$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: CZvzR1XkaImj6G2GCGzqG7vhSWcmIvLa97AMhtfJYLw= Subject key identifier: 7A:0F:77:66:74:52:42:BC:B7:2B:23:E8:BF:4F:FE:57:43:02:E6:93 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1259 Signing time: Sat 18 May 2024 17:39:50 +0000 Manifest this update: Sat 18 May 2024 17:39:50 +0000 Manifest next update: Sat 25 May 2024 17:39:50 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: Tb+QK0Mz6G9zN1orOhd88rPkSPEbi0B0aSIgZHNSuOA=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: Ai9962mG9CfH4Up1uRkcnN8BqOS0dn7/PxJB7iHyLMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4706 (0x1262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: May 18 17:39:50 2024 GMT Not After : May 25 17:39:50 2024 GMT Subject: CN=6648e7e6-9c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:cc:1b:c8:19:22:7c:a9:50:6b:ac:50:0b: e9:94:71:8f:67:7d:9c:cc:2a:fa:ac:b1:79:f1:1a: 1c:4b:81:c3:18:5e:fa:c6:98:f0:5d:f8:87:31:20: 2a:c6:17:3f:69:d7:bb:d3:fe:24:5e:b9:f1:99:a9: 5b:cb:09:e5:58:fe:cf:e8:e8:6a:f9:4a:88:1b:80: 4a:83:c2:fd:53:e1:5a:96:b9:35:4f:54:65:f8:ef: b0:39:05:24:01:55:f1:64:f6:57:c0:e7:83:6d:6e: 4f:55:16:ad:59:1d:50:1a:35:5b:ce:a2:4d:87:05: 7d:ed:37:98:95:6b:c4:3d:b9:83:8d:dc:4c:6e:01: aa:bd:2f:d8:2e:fc:c2:14:1a:6d:5c:41:ac:00:cb: 26:91:5c:67:04:84:9b:45:05:17:19:19:44:cd:22: 7b:4b:21:ad:78:bd:8c:49:8c:9a:e8:fd:0a:84:c8: cc:e3:6d:d4:f3:7d:40:15:6f:e5:cb:24:0a:53:da: bb:38:cc:3b:a6:61:be:cd:41:08:2a:fb:aa:f0:1b: 91:ec:c3:7e:cc:ac:58:f9:b3:fc:db:47:18:c9:60: 46:fa:e7:a5:19:6f:16:90:ed:1b:02:d5:40:97:fb: 69:9f:df:52:33:e0:f0:ab:8e:77:86:dc:0d:41:d7: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:77:66:74:52:42:BC:B7:2B:23:E8:BF:4F:FE:57:43:02:E6:93 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:8b:60:8c:3c:85:0d:a5:13:b9:4f:02:b8:13:7c:d5:db:4f: 7b:83:20:67:3a:f5:90:4f:da:3b:80:e0:e1:47:eb:f7:c6:d9: 8d:9e:f4:36:5f:b2:ee:46:6b:66:f0:02:ad:b7:5b:6f:3d:02: f1:74:20:35:8b:03:cd:50:dd:36:3b:bb:45:3f:11:cd:fe:c5: 27:97:b1:ca:b7:47:2b:28:ae:66:8d:02:7a:68:95:b7:7e:35: 25:b0:b3:8c:9f:5f:89:8d:d2:c3:ea:08:77:39:8d:d3:4f:cd: 60:a1:30:9b:91:f4:d4:78:30:69:9a:c9:40:1a:fe:e0:cf:48: 28:3f:9a:c5:be:34:4c:20:1a:59:46:48:1c:5f:ad:6c:1d:e0: fa:de:7b:62:f0:d9:aa:66:2b:db:b4:b3:41:e8:40:72:50:8f: 0d:16:53:78:c0:71:7e:99:fc:35:59:1d:c2:58:60:61:07:b5: 2f:9e:b2:01:49:a9:0d:99:de:85:0d:43:fe:11:21:9e:f4:05: 96:22:a1:dc:df:8d:fd:2e:b6:33:fb:62:94:be:b4:b9:dd:90: 57:02:2c:01:c0:b5:2a:3e:3b:04:09:93:bc:3a:eb:9c:40:e0: 83:16:54:80:9e:68:c0:dd:11:22:c7:15:b5:39:bd:1b:14:ae: 6c:25:6b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjQwNTE4MTczOTUwWhcNMjQwNTI1MTczOTUwWjAYMRYwFAYD VQQDEw02NjQ4ZTdlNi05YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+DMG8gZInypUGusUAvplHGPZ32czCr6rLF58RocS4HDGF76xpjwXfiHMSAq xhc/ade70/4kXrnxmalbywnlWP7P6Ohq+UqIG4BKg8L9U+Falrk1T1Rl+O+wOQUk AVXxZPZXwOeDbW5PVRatWR1QGjVbzqJNhwV97TeYlWvEPbmDjdxMbgGqvS/YLvzC FBptXEGsAMsmkVxnBISbRQUXGRlEzSJ7SyGteL2MSYya6P0KhMjM423U831AFW/l yyQKU9q7OMw7pmG+zUEIKvuq8BuR7MN+zKxY+bP820cYyWBG+uelGW8WkO0bAtVA l/tpn99SM+Dwq453htwNQdeDZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoPd2Z0 UkK8tysj6L9P/ldDAuaTMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxi2CMPIUNpRO5TwK4E3zV2097gyBnOvWQT9o7gODhR+v3xtmNnvQ2 X7LuRmtm8AKtt1tvPQLxdCA1iwPNUN02O7tFPxHN/sUnl7HKt0crKK5mjQJ6aJW3 fjUlsLOMn1+JjdLD6gh3OY3TT81goTCbkfTUeDBpmslAGv7gz0goP5rFvjRMIBpZ RkgcX61sHeD63nti8NmqZivbtLNB6EByUI8NFlN4wHF+mfw1WR3CWGBhB7UvnrIB SakNmd6FDUP+ESGe9AWWIqHc3439LrYz+2KUvrS53ZBXAiwBwLUqPjsECZO8Ouuc QOCDFlSAnmjA3REixxW1Ob0bFK5sJWuw -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org