$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: NFxkozf6rXA4Mz7bWoGoOO43JsDpi5vprdxTqT5X2Ys= Subject key identifier: 4E:6E:38:89:DF:9A:F4:CE:8F:23:C9:70:6C:8B:9C:4F:08:DC:F8:05 Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 05B0 Signing time: Sun 19 May 2024 00:13:10 +0000 Manifest this update: Sun 19 May 2024 00:13:09 +0000 Manifest next update: Sun 26 May 2024 00:13:09 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: zRv1tU/GYQswb6vR4MWwsz2Zke+xl9Z8TlUJz2jIuo0=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: lwysUIl261imU5lNPoWm0rxWTlZaqYmEjs3Z/0bNzL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: May 19 00:13:09 2024 GMT Not After : May 26 00:13:09 2024 GMT Subject: CN=66494415-b9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:04:5f:27:7a:c6:a2:6d:76:c4:28:21:24: 7a:cd:45:07:1b:21:4b:1f:1b:d4:46:7d:29:9e:e7: fd:82:be:3b:9e:46:c7:01:cb:1b:13:6f:4a:63:1b: 9f:22:fe:c1:57:17:bd:50:c4:c3:6e:bc:22:65:a6: 8e:f0:95:52:e8:4d:9d:e3:c2:05:88:db:d0:ba:fd: 0d:8d:ca:f7:68:b2:e9:00:1c:18:8f:28:42:35:27: 22:d9:7d:1b:03:c9:2c:96:a6:9b:f7:41:d2:4a:ee: 6b:2a:16:d3:d9:76:6d:c5:7d:5e:90:91:32:e8:18: 47:69:44:07:10:45:ae:dc:7e:6e:d9:9a:b3:15:1b: 73:77:89:b9:4d:9c:e9:15:28:c2:c6:3f:8c:fa:39: fb:3f:40:aa:e7:d9:75:b8:32:f1:01:ed:05:ff:6c: b8:c9:32:8c:f8:1f:60:7a:b1:70:35:26:0e:63:43: 27:6c:cf:24:8c:f2:af:84:49:db:e5:06:44:80:6d: 5c:ab:f1:f6:20:10:0e:dc:e2:85:00:43:c3:e3:01: a7:39:de:6f:2e:4e:1b:4f:32:ee:84:44:ed:98:a5: be:72:5e:ea:24:99:97:35:38:0e:86:55:4b:06:19: 14:9b:5d:86:bc:13:2a:bc:e2:c5:87:47:39:22:34: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6E:38:89:DF:9A:F4:CE:8F:23:C9:70:6C:8B:9C:4F:08:DC:F8:05 X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e7:47:67:a5:d4:54:0e:31:7c:c4:fa:dd:0a:55:bd:78:08: a5:f1:ef:ee:ea:85:f8:b9:fd:1e:6e:01:b5:90:5d:73:85:f7: 7e:f6:41:65:66:0c:f0:7c:e1:5c:15:ab:20:a5:d8:b9:f1:6b: 60:dd:d0:e1:f9:d4:f1:3f:38:eb:12:c2:5e:61:d0:87:32:a8: df:ff:b4:d9:a4:c5:7d:62:d1:43:d9:53:2a:bd:f0:25:af:64: c7:e7:1f:48:33:21:41:f7:65:18:34:f6:51:0f:1e:79:0a:db: fd:b9:6d:4b:1f:0f:da:f9:10:7f:d9:4e:50:06:e1:09:0d:13: 03:b2:ec:60:bf:7e:bb:ac:4d:6a:84:0f:63:a6:65:e2:df:f6: f0:10:ec:e2:b7:3a:3b:df:de:ed:6a:44:c8:3b:a6:98:72:fd: 0a:77:08:f7:11:f9:c9:bc:69:cd:84:f8:7d:dd:9f:a6:fb:25: fb:c5:b4:af:9a:d6:9d:c8:22:bc:85:f9:25:3d:56:60:8d:0c: 62:28:f2:9c:fc:df:46:1e:1a:2c:40:29:3c:f7:84:f4:81:73: 2e:b0:0e:04:60:31:3b:73:cb:61:16:f3:43:78:50:2a:40:aa: 69:0d:fe:40:4c:88:bd:77:35:90:a4:05:5d:bc:6f:ee:f4:4b: 89:59:cb:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjQwNTE5MDAxMzA5WhcNMjQwNTI2MDAxMzA5WjAYMRYwFAYD VQQDEw02NjQ5NDQxNS1iOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiwEXyd6xqJtdsQoISR6zUUHGyFLHxvURn0pnuf9gr47nkbHAcsbE29KYxuf Iv7BVxe9UMTDbrwiZaaO8JVS6E2d48IFiNvQuv0Njcr3aLLpABwYjyhCNSci2X0b A8kslqab90HSSu5rKhbT2XZtxX1ekJEy6BhHaUQHEEWu3H5u2ZqzFRtzd4m5TZzp FSjCxj+M+jn7P0Cq59l1uDLxAe0F/2y4yTKM+B9gerFwNSYOY0MnbM8kjPKvhEnb 5QZEgG1cq/H2IBAO3OKFAEPD4wGnOd5vLk4bTzLuhETtmKW+cl7qJJmXNTgOhlVL BhkUm12GvBMqvOLFh0c5IjRcHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5uOInf mvTOjyPJcGyLnE8I3PgFMB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX50dnpdRUDjF8xPrdClW9eAil8e/u6oX4uf0ebgG1kF1zhfd+9kFl ZgzwfOFcFasgpdi58Wtg3dDh+dTxPzjrEsJeYdCHMqjf/7TZpMV9YtFD2VMqvfAl r2TH5x9IMyFB92UYNPZRDx55Ctv9uW1LHw/a+RB/2U5QBuEJDRMDsuxgv367rE1q hA9jpmXi3/bwEOzitzo7397takTIO6aYcv0Kdwj3EfnJvGnNhPh93Z+m+yX7xbSv mtadyCK8hfklPVZgjQxiKPKc/N9GHhosQCk894T0gXMusA4EYDE7c8thFvNDeFAq QKppDf5ATIi9dzWQpAVdvG/u9EuJWcus -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org