$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: KOL10fWyCQ524LOt0vYT4kQ300kb1JJEXGlL1HGfPp0= Subject key identifier: 20:0D:4E:39:EF:CA:31:2F:11:48:BE:55:68:B4:0F:C9:14:ED:25:97 Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 01D4 Signing time: Sun 19 May 2024 04:21:52 +0000 Manifest this update: Sun 19 May 2024 04:21:51 +0000 Manifest next update: Sun 26 May 2024 04:21:51 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: VssMCZlLACRdt6tEGByHmVWUzkcnKoJRbWFnUknfd40=) 2: 6DFDBF0C02A511ED8277D41AC4F9AE02.roa (hash: 5w9g8PvSMKwlKnWjZ6ZpkKo36qxKq//ptQ/Rj3z+2Do=) 3: 6D59098A02A511ED8277D41AC4F9AE02.roa (hash: 2kJZYUVIJmB/gKVi7JYQUMs8KeRwl4xBZqeXuw6L5Xs=) 4: 6CBBC25602A511ED8277D41AC4F9AE02.roa (hash: YVkrNJKJxaiOUkGvgEZkRsxADzp5O0Zfbj/YNPuxxas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Validity Not Before: May 19 04:21:51 2024 GMT Not After : May 26 04:21:51 2024 GMT Subject: CN=66497e60-dec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:ca:94:20:5a:8c:d6:49:45:59:5b:2f:9c: df:2a:97:7c:42:ee:34:d5:a3:f1:2d:48:a1:fd:b6: b9:bd:1d:9b:25:91:4c:cf:2c:2e:b0:e9:89:fd:72: 2a:83:b7:e9:4e:bf:54:e3:99:21:e8:a1:3e:28:ca: 80:28:4c:49:73:0b:4b:ae:87:e9:22:e3:81:fb:ac: 64:0e:5f:58:18:d8:33:b7:29:f1:c9:f6:8b:c0:1a: 07:79:03:c4:56:f3:5b:14:3c:db:2e:b0:fe:13:09: 9c:da:92:84:9a:00:0d:f6:67:b4:07:c8:32:9f:6c: cf:f1:3a:b4:c4:4e:d8:d3:d8:af:87:31:9d:6a:ef: c6:64:9f:fe:c0:64:1f:f6:2c:45:19:d0:b5:5f:b9: 35:fd:d2:0a:f1:63:43:46:ec:c7:80:3b:19:fe:f7: 1c:14:7f:63:6e:ea:2f:84:86:45:c9:2d:14:b6:0d: e7:49:41:0d:d6:37:83:8c:7a:5e:60:4e:04:68:ff: 65:cf:fb:b2:d0:a9:dc:42:f2:4f:14:95:ca:98:e2: d6:54:a7:47:99:8e:7d:d6:3b:9c:9e:bf:bb:67:8b: 8a:12:79:ac:7a:9d:a8:5c:70:cf:dc:d6:f1:9c:c9: c0:b8:ed:0a:ee:49:f2:f7:e0:91:22:9e:03:44:7e: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:4E:39:EF:CA:31:2F:11:48:BE:55:68:B4:0F:C9:14:ED:25:97 X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:72:b8:5c:69:9a:5e:72:cd:c9:b1:f2:b8:b0:0b:18:d0:60: ba:38:e6:e5:c3:3f:a2:11:7b:dd:bd:a7:c5:23:56:bf:bd:31: c9:7f:c1:4f:41:c0:56:bd:0e:c2:f4:8d:76:b4:f2:26:1f:a0: 85:d2:a5:23:23:12:2e:1c:17:7b:56:ff:99:96:43:df:bb:6e: 98:4b:48:2a:d9:aa:49:83:6d:fb:dc:07:2a:59:04:e6:d7:56: 12:18:12:bd:4d:b0:71:e4:dd:93:f4:cc:78:18:af:c7:94:26: b6:68:ba:62:44:88:0c:b6:67:56:d9:a7:26:98:97:5e:bd:ef: d4:20:d9:3f:61:da:0d:e4:6c:ac:0b:e7:40:e6:0a:46:0d:13: 1f:c3:d5:34:e3:19:28:dc:e7:54:ba:fb:4c:62:c0:c7:f1:96: 2c:c6:6a:92:9b:b0:2b:5f:0d:aa:4a:f8:27:e1:3c:e6:35:24: 3d:80:3c:11:16:ad:5b:4e:ea:10:c3:e0:4f:99:88:11:c0:2d: e0:83:44:3c:82:6d:f4:eb:5b:67:33:96:67:7b:88:bf:cf:d2: ec:d0:5e:1f:b9:b9:f0:43:fa:3c:74:a4:e1:7a:2f:51:d2:65: 45:f7:e3:00:4f:ab:11:25:09:3f:29:47:ff:b2:d2:b8:dd:c7: 60:79:ce:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjQwNTE5MDQyMTUxWhcNMjQwNTI2MDQyMTUxWjAYMRYwFAYD VQQDEw02NjQ5N2U2MC1kZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1f3KlCBajNZJRVlbL5zfKpd8Qu401aPxLUih/ba5vR2bJZFMzywusOmJ/XIq g7fpTr9U45kh6KE+KMqAKExJcwtLrofpIuOB+6xkDl9YGNgztynxyfaLwBoHeQPE VvNbFDzbLrD+Ewmc2pKEmgAN9me0B8gyn2zP8Tq0xE7Y09ivhzGdau/GZJ/+wGQf 9ixFGdC1X7k1/dIK8WNDRuzHgDsZ/vccFH9jbuovhIZFyS0Utg3nSUEN1jeDjHpe YE4EaP9lz/uy0KncQvJPFJXKmOLWVKdHmY591jucnr+7Z4uKEnmsep2oXHDP3Nbx nMnAuO0K7kny9+CRIp4DRH4MDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCANTjnv yjEvEUi+VWi0D8kU7SWXMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/crhcaZpecs3JsfK4sAsY0GC6OOblwz+iEXvdvafFI1a/vTHJf8FP QcBWvQ7C9I12tPImH6CF0qUjIxIuHBd7Vv+ZlkPfu26YS0gq2apJg2373AcqWQTm 11YSGBK9TbBx5N2T9Mx4GK/HlCa2aLpiRIgMtmdW2acmmJdeve/UINk/YdoN5Gys C+dA5gpGDRMfw9U04xko3OdUuvtMYsDH8ZYsxmqSm7ArXw2qSvgn4TzmNSQ9gDwR Fq1bTuoQw+BPmYgRwC3gg0Q8gm3061tnM5Zne4i/z9Ls0F4fubnwQ/o8dKThei9R 0mVF9+MAT6sRJQk/KUf/stK43cdgec6A -----END CERTIFICATE-----Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org