$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: AcbcvRV6Jwq/esjst4J/IT6TmQusF6dxfjM8R0IX7LI= Subject key identifier: 2F:BD:C6:FD:AC:7C:62:3E:2D:EA:CC:1C:29:66:F7:FA:47:CD:1C:B6 Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 0380 Signing time: Sun 19 May 2024 02:44:46 +0000 Manifest this update: Sun 19 May 2024 02:44:45 +0000 Manifest next update: Sun 26 May 2024 02:44:45 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: P3H+3MeDFnxX1cV/jykRkN7N3C+r5k/cmznLVUQBHIc=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: mte1jFfJrUTHDpP2PQv3wWfd0pQMAP5qd0OL6SPaYT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: May 19 02:44:45 2024 GMT Not After : May 26 02:44:45 2024 GMT Subject: CN=6649679d-240b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:bc:d9:3a:c7:62:36:81:05:11:a2:02:fc: e5:cf:b1:bd:27:dc:60:1a:47:de:41:c1:f3:30:01: 81:ae:06:d8:5b:9b:75:08:c4:5d:d5:2b:61:58:b0: 50:56:b9:4b:83:71:ad:58:87:8b:02:08:b9:a0:3a: 7e:ee:9e:5f:09:1d:07:f3:1f:46:22:6d:22:ae:77: bd:34:d4:98:ee:ea:0f:29:86:9f:97:a3:00:9b:bd: 3b:7a:d1:87:64:6e:8a:50:2e:81:75:c9:3f:e4:4d: 2a:f8:d5:51:ed:d2:09:de:52:b6:ea:ce:12:57:49: 84:29:be:d5:69:08:b6:55:71:ea:89:23:b6:be:20: 92:59:52:a6:05:5c:f7:b8:83:ba:38:9b:76:7b:98: d5:c2:25:67:08:6d:82:c3:35:ad:f0:2b:55:9e:23: e4:05:95:b8:10:0d:26:e1:d3:23:93:f5:4b:ae:a8: 27:2d:9d:67:d0:cd:f5:c2:59:6d:28:d8:9e:19:0e: ab:29:d6:90:ae:67:78:03:2f:37:d4:ec:0c:af:ff: 91:46:96:fc:c9:c4:34:74:fb:da:c1:0d:86:cc:9a: 62:41:b2:30:8a:cb:52:29:77:71:70:b3:1d:da:74: 32:e6:3c:42:ca:bf:37:23:ad:69:02:5c:a1:07:16: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BD:C6:FD:AC:7C:62:3E:2D:EA:CC:1C:29:66:F7:FA:47:CD:1C:B6 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:54:28:fd:9c:2d:2d:59:12:45:24:ca:30:4f:cb:51:ab: c3:69:f2:55:14:73:cd:cb:ff:61:8e:98:74:9b:d0:2c:7e:5d: b3:a5:19:f1:b6:e8:4a:d8:a9:7a:97:c2:cf:a5:19:18:ee:ee: da:34:b0:02:eb:da:89:f6:45:be:a7:99:95:f9:2e:ce:9b:37: a4:73:8e:61:59:ae:bd:36:b2:b1:1b:fb:9a:79:69:59:3c:02: aa:e6:cb:a1:d6:10:fd:61:48:94:83:26:e0:ff:e0:5f:f5:51: 4a:4a:d2:a7:d3:2c:5f:ee:67:21:d8:65:7b:fe:04:c7:5c:8c: fd:a9:eb:44:2b:84:d7:30:3c:05:9b:5c:20:86:ae:cc:e8:68: 7e:ba:73:99:0c:14:b5:c8:8b:d3:6d:71:84:6f:8e:c4:88:41: c4:1e:7d:73:53:15:06:6f:aa:01:05:8d:79:03:a4:a7:c4:63: 46:f5:b6:cd:fc:6b:ef:f7:bb:05:8d:cb:aa:33:ff:a5:05:85: bd:c9:5c:d7:d9:b5:1e:ad:10:38:a5:42:73:12:ee:c1:ad:f3: ec:e7:ef:94:98:68:e9:f5:c4:68:27:fa:ce:72:23:fd:e3:e8: c2:07:4e:b6:ff:b0:51:7b:35:17:d5:5d:42:62:e6:ce:87:03: 7e:57:7c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjQwNTE5MDI0NDQ1WhcNMjQwNTI2MDI0NDQ1WjAYMRYwFAYD VQQDEw02NjQ5Njc5ZC0yNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLi82TrHYjaBBRGiAvzlz7G9J9xgGkfeQcHzMAGBrgbYW5t1CMRd1SthWLBQ VrlLg3GtWIeLAgi5oDp+7p5fCR0H8x9GIm0irne9NNSY7uoPKYafl6MAm707etGH ZG6KUC6Bdck/5E0q+NVR7dIJ3lK26s4SV0mEKb7VaQi2VXHqiSO2viCSWVKmBVz3 uIO6OJt2e5jVwiVnCG2CwzWt8CtVniPkBZW4EA0m4dMjk/VLrqgnLZ1n0M31wllt KNieGQ6rKdaQrmd4Ay831OwMr/+RRpb8ycQ0dPvawQ2GzJpiQbIwistSKXdxcLMd 2nQy5jxCyr83I61pAlyhBxYGvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+9xv2s fGI+LerMHClm9/pHzRy2MB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE4lQo/ZwtLVkSRSTKME/LUavDafJVFHPNy/9hjph0m9Asfl2zpRnx tuhK2Kl6l8LPpRkY7u7aNLAC69qJ9kW+p5mV+S7Omzekc45hWa69NrKxG/uaeWlZ PAKq5suh1hD9YUiUgybg/+Bf9VFKStKn0yxf7mch2GV7/gTHXIz9qetEK4TXMDwF m1wghq7M6Gh+unOZDBS1yIvTbXGEb47EiEHEHn1zUxUGb6oBBY15A6SnxGNG9bbN /Gvv97sFjcuqM/+lBYW9yVzX2bUerRA4pUJzEu7BrfPs5++UmGjp9cRoJ/rOciP9 4+jCB062/7BRezUX1V1CYubOhwN+V3y6 -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org