$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json) Hash identifier: 8vlAN1yrLGMwPgME5QFPvH1O9PpPdRwuo6wQtkCZw78= Subject key identifier: 9F:F5:07:A2:52:EB:3D:DD:8B:E0:C4:42:B1:18:11:07:74:16:65:EE Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft Manifest number: 0116 Signing time: Sun 19 May 2024 05:22:26 +0000 Manifest this update: Sun 19 May 2024 05:22:25 +0000 Manifest next update: Sun 26 May 2024 05:22:25 +0000 Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: 0O2yFrbXWF0kwqowpoBP2L/BLxFe1EDOlZeGxbdB9Ew=) 2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: YOFyOlTHwQt80VE+lXNOUMnksRbADb71CcqhR7ykXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: May 19 05:22:25 2024 GMT Not After : May 26 05:22:25 2024 GMT Subject: CN=66498c92-fa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:7a:ff:cc:51:57:07:59:0a:65:57:ee:cd: 30:e3:e1:04:1e:bc:e7:38:91:5a:e3:45:f3:79:55: cc:d5:ec:70:e6:0e:16:29:5e:0d:de:bc:f7:b9:fa: 30:0a:2f:66:34:1f:0a:59:f4:09:d5:5a:7f:21:f9: ad:30:e6:fd:c5:b0:49:52:4e:58:8b:3c:fb:eb:43: d9:e7:cd:c5:81:f1:00:f3:81:31:16:e0:aa:a6:05: da:d4:4f:ae:8a:02:9f:ec:b2:9d:48:06:5d:4a:16: d9:c0:b0:f9:bc:87:3b:10:91:e1:8a:61:5c:97:5d: 70:2e:84:f5:7b:a5:6d:4e:ac:ec:1a:c2:6e:82:00: d9:ac:6b:6f:57:f1:cc:27:2f:6f:1f:88:cb:87:7c: b7:31:5e:2e:e3:7b:3f:3c:4d:4e:76:f7:f4:32:88: a7:bc:3e:99:d5:0e:65:fb:13:b6:6f:b8:29:0a:ea: 61:ea:35:20:7a:11:6c:0d:a4:0d:2b:92:67:b7:d3: 3b:a3:6a:a8:c2:3c:7c:21:0d:67:29:e4:91:15:2f: 4c:16:70:71:a5:d0:ee:08:21:3f:6e:8b:d5:af:53: 49:0d:aa:84:f7:82:15:cd:a6:a5:ba:5c:dc:b0:c4: ad:d5:58:da:ae:65:07:e0:2a:ca:0c:74:06:40:85: 13:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F5:07:A2:52:EB:3D:DD:8B:E0:C4:42:B1:18:11:07:74:16:65:EE X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2d:a0:e4:64:68:99:93:59:3a:4d:7c:6d:60:5a:2d:ae:92: 22:45:bc:bc:1d:2b:92:c2:19:67:b4:8d:cc:bc:0b:2e:46:7f: 4b:ae:f1:6b:73:24:13:c5:7f:77:3d:95:24:78:bc:b8:7d:ef: 4b:ff:f6:60:30:5e:78:92:a6:e2:d6:60:9e:cd:d4:ec:b1:68: 5e:9a:98:c0:48:88:e8:1b:3c:c6:1d:78:23:28:1b:a7:25:9e: ea:b8:5e:83:44:ad:19:12:f8:84:05:c1:36:62:84:b2:a4:43: c3:19:4a:55:5f:51:55:04:29:0f:b4:da:8c:38:0a:62:4c:cb: 34:29:73:6c:00:c6:d7:01:bd:21:fa:5f:83:0a:76:e7:93:54: 7f:60:89:24:a2:0a:28:d2:68:ec:a1:fe:ab:cd:0e:dc:2f:1e: 0d:c3:43:49:87:e2:6b:65:d8:02:53:5f:10:1c:ff:2d:d8:4a: 1e:7f:d4:8b:a4:44:f8:83:1f:68:cf:6b:6d:0f:93:25:01:ce: 95:df:28:b5:dc:03:eb:49:6b:bf:f5:d5:e5:14:f8:29:fc:e2: ee:8c:23:e9:02:6c:db:5d:25:19:3f:74:98:27:b1:01:20:5a: 6b:25:d8:7a:13:28:8a:03:7d:e5:41:b0:66:ed:92:73:15:16: e9:1d:22:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjQwNTE5MDUyMjI1WhcNMjQwNTI2MDUyMjI1WjAYMRYwFAYD VQQDEw02NjQ5OGM5Mi1mYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QZ6/8xRVwdZCmVX7s0w4+EEHrznOJFa40XzeVXM1exw5g4WKV4N3rz3ufow Ci9mNB8KWfQJ1Vp/IfmtMOb9xbBJUk5Yizz760PZ583FgfEA84ExFuCqpgXa1E+u igKf7LKdSAZdShbZwLD5vIc7EJHhimFcl11wLoT1e6VtTqzsGsJuggDZrGtvV/HM Jy9vH4jLh3y3MV4u43s/PE1Odvf0MoinvD6Z1Q5l+xO2b7gpCuph6jUgehFsDaQN K5Jnt9M7o2qowjx8IQ1nKeSRFS9MFnBxpdDuCCE/bovVr1NJDaqE94IVzaalulzc sMSt1VjarmUH4CrKDHQGQIUTDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/1B6JS 6z3di+DEQrEYEQd0FmXuMB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJp c3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLaDkZGiZk1k6TXxtYFotrpIiRby8HSuSwhlntI3MvAsuRn9LrvFr cyQTxX93PZUkeLy4fe9L//ZgMF54kqbi1mCezdTssWhempjASIjoGzzGHXgjKBun JZ7quF6DRK0ZEviEBcE2YoSypEPDGUpVX1FVBCkPtNqMOApiTMs0KXNsAMbXAb0h +l+DCnbnk1R/YIkkogoo0mjsof6rzQ7cLx4Nw0NJh+JrZdgCU18QHP8t2Eoef9SL pET4gx9oz2ttD5MlAc6V3yi13APrSWu/9dXlFPgp/OLujCPpAmzbXSUZP3SYJ7EB IFprJdh6EyiKA33lQbBm7ZJzFRbpHSKb -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org