$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: 1hwkhTmdqCaffHkxbZIOLtsy8I8iwuXQpcvHa6VGtzc= Subject key identifier: EA:CB:26:FF:86:51:B7:8E:07:78:18:5D:01:11:C4:A3:58:A6:E5:7B Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0BEC Signing time: Fri 31 May 2024 19:34:15 +0000 Manifest this update: Fri 31 May 2024 19:34:14 +0000 Manifest next update: Fri 07 Jun 2024 19:34:14 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: UMU9uubXnZRU+E+v30HkIn18lQpbKHKf+Zu76rlD4X4=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: g99vYIlBB0cqZeMEiHdeFvS6arbrwduo3e2WdyIrbPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: May 31 19:34:14 2024 GMT Not After : Jun 7 19:34:14 2024 GMT Subject: CN=665a2637-6399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:76:a6:cb:d2:ba:cb:9a:8f:19:ed:83:ba: 42:48:fb:75:28:7f:7d:3a:5e:04:7c:7a:67:5e:fb: 4d:bb:68:76:75:73:fb:51:1c:ff:2c:2c:d4:a9:22: 85:0c:f0:b6:11:c3:cb:dc:d2:4b:ab:fe:32:92:d7: 6f:84:7a:f0:88:cd:d5:9a:87:32:a0:38:33:e6:4e: 28:5a:2e:20:e1:6a:17:72:6c:78:4e:b5:a9:81:95: ef:a6:12:84:16:15:fb:0f:f4:6e:6b:88:81:08:73: 46:36:d6:d2:2e:5e:22:68:a1:df:e7:ed:8a:98:d4: b0:f9:92:50:60:c9:f1:ce:70:ef:5b:de:dd:62:30: 18:6c:62:46:00:96:13:5b:4b:f7:e4:eb:06:34:a1: 2c:de:c3:07:b7:96:3b:de:ba:26:36:4a:4e:7e:b0: 74:a1:dd:64:bd:01:fb:e1:74:a3:61:f5:0f:83:05: e9:5a:85:76:c7:9c:9d:7a:fc:a8:f2:e0:f4:ef:c5: 17:a1:58:04:2e:8e:30:f8:bd:98:29:f4:1f:3a:09: ae:e2:13:8b:73:70:32:de:60:50:40:ac:1f:7e:1a: a0:4f:f4:29:78:7f:3a:53:cf:b2:03:89:6d:46:63: be:7c:60:fb:18:a9:98:e3:47:c2:97:fe:49:5c:85: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:26:FF:86:51:B7:8E:07:78:18:5D:01:11:C4:A3:58:A6:E5:7B X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:03:96:cc:a0:2c:af:99:d2:d9:4a:4f:e3:9a:1e:e2:4b:0a: 70:61:2b:b7:17:f6:48:b3:30:a4:42:00:03:da:84:a9:3c:3c: 87:98:5e:98:af:21:09:72:00:ca:d2:82:60:4a:74:19:0a:9d: f0:df:b2:3a:7d:72:cf:5f:cf:fa:b7:2c:cf:73:7e:f0:0d:fc: 82:7d:10:ff:2d:97:1d:80:3c:0b:67:23:34:fb:c8:7e:0a:41: 4d:81:9d:fc:18:4e:f8:a5:cd:92:ae:99:6d:cc:7a:22:ac:10: 5c:07:83:1a:b6:b1:d6:69:72:44:fa:d0:30:60:0e:9b:88:bb: 5c:70:04:b0:b6:e0:8c:45:9f:70:7f:1c:06:45:3e:f2:51:f6: f4:c4:69:f8:e2:a1:87:c9:ad:f8:9a:c8:58:4f:1e:f1:07:8f: ab:01:b8:22:f1:57:37:b4:95:d0:78:17:81:98:02:50:59:9d: fe:d4:d7:32:86:08:bf:8b:12:5b:e3:e8:fb:20:a0:56:f3:13: 18:8b:96:bb:fc:54:11:c6:6e:3e:80:d0:be:f7:c2:67:66:19: 97:85:df:2d:83:05:80:08:19:59:e7:c7:9e:5f:ca:18:ac:ea: d0:5e:e6:14:b6:6b:38:8c:9f:c8:d9:8e:1d:10:20:44:4a:19: 29:c0:0a:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjQwNTMxMTkzNDE0WhcNMjQwNjA3MTkzNDE0WjAYMRYwFAYD VQQDEw02NjVhMjYzNy02Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i52psvSusuajxntg7pCSPt1KH99Ol4EfHpnXvtNu2h2dXP7URz/LCzUqSKF DPC2EcPL3NJLq/4yktdvhHrwiM3VmocyoDgz5k4oWi4g4WoXcmx4TrWpgZXvphKE FhX7D/Rua4iBCHNGNtbSLl4iaKHf5+2KmNSw+ZJQYMnxznDvW97dYjAYbGJGAJYT W0v35OsGNKEs3sMHt5Y73romNkpOfrB0od1kvQH74XSjYfUPgwXpWoV2x5ydevyo 8uD078UXoVgELo4w+L2YKfQfOgmu4hOLc3Ay3mBQQKwffhqgT/QpeH86U8+yA4lt RmO+fGD7GKmY40fCl/5JXIVIvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrLJv+G UbeOB3gYXQERxKNYpuV7MB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+A5bMoCyvmdLZSk/jmh7iSwpwYSu3F/ZIszCkQgAD2oSpPDyHmF6Y ryEJcgDK0oJgSnQZCp3w37I6fXLPX8/6tyzPc37wDfyCfRD/LZcdgDwLZyM0+8h+ CkFNgZ38GE74pc2SrpltzHoirBBcB4MatrHWaXJE+tAwYA6biLtccASwtuCMRZ9w fxwGRT7yUfb0xGn44qGHya34mshYTx7xB4+rAbgi8Vc3tJXQeBeBmAJQWZ3+1Ncy hgi/ixJb4+j7IKBW8xMYi5a7/FQRxm4+gNC+98JnZhmXhd8tgwWACBlZ58eeX8oY rOrQXuYUtms4jJ/I2Y4dECBEShkpwApO -----END CERTIFICATE-----Generated at Fri May 31 22:13:06 2024 by rpki-client on console-fra.rpki-client.org