$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json) Hash identifier: RVLV4YIWdRSvp09coXc5GNYOBqA6NnsVPRj6ufBvfi8= Subject key identifier: 63:5F:F3:E5:EF:5C:44:CA:1C:D3:CC:88:89:FA:6B:E9:47:FF:00:A3 Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft Manifest number: 0255 Signing time: Sat 18 May 2024 16:50:46 +0000 Manifest this update: Sat 18 May 2024 16:50:46 +0000 Manifest next update: Sat 25 May 2024 16:50:46 +0000 Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: USyg1GvgAzdQpFQdMOAW9a0gNlzKYCMiHmq53b3xvtI=) 2: B3997DB4F3A311EC8804FE09C4F9AE02.roa (hash: fGRAWVuiZM4SzZoTJqQ4vbTpTjVszXFlQHsIpTKFdWw=) 3: B2F10206F3A311EC8804FE09C4F9AE02.roa (hash: SGqEOD9kqAEWwvjfSGBDqxipEX5k0szvlLWgNevkloI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Validity Not Before: May 18 16:50:46 2024 GMT Not After : May 25 16:50:46 2024 GMT Subject: CN=6648dc66-5dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:f2:5d:ba:bd:73:11:5a:34:f0:96:ba:ef: bc:b8:2a:58:fe:6f:fa:15:d3:88:8d:c7:a0:74:48: 1f:d2:7d:5a:cb:d2:4b:29:bc:d5:50:55:73:98:34: 66:f1:5c:58:99:ad:14:4b:b4:41:86:55:2a:7a:63: 09:2c:e0:a6:dc:be:4b:f5:b5:36:c5:db:6c:83:2e: 4a:d4:d1:b1:bb:82:c2:cc:32:9d:49:0e:9c:12:49: 82:07:93:3d:85:2b:aa:ed:2c:58:e8:6c:a5:0b:ce: 13:4a:a1:4d:1e:ab:a4:95:ff:66:93:e5:d9:61:01: 45:cb:a2:36:50:51:3a:4e:e1:7e:46:bc:67:d8:c7: 83:19:cc:51:26:49:92:39:42:19:be:d2:b0:70:cd: 42:f4:84:1a:6a:dc:7c:41:66:94:bf:cb:59:fb:8c: 69:df:9f:5a:ec:b3:97:df:1c:1d:19:74:d9:9e:5b: fd:30:cd:02:f5:da:91:d6:46:d2:d5:b0:b8:54:91: 1d:2a:43:7e:b6:03:67:9b:b2:6e:41:e3:fe:d4:ad: ff:22:47:fb:9a:dc:b1:81:8a:5e:58:16:1b:ee:c0: 59:dd:1b:50:1c:10:a6:7e:fc:af:6c:b6:b0:8a:8f: be:04:fb:7f:d2:20:c7:59:9b:5d:40:d1:75:68:6a: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5F:F3:E5:EF:5C:44:CA:1C:D3:CC:88:89:FA:6B:E9:47:FF:00:A3 X509v3 Authority Key Identifier: keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:0b:2a:5f:32:23:d6:0a:96:a1:57:41:8d:10:b8:6f:08:eb: 45:11:3a:19:9a:08:89:5e:22:0c:58:02:3e:64:1a:93:f5:2f: 5b:02:f0:11:76:c4:79:a9:2a:30:88:89:6a:aa:9a:ea:57:9a: 08:48:db:4e:62:f9:de:8f:21:0e:c6:f5:50:06:02:05:81:97: 6f:f4:94:02:d7:63:07:95:ec:85:d6:e9:87:6b:a1:d3:df:18: 5c:40:fe:b8:73:c6:3c:4b:c0:c4:2f:1a:80:c0:05:42:31:68: 40:e9:28:a8:eb:64:b1:0a:ca:82:c5:c0:8c:81:27:7e:d8:64: 14:2d:9f:98:cd:af:c6:36:93:a4:b4:46:f8:87:47:e6:ec:dd: e9:70:13:37:e0:2f:07:6f:d2:4d:84:ef:e8:fd:31:18:20:e7: 21:49:bd:02:fb:a1:79:78:c5:de:f7:2f:46:a5:34:1d:32:a6: 49:a7:32:0c:3b:d8:bf:a2:8e:e0:97:1b:2d:7d:90:af:d7:df: 71:12:50:d1:67:ac:a8:31:47:7a:a1:41:3a:fa:c1:15:1a:b9: e9:ff:a4:de:c3:ca:87:12:91:06:9c:c9:87:78:46:1f:d4:c8: 4d:41:52:fa:c1:0f:ee:4b:88:f8:76:35:13:e0:24:28:39:ef: 29:ce:c2:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0 QzUyQzM1RjUwHhcNMjQwNTE4MTY1MDQ2WhcNMjQwNTI1MTY1MDQ2WjAYMRYwFAYD VQQDEw02NjQ4ZGM2Ni01ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKjyXbq9cxFaNPCWuu+8uCpY/m/6FdOIjcegdEgf0n1ay9JLKbzVUFVzmDRm 8VxYma0US7RBhlUqemMJLOCm3L5L9bU2xdtsgy5K1NGxu4LCzDKdSQ6cEkmCB5M9 hSuq7SxY6GylC84TSqFNHquklf9mk+XZYQFFy6I2UFE6TuF+Rrxn2MeDGcxRJkmS OUIZvtKwcM1C9IQaatx8QWaUv8tZ+4xp359a7LOX3xwdGXTZnlv9MM0C9dqR1kbS 1bC4VJEdKkN+tgNnm7JuQeP+1K3/Ikf7mtyxgYpeWBYb7sBZ3RtQHBCmfvyvbLaw io++BPt/0iDHWZtdQNF1aGrZawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNf8+Xv XETKHNPMiIn6a+lH/wCjMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L SDFua18tU1lMd3RNVXNOZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrCypfMiPWCpahV0GNELhvCOtFEToZmgiJXiIMWAI+ZBqT9S9bAvAR dsR5qSowiIlqqprqV5oISNtOYvnejyEOxvVQBgIFgZdv9JQC12MHleyF1umHa6HT 3xhcQP64c8Y8S8DELxqAwAVCMWhA6Sio62SxCsqCxcCMgSd+2GQULZ+Yza/GNpOk tEb4h0fm7N3pcBM34C8Hb9JNhO/o/TEYIOchSb0C+6F5eMXe9y9GpTQdMqZJpzIM O9i/oo7glxstfZCv199xElDRZ6yoMUd6oUE6+sEVGrnp/6Tew8qHEpEGnMmHeEYf 1MhNQVL6wQ/uS4j4djUT4CQoOe8pzsLU -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org