$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: LImPnI+ruucBv/rAR5gdO26BTYrt7/ufTi3TmaVHKsw= Subject key identifier: 54:01:B5:F8:9A:A9:26:72:46:D6:07:07:F8:3F:78:B4:6B:1F:F5:BC Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 05A4 Signing time: Sun 19 May 2024 00:19:31 +0000 Manifest this update: Sun 19 May 2024 00:19:31 +0000 Manifest next update: Sun 26 May 2024 00:19:31 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: eWKcDVu8R2I9xdmLsdn0JRleGrT7jPeKAx36njlOXYA=) 2: A886B58A807D11EB9216441FC4F9AE02.roa (hash: WhX4Q9TNbFfGaVxABHORrMx4F6qhOEoY0HIPxziUCnI=) 3: 5A446DC2886B11EB968F2809C4F9AE02.roa (hash: DXbV6wL1YDdn2jOL2QGfv/7BPcjCP40/kPku5gaQlw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: May 19 00:19:31 2024 GMT Not After : May 26 00:19:31 2024 GMT Subject: CN=66494593-dd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:b6:06:d9:a1:18:36:40:6b:e2:eb:6d:0f: 01:34:17:cb:9d:83:41:d2:b7:9d:20:b4:9c:b1:bc: d0:2c:74:53:65:30:15:26:b3:f4:d1:6c:27:50:2b: 66:35:be:e2:4f:b6:2e:92:18:7d:31:9c:0a:e0:bf: 4b:7c:1c:d5:df:1b:db:44:63:af:2a:86:47:43:fe: 0e:13:a2:42:fe:2d:f7:49:c4:8b:a0:fa:01:0f:b6: de:73:e9:ef:95:b5:7e:c6:2c:5a:bb:40:3e:ae:80: 1a:df:54:63:9f:65:92:47:67:cd:a2:cf:09:3c:cf: a0:d5:41:c8:70:45:69:99:9b:6d:75:00:78:d4:76: 2d:46:8b:d4:e9:51:eb:e8:56:79:84:7f:86:f2:9b: 4f:76:4a:23:03:e2:de:71:1c:6b:e8:99:49:14:29: 51:38:a4:cc:cc:dd:5c:49:be:3b:f6:07:b9:8c:95: 87:6d:20:e1:5e:df:e5:db:47:8a:11:f6:0c:03:94: dd:17:8c:53:6c:00:03:7c:85:23:d5:a5:52:c9:1d: c1:4a:d4:7c:e0:d3:16:46:a9:25:79:66:92:c1:31: c0:7e:11:85:d8:e7:ba:b5:d0:7b:50:62:53:c1:07: 08:2f:01:b0:52:d8:3a:0c:0d:bd:43:ff:40:12:95: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:01:B5:F8:9A:A9:26:72:46:D6:07:07:F8:3F:78:B4:6B:1F:F5:BC X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:08:11:94:ca:fb:3c:bd:26:47:9b:3b:4d:e9:c8:fe:e2:86: 54:2a:8a:d0:ec:e4:00:2f:a0:80:92:e4:5d:f7:a1:d2:fd:c5: cc:c3:07:ce:70:66:27:ec:68:f4:0c:38:53:78:b7:97:83:9c: 5a:a7:d6:9d:3b:5a:b0:75:8a:3b:54:42:a5:0a:10:dc:bf:11: 1b:8c:45:9a:c3:8e:75:80:d2:80:b0:d1:f6:c1:70:c6:39:61: 70:b1:12:4f:02:d5:91:29:1a:2a:72:17:3a:35:d2:d8:6e:8a: 53:ed:5d:b6:30:6c:21:7b:19:08:04:2f:f6:d7:3d:82:66:95: 90:87:56:84:82:73:fa:bf:35:90:3d:1d:21:6f:ff:e0:31:a7: 73:3e:f3:62:a1:6a:76:89:d3:f0:00:bf:99:ab:ee:38:01:8b: 57:06:21:be:59:6f:64:9a:7d:fb:38:a3:29:7c:9b:0a:db:00: 45:b1:06:b5:b5:a7:47:f6:d7:20:0c:cd:88:44:56:5d:25:ca: bd:ea:e7:67:79:40:8f:8e:bd:12:42:70:d7:17:f1:ef:bf:d9: b7:44:f1:06:0f:7d:f6:51:25:a8:af:58:6a:2e:6a:02:4a:0f: 9d:c4:dc:99:34:99:2e:8b:eb:87:1b:93:ea:d3:9c:7c:ca:11: 2c:b4:65:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjQwNTE5MDAxOTMxWhcNMjQwNTI2MDAxOTMxWjAYMRYwFAYD VQQDEw02NjQ5NDU5My1kZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYm2BtmhGDZAa+LrbQ8BNBfLnYNB0redILScsbzQLHRTZTAVJrP00WwnUCtm Nb7iT7Yukhh9MZwK4L9LfBzV3xvbRGOvKoZHQ/4OE6JC/i33ScSLoPoBD7bec+nv lbV+xixau0A+roAa31Rjn2WSR2fNos8JPM+g1UHIcEVpmZttdQB41HYtRovU6VHr 6FZ5hH+G8ptPdkojA+LecRxr6JlJFClROKTMzN1cSb479ge5jJWHbSDhXt/l20eK EfYMA5TdF4xTbAADfIUj1aVSyR3BStR84NMWRqkleWaSwTHAfhGF2Oe6tdB7UGJT wQcILwGwUtg6DA29Q/9AEpUVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQBtfia qSZyRtYHB/g/eLRrH/W8MB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+CBGUyvs8vSZHmztN6cj+4oZUKorQ7OQAL6CAkuRd96HS/cXMwwfO cGYn7Gj0DDhTeLeXg5xap9adO1qwdYo7VEKlChDcvxEbjEWaw451gNKAsNH2wXDG OWFwsRJPAtWRKRoqchc6NdLYbopT7V22MGwhexkIBC/21z2CZpWQh1aEgnP6vzWQ PR0hb//gMadzPvNioWp2idPwAL+Zq+44AYtXBiG+WW9kmn37OKMpfJsK2wBFsQa1 tadH9tcgDM2IRFZdJcq96udneUCPjr0SQnDXF/Hvv9m3RPEGD332USWor1hqLmoC Sg+dxNyZNJkui+uHG5Pq05x8yhEstGX6 -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org