$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: fVWb/6NK8r2mbbYL9f9dxUmzinGoTo61mHQlaMnZtXk= Subject key identifier: DD:ED:BA:9F:A9:E0:8B:AF:D7:A6:A7:78:9B:DF:50:F8:6C:A1:5A:C2 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 02C7 Signing time: Sun 19 May 2024 03:29:05 +0000 Manifest this update: Sun 19 May 2024 03:29:04 +0000 Manifest next update: Sun 26 May 2024 03:29:04 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: 7RuwTC8IbBY8w0zu4TNS5S1gt5kTopNTXc6NYrmU5Es=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: yfcp/+vcXd92Y/eY7SRY/CR1e0r/AdIrFespQFyYzR8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: N4dFIKbp/UkPFYHASL0V+O/a94lreYQtC/E1dslsMzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: May 19 03:29:04 2024 GMT Not After : May 26 03:29:04 2024 GMT Subject: CN=66497201-2a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:9a:0a:90:27:e6:20:8c:20:e2:f5:30:1d: ac:f5:85:d9:44:c8:08:3d:7f:19:d1:c6:9e:1c:c3: 9d:7e:05:5a:0c:0f:f6:72:90:8c:55:d5:a6:d5:f7: ff:23:e4:eb:1e:39:99:ce:1e:fb:2c:d5:c4:c1:1d: d4:44:1f:75:82:8a:81:1e:2a:52:e1:b6:ba:57:ec: 4d:fc:d0:db:36:fe:46:d6:20:b1:40:b3:08:67:bd: 34:24:fa:36:88:8e:33:2f:36:2f:c9:ca:22:8e:2a: af:a6:b5:92:5b:ec:58:bc:8b:cd:7b:35:4c:35:0d: fd:64:2d:60:44:7e:59:1b:b8:b7:b0:fa:e4:cd:b9: ea:3e:b9:48:6c:7e:8c:e9:33:ce:40:24:88:b4:ac: 05:ef:c7:c9:90:ec:c1:99:35:99:bf:20:f9:29:0f: 03:6b:7e:b7:1a:ac:74:33:24:ce:18:6b:b6:9e:fc: de:e2:df:17:ce:dd:ce:28:a6:6e:bc:fc:d8:d9:89: 66:5b:b0:f2:44:a5:e0:13:9c:a6:d4:0a:58:9d:49: c3:83:fb:84:97:47:f1:70:ef:6a:f0:74:9e:ef:ff: 0e:07:3b:ca:92:e6:79:de:04:bc:65:9a:af:c4:d4: 2f:fc:c5:e4:92:ef:f7:9f:4f:75:ce:8a:05:32:c5: af:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:BA:9F:A9:E0:8B:AF:D7:A6:A7:78:9B:DF:50:F8:6C:A1:5A:C2 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:92:75:26:2a:b8:28:b8:47:9f:32:ea:c4:59:c3:f2:0c: ef:11:ec:da:b2:ec:ce:61:47:c1:f6:a8:0c:5e:18:28:f8:97: bb:fc:77:b4:2a:e2:f0:56:12:d1:09:b5:2c:19:c7:3c:6d:77: 02:3b:99:63:9f:11:3f:cf:92:3f:0a:29:cd:00:9b:87:d7:23: f9:4a:71:1b:b6:09:88:19:f9:01:2a:30:36:3c:b0:c0:b8:a2: f5:3b:50:c9:e4:9a:a1:8e:67:c9:df:8f:a7:ce:2a:9d:0f:0a: d0:89:2e:43:af:27:10:33:42:de:17:0f:0d:d7:15:ef:b8:e0: 58:a2:45:62:7e:3b:79:e8:24:5c:83:03:d0:76:76:29:37:85: b2:10:fe:7a:94:ea:be:10:e5:c2:b3:3f:ea:87:ab:a7:75:c6: df:db:9b:25:7b:8d:ef:ae:af:a2:96:6d:5a:40:e0:2b:4e:cd: 56:c0:14:c0:f7:23:9c:40:3d:26:b3:85:e0:30:7a:73:72:c3: 7b:1e:70:7c:e1:a2:ba:4e:06:52:5c:68:65:e5:0f:f6:67:3b: 3b:e5:a8:54:8c:dc:ad:a8:45:8d:0d:4f:1a:48:6d:d0:1f:42: ac:cd:cb:c8:95:e2:de:fb:65:a6:70:41:ff:9f:bd:92:b8:ca: 46:56:61:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjQwNTE5MDMyOTA0WhcNMjQwNTI2MDMyOTA0WjAYMRYwFAYD VQQDEw02NjQ5NzIwMS0yYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArniaCpAn5iCMIOL1MB2s9YXZRMgIPX8Z0caeHMOdfgVaDA/2cpCMVdWm1ff/ I+TrHjmZzh77LNXEwR3URB91goqBHipS4ba6V+xN/NDbNv5G1iCxQLMIZ700JPo2 iI4zLzYvycoijiqvprWSW+xYvIvNezVMNQ39ZC1gRH5ZG7i3sPrkzbnqPrlIbH6M 6TPOQCSItKwF78fJkOzBmTWZvyD5KQ8Da363Gqx0MyTOGGu2nvze4t8Xzt3OKKZu vPzY2YlmW7DyRKXgE5ym1ApYnUnDg/uEl0fxcO9q8HSe7/8OBzvKkuZ53gS8ZZqv xNQv/MXkku/3n091zooFMsWvtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3tup+p 4Iuv16aneJvfUPhsoVrCMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgJJ1Jiq4KLhHnzLqxFnD8gzvEezasuzOYUfB9qgMXhgo+Je7/He0 KuLwVhLRCbUsGcc8bXcCO5ljnxE/z5I/CinNAJuH1yP5SnEbtgmIGfkBKjA2PLDA uKL1O1DJ5JqhjmfJ34+nziqdDwrQiS5DrycQM0LeFw8N1xXvuOBYokVifjt56CRc gwPQdnYpN4WyEP56lOq+EOXCsz/qh6undcbf25sle43vrq+ilm1aQOArTs1WwBTA 9yOcQD0ms4XgMHpzcsN7HnB84aK6TgZSXGhl5Q/2Zzs75ahUjNytqEWNDU8aSG3Q H0KszcvIleLe+2WmcEH/n72SuMpGVmH1 -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org