$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: jsqrqTqdMwtGUVg+w8ghZzIFGYqrr7E89VTvf6pcEM0= Subject key identifier: 79:8A:D4:55:02:C7:33:9E:29:74:D8:87:3F:EF:1F:86:55:B4:07:CD Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 0210 Signing time: Fri 31 May 2024 04:48:35 +0000 Manifest this update: Fri 31 May 2024 04:48:35 +0000 Manifest next update: Fri 07 Jun 2024 04:48:35 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: oCqimSVf+NSYdE9RO82cn4L5vneBsWlw14DNpAlLa98=) 2: 0B02EE20023C11EF9AF7B734C4F9AE02.roa (hash: +elcXQmxTadEU9tfhJKzB5izp5O8kCGyd+XSp6Kl3yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: May 31 04:48:35 2024 GMT Not After : Jun 7 04:48:35 2024 GMT Subject: CN=665956a3-d265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:63:62:15:b4:2c:1b:07:b4:1c:6b:e8:64: ee:7d:6b:da:06:72:2d:46:4a:aa:fa:8f:1b:79:e2: f6:ab:20:50:7a:fb:d9:43:7d:3e:d6:85:22:10:9d: 44:ee:7d:da:87:ba:7a:84:34:b1:44:01:b3:6b:c1: 7d:87:58:dd:a6:ab:88:a0:5a:b8:eb:15:51:83:5b: bd:15:1c:27:7f:e6:a2:50:90:42:46:87:14:0f:2c: 9e:ee:7c:5e:d4:b1:7e:09:f5:4b:1a:e8:5e:5d:26: 21:b9:2c:d2:00:db:4d:7b:47:e1:7e:d6:7d:8c:76: 73:fb:2d:4d:17:d3:e3:b8:98:02:ed:19:92:6d:93: d5:4c:f0:c2:ad:d9:98:9d:53:1c:b2:71:8f:53:58: b8:51:17:04:7d:84:a0:91:d3:c1:b3:4d:b2:e4:27: 67:ef:78:27:2b:7b:5d:ed:03:26:07:31:51:40:cb: 10:8f:bf:21:2e:9e:b7:65:08:73:15:22:04:66:52: c2:d3:72:91:21:aa:2b:e6:02:47:0d:f5:84:63:5a: a3:52:07:50:0c:41:d1:7e:ff:29:05:64:12:71:2b: 3d:85:63:40:ae:0c:1b:8e:cc:47:14:ad:03:7d:40: ee:fb:b1:1f:21:58:f5:1f:ad:6a:e1:32:99:f4:a2: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:D4:55:02:C7:33:9E:29:74:D8:87:3F:EF:1F:86:55:B4:07:CD X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:c6:ad:de:0c:3b:ec:3e:2d:9b:c1:cd:dd:44:b3:f1:0a:42: 94:6f:9c:c1:25:6e:cb:6f:49:6a:03:58:06:d9:12:28:f1:01: 9b:7e:c1:dd:06:5f:09:f5:58:0e:a7:9b:ad:32:1b:58:50:80: 92:f6:c8:da:60:fd:6a:0a:23:46:c7:b2:50:5f:55:b3:61:0f: 63:8e:a7:88:40:db:5e:11:4a:68:2e:a3:63:60:6e:60:a9:a5: a3:16:fb:3b:22:ea:cd:47:d2:32:e4:1c:06:83:6b:32:45:ae: 1f:94:0d:3c:6a:3c:02:ed:4c:6a:93:27:5d:10:42:f2:f5:42: 07:3b:7a:96:a5:67:ea:de:1d:9b:5e:07:be:63:d8:15:48:1f: 71:b7:41:b7:12:0f:26:7c:8b:42:47:0f:30:0c:be:19:ba:87: fd:76:c3:64:fd:42:7e:b1:5a:54:87:85:8a:90:6c:58:09:96: 22:b3:eb:03:a6:7d:39:b8:8b:47:df:61:74:06:3d:65:c5:a7: a7:53:d1:3c:27:63:9a:01:a3:6c:86:aa:d2:e1:c8:b7:db:82: 11:98:4f:d8:1b:18:32:30:41:fd:1f:08:87:78:ad:0b:c3:1e: 93:3f:f3:5f:c9:fc:62:dd:f5:16:65:7c:a9:9b:a5:4a:d9:6e: f0:54:5b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjQwNTMxMDQ0ODM1WhcNMjQwNjA3MDQ0ODM1WjAYMRYwFAYD VQQDEw02NjU5NTZhMy1kMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPljYhW0LBsHtBxr6GTufWvaBnItRkqq+o8beeL2qyBQevvZQ30+1oUiEJ1E 7n3ah7p6hDSxRAGza8F9h1jdpquIoFq46xVRg1u9FRwnf+aiUJBCRocUDyye7nxe 1LF+CfVLGuheXSYhuSzSANtNe0fhftZ9jHZz+y1NF9PjuJgC7RmSbZPVTPDCrdmY nVMcsnGPU1i4URcEfYSgkdPBs02y5Cdn73gnK3td7QMmBzFRQMsQj78hLp63ZQhz FSIEZlLC03KRIaor5gJHDfWEY1qjUgdQDEHRfv8pBWQScSs9hWNArgwbjsxHFK0D fUDu+7EfIVj1H61q4TKZ9KIluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmK1FUC xzOeKXTYhz/vH4ZVtAfNMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvxq3eDDvsPi2bwc3dRLPxCkKUb5zBJW7Lb0lqA1gG2RIo8QGbfsHd Bl8J9VgOp5utMhtYUICS9sjaYP1qCiNGx7JQX1WzYQ9jjqeIQNteEUpoLqNjYG5g qaWjFvs7IurNR9Iy5BwGg2syRa4flA08ajwC7UxqkyddEELy9UIHO3qWpWfq3h2b Xge+Y9gVSB9xt0G3Eg8mfItCRw8wDL4Zuof9dsNk/UJ+sVpUh4WKkGxYCZYis+sD pn05uItH32F0Bj1lxaenU9E8J2OaAaNshqrS4ci324IRmE/YGxgyMEH9HwiHeK0L wx6TP/Nfyfxi3fUWZXypm6VK2W7wVFsk -----END CERTIFICATE-----Generated at Fri May 31 05:53:51 2024 by rpki-client on console-fra.rpki-client.org