$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: dv4Pp4NC62bEhFu4jcdSsGncnulxYIN/It15S6dy5qI= Subject key identifier: AA:6F:2D:89:A8:D6:1F:B4:48:3C:DE:CD:34:AC:78:5C:0F:DA:DB:2F Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 0735 Signing time: Sat 18 May 2024 22:30:58 +0000 Manifest this update: Sat 18 May 2024 22:30:58 +0000 Manifest next update: Sat 25 May 2024 22:30:58 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: k+gIAyI1iidHRcICowrDSQi5uHO193UO0jQmLX87R+k=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: nsaH5I08UA9S7pBWJEs95VRVtj6VDnIyoLGMkyvaxCM=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: jtwXRDg4ifzB5YeF9ItYPDeteiV3n1oUq/L6Q79DerA=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: G8R2HGhEO91zZJR3k6r/R5FFkuswRD4+38OOZJqUih0=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: MlL6AakK7qGzM8DE1JwJUAOkQ8rpfwcCeXJ1v0Bdnow=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: 6GaYypzIsDgZggW9KzGhSmmLldD0h0OUbEZlMHiCV0M=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: /t87PANjNW6EpQXUSbODbYse7J1TpUCr6EqoPlENnyw=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: NeWDXo15SqJ2L5IjpW3UHQXI0L4NJwn7CVOw91aHuUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: May 18 22:30:58 2024 GMT Not After : May 25 22:30:58 2024 GMT Subject: CN=66492c22-f590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:94:17:f9:c9:ea:9c:93:f6:b6:6e:9a:14:be: f5:10:11:ad:66:33:8a:ea:31:ae:50:12:f0:8a:ec: 5b:91:a5:91:db:db:31:cb:d1:f6:76:c8:b7:83:4a: 8f:83:7b:eb:92:3e:53:a6:9e:b7:41:05:3b:33:27: 64:f8:7b:98:63:30:1f:4a:70:c3:a5:ff:c6:cc:88: 50:5a:95:44:d3:3e:3f:07:85:2a:79:f6:33:07:6c: 0c:d9:3d:84:00:dd:09:20:72:b1:79:08:25:e6:f0: 16:77:3f:a0:b5:c8:0e:24:4f:dc:e6:8f:79:98:b1: 38:a2:56:3f:4e:d1:ec:4c:09:11:b9:62:37:83:05: b5:74:31:52:be:37:2a:32:06:dc:0b:1e:0e:6d:54: eb:f6:1a:bb:b6:2d:8d:e4:b2:f0:93:d5:16:10:76: bd:e9:a5:52:19:36:2b:09:c0:bb:1b:eb:45:90:db: 80:f1:66:a1:28:86:70:66:0a:b5:fc:88:39:2c:3c: c0:4a:e4:be:14:0e:a6:7f:ee:da:91:7d:80:37:bf: 28:3e:aa:d3:6d:01:5c:ad:32:60:aa:99:4d:f8:41: ba:c3:eb:65:1b:00:a6:0e:e9:6b:35:1f:0a:53:27: 4c:78:6d:4e:8e:cc:4a:ae:40:ad:ce:cf:85:f5:eb: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6F:2D:89:A8:D6:1F:B4:48:3C:DE:CD:34:AC:78:5C:0F:DA:DB:2F X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:24:67:2d:0f:f8:dd:7d:a6:56:6f:e3:2b:cf:f3:5c:0d:b0: 86:8f:ea:72:47:c1:13:ea:15:dc:d3:9a:6e:fa:a1:9b:bc:f7: 27:92:39:99:71:a2:89:21:9a:7d:ad:1d:62:bb:08:b4:92:27: ac:8c:7c:9b:7b:37:74:3d:41:72:0d:35:1b:12:c6:af:5f:0f: 31:28:f4:33:f9:f1:86:cf:f6:cb:3a:b8:7e:3d:b3:2c:94:9d: 2b:3b:72:7a:5b:12:32:84:28:71:5f:fe:a8:88:24:54:e7:02: 78:18:16:2f:e0:90:3c:71:e1:1a:ec:fd:af:20:40:03:02:34: b8:dc:46:a6:91:db:fb:5b:24:cb:95:a4:3b:7f:4d:52:e9:42: 67:e6:5f:98:21:52:10:64:8d:8d:ab:56:c3:f1:65:f5:7c:71: 99:7d:f2:09:7c:8c:29:56:d4:97:b4:22:a7:a3:89:4c:d4:13: 16:aa:b4:ff:02:00:b5:4b:15:12:01:0d:94:f3:70:1e:20:e3: 50:1f:af:95:f3:9c:08:e2:3f:4b:61:0e:b7:1c:df:e9:e0:9f: 46:9d:9e:1a:32:25:38:ad:57:f8:83:43:cc:83:96:04:43:b2: 03:41:80:d0:fc:ff:e3:08:71:ef:ac:ee:be:b6:7a:e8:b7:47: 68:48:4b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjQwNTE4MjIzMDU4WhcNMjQwNTI1MjIzMDU4WjAYMRYwFAYD VQQDEw02NjQ5MmMyMi1mNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+pQX+cnqnJP2tm6aFL71EBGtZjOK6jGuUBLwiuxbkaWR29sxy9H2dsi3g0qP g3vrkj5Tpp63QQU7Mydk+HuYYzAfSnDDpf/GzIhQWpVE0z4/B4UqefYzB2wM2T2E AN0JIHKxeQgl5vAWdz+gtcgOJE/c5o95mLE4olY/TtHsTAkRuWI3gwW1dDFSvjcq MgbcCx4ObVTr9hq7ti2N5LLwk9UWEHa96aVSGTYrCcC7G+tFkNuA8WahKIZwZgq1 /Ig5LDzASuS+FA6mf+7akX2AN78oPqrTbQFcrTJgqplN+EG6w+tlGwCmDulrNR8K UydMeG1OjsxKrkCtzs+F9eu2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpvLYmo 1h+0SDzezTSseFwP2tsvMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyJGctD/jdfaZWb+Mrz/NcDbCGj+pyR8ET6hXc05pu+qGbvPcnkjmZ caKJIZp9rR1iuwi0kiesjHybezd0PUFyDTUbEsavXw8xKPQz+fGGz/bLOrh+PbMs lJ0rO3J6WxIyhChxX/6oiCRU5wJ4GBYv4JA8ceEa7P2vIEADAjS43Eamkdv7WyTL laQ7f01S6UJn5l+YIVIQZI2Nq1bD8WX1fHGZffIJfIwpVtSXtCKno4lM1BMWqrT/ AgC1SxUSAQ2U83AeIONQH6+V85wI4j9LYQ63HN/p4J9GnZ4aMiU4rVf4g0PMg5YE Q7IDQYDQ/P/jCHHvrO6+tnrot0doSEug -----END CERTIFICATE-----Generated at Sun May 19 00:16:14 2024 by rpki-client on console-fra.rpki-client.org