$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: MeVbXKl2pQqrE6gkOyIoISg4aHUWRE4+xj/kYpFzjLQ= Subject key identifier: 23:DE:6C:60:FD:57:B2:6D:8A:DF:BC:2A:D6:3F:2E:F6:62:80:C4:9D Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0BD0 Signing time: Sat 18 May 2024 19:08:39 +0000 Manifest this update: Sat 18 May 2024 19:08:39 +0000 Manifest next update: Sat 25 May 2024 19:08:39 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: Rqk8EOoyihGHnsvjw+hyj/pFAbD2+pcs+xSpmTQUNjw=) 2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: p5JyMcxJixg62lv7FaUL1kQInCYoLGWXuwUelGMNmyE=) 3: F1862B06642911EAA019224CC4F9AE02.roa (hash: ErM56dQSOmabkhk0xjyD2uWxD3CfkXhA/NcHUzIsCiI=) 4: F058F664642911EAA019224CC4F9AE02.roa (hash: pR8hpYrCoO89tivRWBJiZRzg2aFD3n8kIVZ7Qsgjqk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: May 18 19:08:39 2024 GMT Not After : May 25 19:08:39 2024 GMT Subject: CN=6648fcb7-9e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:82:c4:ed:59:3d:55:95:3f:7b:00:c7:2a: 23:a3:01:53:09:10:06:36:5d:c4:62:1e:ac:39:5e: 2f:23:7f:53:93:3f:a4:bb:59:06:c6:c6:7a:85:35: f4:32:d2:9e:18:68:18:67:dd:c7:bb:15:27:94:0d: 50:90:eb:40:13:e0:41:8a:70:e6:6d:dc:f4:43:27: 1a:1e:d4:87:4a:3c:1e:28:24:3a:3d:17:61:a6:20: e8:a6:ea:e6:1d:be:7a:87:d2:9e:80:bf:44:b6:c8: 10:48:e5:7a:27:6e:b2:ee:f3:8d:96:e8:e3:43:17: 08:3e:e0:4a:5c:74:9a:b9:85:ed:29:c5:1f:55:3f: c8:ca:d1:a5:15:4b:22:b8:b4:de:3d:af:33:d3:98: b3:a0:bc:a1:60:60:70:57:5d:44:c6:98:78:55:b8: 09:f6:b4:e4:46:65:7f:b7:6a:72:79:6d:c5:7a:c3: f5:aa:bf:3d:8c:d9:bf:3a:f4:8b:1a:96:af:bf:64: 84:e0:d7:1b:7d:df:cf:32:ae:17:39:35:e0:4b:1e: bd:ae:e3:96:bb:4d:d0:cc:fc:94:22:57:72:62:fe: ba:57:b6:84:89:5a:b8:b2:73:30:23:f6:9f:5e:fd: d5:ba:0d:e7:33:ea:e6:99:fc:df:a4:e2:0e:24:4f: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DE:6C:60:FD:57:B2:6D:8A:DF:BC:2A:D6:3F:2E:F6:62:80:C4:9D X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cf:cf:56:b2:05:f5:b2:55:ad:f2:b1:4b:39:0e:9f:c5:5a: b5:6a:c4:51:70:66:7a:b9:81:1c:b0:db:d4:11:1d:00:12:f2: cd:7d:5c:c5:16:b4:dc:67:6a:fc:af:f0:c6:76:ed:ca:90:17: 5b:1c:f0:b0:f9:ae:f6:d8:97:a2:d7:9d:72:f2:20:31:bc:10: 39:3b:1f:42:ea:bd:6c:7f:38:0d:a4:9a:94:60:b1:0c:6d:8a: 02:b1:1c:6a:ad:ed:6f:79:2f:e1:3b:4a:9b:4a:ff:fe:2c:53: d3:3e:c9:36:fc:a4:6d:c5:7a:fe:98:58:59:6d:25:79:3a:2d: 67:f3:7b:48:16:e3:98:a9:37:41:9e:b9:ad:66:de:1d:3f:3d: dd:76:86:ca:bb:9f:41:02:da:87:a2:d2:e8:a7:94:5d:19:91: 4e:f3:bc:b3:da:5e:84:05:1c:25:13:2f:3b:90:40:96:80:d6: 87:6b:a5:66:b2:13:e7:fe:a5:6a:d9:25:af:69:9a:7d:67:f7: 4e:d3:5f:0f:42:b5:34:f0:cb:00:bd:09:98:24:28:9e:35:6a: 00:3b:10:c3:83:47:56:27:d8:c5:55:88:d6:78:30:65:35:e6: e2:3a:e3:49:11:1e:f6:ca:80:92:56:2b:9f:da:36:3f:a1:06: ab:60:4b:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjQwNTE4MTkwODM5WhcNMjQwNTI1MTkwODM5WjAYMRYwFAYD VQQDEw02NjQ4ZmNiNy05ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uqCxO1ZPVWVP3sAxyojowFTCRAGNl3EYh6sOV4vI39Tkz+ku1kGxsZ6hTX0 MtKeGGgYZ93HuxUnlA1QkOtAE+BBinDmbdz0QycaHtSHSjweKCQ6PRdhpiDopurm Hb56h9KegL9EtsgQSOV6J26y7vONlujjQxcIPuBKXHSauYXtKcUfVT/IytGlFUsi uLTePa8z05izoLyhYGBwV11Exph4VbgJ9rTkRmV/t2pyeW3FesP1qr89jNm/OvSL Gpavv2SE4Ncbfd/PMq4XOTXgSx69ruOWu03QzPyUIldyYv66V7aEiVq4snMwI/af Xv3Vug3nM+rmmfzfpOIOJE8Z4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPebGD9 V7Jtit+8KtY/LvZigMSdMB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8z89WsgX1slWt8rFLOQ6fxVq1asRRcGZ6uYEcsNvUER0AEvLNfVzF FrTcZ2r8r/DGdu3KkBdbHPCw+a722Jei151y8iAxvBA5Ox9C6r1sfzgNpJqUYLEM bYoCsRxqre1veS/hO0qbSv/+LFPTPsk2/KRtxXr+mFhZbSV5Oi1n83tIFuOYqTdB nrmtZt4dPz3ddobKu59BAtqHotLop5RdGZFO87yz2l6EBRwlEy87kECWgNaHa6Vm shPn/qVq2SWvaZp9Z/dO018PQrU08MsAvQmYJCieNWoAOxDDg0dWJ9jFVYjWeDBl NebiOuNJER72yoCSViuf2jY/oQarYEsO -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org