$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: AfZfzg/O0kIl+tTq/UmrWNSua+b+0lf5FHnbz13xMiA= Subject key identifier: 47:58:F2:8D:47:E6:9F:0A:65:53:05:FC:59:7A:34:15:82:A3:92:E5 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0D79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0D72 Signing time: Sat 18 May 2024 18:35:45 +0000 Manifest this update: Sat 18 May 2024 18:35:44 +0000 Manifest next update: Sat 25 May 2024 18:35:44 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: OQxb2KLLm9Hh6p9Krayr3+7P8ZIwFvEHc4Yelhbdakg=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: hSJnkgK3aDza8hCL3/Rha7E5DHZ4RYM6R7P4dsPPPRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3449 (0xd79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: May 18 18:35:44 2024 GMT Not After : May 25 18:35:44 2024 GMT Subject: CN=6648f501-042d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:5f:10:36:f7:3e:25:70:d2:f0:84:ed:02: f0:a5:36:37:04:06:74:b7:82:20:72:30:9e:7e:2b: f6:45:0c:2c:ca:ed:78:ff:e7:dd:00:5c:ec:f3:e3: dc:21:eb:5b:d7:14:7d:7d:c6:d6:fa:18:9b:10:38: 5a:54:22:c4:51:6a:15:c1:06:e8:d0:7d:74:e4:e9: ee:9e:78:61:7b:07:13:4f:03:25:a2:c6:26:19:aa: 4c:20:5b:6d:0f:2b:58:6f:30:64:18:d1:05:4d:fb: 4e:82:49:7d:10:b1:d7:85:20:ac:ec:96:ca:93:1d: d9:5a:7a:c4:51:78:d0:36:84:08:17:19:e3:74:e9: 96:f5:49:5a:f3:11:74:21:37:07:31:a2:9b:06:81: 8d:6a:31:6d:22:d3:8e:0c:63:6d:13:6c:97:9e:8f: c3:15:d0:dc:11:29:71:3e:74:2c:93:0d:d8:7f:5e: b6:61:3f:a8:4d:93:10:40:e3:11:5a:45:2c:58:48: 24:b2:0d:76:75:96:cf:7b:06:03:a2:93:f2:d1:e9: 55:17:0a:74:28:b9:79:89:b6:88:93:e5:54:93:a5: b4:bd:2d:e4:5b:cb:01:d4:e9:95:4b:f0:bb:28:c5: 5c:3e:cd:10:16:dc:86:4a:fd:e5:fe:03:d5:9f:f2: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:F2:8D:47:E6:9F:0A:65:53:05:FC:59:7A:34:15:82:A3:92:E5 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9b:85:67:35:f9:18:85:af:51:28:80:37:05:2a:54:77:a8: 6d:b6:6b:b0:7c:5c:52:77:94:46:3c:03:3e:cb:29:2e:3d:2f: 00:c5:95:d3:86:85:0e:d9:96:8e:5b:f1:7c:cf:fc:5e:f7:c5: 25:81:5a:19:ed:01:23:4f:b9:54:84:03:05:3f:a7:e3:fb:88: 79:09:91:63:2f:16:4d:50:97:02:f0:9c:99:21:97:aa:74:3d: 27:73:da:f6:10:3e:94:ff:c4:0b:99:45:6e:0b:be:c3:06:bb: 0a:8a:1a:10:98:21:e8:e0:62:a4:54:7b:ce:ec:e4:ad:e9:b4: 54:54:c6:08:ad:fb:92:47:cb:e9:22:97:55:c5:c9:3f:e3:5c: 39:7e:37:9a:4d:24:b2:2a:8f:b4:94:34:21:14:7d:e7:5f:d4: 49:e0:1b:e3:8a:40:8e:a2:4d:4b:a2:5d:76:f0:a1:6e:a3:14: e2:82:58:57:05:57:fb:a8:fa:ab:e5:62:e8:1d:e0:57:03:27: 10:30:87:8c:a7:2c:3e:52:4e:d6:00:db:f4:ef:03:1b:d2:21: ee:d2:78:94:a1:dd:73:16:46:87:1f:09:2b:d1:ea:6d:e8:4d: 26:ce:da:b0:60:bd:f8:02:f9:ca:19:b3:47:9f:3f:0a:a0:7e: a3:23:ae:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjQwNTE4MTgzNTQ0WhcNMjQwNTI1MTgzNTQ0WjAYMRYwFAYD VQQDEw02NjQ4ZjUwMS0wNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6JfEDb3PiVw0vCE7QLwpTY3BAZ0t4IgcjCefiv2RQwsyu14/+fdAFzs8+Pc Ietb1xR9fcbW+hibEDhaVCLEUWoVwQbo0H105OnunnhhewcTTwMlosYmGapMIFtt DytYbzBkGNEFTftOgkl9ELHXhSCs7JbKkx3ZWnrEUXjQNoQIFxnjdOmW9Ula8xF0 ITcHMaKbBoGNajFtItOODGNtE2yXno/DFdDcESlxPnQskw3Yf162YT+oTZMQQOMR WkUsWEgksg12dZbPewYDopPy0elVFwp0KLl5ibaIk+VUk6W0vS3kW8sB1OmVS/C7 KMVcPs0QFtyGSv3l/gPVn/JrzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdY8o1H 5p8KZVMF/Fl6NBWCo5LlMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCym4VnNfkYha9RKIA3BSpUd6httmuwfFxSd5RGPAM+yykuPS8AxZXT hoUO2ZaOW/F8z/xe98UlgVoZ7QEjT7lUhAMFP6fj+4h5CZFjLxZNUJcC8JyZIZeq dD0nc9r2ED6U/8QLmUVuC77DBrsKihoQmCHo4GKkVHvO7OSt6bRUVMYIrfuSR8vp IpdVxck/41w5fjeaTSSyKo+0lDQhFH3nX9RJ4BvjikCOok1Lol128KFuoxTiglhX BVf7qPqr5WLoHeBXAycQMIeMpyw+Uk7WANv07wMb0iHu0niUod1zFkaHHwkr0ept 6E0mztqwYL34AvnKGbNHnz8KoH6jI65+ -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org