$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: GUnDBTlTlYx+E5MrZp/CxHiidA0P+9jdcQ4uXuQlRHc= Subject key identifier: 43:46:F4:9F:DA:74:7A:9E:90:62:23:95:3D:3C:26:C3:FB:28:D4:B8 Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 0655 Signing time: Tue 14 May 2024 23:45:34 +0000 Manifest this update: Tue 14 May 2024 23:45:34 +0000 Manifest next update: Tue 21 May 2024 23:45:34 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: H4TS0ua906S4BT0Lw3dz/kjHWjKeu7/kroh60Dyzh+k=) 2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: u20NuNFzDHapjyOj4X0XHCGLZUioMw89EmL8O4oRBbc=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: 2+Bizh2NNJp7F7/Vuvy8vKBy/G5KPNERN871DtsBlxY=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: +iFnTTDgyKN2dBbGGMYJxxuH3kAkl9MBH/8TEqqg3/U=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: dNu1CwDmcjgy7/dtTe1Gre+JUZ3QpIiLnwFTWyTMue4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: May 14 23:45:34 2024 GMT Not After : May 21 23:45:34 2024 GMT Subject: CN=6643f79e-7ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:25:91:06:7a:b9:82:28:62:3d:85:f5:e5: 4e:27:40:e9:15:c9:0f:18:09:0f:7d:1e:1d:fd:ec: 56:9a:f2:73:66:e9:ac:d7:4c:71:4b:bb:98:db:42: 77:db:fc:8d:6b:cf:4e:a6:1d:ca:78:0f:f9:93:f5: 69:14:49:34:3a:93:1d:9b:60:55:fd:30:05:5c:53: 67:53:86:10:b5:a5:a5:63:8d:f2:af:6b:f1:e1:75: c3:c5:e3:d0:57:81:65:f8:e1:c3:20:99:8e:61:8a: 4d:34:c0:3a:c1:c3:09:75:7d:fd:ba:0e:b4:40:b3: 02:4d:4d:c2:8a:69:40:9f:1b:3b:fd:1b:81:52:91: 67:e9:d7:3c:be:60:55:29:c8:d3:35:7b:01:ba:7c: 5f:29:3b:14:49:d9:7e:05:c4:30:a0:0f:41:4e:68: f9:9e:bd:97:d1:e2:b6:90:f4:fa:38:62:c6:d9:be: 8e:ac:6d:a3:22:9f:3f:ac:57:2d:1d:6b:bc:8a:97: 69:4d:17:e6:b7:bd:90:c7:02:eb:21:27:89:57:11: a7:91:88:81:be:09:a5:3d:00:1e:8c:bd:00:34:18: b8:67:44:33:b7:0f:b7:a3:fb:71:ac:c2:16:5f:c1: cf:31:20:69:7a:13:89:f5:4f:85:94:4f:78:94:38: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:F4:9F:DA:74:7A:9E:90:62:23:95:3D:3C:26:C3:FB:28:D4:B8 X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2a:31:a2:3f:40:47:18:97:b9:3c:df:5d:85:1e:4a:25:ab: 87:8c:9e:33:34:52:d9:8e:f0:41:09:6e:05:fe:9f:15:29:43: 40:40:99:68:2a:c1:aa:28:ed:6a:3a:fb:0e:32:08:65:ca:58: 04:63:0a:b9:07:5e:58:89:e5:56:b2:e4:6f:80:b8:9b:a6:d4: ee:f0:f6:9e:ff:69:74:30:48:96:4e:bd:66:88:08:5d:1d:a3: 37:73:69:ab:6f:2b:10:7a:f0:93:ad:07:81:06:8e:5a:f9:37: fe:b9:b3:33:97:89:ff:7d:c5:f2:47:48:e8:35:46:73:00:c7: f6:5d:3f:4d:4e:b1:d4:31:46:82:16:ef:a4:b1:32:f1:8d:77: 8a:0c:96:b2:45:83:a8:4d:6c:13:e1:39:04:c1:7c:51:2d:5f: 3c:a0:cc:07:3b:16:72:cf:b4:ff:2d:08:a4:0b:03:8d:a0:2e: 2b:c0:27:c9:d8:68:eb:42:a5:81:96:2b:25:4d:55:47:a3:da: 54:6c:34:fa:7a:a6:f9:f1:9d:66:77:df:ca:eb:2f:f9:c4:f0: 2a:ff:9f:e2:c3:bf:0b:d3:92:98:69:5f:c8:21:fe:ef:49:e0: fd:2b:bf:3a:30:fb:76:7c:ef:7c:59:bf:9a:56:ca:a9:8f:d7: 9d:74:8f:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjQwNTE0MjM0NTM0WhcNMjQwNTIxMjM0NTM0WjAYMRYwFAYD VQQDEw02NjQzZjc5ZS03ZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApH0lkQZ6uYIoYj2F9eVOJ0DpFckPGAkPfR4d/exWmvJzZums10xxS7uY20J3 2/yNa89Oph3KeA/5k/VpFEk0OpMdm2BV/TAFXFNnU4YQtaWlY43yr2vx4XXDxePQ V4Fl+OHDIJmOYYpNNMA6wcMJdX39ug60QLMCTU3CimlAnxs7/RuBUpFn6dc8vmBV KcjTNXsBunxfKTsUSdl+BcQwoA9BTmj5nr2X0eK2kPT6OGLG2b6OrG2jIp8/rFct HWu8ipdpTRfmt72QxwLrISeJVxGnkYiBvgmlPQAejL0ANBi4Z0Qztw+3o/txrMIW X8HPMSBpehOJ9U+FlE94lDjHfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENG9J/a dHqekGIjlT08JsP7KNS4MB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvKjGiP0BHGJe5PN9dhR5KJauHjJ4zNFLZjvBBCW4F/p8VKUNAQJlo KsGqKO1qOvsOMghlylgEYwq5B15YieVWsuRvgLibptTu8Pae/2l0MEiWTr1miAhd HaM3c2mrbysQevCTrQeBBo5a+Tf+ubMzl4n/fcXyR0joNUZzAMf2XT9NTrHUMUaC Fu+ksTLxjXeKDJayRYOoTWwT4TkEwXxRLV88oMwHOxZyz7T/LQikCwONoC4rwCfJ 2GjrQqWBlislTVVHo9pUbDT6eqb58Z1md9/K6y/5xPAq/5/iw78L05KYaV/IIf7v SeD9K786MPt2fO98Wb+aVsqpj9eddI8A -----END CERTIFICATE-----Generated at Wed May 15 01:43:46 2024 by rpki-client on console-ams.rpki-client.org