$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: EoVUlAdbS3eWEpiwDDJMIvjfih62XMQG9tk86KdJ9gg= Subject key identifier: F8:F7:A6:9D:C4:DD:18:A7:B0:1D:1A:6C:57:03:D3:8D:62:29:05:31 Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: EF Signing time: Sun 19 May 2024 05:50:22 +0000 Manifest this update: Sun 19 May 2024 05:50:21 +0000 Manifest next update: Sun 26 May 2024 05:50:21 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: 4U3TxuLaiA2KZmeC7tnd8JOnPdwLyjKTLfrCUrxgiak=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: JfMofx6efmNrALly6LfWx1mO0pCrYZC1n6UcCfMKtOU=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: u8kIsJVIp78SEEepgF6rWdlvVZL0QiUXSZNCFyMREy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: May 19 05:50:21 2024 GMT Not After : May 26 05:50:21 2024 GMT Subject: CN=6649931d-ed6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:b1:7f:84:83:e1:a7:2b:93:a1:b0:14:b5: 22:14:63:54:a9:a9:7c:ec:9d:d5:11:94:d4:63:85: c0:af:bb:fb:34:5d:67:67:f6:2d:f7:6a:e4:cd:a5: 7a:b9:a4:37:9d:2d:ba:b9:7f:ee:b7:c4:34:4c:77: 15:39:33:74:ce:57:3b:e6:07:a0:0c:e9:bb:9b:2b: 75:cf:f6:6a:a9:97:04:58:12:74:4d:e8:b4:cf:0d: 63:89:09:84:b6:f4:b3:1f:34:1a:bc:a3:98:ec:7f: ed:ed:1b:4e:8b:c8:d5:50:98:64:74:1f:f0:1d:ee: 8c:b9:4e:e4:b4:f5:83:5c:8d:2e:6d:ee:d7:30:ff: b8:bd:40:17:cf:7f:5c:34:7c:c4:6a:4a:07:fa:2c: c6:27:51:d2:d7:9d:01:72:7b:72:59:59:3d:68:32: e3:2b:c5:c9:5c:c4:50:99:c6:86:3b:51:d9:fb:37: ff:56:66:5f:16:a8:e3:83:c3:9f:9b:1e:5e:ac:d4: 5c:b3:ef:f2:b0:d5:69:2e:f3:6b:b3:d3:76:78:4a: cf:60:87:07:ec:c0:69:e0:ab:82:06:d3:44:bc:dd: 92:c7:57:bf:f4:5d:f2:45:19:21:e0:08:f6:41:af: fb:b4:be:7b:d7:eb:50:f5:98:b7:e6:fb:23:99:f2: 57:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:A6:9D:C4:DD:18:A7:B0:1D:1A:6C:57:03:D3:8D:62:29:05:31 X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:56:1d:7c:b6:74:1b:6d:11:8d:18:6d:02:af:13:16:71:98: 53:d6:a9:dc:af:f4:73:e9:0d:da:12:09:5e:47:34:08:52:48: 6c:ff:9a:33:23:cc:19:2f:3b:c2:89:0f:61:a3:e8:b6:4b:13: d1:c5:ad:45:a8:01:d7:fa:fa:6b:3c:4a:06:29:3b:4d:80:62: f5:b4:68:e7:86:82:3f:99:0f:01:4c:99:98:f8:a3:84:0e:45: d7:3e:c2:b2:53:a6:81:53:73:d7:71:fd:d6:9e:d7:92:f0:d6: 2d:eb:25:3d:2b:ef:b9:60:cd:6b:ef:1a:ca:c1:36:16:ae:86: e4:28:c4:70:b5:9a:7f:d7:ae:48:f0:bc:0e:b5:0f:bb:7c:62: 6a:db:6a:82:f9:5c:3a:9e:43:c5:59:27:6d:e0:0a:25:a3:48: 12:a4:5b:bb:73:5e:eb:51:75:40:88:58:83:fa:6c:ec:15:b9: fc:b2:6f:74:5e:23:74:0f:42:79:c9:92:3a:0b:8d:da:37:61: e8:d0:78:28:c7:d1:df:8c:24:99:80:14:95:c1:04:17:0b:42: 5d:b9:e7:2e:3f:09:32:82:9e:ed:2f:57:47:76:d0:ff:fc:31: 8b:e8:66:8f:a7:6f:aa:37:5f:2f:64:03:5f:ee:17:8e:5c:2c: e4:8e:c0:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjQwNTE5MDU1MDIxWhcNMjQwNTI2MDU1MDIxWjAYMRYwFAYD VQQDEw02NjQ5OTMxZC1lZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xaxf4SD4acrk6GwFLUiFGNUqal87J3VEZTUY4XAr7v7NF1nZ/Yt92rkzaV6 uaQ3nS26uX/ut8Q0THcVOTN0zlc75gegDOm7myt1z/ZqqZcEWBJ0Tei0zw1jiQmE tvSzHzQavKOY7H/t7RtOi8jVUJhkdB/wHe6MuU7ktPWDXI0ube7XMP+4vUAXz39c NHzEakoH+izGJ1HS150BcntyWVk9aDLjK8XJXMRQmcaGO1HZ+zf/VmZfFqjjg8Of mx5erNRcs+/ysNVpLvNrs9N2eErPYIcH7MBp4KuCBtNEvN2Sx1e/9F3yRRkh4Aj2 Qa/7tL571+tQ9Zi35vsjmfJXUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPj3pp3E 3RinsB0abFcD041iKQUxMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgVh18tnQbbRGNGG0CrxMWcZhT1qncr/Rz6Q3aEgleRzQIUkhs/5oz I8wZLzvCiQ9ho+i2SxPRxa1FqAHX+vprPEoGKTtNgGL1tGjnhoI/mQ8BTJmY+KOE DkXXPsKyU6aBU3PXcf3WnteS8NYt6yU9K++5YM1r7xrKwTYWrobkKMRwtZp/165I 8LwOtQ+7fGJq22qC+Vw6nkPFWSdt4Aolo0gSpFu7c17rUXVAiFiD+mzsFbn8sm90 XiN0D0J5yZI6C43aN2Ho0Hgox9HfjCSZgBSVwQQXC0JduecuPwkygp7tL1dHdtD/ /DGL6GaPp2+qN18vZANf7heOXCzkjsDz -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org