$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft File: SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json) Hash identifier: WfpsBYxLZoQoPMWSdGGgpW863zyNUapCXCkWaNVHDqc= Subject key identifier: 88:98:BC:B6:DA:2D:76:24:AB:33:14:81:FF:1D:5F:3F:3F:4C:A4:F4 Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft Manifest number: 0314 Signing time: Sun 19 May 2024 03:10:46 +0000 Manifest this update: Sun 19 May 2024 03:10:45 +0000 Manifest next update: Sun 26 May 2024 03:10:45 +0000 Files and hashes: 1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: ln3XTfIsh/lsJ5Tez1Q9uarJo/thc4zkN+Yx2+qQJlg=) 2: 259E1BCC09FF11EFB1919C6CC4F9AE02.roa (hash: bkwXMz/ax0ThHTElNjHP9oRkkURT+ErZY6fIjy6b9Kc=) 3: ECCC589A09FE11EFBEBB616CC4F9AE02.roa (hash: NLpKCaNzwymqX+JUy4oTmpLmRdKhH96APzizVGdYs+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Validity Not Before: May 19 03:10:45 2024 GMT Not After : May 26 03:10:45 2024 GMT Subject: CN=66496db5-7d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:f0:1a:90:8a:de:39:0e:16:77:d2:28:1f: 94:fe:11:55:ed:17:ad:a2:f8:93:5a:5e:2a:71:8f: 0c:6f:9e:29:51:7d:92:5b:7f:0a:2e:e4:80:37:19: 13:70:96:2c:9d:71:07:1a:a0:00:f6:c3:77:98:7f: a4:a9:4b:92:b6:71:02:7c:ce:78:bc:1b:57:b3:8d: 17:d5:01:cb:cf:eb:a8:b6:12:a8:81:77:77:19:c5: eb:e2:66:c7:cc:8b:db:f1:33:53:d8:87:e3:a3:f0: f1:45:d7:c6:3c:c7:2a:d6:e3:87:90:c2:d6:e4:b7: ab:cd:ff:c6:9a:62:86:01:e9:c5:da:ee:ee:42:71: a2:23:4c:af:5c:6f:01:40:e4:65:8e:07:59:b6:7a: 5d:1c:c4:f4:0b:e1:0d:18:6a:13:30:61:32:a3:fa: 67:1a:af:85:c8:57:64:a5:53:67:26:3d:fa:a5:a2: 52:3b:b7:9b:44:f6:89:cc:d0:c1:a4:8a:29:fb:fd: d8:58:65:9b:3d:fa:f3:71:6c:d8:4d:0c:e5:11:f5: cb:0c:a7:ca:c6:30:48:a5:4f:ad:ad:d5:5a:8d:b3: 6c:96:a2:19:c4:c5:70:b0:c2:26:85:4e:0a:43:98: c0:f0:77:8b:8e:85:df:ac:c6:a4:b9:88:3f:86:99: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:98:BC:B6:DA:2D:76:24:AB:33:14:81:FF:1D:5F:3F:3F:4C:A4:F4 X509v3 Authority Key Identifier: keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:7e:c7:c7:d0:82:4e:13:98:df:67:82:df:67:20:50:6f:3a: b2:80:51:9d:aa:d8:c5:23:e0:fc:01:56:19:ca:b9:e4:57:c0: 2f:d1:13:23:f3:0d:5c:c7:9d:63:d8:9c:0e:00:14:55:f7:6c: c0:7a:2c:19:2d:c4:51:d1:37:2a:11:28:09:bc:ee:d5:17:f6: dc:26:a5:26:b3:12:ac:b5:0e:65:bb:f3:b4:d3:28:ed:cc:4d: 10:4d:ae:cf:9b:ee:5c:9b:f0:32:19:cf:b3:66:01:4d:0c:7a: 29:3e:10:f6:d3:d5:76:5c:a4:28:38:4b:6f:5b:7a:a2:3c:4e: c6:e0:54:8d:6e:0c:cd:57:6a:01:53:74:4e:ba:e5:65:cc:aa: 02:02:df:57:48:9f:b2:a2:92:c9:a7:0b:16:25:cb:4e:52:6e: 66:4a:d3:e2:bf:f3:39:c2:73:fb:f5:41:fd:60:55:73:94:31: 3d:40:4a:95:ea:fc:08:61:bc:47:f1:4e:d9:c6:e7:99:92:76: b0:d0:a8:76:6d:94:25:26:a7:75:51:06:a9:f8:59:3d:50:05: ce:4b:60:93:cd:70:ec:e0:36:4a:8b:64:80:38:1f:e7:b6:de: 1e:e4:45:c0:ba:3a:fe:1a:d3:cf:68:3d:09:bd:48:07:b0:0b: 8e:da:56:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwQUYxMTAvBgNVBAUTKDRBODVDRjEzODg3MkQzRTQ0RjkwRDdCNkYzMDI4RjBC NTA2NzM0Q0MwHhcNMjQwNTE5MDMxMDQ1WhcNMjQwNTI2MDMxMDQ1WjAYMRYwFAYD VQQDEw02NjQ5NmRiNS03ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R7wGpCK3jkOFnfSKB+U/hFV7RetoviTWl4qcY8Mb54pUX2SW38KLuSANxkT cJYsnXEHGqAA9sN3mH+kqUuStnECfM54vBtXs40X1QHLz+uothKogXd3GcXr4mbH zIvb8TNT2Ifjo/DxRdfGPMcq1uOHkMLW5Lerzf/GmmKGAenF2u7uQnGiI0yvXG8B QORljgdZtnpdHMT0C+ENGGoTMGEyo/pnGq+FyFdkpVNnJj36paJSO7ebRPaJzNDB pIop+/3YWGWbPfrzcWzYTQzlEfXLDKfKxjBIpU+trdVajbNslqIZxMVwsMImhU4K Q5jA8HeLjoXfrMakuYg/hpngZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiYvLba LXYkqzMUgf8dXz8/TKT0MB8GA1UdIwQYMBaAFEqFzxOIctPkT5DXtvMCjwtQZzTM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4 REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAtUlBrTmUyOHdLUEMxQm5O TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvWFBFNGh5MC1SUGtOZTI4d0tQQzFCbk5Ndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAt UlBrTmUyOHdLUEMxQm5OTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4fsfH0IJOE5jfZ4LfZyBQbzqygFGdqtjFI+D8AVYZyrnkV8Av0RMj 8w1cx51j2JwOABRV92zAeiwZLcRR0TcqESgJvO7VF/bcJqUmsxKstQ5lu/O00yjt zE0QTa7Pm+5cm/AyGc+zZgFNDHopPhD209V2XKQoOEtvW3qiPE7G4FSNbgzNV2oB U3ROuuVlzKoCAt9XSJ+yopLJpwsWJctOUm5mStPiv/M5wnP79UH9YFVzlDE9QEqV 6vwIYbxH8U7ZxueZknaw0Kh2bZQlJqd1UQap+Fk9UAXOS2CTzXDs4DZKi2SAOB/n tt4e5EXAujr+GtPPaD0JvUgHsAuO2lYd -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org