$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: CgOw9N9Xa8c9IcAjm+6MXfDNi3lRUhva2EGQ219Evjo= Subject key identifier: 77:A2:F4:EE:AD:3B:35:BB:B0:64:BC:80:81:CA:E8:A6:27:20:78:C0 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: A7 Signing time: Sat 01 Jun 2024 08:09:42 +0000 Manifest this update: Sat 01 Jun 2024 08:09:41 +0000 Manifest next update: Sat 08 Jun 2024 08:09:41 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: ITKETwfFjp3bZBIYYJnUGyXTVEpSDWZaBqDgZWyfA4A=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: R1kQbh2a02DCc6ZiMFJ5Emwv2/r/UKVxCovXQQdwxnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Jun 1 08:09:41 2024 GMT Not After : Jun 8 08:09:41 2024 GMT Subject: CN=665ad745-5b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5c:31:98:34:65:77:54:a3:a4:c5:33:47:bc: ce:fa:e5:a4:e2:36:60:aa:42:81:74:97:81:ae:0d: 5e:60:79:f8:b0:f3:27:f2:f7:39:07:71:39:62:c0: f1:7c:aa:38:0b:8d:c3:01:54:92:c1:7c:cd:61:b9: ea:87:88:81:aa:34:4f:e9:06:5e:2b:86:f2:cf:57: 2d:79:7f:de:68:3f:26:6b:af:6d:ff:54:33:a7:ca: 60:c1:c5:41:cb:dd:35:71:9e:7f:98:0a:69:4d:67: 00:cb:10:19:b2:2d:fd:f2:dd:79:1e:6f:66:06:05: 69:c9:58:47:6f:32:a4:ef:03:a4:a0:52:4d:84:91: bc:6b:e9:cc:db:4e:59:36:df:46:48:51:29:3f:de: d7:b7:78:91:87:e8:f1:5e:b5:71:8a:3c:97:30:3e: c1:91:c1:fb:2b:48:a8:f4:28:f2:29:39:ba:44:69: 91:4d:a2:46:c8:3e:37:8a:6f:e2:8c:4e:6b:a1:11: 78:a8:21:dc:04:21:84:c2:4d:e3:2e:86:e8:b1:3b: f9:fa:9c:1c:3b:8a:fd:b8:72:4d:bd:5f:36:b8:48: fd:87:69:1b:7b:7f:fe:a6:5b:40:55:1c:5a:fb:d4: 6f:85:fd:ac:7c:01:ae:ab:13:f2:78:6e:81:be:2d: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A2:F4:EE:AD:3B:35:BB:B0:64:BC:80:81:CA:E8:A6:27:20:78:C0 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:6f:fa:95:a7:a9:c2:1d:bb:04:2c:38:8b:ef:4f:25:42: fc:8d:97:3b:99:bc:78:f8:d7:d8:43:4f:31:36:bb:ca:6d:df: 86:fa:a0:58:48:c5:a8:e6:ba:bc:b4:f2:c6:e0:be:0d:02:f2: dc:c5:73:1c:f1:ac:e1:e4:cd:ba:d8:0d:f2:49:17:d9:51:ca: 03:58:1e:54:08:df:47:4c:a1:37:b9:8f:79:35:5e:50:e3:c0: 23:ed:ba:22:e6:b2:9e:c2:c8:c0:ff:7c:83:84:24:fb:3d:2e: 77:04:8a:93:99:0c:95:c1:b6:af:6f:55:46:8e:f0:ef:cb:21: 8c:9d:a2:f2:6f:f2:87:4b:bc:8d:da:4a:e9:67:d1:3e:7f:89: f7:9e:93:12:5f:77:1e:57:4d:5b:45:1d:a1:44:12:f8:8a:4e: bf:4f:dc:9d:16:0f:1f:a5:b2:26:9b:5c:b0:55:b5:d2:a7:b4: dc:41:9f:fe:8f:74:02:b6:af:96:a3:2f:23:48:f9:12:ea:63: c4:53:6f:22:6b:58:53:36:c0:14:2b:a5:32:38:09:55:73:c8: db:e5:14:f2:ae:cf:ca:67:b9:3d:7f:f7:8c:af:57:58:69:da: e8:13:b5:71:ba:fc:80:61:47:ee:83:0f:24:8f:ba:df:c1:61: d3:5e:ad:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjQwNjAxMDgwOTQxWhcNMjQwNjA4MDgwOTQxWjAYMRYwFAYD VQQDEw02NjVhZDc0NS01YjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+VwxmDRld1SjpMUzR7zO+uWk4jZgqkKBdJeBrg1eYHn4sPMn8vc5B3E5YsDx fKo4C43DAVSSwXzNYbnqh4iBqjRP6QZeK4byz1cteX/eaD8ma69t/1Qzp8pgwcVB y901cZ5/mAppTWcAyxAZsi398t15Hm9mBgVpyVhHbzKk7wOkoFJNhJG8a+nM205Z Nt9GSFEpP97Xt3iRh+jxXrVxijyXMD7BkcH7K0io9CjyKTm6RGmRTaJGyD43im/i jE5roRF4qCHcBCGEwk3jLobosTv5+pwcO4r9uHJNvV82uEj9h2kbe3/+pltAVRxa +9Rvhf2sfAGuqxPyeG6Bvi0KxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHei9O6t OzW7sGS8gIHK6KYnIHjAMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWPG/6laepwh27BCw4i+9PJUL8jZc7mbx4+NfYQ08xNrvKbd+G+qBY SMWo5rq8tPLG4L4NAvLcxXMc8azh5M262A3ySRfZUcoDWB5UCN9HTKE3uY95NV5Q 48Aj7boi5rKewsjA/3yDhCT7PS53BIqTmQyVwbavb1VGjvDvyyGMnaLyb/KHS7yN 2krpZ9E+f4n3npMSX3ceV01bRR2hRBL4ik6/T9ydFg8fpbImm1ywVbXSp7TcQZ/+ j3QCtq+Woy8jSPkS6mPEU28ia1hTNsAUK6UyOAlVc8jb5RTyrs/KZ7k9f/eMr1dY adroE7VxuvyAYUfugw8kj7rfwWHTXq0n -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:30 2024 by rpki-client on console-fra.rpki-client.org