$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: gt1e1aKVne01yhm4kF56d1eOMqhfvKDDcwx85ZqC4F8= Subject key identifier: 90:FF:43:D4:9B:22:D5:9E:68:B8:8E:D3:D5:0B:B9:CC:2D:E8:6F:D0 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 33D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 33CC Signing time: Sat 18 May 2024 14:44:12 +0000 Manifest this update: Sat 18 May 2024 14:44:12 +0000 Manifest next update: Sat 25 May 2024 14:44:12 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: lbS8e7pY8vgOqGvlv7wAyDmkyTA6gk56iD1ZODdbMVU=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: dIOO+N+ZrFHeKmWGUD9CmhvwX/HZ9yoGdGFIS58lszc=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: /40Lfx7mc+RKzfFNZjcJomMgvMglcXnhZ5igcKXMupQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13267 (0x33d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: May 18 14:44:12 2024 GMT Not After : May 25 14:44:12 2024 GMT Subject: CN=6648bebc-6bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:5f:c4:ba:a2:1d:4e:d3:db:b7:8f:37:a7: c7:da:71:79:99:d1:bc:99:b7:3f:cb:12:f0:f6:d7: 10:c6:9e:fe:31:cb:04:0d:f6:73:55:80:c6:5b:6d: da:55:26:e6:07:47:70:24:00:50:53:74:cd:b0:67: 8c:ad:39:1e:9a:ff:c3:67:bf:d4:0f:26:54:93:c0: 46:e3:a2:84:a5:60:06:57:a2:bc:9c:f1:95:65:c3: 18:27:64:c6:b6:d8:54:af:98:d4:ea:44:d1:03:a6: 5f:15:5a:5e:2c:78:f8:f5:30:06:79:f1:5e:e0:22: 70:a1:bf:2d:25:89:4a:4c:2a:c0:0d:59:ee:fa:d8: 0e:6a:61:90:45:ad:fe:00:ec:e3:97:92:df:64:d5: 11:66:38:d6:10:20:12:a6:75:32:80:29:b0:9c:76: 94:17:8c:92:32:12:67:8c:33:f0:9f:fc:c4:8a:08: d1:11:64:67:92:cf:a7:a4:ba:44:87:9f:e0:ee:78: 4c:27:7a:79:49:59:c3:b1:3f:8a:2a:36:cc:7d:ed: ef:0c:e8:3c:bd:7f:2b:80:18:89:d0:a9:11:64:27: 7e:a2:d5:06:a5:57:d8:28:4d:fa:f3:f6:dc:61:b3: 1f:dc:ce:d4:a4:c2:de:e9:d5:29:38:3d:52:8b:e3: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FF:43:D4:9B:22:D5:9E:68:B8:8E:D3:D5:0B:B9:CC:2D:E8:6F:D0 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:89:2d:fd:1b:b1:dc:9c:32:95:1c:5f:29:75:8d:90:8e:21: 1c:83:d8:19:e6:25:19:9b:aa:47:22:03:11:36:11:7d:c3:a1: bd:52:21:67:e4:32:bc:f5:6d:99:bc:af:39:3b:44:b5:cb:93: 31:c6:20:11:f7:62:ef:52:0a:a1:fc:cb:48:57:85:84:af:63: 3f:01:32:e0:d0:6f:fb:1b:2f:2b:5c:1e:10:0a:ef:92:43:cc: af:60:9a:81:e3:cc:18:a9:02:8b:41:b3:a7:1a:85:7e:37:fe: af:c3:8f:65:6e:04:db:e4:e9:76:8e:9f:93:11:60:e4:c3:c7: be:3b:c4:84:fd:60:f7:9e:ef:83:b7:a8:4f:2a:a6:56:7f:fa: b2:a6:51:ea:48:b5:04:ad:00:3a:ab:2d:41:38:b6:ee:4e:bd: b1:bb:4e:67:ce:06:d1:6c:7f:b4:8f:64:90:f4:83:3f:42:d3: db:c6:0a:e7:09:af:e1:01:17:22:9d:f2:68:32:d6:0d:18:bf: a7:73:06:df:51:21:6f:05:e3:bd:23:5e:59:cd:9f:19:a9:4c: 56:56:4d:ee:ec:36:4f:12:a8:74:d1:4e:93:9b:33:00:5e:8a: 9a:3d:33:99:fc:09:d0:2b:82:5d:71:b2:c3:f0:63:24:d2:eb: 5e:60:50:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjQwNTE4MTQ0NDEyWhcNMjQwNTI1MTQ0NDEyWjAYMRYwFAYD VQQDEw02NjQ4YmViYy02YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0pfxLqiHU7T27ePN6fH2nF5mdG8mbc/yxLw9tcQxp7+McsEDfZzVYDGW23a VSbmB0dwJABQU3TNsGeMrTkemv/DZ7/UDyZUk8BG46KEpWAGV6K8nPGVZcMYJ2TG tthUr5jU6kTRA6ZfFVpeLHj49TAGefFe4CJwob8tJYlKTCrADVnu+tgOamGQRa3+ AOzjl5LfZNURZjjWECASpnUygCmwnHaUF4ySMhJnjDPwn/zEigjREWRnks+npLpE h5/g7nhMJ3p5SVnDsT+KKjbMfe3vDOg8vX8rgBiJ0KkRZCd+otUGpVfYKE368/bc YbMf3M7UpMLe6dUpOD1Si+M5uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD/Q9Sb ItWeaLiO09ULucwt6G/QMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiiS39G7HcnDKVHF8pdY2QjiEcg9gZ5iUZm6pHIgMRNhF9w6G9UiFn 5DK89W2ZvK85O0S1y5MxxiAR92LvUgqh/MtIV4WEr2M/ATLg0G/7Gy8rXB4QCu+S Q8yvYJqB48wYqQKLQbOnGoV+N/6vw49lbgTb5Ol2jp+TEWDkw8e+O8SE/WD3nu+D t6hPKqZWf/qyplHqSLUErQA6qy1BOLbuTr2xu05nzgbRbH+0j2SQ9IM/QtPbxgrn Ca/hARcinfJoMtYNGL+ncwbfUSFvBeO9I15ZzZ8ZqUxWVk3u7DZPEqh00U6TmzMA XoqaPTOZ/AnQK4JdcbLD8GMk0uteYFAe -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org