$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: aMyoXNITrZxmtJ00nxhJ5nlSS6RW9sC9Et5YmD189ho= Subject key identifier: 25:45:4D:55:35:BA:C7:4C:3F:7E:E9:58:6D:D9:AB:55:9A:61:8A:F3 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1390 Signing time: Sat 18 May 2024 17:51:25 +0000 Manifest this update: Sat 18 May 2024 17:51:25 +0000 Manifest next update: Sat 25 May 2024 17:51:25 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: 71WtqNtI5sHfPhSWw4UMKl4HvgfhZBgyjhkOuf3tjCk=) 2: D8DF4F52129D11EF9EDE1282C4F9AE02.roa (hash: HibBp5q5VgeFiQIFoz527CbFNglcxYCliUoJDs5mmWQ=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: 50AXZQqKUmiU0u0HomFfkCWt/VhgUNdJibk1b9+guYw=) 4: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: VdiqX+NESx2d1hHgoHylX6kY3mnKpOxVAOGYIPyUgSo=) 5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Ix/BMBnPFP9d811BL68apCWN0PSAMe/pfFPlCH82naw=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: D/WkqU3NxEYMR9W18jwrUAi6GeXcrov9ieXjaBmS0uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5383 (0x1507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 18 17:51:25 2024 GMT Not After : May 25 17:51:25 2024 GMT Subject: CN=6648ea9d-88a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:95:68:50:8f:12:58:a4:46:fc:ce:da:d1: 73:96:9c:d9:29:ee:7c:82:40:12:b7:37:cf:1a:3f: 52:49:33:4e:8f:84:49:2e:5b:e9:9b:8e:fc:b7:ba: 11:49:21:81:1f:05:d3:2a:3d:77:e9:4c:20:44:08: 30:d8:6f:ee:77:f4:14:e5:c9:f1:a4:93:78:c3:6a: 17:f3:f3:4e:f6:de:55:16:9e:ee:da:7d:a3:aa:0c: 33:cc:66:d2:b5:33:82:61:d5:50:26:5e:e6:3e:79: f2:b6:72:42:22:95:fd:c5:86:b8:81:cf:70:79:9a: f4:1a:e6:30:0a:ba:30:b3:5d:f3:d4:10:10:d0:48: c1:10:b6:62:c7:9b:cb:e7:3b:78:bf:21:35:c4:0d: fc:8a:0e:74:54:06:6f:6a:de:d9:ce:bd:2e:b6:19: 66:5c:37:e7:aa:f4:eb:a8:71:7a:c9:dd:b8:d8:08: 51:5f:cc:d0:f6:51:3d:95:13:6c:84:9b:97:bc:27: 13:e2:7b:96:93:4d:db:ec:0a:1f:b6:67:8c:77:c0: b3:0d:c9:8d:08:f2:ac:91:28:66:3c:c4:ce:3a:60: e6:f9:6b:27:a2:45:55:8d:aa:1f:b3:53:45:66:5c: af:0c:61:0a:da:56:ee:34:84:7a:0f:e6:a1:7b:de: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:45:4D:55:35:BA:C7:4C:3F:7E:E9:58:6D:D9:AB:55:9A:61:8A:F3 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:2d:40:bb:28:ac:67:6b:92:f7:4a:c9:cf:9f:7a:2c:94:86: 31:7b:1d:f8:11:cd:bc:9c:96:6f:44:8b:df:19:d2:30:7e:fe: 37:a1:ed:d5:40:b4:fa:15:c6:6e:f2:04:ff:40:68:7c:a3:56: 05:fc:0e:63:ef:d3:0d:32:13:c7:39:a3:6e:b9:cc:82:3c:3f: d3:8a:80:1f:59:88:ec:16:bc:1a:b0:74:df:59:b8:26:54:ac: 61:c0:bb:73:42:f2:3c:a2:13:50:30:c7:79:76:81:88:b2:ed: cf:8a:47:0b:48:cc:c8:19:94:e5:82:1b:68:5a:ec:61:cd:b4: aa:9a:5b:97:c8:6d:71:eb:e0:ce:0e:66:05:69:c2:41:21:46: 59:ae:b0:82:7a:bd:60:aa:28:07:55:84:1d:98:7c:ea:40:32: 72:1d:a2:06:9e:4d:3e:6e:89:72:6d:55:aa:a5:b1:62:f4:a2: 99:d2:9a:b1:f5:1c:e1:77:78:cd:4c:6a:32:33:60:ea:d4:35: 48:d8:cf:0d:cc:65:ac:8d:c7:d1:29:79:66:ff:24:2f:98:40: f2:f4:a3:a9:21:f8:de:86:93:d4:be:d7:52:b3:b3:f3:0c:f1: 41:cc:09:15:73:f2:f3:dd:56:89:c6:ed:4d:83:95:83:fd:a5: 04:96:fa:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjQwNTE4MTc1MTI1WhcNMjQwNTI1MTc1MTI1WjAYMRYwFAYD VQQDEw02NjQ4ZWE5ZC04OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq26VaFCPElikRvzO2tFzlpzZKe58gkAStzfPGj9SSTNOj4RJLlvpm478t7oR SSGBHwXTKj136UwgRAgw2G/ud/QU5cnxpJN4w2oX8/NO9t5VFp7u2n2jqgwzzGbS tTOCYdVQJl7mPnnytnJCIpX9xYa4gc9weZr0GuYwCrows13z1BAQ0EjBELZix5vL 5zt4vyE1xA38ig50VAZvat7Zzr0uthlmXDfnqvTrqHF6yd242AhRX8zQ9lE9lRNs hJuXvCcT4nuWk03b7AoftmeMd8CzDcmNCPKskShmPMTOOmDm+WsnokVVjaofs1NF ZlyvDGEK2lbuNIR6D+ahe95GJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVFTVU1 usdMP37pWG3Zq1WaYYrzMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGLUC7KKxna5L3SsnPn3oslIYxex34Ec28nJZvRIvfGdIwfv43oe3V QLT6FcZu8gT/QGh8o1YF/A5j79MNMhPHOaNuucyCPD/TioAfWYjsFrwasHTfWbgm VKxhwLtzQvI8ohNQMMd5doGIsu3PikcLSMzIGZTlghtoWuxhzbSqmluXyG1x6+DO DmYFacJBIUZZrrCCer1gqigHVYQdmHzqQDJyHaIGnk0+bolybVWqpbFi9KKZ0pqx 9Rzhd3jNTGoyM2Dq1DVI2M8NzGWsjcfRKXlm/yQvmEDy9KOpIfjehpPUvtdSs7Pz DPFBzAkVc/Lz3VaJxu1Ng5WD/aUElvrD -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org