$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json) Hash identifier: SKoOTppNx2aquiHRKH9YrvIg9CG/36WmrkuKziuIqU4= Subject key identifier: 66:A6:B2:18:DD:89:24:75:94:9B:53:B6:4E:89:93:A3:AE:35:CD:09 Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Certificate serial: 0FBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft Manifest number: 0FAA Signing time: Sat 18 May 2024 18:04:39 +0000 Manifest this update: Sat 18 May 2024 18:04:38 +0000 Manifest next update: Sat 25 May 2024 18:04:38 +0000 Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: UVf4IvGCIcNtxjuBixAFzHdqYUyMPv6YchIZcrNKmy8=) 2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: rk7zVOdamRthMzsKOlIOmnNeig9OCtcn4aZz/xI3jf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4026 (0xfba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Validity Not Before: May 18 18:04:38 2024 GMT Not After : May 25 18:04:38 2024 GMT Subject: CN=6648edb6-a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:91:26:ea:f1:48:f2:6a:e6:19:6a:15:34: 50:4d:f5:58:8f:5f:99:58:09:bf:73:bd:ac:64:f6: a4:63:2f:62:01:4d:49:2e:31:54:ba:c7:76:f4:d3: 9b:8d:30:76:ab:9b:f2:da:d2:21:0d:5b:50:bb:50: 47:d2:86:b2:66:dc:e0:2f:5f:89:6d:24:2a:d0:28: 3a:01:42:3e:a1:65:e2:13:5d:97:92:21:81:16:fb: 0f:08:23:34:37:a9:cb:e0:65:68:49:03:72:f0:90: 1d:08:20:b7:31:cf:b8:44:e1:d9:51:f1:77:93:a6: 47:61:a8:eb:ed:d5:04:14:7f:b4:2a:47:02:73:8a: 90:3e:08:3b:6d:1b:29:1b:7b:d9:b8:7e:d9:07:6c: 60:eb:1a:cb:ec:ca:f6:22:10:c5:d2:63:67:45:94: 00:d2:e8:cc:15:5e:27:85:e4:16:0a:5a:20:bb:24: f9:33:8e:a7:71:9a:7c:dd:99:6f:70:33:16:c5:43: 6a:5b:fb:bc:e2:84:17:7a:a8:96:16:65:31:b2:b2: d4:c0:1e:e8:ac:99:3f:0d:e8:a2:0c:2b:54:71:ac: e9:e8:02:96:2b:62:f9:74:b3:b2:3e:53:31:d6:81: 65:dc:a0:b7:fd:75:f0:55:96:6b:8d:fc:fd:9c:95: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:B2:18:DD:89:24:75:94:9B:53:B6:4E:89:93:A3:AE:35:CD:09 X509v3 Authority Key Identifier: keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:8c:3d:62:e1:81:73:9f:7b:c5:83:4c:4b:fb:6e:46:7c:c3: e5:b0:86:4b:b6:10:c0:18:a0:d3:45:44:0c:05:80:93:4f:eb: f0:4c:f3:49:f9:d0:2b:54:b2:d9:aa:c3:0c:d3:4c:69:a6:c7: 79:43:88:6a:b6:1d:2d:50:8b:ac:03:79:9b:97:15:97:2a:d6: 3d:cc:69:f4:2d:54:43:77:1b:02:fb:73:9b:fd:a6:15:91:97: 0b:a1:4d:d4:f9:9d:c3:a5:17:dc:a8:7d:cd:b1:8a:a7:27:ba: 23:85:d6:16:c8:0d:20:93:b5:ec:e4:b2:bd:d8:c5:81:72:0b: 9d:c7:c5:2d:da:85:3b:eb:ad:4d:e3:a5:31:47:52:ad:23:0c: c9:25:36:75:e1:88:bc:f2:a5:23:01:f1:d7:f8:79:a7:45:3b: e3:2d:42:3f:70:2d:4e:04:6d:53:97:56:30:65:9c:e0:13:45: 69:21:85:46:07:55:9b:f9:a1:46:03:c7:fc:e1:09:5e:51:12: 52:90:00:1c:12:b0:c6:31:c1:15:d8:a9:02:e6:98:8a:18:04: 1a:29:50:8d:ac:6f:bb:c2:0e:c0:39:36:b7:f6:91:86:84:bb: 62:d3:0c:19:68:74:ec:53:75:2c:eb:71:95:3c:3b:06:39:aa: 29:65:27:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0RTIxMTAvBgNVBAUTKDg4MDc3Nzg2RDY2NTIzQUQ1OTk4RDYzRjY5N0FGNDJG MDM5QzJBQTkwHhcNMjQwNTE4MTgwNDM4WhcNMjQwNTI1MTgwNDM4WjAYMRYwFAYD VQQDEw02NjQ4ZWRiNi1hN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGeRJurxSPJq5hlqFTRQTfVYj1+ZWAm/c72sZPakYy9iAU1JLjFUusd29NOb jTB2q5vy2tIhDVtQu1BH0oayZtzgL1+JbSQq0Cg6AUI+oWXiE12XkiGBFvsPCCM0 N6nL4GVoSQNy8JAdCCC3Mc+4ROHZUfF3k6ZHYajr7dUEFH+0KkcCc4qQPgg7bRsp G3vZuH7ZB2xg6xrL7Mr2IhDF0mNnRZQA0ujMFV4nheQWCloguyT5M46ncZp83Zlv cDMWxUNqW/u84oQXeqiWFmUxsrLUwB7orJk/DeiiDCtUcazp6AKWK2L5dLOyPlMx 1oFl3KC3/XXwVZZrjfz9nJUjLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGamshjd iSR1lJtTtk6Jk6OuNc0JMB8GA1UdIwQYMBaAFIgHd4bWZSOtWZjWP2l69C8DnCqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRFMi9CMjU2QjAzMDM0 RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2MVptTllfYVhyMEx3T2NL cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBZDNodFpsSTYxWm1OWV9hWHIwTHdPY0txay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRFMi9CMjU2QjAzMDM0RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2 MVptTllfYVhyMEx3T2NLcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUjD1i4YFzn3vFg0xL+25GfMPlsIZLthDAGKDTRUQMBYCTT+vwTPNJ +dArVLLZqsMM00xppsd5Q4hqth0tUIusA3mblxWXKtY9zGn0LVRDdxsC+3Ob/aYV kZcLoU3U+Z3DpRfcqH3NsYqnJ7ojhdYWyA0gk7Xs5LK92MWBcgudx8Ut2oU7661N 46UxR1KtIwzJJTZ14Yi88qUjAfHX+HmnRTvjLUI/cC1OBG1Tl1YwZZzgE0VpIYVG B1Wb+aFGA8f84QleURJSkAAcErDGMcEV2KkC5piKGAQaKVCNrG+7wg7AOTa39pGG hLti0wwZaHTsU3Us63GVPDsGOaopZSet -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org