$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: mx1AYzyKXYJiGOxYR8Ig+jfw0LZZGkQYNkwKkQcZ7l8= Subject key identifier: 49:82:EA:71:DA:63:22:62:4D:CB:13:2D:1C:6F:A5:84:D5:D7:11:71 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 0338 Signing time: Fri 31 May 2024 03:35:33 +0000 Manifest this update: Fri 31 May 2024 03:35:32 +0000 Manifest next update: Fri 07 Jun 2024 03:35:32 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: V4cNmPKdlo6vQKb2q6RiaEv/1tFlQz+3AiVXs8cBeIk=) 2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: u7PlVQH0cq5BEuSWOo0gI8VTE01UeWTciTJcC0+9FF0=) 3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: ostgJOoCwhrmvw/erlo0J2UixJvlznMcr11HPFIgFIc=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: h3saPAJhhEGRJVRkZU0IYum5xfP0CswzHKWpnOS5pMs=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: f5uc1TcPmjMgDYmNxHJmQijbeYCUJ7Nv/kgPNOiS0l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: May 31 03:35:32 2024 GMT Not After : Jun 7 03:35:32 2024 GMT Subject: CN=66594585-5a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:92:8e:28:0c:16:72:52:8e:c3:ab:b9:df: 33:6c:5f:e3:23:d1:b1:30:f5:92:6b:da:64:d1:6f: 6a:58:9d:b0:0b:e5:7d:dc:dd:28:1a:ac:84:06:d2: 8e:c2:03:98:27:b9:6a:59:51:d9:1c:57:b6:e6:75: 41:06:7c:e1:95:da:12:3c:50:bb:ab:e8:c1:f6:59: f4:60:dc:ed:29:fb:eb:4f:d2:40:89:5a:1d:96:b1: e4:6c:ef:64:1c:33:86:67:8e:a6:a1:db:c8:6f:b2: fa:fa:69:34:4d:1f:6a:e3:0f:85:f2:68:8d:a8:b6: 02:aa:fc:9f:a4:ce:60:77:bc:d2:3b:ea:ce:83:94: 6e:e9:45:e4:d1:d1:b6:cb:2e:bd:2b:1d:7d:54:8c: 91:02:d2:1b:fa:b4:93:a3:4f:3c:18:51:a3:2d:81: 96:b8:75:85:d4:86:a2:8e:86:10:73:6c:f5:5a:00: 4d:90:4a:f7:b3:11:02:7c:5f:27:a6:1e:7e:7e:f7: 8c:a2:07:8e:00:47:12:8a:e8:f8:2e:ec:63:58:d3: 42:6c:96:94:4e:cb:8a:24:52:88:ba:0c:ac:e8:c8: 2a:15:db:28:ac:8f:36:9f:1c:1d:e4:b1:12:8d:90: c2:72:a7:a7:26:10:64:89:a1:8c:1c:2c:96:05:c5: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:EA:71:DA:63:22:62:4D:CB:13:2D:1C:6F:A5:84:D5:D7:11:71 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:93:09:a7:64:35:0c:3a:03:0d:57:4e:21:30:6d:dd:96:80: 9a:6a:ff:ea:bb:b9:22:f1:56:cc:35:16:d7:ca:e8:3f:19:af: 59:a1:e1:5a:32:34:6f:54:0a:11:0f:ca:1c:f6:dd:a0:8e:96: b0:ba:92:ce:7b:eb:19:b5:03:7d:2d:37:8c:82:b2:46:f1:d7: f6:f9:62:c5:6f:07:90:b6:64:ae:26:82:91:c5:8c:17:28:c5: 6f:9f:31:39:4d:32:ad:41:5c:33:0d:b7:04:1a:4d:7b:96:2c: ee:45:43:74:29:59:c9:40:cc:9e:eb:c4:d8:7a:9d:1e:01:f3: d4:1c:c4:53:1c:d5:d4:b9:30:de:ea:59:ab:b5:9a:dc:88:8c: 62:25:0f:c5:c0:74:94:3c:bd:90:a0:54:81:8d:9c:3c:cf:c7: 26:04:a0:43:14:ef:3f:3b:1e:b2:37:3a:f5:5e:9f:27:61:61: 0e:0b:2e:21:99:08:dd:cb:1a:d6:be:d4:46:c9:88:4d:11:68: 92:20:bd:f8:e8:35:fe:7d:53:f5:d7:f4:36:2f:87:32:5d:18: 10:be:e3:dd:53:48:7c:53:43:6e:9d:31:09:db:72:43:53:23: 3d:49:7d:09:6a:21:45:3d:3f:47:f6:ef:af:86:4d:79:93:92: fb:bd:57:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjQwNTMxMDMzNTMyWhcNMjQwNjA3MDMzNTMyWjAYMRYwFAYD VQQDEw02NjU5NDU4NS01YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfmSjigMFnJSjsOrud8zbF/jI9GxMPWSa9pk0W9qWJ2wC+V93N0oGqyEBtKO wgOYJ7lqWVHZHFe25nVBBnzhldoSPFC7q+jB9ln0YNztKfvrT9JAiVodlrHkbO9k HDOGZ46modvIb7L6+mk0TR9q4w+F8miNqLYCqvyfpM5gd7zSO+rOg5Ru6UXk0dG2 yy69Kx19VIyRAtIb+rSTo088GFGjLYGWuHWF1IaijoYQc2z1WgBNkEr3sxECfF8n ph5+fveMogeOAEcSiuj4LuxjWNNCbJaUTsuKJFKIugys6MgqFdsorI82nxwd5LES jZDCcqenJhBkiaGMHCyWBcWaSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmC6nHa YyJiTcsTLRxvpYTV1xFxMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTkwmnZDUMOgMNV04hMG3dloCaav/qu7ki8VbMNRbXyug/Ga9ZoeFa MjRvVAoRD8oc9t2gjpawupLOe+sZtQN9LTeMgrJG8df2+WLFbweQtmSuJoKRxYwX KMVvnzE5TTKtQVwzDbcEGk17lizuRUN0KVnJQMye68TYep0eAfPUHMRTHNXUuTDe 6lmrtZrciIxiJQ/FwHSUPL2QoFSBjZw8z8cmBKBDFO8/Ox6yNzr1Xp8nYWEOCy4h mQjdyxrWvtRGyYhNEWiSIL346DX+fVP11/Q2L4cyXRgQvuPdU0h8U0NunTEJ23JD UyM9SX0JaiFFPT9H9u+vhk15k5L7vVcs -----END CERTIFICATE-----Generated at Fri May 31 04:53:58 2024 by rpki-client on console-fra.rpki-client.org