4D3Igj26tIi+QM7dXw0 SbxA+I8xrotd9ou0ZjwM9q6N3ang37oFVtmAVnJwyisPoM0iCAmEOJQFs38Bk/1q T/0jLJNDwzipaSEmdotOPdcrZlq9LJSEXgziX2jWjkPyS9hNbafopAUIn1AvFvJ7 /c4dnhTocLnGu3bbrd6fMDcT/XQU7Wlb/T+/2UH6pGI9bqmzRdjwRq3ijnfxyQkz 29CT1ga5wqymn+ZAQirX27u+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9syAIL w3s0+mAGHVgP+KP0mOXRMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOtaAQxRVaJgIgyXq3ehu4Ibd/3OLOkbdzi4KS5ai0+V7geoRfsRxR eEl3nGBYlK1aFdcccl61XqAlFdIFPVT10A1BMGBgK15/EufhuS50/JwKz8/c7qxN /qYCZIfOIy/YL2RgR1iPd60bh4PAqz+o/frOZqj6GCngWCh17k9Q7X5OO3hszyJ0 ujNBGk1mx8N9LOX2AEBOpZ7FJV/WR/A+oPeZvTvgfNRnFNYaHpU1+FdtKr0GcZqN yRcMf960dPvLZXavXdp7br/utwAZagYdbuRMnjpt5Hh6I1jqxGfwJ1bLluYnOwu9 LF94frGBFMWVwJhXFaUYR5tBjeq7JRH0 -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org