$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: 37PKscjaq9cQxKVxDgbarDu8j1N60IO3BHtMfznn050= Subject key identifier: 81:A3:4F:AD:7D:11:1F:83:4F:2F:AB:EA:79:F6:64:9F:B7:34:B0:92 Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 01A6 Signing time: Fri 31 May 2024 05:19:58 +0000 Manifest this update: Fri 31 May 2024 05:19:57 +0000 Manifest next update: Fri 07 Jun 2024 05:19:57 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: JWroN6jYSAWXLu5UoHw7M/CjbkBg9VhWu4gCKVLC8rg=) 2: 4D05FAAC61A111ED83B4EF11C4F9AE02.roa (hash: jUDo9GxDqvQcg1plB3lvHLCNmGIcg9xjOw0bISxW0So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: May 31 05:19:57 2024 GMT Not After : Jun 7 05:19:57 2024 GMT Subject: CN=66595dfd-ae51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:b6:da:8c:d8:45:5a:da:4a:e2:bf:33:fe: 8a:0a:b0:4b:8c:6e:70:31:e0:52:ec:11:e3:27:be: b3:7d:9a:06:ff:2b:13:75:49:95:9d:85:70:a3:09: a0:5e:58:84:bf:c6:a6:b2:9b:24:76:5a:fa:44:ba: 07:ff:61:24:15:37:5d:bf:f5:55:64:fc:1d:a5:25: 4b:bd:f7:a1:f3:6f:fa:83:b0:cb:72:1c:a6:de:17: 64:c7:0b:82:f9:6d:5f:36:40:d0:7f:be:aa:65:c1: 15:ad:0d:63:4f:a2:8e:42:e5:1a:df:e3:65:78:6c: 2d:8b:d0:fa:85:4a:a0:17:8e:00:2f:42:c3:06:54: e2:4a:b1:a6:7c:75:df:5c:7a:41:42:c1:a0:6f:5a: 58:71:19:2f:fa:31:a7:42:3a:67:fc:47:fb:8f:46: 0c:c0:aa:39:dc:4e:18:a0:5e:78:20:59:bc:f8:b7: d5:70:14:fb:98:b9:b6:57:5e:d7:50:85:46:65:a2: ce:5a:b4:29:8f:c5:93:3a:df:e0:87:25:65:6f:5b: fd:a2:a3:17:2f:dc:54:97:4b:f7:c3:e6:c2:41:35: 1f:df:8e:61:f7:43:df:03:49:78:62:e3:e9:9d:f1: 45:31:57:77:bc:a6:03:50:2f:62:a7:22:1b:11:4b: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:4F:AD:7D:11:1F:83:4F:2F:AB:EA:79:F6:64:9F:B7:34:B0:92 X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:2a:59:22:2e:cf:88:e2:39:62:f8:0f:42:7f:b3:85:4e: d2:1f:6b:78:9f:00:ec:75:d3:ea:f4:e8:7e:2c:45:e5:da:70: e6:22:07:c3:89:be:05:e1:c1:05:09:37:1f:a1:07:5b:3a:88: b7:07:a8:dd:6e:15:0b:ad:e0:56:3e:57:9d:b3:d2:3f:4e:66: 58:77:e8:af:cc:63:a5:32:8f:c3:1e:e0:53:fb:3e:b8:08:ff: 26:3d:26:a1:d6:40:b0:16:c9:23:1f:f1:4b:29:ae:81:82:f5: 00:85:84:a7:40:da:b0:20:41:a2:b6:38:df:d4:e0:90:be:8a: ef:14:ff:e6:ca:fe:ed:d0:8f:e3:90:65:db:f9:4c:5b:ee:23: 64:0a:f2:f7:97:b9:92:a4:43:9a:35:df:82:75:d9:18:e5:9c: f5:10:fb:e2:19:9e:2e:33:3c:57:bc:b3:ac:96:a2:d0:11:e7: f6:07:79:14:7b:5c:41:af:3f:7a:4f:a8:2c:75:06:1a:27:9e: 29:c2:38:26:14:77:20:7e:f9:5e:82:cd:e8:25:3b:5c:9c:b9: 59:0d:ef:54:b9:03:5a:75:eb:f7:e1:64:38:0e:21:ab:37:b6: 77:b2:e3:84:7a:bf:da:41:0a:8b:19:7a:2a:58:b6:59:37:a7: 5d:f3:8e:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjQwNTMxMDUxOTU3WhcNMjQwNjA3MDUxOTU3WjAYMRYwFAYD VQQDEw02NjU5NWRmZC1hZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwby22ozYRVraSuK/M/6KCrBLjG5wMeBS7BHjJ76zfZoG/ysTdUmVnYVwowmg XliEv8amspskdlr6RLoH/2EkFTddv/VVZPwdpSVLvfeh82/6g7DLchym3hdkxwuC +W1fNkDQf76qZcEVrQ1jT6KOQuUa3+NleGwti9D6hUqgF44AL0LDBlTiSrGmfHXf XHpBQsGgb1pYcRkv+jGnQjpn/Ef7j0YMwKo53E4YoF54IFm8+LfVcBT7mLm2V17X UIVGZaLOWrQpj8WTOt/ghyVlb1v9oqMXL9xUl0v3w+bCQTUf345h90PfA0l4YuPp nfFFMVd3vKYDUC9ipyIbEUsE/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGjT619 ER+DTy+r6nn2ZJ+3NLCSMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2LypZIi7PiOI5YvgPQn+zhU7SH2t4nwDsddPq9Oh+LEXl2nDmIgfD ib4F4cEFCTcfoQdbOoi3B6jdbhULreBWPleds9I/TmZYd+ivzGOlMo/DHuBT+z64 CP8mPSah1kCwFskjH/FLKa6BgvUAhYSnQNqwIEGitjjf1OCQvorvFP/myv7t0I/j kGXb+Uxb7iNkCvL3l7mSpEOaNd+CddkY5Zz1EPviGZ4uMzxXvLOslqLQEef2B3kU e1xBrz96T6gsdQYaJ54pwjgmFHcgfvlegs3oJTtcnLlZDe9UuQNadev34WQ4DiGr N7Z3suOEer/aQQqLGXoqWLZZN6dd8464 -----END CERTIFICATE-----Generated at Fri May 31 05:53:51 2024 by rpki-client on console-fra.rpki-client.org