$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft File: XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json) Hash identifier: B9/9ftLQbWnnmXJyLQ404u2v91kZDNtcYQF95I/bNPM= Subject key identifier: 5E:84:A0:C2:78:7F:A3:83:CC:A1:EE:7C:04:92:68:17:EB:C4:F2:AB Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B Certificate issuer: /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft Manifest number: 0582 Signing time: Sun 19 May 2024 00:33:42 +0000 Manifest this update: Sun 19 May 2024 00:33:42 +0000 Manifest next update: Sun 26 May 2024 00:33:42 +0000 Files and hashes: 1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: 9h7GmkweMIRIA7IowbyzzAlzXn3rUa9uS4GmL7JyBtE=) 2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: pzmEhbNi69+FFSTeeH5V5Ci4qKH9yv0YpCfXLjHvTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Validity Not Before: May 19 00:33:42 2024 GMT Not After : May 26 00:33:42 2024 GMT Subject: CN=664948e6-d28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:25:5b:52:69:2e:99:d9:7e:30:24:07:5d: 50:bc:9c:97:19:2f:b4:85:d3:9b:00:e9:23:50:b2: 96:4a:2c:06:79:0d:08:3c:bc:9f:3d:8d:ad:e5:c3: 05:bb:c3:a9:23:b3:54:10:f5:d3:3a:98:93:a3:e8: 7b:3e:79:0d:6f:1d:c0:ce:8d:1a:63:68:9b:c5:b8: 20:67:5e:65:f5:58:1c:1c:a7:11:53:56:ef:be:39: 66:ca:48:66:cc:93:1f:59:01:5f:52:6f:b7:e4:66: 58:23:f2:36:75:b7:23:a5:f4:b3:dc:0a:57:cb:63: ac:86:4b:97:95:d1:49:19:78:7c:1f:2d:45:75:c7: 46:68:49:5a:fe:f2:b2:af:00:ab:a1:17:62:4a:de: af:aa:5b:17:68:8f:e7:f1:c7:ce:d0:68:70:4b:f2: a6:cc:27:71:a6:23:de:2a:5e:d5:38:a8:7d:92:cd: 26:a1:ce:39:a9:6d:c6:ae:28:ac:09:8c:9a:eb:c2: 19:46:d6:6c:9e:da:18:5a:20:d4:82:b0:65:11:f2: b3:41:8b:59:0e:1d:98:ba:70:5a:e0:82:08:a6:ac: 87:8b:a3:6e:a4:a2:f1:f9:62:45:fd:c3:8d:0c:9e: 5f:5e:4f:29:62:56:d7:69:e9:65:ad:9c:d0:f3:27: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:84:A0:C2:78:7F:A3:83:CC:A1:EE:7C:04:92:68:17:EB:C4:F2:AB X509v3 Authority Key Identifier: keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c1:62:6b:39:a1:cd:3d:b8:a3:4d:c3:72:d8:6c:f2:20:e3: 6a:9c:89:00:b1:26:54:4c:11:81:16:bf:f1:5d:9e:5c:f4:1c: 8a:9f:23:04:ac:f5:0c:b1:a7:a6:c0:e8:92:40:45:76:1e:76: 2c:49:af:7a:eb:e6:6c:bc:ac:f9:14:b8:f8:c3:f5:a2:56:1f: 31:dc:94:b2:c5:07:f4:d6:dc:d7:0e:97:d2:19:c1:92:07:bb: 0d:08:c6:9b:e4:70:16:c9:c1:67:46:f5:7e:19:ba:bd:79:d2: ac:b9:b2:fa:3d:09:28:56:15:d3:19:56:8e:60:e5:00:91:53: 30:2d:25:d3:a2:bf:71:0c:42:2d:07:46:af:28:0f:8c:15:ee: 9c:34:6c:5f:b3:68:17:a7:e8:7b:eb:dc:d5:01:cf:3d:85:2d: 25:18:10:e9:e3:bc:62:9f:c3:e7:df:83:80:e9:4b:a8:70:a7: e0:56:4e:96:b2:a9:a0:63:21:62:e9:4b:44:44:b6:c5:30:e4: 28:b3:a1:52:96:f1:c3:c4:dc:f3:5f:f3:af:31:33:34:3c:90: 61:ba:19:90:74:b5:4f:cf:4e:11:13:8d:1c:ae:13:ca:13:4c: 17:3c:67:ca:19:f3:e2:bb:59:05:9f:b5:0a:d2:33:a4:74:8b: ac:49:68:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQyRUM5NDZGNEQw MjREODc3NkIwHhcNMjQwNTE5MDAzMzQyWhcNMjQwNTI2MDAzMzQyWjAYMRYwFAYD VQQDEw02NjQ5NDhlNi1kMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7slW1JpLpnZfjAkB11QvJyXGS+0hdObAOkjULKWSiwGeQ0IPLyfPY2t5cMF u8OpI7NUEPXTOpiTo+h7PnkNbx3Azo0aY2ibxbggZ15l9VgcHKcRU1bvvjlmykhm zJMfWQFfUm+35GZYI/I2dbcjpfSz3ApXy2OshkuXldFJGXh8Hy1FdcdGaEla/vKy rwCroRdiSt6vqlsXaI/n8cfO0GhwS/KmzCdxpiPeKl7VOKh9ks0moc45qW3Griis CYya68IZRtZsntoYWiDUgrBlEfKzQYtZDh2YunBa4IIIpqyHi6NupKLx+WJF/cON DJ5fXk8pYlbXaellrZzQ8yfUEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6EoMJ4 f6ODzKHufASSaBfrxPKrMB8GA1UdIwQYMBaAFF6CQXlTs1qfi1mkLslG9NAk2Hdr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJGMS8yNjAwN0ZCNjhE RjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldwLUxXYVF1eVViMDBDVFlk MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvSkJlVk96V3AtTFdhUXV5VWIwMENUWWQycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJGMS8yNjAwN0ZCNjhERjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldw LUxXYVF1eVViMDBDVFlkMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdwWJrOaHNPbijTcNy2GzyIONqnIkAsSZUTBGBFr/xXZ5c9ByKnyME rPUMsaemwOiSQEV2HnYsSa966+ZsvKz5FLj4w/WiVh8x3JSyxQf01tzXDpfSGcGS B7sNCMab5HAWycFnRvV+Gbq9edKsubL6PQkoVhXTGVaOYOUAkVMwLSXTor9xDEIt B0avKA+MFe6cNGxfs2gXp+h769zVAc89hS0lGBDp47xin8Pn34OA6UuocKfgVk6W sqmgYyFi6UtERLbFMOQos6FSlvHDxNzzX/OvMTM0PJBhuhmQdLVPz04RE40crhPK E0wXPGfKGfPiu1kFn7UK0jOkdIusSWga -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org