$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json) Hash identifier: JOdPtjCgJxSqjcHYIvH+HcZaelUPUUVqxjTpbS6pUkc= Subject key identifier: 4E:B3:1E:17:C1:10:E8:6D:5A:40:3A:2A:BC:E7:59:1E:14:64:3C:FE Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73 Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73 Certificate serial: 0EB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft Manifest number: 0EA5 Signing time: Tue 30 Apr 2024 18:35:47 +0000 Manifest this update: Tue 30 Apr 2024 18:35:47 +0000 Manifest next update: Tue 07 May 2024 18:35:47 +0000 Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: ee8E+VjKguiZ/hQifdhO8zk3pK/YdW8tMJrSFPETYQM=) 2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: 6TDNu/oRDqcSuK6DlaFmlW6eVS5aW0/4hYzoXR/a1o8=) 3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: fgKPM+PDjZ1Fd5vaSeTYRXPHVfzduxhStPYJNgGCGjg=) 4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: vcxjC0KYadkTBj8rmA0jufQIDJ/TYypQgm2We+qPSDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3765 (0xeb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73 Validity Not Before: Apr 30 18:35:47 2024 GMT Not After : May 7 18:35:47 2024 GMT Subject: CN=66313a03-eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:a5:15:3b:28:02:8e:85:0c:73:d5:f5:4a: f2:bd:27:a2:21:b5:91:01:9b:e4:65:fd:9b:78:7a: ce:e0:4b:d1:1c:dc:66:c6:bf:0e:aa:96:fe:04:d4: 12:63:51:e5:6e:8e:d3:25:06:27:95:e9:2c:4d:13: 43:d3:94:aa:aa:5d:b2:f6:12:b5:ce:fb:28:81:0b: 2a:8c:59:2d:87:04:7e:3a:18:6b:30:d7:d5:9e:80: 79:dc:23:8f:33:16:bd:f4:87:1a:c3:85:c9:0e:52: 91:df:d5:26:b7:ac:1f:6b:0f:11:43:09:d7:2f:6f: cf:57:a4:46:d7:cb:12:72:50:98:14:72:35:6a:bb: 5a:2f:cc:fc:18:d0:e4:4e:10:fd:87:41:3c:4e:0e: b3:45:12:22:11:ee:68:6a:61:56:2d:67:c1:50:17: c7:47:73:52:61:54:54:75:d6:a1:da:72:8f:95:58: 35:57:77:e8:ba:32:34:47:13:f6:66:ad:3a:2a:0a: 3b:97:6d:20:98:cf:b3:b7:2a:8c:6c:25:c5:8f:c7: 48:25:dd:0d:0a:e5:99:6b:b6:66:96:9b:ad:6a:df: b0:09:97:54:83:b2:fc:fb:16:1e:1d:35:4e:04:bf: 59:3f:89:89:7b:8e:fa:fc:c7:b6:a3:53:f7:0c:df: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B3:1E:17:C1:10:E8:6D:5A:40:3A:2A:BC:E7:59:1E:14:64:3C:FE X509v3 Authority Key Identifier: keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:1f:a6:98:7e:e1:d6:86:6b:f9:03:82:48:14:a7:bb:b1:0a: 85:ca:40:36:8f:df:a4:95:83:b7:0d:2b:17:00:9d:96:e2:28: 25:03:22:68:ac:1a:a7:a4:60:6c:ba:36:07:30:b5:93:88:de: 21:bc:1b:14:b6:75:2f:b9:55:d5:b3:c7:c6:e7:51:f3:60:ff: a9:89:54:da:81:41:e9:6e:d3:34:70:f0:42:f6:66:5a:b6:e5: d0:1b:72:1a:ca:91:5d:d9:3f:f9:53:2e:f7:90:af:8b:33:de: b6:63:ac:c8:67:a6:ea:3f:ba:49:f1:87:6f:d3:38:2e:63:38: 6b:53:c8:a2:83:15:b5:78:42:25:01:7c:5d:99:6f:bf:7a:41: 1a:10:ef:86:44:ef:c0:49:15:1e:28:e4:18:05:34:29:fd:85: b9:c3:87:7f:4e:13:da:29:1a:33:a5:13:10:64:84:16:92:b8: e8:9e:95:a6:d8:00:a4:84:e3:e9:73:10:33:00:8a:b6:ba:a3: 0d:df:d7:20:4e:96:5e:3d:76:5f:23:12:fa:a3:ae:4b:87:b9: 44:e3:60:30:00:ec:29:a5:0b:c8:7c:85:98:10:18:e8:ee:ec: 1a:bb:0e:11:01:c2:ee:c0:5c:24:5c:e2:e5:74:53:48:f2:68: a5:a8:11:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx Njg4QjJCNzMwHhcNMjQwNDMwMTgzNTQ3WhcNMjQwNTA3MTgzNTQ3WjAYMRYwFAYD VQQDEw02NjMxM2EwMy1lYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX+lFTsoAo6FDHPV9UryvSeiIbWRAZvkZf2beHrO4EvRHNxmxr8Oqpb+BNQS Y1Hlbo7TJQYnleksTRND05Sqql2y9hK1zvsogQsqjFkthwR+OhhrMNfVnoB53COP Mxa99Icaw4XJDlKR39Umt6wfaw8RQwnXL2/PV6RG18sSclCYFHI1artaL8z8GNDk ThD9h0E8Tg6zRRIiEe5oamFWLWfBUBfHR3NSYVRUddah2nKPlVg1V3foujI0RxP2 Zq06Kgo7l20gmM+ztyqMbCXFj8dIJd0NCuWZa7Zmlputat+wCZdUg7L8+xYeHTVO BL9ZP4mJe476/Me2o1P3DN+xswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6zHhfB EOhtWkA6KrznWR4UZDz+MB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1 NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1 MHhlSVZzZTJMcHdXaUxLM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQH6aYfuHWhmv5A4JIFKe7sQqFykA2j9+klYO3DSsXAJ2W4iglAyJo rBqnpGBsujYHMLWTiN4hvBsUtnUvuVXVs8fG51HzYP+piVTagUHpbtM0cPBC9mZa tuXQG3IaypFd2T/5Uy73kK+LM962Y6zIZ6bqP7pJ8Ydv0zguYzhrU8iigxW1eEIl AXxdmW+/ekEaEO+GRO/ASRUeKOQYBTQp/YW5w4d/ThPaKRozpRMQZIQWkrjonpWm 2ACkhOPpcxAzAIq2uqMN39cgTpZePXZfIxL6o65Lh7lE42AwAOwppQvIfIWYEBjo 7uwauw4RAcLuwFwkXOLldFNI8milqBHC -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:58 2024 by rpki-client on console-fra.rpki-client.org