$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: iRckRmHsaxrz1n4POSTmJBcC+N5FdsiYKVNS2CE9b04= Subject key identifier: 38:C3:7A:BF:E7:4D:D5:5A:FA:1D:0D:C9:07:57:D3:8D:F4:E1:F5:DC Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: DF Signing time: Sun 19 May 2024 05:59:07 +0000 Manifest this update: Sun 19 May 2024 05:59:06 +0000 Manifest next update: Sun 26 May 2024 05:59:06 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: ETMYjQkFKg7r4/v3h+fqSBBAq7HYK5Gua8mcsujtwqQ=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: yoMXZm0LgcOJnV0IoBVg2laJUkPV5hmT1fMRlUH17pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: May 19 05:59:06 2024 GMT Not After : May 26 05:59:06 2024 GMT Subject: CN=6649952a-3189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:71:21:81:12:81:7a:38:70:6b:e0:17:92:6d: 38:cb:99:b1:59:05:e2:d0:e6:e8:f6:9c:e4:7c:66: fc:f3:8e:68:97:9f:01:70:1e:98:8f:1c:9c:a9:b2: 45:b9:e3:8a:6a:21:fb:00:e9:c0:3a:10:af:48:58: 04:14:13:98:0f:d3:5e:96:74:40:86:7a:a8:11:73: 47:8e:f7:4b:76:a2:3c:5d:9f:38:4b:b7:d4:3b:34: 17:56:7f:4b:11:05:40:8a:d8:ce:0e:d9:41:1f:10: 3a:cb:d9:6c:3a:03:60:02:76:e7:c4:9d:7e:8d:78: 42:1a:7d:b7:b4:5d:4c:02:b4:a2:fd:b1:32:78:cc: 31:71:66:33:06:db:41:b4:2d:47:d9:af:17:52:0b: 80:c8:e9:a6:3b:6d:6f:0f:8c:0a:43:88:48:3f:ea: 86:a8:4d:dc:be:6e:ed:5c:47:db:85:bb:ff:d1:78: 95:e4:38:c1:85:94:62:bc:02:e1:cf:f8:21:49:48: 32:ee:39:fc:ce:ef:23:df:8f:d9:b7:1e:a0:46:16: 38:66:78:96:d5:1a:22:d7:b4:d0:ce:bd:5b:95:2b: 98:f2:3c:f7:47:95:64:90:2e:45:6b:ce:f0:0f:1b: c0:38:4a:cc:a8:ec:a2:40:81:2f:2e:12:7a:4a:36: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C3:7A:BF:E7:4D:D5:5A:FA:1D:0D:C9:07:57:D3:8D:F4:E1:F5:DC X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:58:75:fb:e4:f3:63:ca:3c:25:03:75:40:25:4b:63:a6:e5: 6d:e0:57:72:85:8c:06:a2:f4:e0:96:35:7f:1d:8c:93:43:40: 88:a1:60:41:90:8e:7f:81:dc:1a:b7:6c:12:b0:1a:f6:f8:32: 15:5b:2c:7b:f5:4a:64:7a:15:43:52:cf:67:b4:1b:e0:b6:b5: ed:68:17:ed:65:40:a5:35:6a:ab:9d:b1:50:de:da:2e:55:8d: f2:d6:2c:b5:57:ca:01:29:18:c5:e8:54:0b:1b:7d:b1:a1:0c: 0f:9e:48:1a:4b:90:04:57:9a:0f:66:01:36:c0:ce:2c:08:ec: 86:3c:99:2f:d3:91:c9:ea:ff:7c:ba:23:6d:ed:8d:32:0c:e2: f7:97:32:81:49:c9:8f:3a:55:cd:34:72:fc:41:0b:be:99:0b: ae:e5:ce:18:7d:ec:d3:65:7b:49:22:d3:55:68:68:27:91:de: 9e:ff:41:51:32:2d:af:cb:ff:cc:4d:56:a0:2d:53:df:5b:68: 21:f4:db:1a:92:c6:f5:b6:9f:b9:50:bf:e4:bb:b1:85:bc:16: fd:99:14:49:d6:39:eb:70:5f:71:ba:ff:4e:fe:e1:c4:24:5d: 21:07:1d:bd:3a:af:40:38:ad:d1:12:49:23:c5:f2:fd:64:1b: eb:60:d1:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjQwNTE5MDU1OTA2WhcNMjQwNTI2MDU1OTA2WjAYMRYwFAYD VQQDEw02NjQ5OTUyYS0zMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HEhgRKBejhwa+AXkm04y5mxWQXi0Obo9pzkfGb8845ol58BcB6YjxycqbJF ueOKaiH7AOnAOhCvSFgEFBOYD9NelnRAhnqoEXNHjvdLdqI8XZ84S7fUOzQXVn9L EQVAitjODtlBHxA6y9lsOgNgAnbnxJ1+jXhCGn23tF1MArSi/bEyeMwxcWYzBttB tC1H2a8XUguAyOmmO21vD4wKQ4hIP+qGqE3cvm7tXEfbhbv/0XiV5DjBhZRivALh z/ghSUgy7jn8zu8j34/Ztx6gRhY4ZniW1Roi17TQzr1blSuY8jz3R5VkkC5Fa87w DxvAOErMqOyiQIEvLhJ6SjYj5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjDer/n TdVa+h0NyQdX04304fXcMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8WHX75PNjyjwlA3VAJUtjpuVt4FdyhYwGovTgljV/HYyTQ0CIoWBB kI5/gdwat2wSsBr2+DIVWyx79UpkehVDUs9ntBvgtrXtaBftZUClNWqrnbFQ3tou VY3y1iy1V8oBKRjF6FQLG32xoQwPnkgaS5AEV5oPZgE2wM4sCOyGPJkv05HJ6v98 uiNt7Y0yDOL3lzKBScmPOlXNNHL8QQu+mQuu5c4YfezTZXtJItNVaGgnkd6e/0FR Mi2vy//MTVagLVPfW2gh9Nsaksb1tp+5UL/ku7GFvBb9mRRJ1jnrcF9xuv9O/uHE JF0hBx29Oq9AOK3REkkjxfL9ZBvrYNHi -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org