$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json) Hash identifier: H5sBFp3VpUeEDygsd8/DMKDugv61WX7OSBkiVKQbu+o= Subject key identifier: 4F:87:3F:3F:32:87:87:AC:A1:0F:5B:A6:47:BB:64:95:D9:AC:7C:D4 Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft Manifest number: 13 Signing time: Sun 19 May 2024 08:49:40 +0000 Manifest this update: Sun 19 May 2024 08:49:40 +0000 Manifest next update: Sun 26 May 2024 08:49:40 +0000 Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: ZQuFCM0y4JRTb1z8j0NOwV0QwJGKqKPt33nNPBzKlOk=) 2: 8C7FA9C0FD4B11EEABAB0B60C4F9AE02.roa (hash: 6DnvLHwkOsmNheO3/dmZL+mDrT6py3IBbzDfl6LMYsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: May 19 08:49:40 2024 GMT Not After : May 26 08:49:40 2024 GMT Subject: CN=6649bd24-5999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:9a:0e:6f:12:4f:6b:d8:b7:ce:8b:af:00: 38:4c:ef:2b:79:60:d4:f8:70:79:70:0c:5c:89:7d: 33:13:e6:a1:f1:14:36:d8:11:3e:7a:46:fe:7f:84: e9:a0:bc:3a:b1:7e:f3:55:59:f4:f3:aa:a2:2c:67: 30:d4:22:8d:f9:80:ee:c2:7a:3e:7e:00:d6:e1:5f: e0:1d:d2:53:27:04:c9:ba:46:bf:a8:30:d1:55:48: 6f:a0:00:0b:49:c8:21:be:66:08:4e:a2:81:48:5b: 87:25:e1:9f:91:7e:17:d5:bd:2d:7f:b3:a5:3c:48: e8:94:44:d0:28:6e:cf:d5:30:02:78:af:6e:05:d8: 0b:a5:11:ba:7d:d8:fe:46:48:1c:93:83:b6:4a:65: ca:6e:8c:9f:30:bd:97:78:01:e4:e2:42:18:1f:a9: 16:64:65:bc:08:47:3b:23:e8:97:dc:fb:f0:9e:0b: a1:84:87:2c:40:ee:a8:64:80:6b:4f:88:b3:41:ac: 6f:a0:e4:8b:3d:0b:5a:e8:29:09:e6:ba:f7:13:74: bf:e6:8c:46:fb:fb:cc:93:e6:31:67:73:c6:d7:e6: 99:f7:d5:70:f1:e3:f2:6d:ac:56:9e:61:c0:59:d8: 9e:d1:a2:32:55:7a:70:9f:e5:bc:c1:c4:da:8d:95: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:3F:3F:32:87:87:AC:A1:0F:5B:A6:47:BB:64:95:D9:AC:7C:D4 X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:da:eb:29:26:fc:70:a6:15:db:4f:cf:0f:99:1e:03:a9:53: 5d:8b:32:48:d9:33:8d:d3:4b:f5:98:fd:32:c1:85:3c:36:29: bc:f8:ab:b4:2d:d8:cc:ad:4f:68:71:a7:c0:48:f6:1d:2e:26: c4:24:a3:26:80:73:60:70:22:6d:f7:3d:47:42:fc:42:b9:a1: 0b:1b:fc:7f:dc:33:1b:31:b4:0d:f9:a0:e3:a0:c7:0a:e0:c2: 4d:66:b2:d7:8d:b3:54:ab:c3:4e:e5:60:dd:4d:dc:7c:12:a5: 56:df:47:e7:5c:38:f6:92:f9:0a:e1:4b:55:fa:c4:9f:b8:ff: 67:0a:0e:77:10:12:2e:6e:c4:6c:38:55:eb:63:01:db:f2:a6: 28:51:56:a5:5d:2f:23:d0:35:91:b9:11:5d:f8:9f:19:c2:6a: b2:ae:3b:99:d5:26:29:6b:5c:a1:fc:d2:70:8f:bb:3b:54:8e: 20:d7:7a:72:67:46:8a:c1:47:65:1e:96:fc:5b:d2:6c:c3:a4: 7d:bc:2d:bb:6e:e1:17:1c:53:c5:ae:60:1c:03:fc:0f:0a:ca: 8a:6b:5b:d7:ed:e8:68:53:b0:82:87:c1:bd:95:1e:ac:4a:69: fc:35:25:68:d9:c2:1d:ff:e2:ae:d5:17:e8:8e:d9:1f:13:fe: 38:5c:92:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzEwRjExMC8GA1UEBRMoQTNFQjUxRDI5OTlCQkI0NDY1OUJEREE2QkUxRTEwRkE1 NTFFMjI2NTAeFw0yNDA1MTkwODQ5NDBaFw0yNDA1MjYwODQ5NDBaMBgxFjAUBgNV BAMTDTY2NDliZDI0LTU5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9B5oObxJPa9i3zouvADhM7yt5YNT4cHlwDFyJfTMT5qHxFDbYET56Rv5/hOmg vDqxfvNVWfTzqqIsZzDUIo35gO7Cej5+ANbhX+Ad0lMnBMm6Rr+oMNFVSG+gAAtJ yCG+ZghOooFIW4cl4Z+RfhfVvS1/s6U8SOiURNAobs/VMAJ4r24F2AulEbp92P5G SByTg7ZKZcpujJ8wvZd4AeTiQhgfqRZkZbwIRzsj6Jfc+/CeC6GEhyxA7qhkgGtP iLNBrG+g5Is9C1roKQnmuvcTdL/mjEb7+8yT5jFnc8bX5pn31XDx4/JtrFaeYcBZ 2J7RojJVenCf5bzBxNqNlSihAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT4c/PzKH h6yhD1umR7tkldmsfNQwHwYDVR0jBBgwFoAUo+tR0pmbu0Rlm92mvh4Q+lUeImUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDMTBGLzlBNzU4MEM4RkQ0 QTExRUU4MDlCMDczMEM0RjlBRTAyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUlt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvby10UjBwbWJ1MFJsbTkybXZoNFEtbFVlSW1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD MTBGLzlBNzU4MEM4RkQ0QTExRUU4MDlCMDczMEM0RjlBRTAyL28tdFIwcG1idTBS bG05Mm12aDRRLWxVZUltVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3a6ykm/HCmFdtPzw+ZHgOpU12LMkjZM43TS/WY/TLBhTw2Kbz4q7Qt 2MytT2hxp8BI9h0uJsQkoyaAc2BwIm33PUdC/EK5oQsb/H/cMxsxtA35oOOgxwrg wk1msteNs1Srw07lYN1N3HwSpVbfR+dcOPaS+QrhS1X6xJ+4/2cKDncQEi5uxGw4 VetjAdvypihRVqVdLyPQNZG5EV34nxnCarKuO5nVJilrXKH80nCPuztUjiDXenJn RorBR2Uelvxb0mzDpH28Lbtu4RccU8WuYBwD/A8KyoprW9ft6GhTsIKHwb2VHqxK afw1JWjZwh3/4q7VF+iO2R8T/jhcksI= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org