$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft File: ADiahleuCYgERy-OaNcF4u_b18A.mft (raw, json) Hash identifier: sn7e5FJALgJCKlLBX7xfyAZxACWiUlMyCyP1pPcCsqc= Subject key identifier: 32:D3:6B:2D:08:0C:34:B8:C9:BD:97:94:08:86:7A:09:B1:47:AF:AB Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 Certificate issuer: /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft Manifest number: 0B8D Signing time: Sat 18 May 2024 19:57:22 +0000 Manifest this update: Sat 18 May 2024 19:57:21 +0000 Manifest next update: Sat 25 May 2024 19:57:21 +0000 Files and hashes: 1: ADiahleuCYgERy-OaNcF4u_b18A.crl (hash: Zh8swDPN0dMvpnj7lFer0gI5Qt5rMCSNzfNWsWG2kQo=) 2: 8811415A689011EEA00A095DC4F9AE02.roa (hash: 48IxGJOKYf3ZnCDbFIJG9Nq2PPMVrHXpX9958CHjNPk=) 3: 053B88AA81ED11EEABC08274C4F9AE02.roa (hash: mfHNkl5nVUvbcaaUK0YKT8MQxMa6m2sz1Z5tbp2JIhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Validity Not Before: May 18 19:57:21 2024 GMT Not After : May 25 19:57:21 2024 GMT Subject: CN=66490822-c62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:2f:80:61:f2:2a:9b:54:b8:51:9f:ad:a2: f6:c4:01:40:5a:85:b5:91:20:7b:d4:60:be:a6:b5: 47:fa:43:78:54:93:9f:6f:c9:45:6f:e0:30:fc:5e: cc:4d:57:2a:26:9a:59:63:09:3d:9b:fe:ba:ad:d2: 87:4e:13:43:b0:d9:ae:81:a4:f7:45:2b:74:e8:f4: 72:f0:fa:96:b4:77:6b:57:61:c2:e5:6b:13:75:dd: 94:95:32:3b:cb:ee:e9:c9:36:bf:1c:89:42:2d:34: 16:78:66:e1:14:f2:44:c5:2f:e9:54:44:04:70:d0: c6:3e:23:30:a8:39:c2:9b:dc:84:56:10:93:8e:d9: da:cb:65:92:d5:6a:ee:bd:f0:60:6f:57:5d:0d:34: ac:3a:87:8d:4d:23:16:f8:fd:18:77:3c:82:e3:1e: d4:c5:95:2d:9c:36:f3:50:cc:9f:d2:3c:43:f2:85: 7a:be:69:80:50:e3:5c:e3:f2:7b:05:eb:b9:d5:9e: da:a6:fb:e2:5f:6e:1f:8e:a7:f9:3d:8a:e3:a6:3d: b4:7b:71:0d:4e:53:29:a9:7f:c3:91:09:7e:fe:0c: 47:e9:30:f8:41:41:a7:d6:d4:89:59:94:03:1c:66: ea:f2:87:50:55:9c:20:9f:89:fa:54:7e:43:81:d6: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D3:6B:2D:08:0C:34:B8:C9:BD:97:94:08:86:7A:09:B1:47:AF:AB X509v3 Authority Key Identifier: keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fe:b6:23:2f:99:f0:ec:b7:f0:f8:fb:3f:12:db:00:23:3f: 68:21:00:4d:de:55:1d:74:70:1b:f6:b4:1e:62:9c:4e:9c:b5: f2:43:ce:f8:dc:47:46:5a:78:bf:af:67:3e:d5:ca:24:54:02: 0e:4e:eb:ca:74:2f:ff:d1:2d:cb:47:c9:26:ab:0b:c3:e2:a2: 3c:96:68:18:90:18:6d:73:1f:c8:8d:9d:04:de:ad:a6:be:5b: 1a:32:7f:10:37:82:6c:7b:f5:ab:40:43:fb:e9:56:7d:98:e4: 0d:f4:f7:c3:ee:4f:c3:94:f0:fe:c9:1c:fa:5c:f2:7d:db:35: 17:2b:75:3d:33:83:06:40:9e:47:02:be:d8:e0:48:f3:d5:ef: 5d:a3:54:d0:43:d6:66:38:f3:aa:c0:41:7f:4e:d9:09:38:81: e1:30:64:03:6e:24:b7:64:ff:b5:a6:c3:b3:9d:41:5e:07:bd: e5:ef:6b:98:aa:33:9b:b0:5d:39:cc:17:03:b4:ba:60:9f:a7: 7b:19:a8:bf:ad:9c:d8:09:41:92:ea:99:03:68:29:68:a7:15: bc:c9:36:c2:b5:2a:17:58:d7:28:99:9c:6f:84:1c:b0:2f:0e: 15:48:cd:f7:b0:55:b8:8a:dc:df:38:cc:b2:20:a9:57:9e:ae: 40:f8:01:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDAwMzg5QTg2NTdBRTA5ODgwNDQ3MkY4RTY4RDcwNUUy RUZEQkQ3QzAwHhcNMjQwNTE4MTk1NzIxWhcNMjQwNTI1MTk1NzIxWjAYMRYwFAYD VQQDEw02NjQ5MDgyMi1jNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCQvgGHyKptUuFGfraL2xAFAWoW1kSB71GC+prVH+kN4VJOfb8lFb+Aw/F7M TVcqJppZYwk9m/66rdKHThNDsNmugaT3RSt06PRy8PqWtHdrV2HC5WsTdd2UlTI7 y+7pyTa/HIlCLTQWeGbhFPJExS/pVEQEcNDGPiMwqDnCm9yEVhCTjtnay2WS1Wru vfBgb1ddDTSsOoeNTSMW+P0YdzyC4x7UxZUtnDbzUMyf0jxD8oV6vmmAUONc4/J7 Beu51Z7apvviX24fjqf5PYrjpj20e3ENTlMpqX/DkQl+/gxH6TD4QUGn1tSJWZQD HGbq8odQVZwgn4n6VH5DgdZv4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLTay0I DDS4yb2XlAiGegmxR6+rMB8GA1UdIwQYMBaAFAA4moZXrgmIBEcvjmjXBeLv29fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZZ0VSeS1PYU5jRjR1X2Ix OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FEaWFobGV1Q1lnRVJ5LU9hTmNGNHVfYjE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZ Z0VSeS1PYU5jRjR1X2IxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA//rYjL5nw7Lfw+Ps/EtsAIz9oIQBN3lUddHAb9rQeYpxOnLXyQ874 3EdGWni/r2c+1cokVAIOTuvKdC//0S3LR8kmqwvD4qI8lmgYkBhtcx/IjZ0E3q2m vlsaMn8QN4Jse/WrQEP76VZ9mOQN9PfD7k/DlPD+yRz6XPJ92zUXK3U9M4MGQJ5H Ar7Y4Ejz1e9do1TQQ9ZmOPOqwEF/TtkJOIHhMGQDbiS3ZP+1psOznUFeB73l72uY qjObsF05zBcDtLpgn6d7Gai/rZzYCUGS6pkDaClopxW8yTbCtSoXWNcomZxvhByw Lw4VSM33sFW4itzfOMyyIKlXnq5A+AGv -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org