$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json) Hash identifier: KmEJH/m99yWHKtSQDzkbmSM5s0CkFgwh9ZknpotkBo4= Subject key identifier: 48:D0:C5:59:31:69:DB:D0:8F:16:11:14:29:E7:19:57:AE:31:3E:57 Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft Manifest number: 06D9 Signing time: Sat 18 May 2024 22:55:17 +0000 Manifest this update: Sat 18 May 2024 22:55:16 +0000 Manifest next update: Sat 25 May 2024 22:55:16 +0000 Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: 5qyurM9OIB7XCN2F6SluiTDZBAyzuywMzcl0CuN9vGc=) 2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: i0ClyumlijcNnpqIg/mFC8YJNC7o1oFh981yisGDHQk=) 3: 21EE9510083211EB81509633C4F9AE02.roa (hash: vg+Ii7oQc1BZ9R2S8fRN7vzSzbRm1aysnBDRd/3/X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: May 18 22:55:16 2024 GMT Not After : May 25 22:55:16 2024 GMT Subject: CN=664931d5-af3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:23:2b:66:2a:02:2d:cc:59:93:96:a4:3a:dd: d4:52:bb:dc:64:4b:56:31:ee:87:d7:db:dd:28:74: 9d:60:ce:4c:a0:15:cb:c7:13:8f:95:34:9e:98:4f: 1e:07:42:0f:f3:bb:aa:d4:d9:18:e6:b9:5b:da:2d: 87:8b:88:ad:d7:1e:41:c5:58:b1:85:58:74:9f:7e: 7a:d2:fa:48:a9:23:a5:19:1e:1a:5e:aa:03:12:5e: 5e:b2:66:e2:bd:9b:8a:42:96:3b:99:9b:4f:5e:4f: 6e:b5:47:9c:07:a1:f9:2a:fd:d8:d3:36:50:ff:dd: 39:21:6e:30:c8:26:f5:d5:a9:df:5a:ee:10:41:2e: bd:de:56:bd:31:96:25:c8:b7:9d:4f:c7:5c:74:26: 2c:3c:ff:b1:58:61:e7:2f:dc:c9:b2:59:7b:de:5c: 4b:2a:ee:28:e2:b4:c7:2e:a6:34:be:b0:13:4d:62: 83:70:b0:bd:01:f9:4b:04:1b:04:d4:fc:8a:fd:b9: 4c:6f:55:e7:8c:04:f6:0c:62:eb:72:7c:56:45:cc: 37:07:60:18:76:aa:e7:7e:7a:33:3a:6d:0d:20:4d: 22:c8:af:23:67:dd:cb:b7:83:57:06:42:db:b4:3d: dd:82:a2:6a:8f:10:d5:6e:d0:8c:c6:76:22:b2:9a: a8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D0:C5:59:31:69:DB:D0:8F:16:11:14:29:E7:19:57:AE:31:3E:57 X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:59:0c:94:4a:e6:e6:24:69:16:23:81:fa:08:9a:63:9e:a3: 58:ae:3b:e5:a2:07:8e:97:2a:b2:4f:41:d2:ad:9e:02:08:35: 14:02:33:8e:e0:51:90:dd:2d:bb:44:fd:2e:85:eb:f5:b9:e6: ca:3e:52:90:d5:01:f1:30:9e:6c:1e:ae:43:97:74:b8:dc:27: db:01:42:72:04:20:e6:d3:40:34:23:d6:71:d1:35:76:80:6e: 5e:fc:c6:ee:ef:0a:95:7c:fa:48:5d:7f:ea:32:76:33:58:f6: c5:88:27:6b:3c:ae:80:a0:cf:cc:59:a9:50:61:99:03:01:be: d4:05:39:b1:cb:41:a1:77:76:73:0a:f1:33:28:5c:e5:14:87: d0:40:12:d8:aa:7b:d6:88:db:e5:43:5a:89:03:af:ee:f0:c6: 53:bb:fa:2c:30:a0:4e:94:b9:92:32:73:fd:4e:64:e6:64:a9: 68:8f:92:1b:b3:47:06:34:e1:8b:a0:8f:09:2a:81:10:ce:ce: e6:99:84:eb:5c:36:ef:38:da:68:ae:49:ce:18:5a:b8:fb:ab: 61:4f:5b:34:3a:1a:cb:34:35:a9:cb:23:bc:ac:e6:ec:f7:21: 03:6e:5b:ee:15:9c:45:df:ff:10:73:b1:97:30:4d:d9:f5:4b: 77:ba:c4:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjQwNTE4MjI1NTE2WhcNMjQwNTI1MjI1NTE2WjAYMRYwFAYD VQQDEw02NjQ5MzFkNS1hZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iMrZioCLcxZk5akOt3UUrvcZEtWMe6H19vdKHSdYM5MoBXLxxOPlTSemE8e B0IP87uq1NkY5rlb2i2Hi4it1x5BxVixhVh0n3560vpIqSOlGR4aXqoDEl5esmbi vZuKQpY7mZtPXk9utUecB6H5Kv3Y0zZQ/905IW4wyCb11anfWu4QQS693la9MZYl yLedT8dcdCYsPP+xWGHnL9zJsll73lxLKu4o4rTHLqY0vrATTWKDcLC9AflLBBsE 1PyK/blMb1XnjAT2DGLrcnxWRcw3B2AYdqrnfnozOm0NIE0iyK8jZ93Lt4NXBkLb tD3dgqJqjxDVbtCMxnYispqofQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjQxVkx advQjxYRFCnnGVeuMT5XMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ RzhYNElrRHNrNVR2cXpFWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHWQyUSubmJGkWI4H6CJpjnqNYrjvlogeOlyqyT0HSrZ4CCDUUAjOO 4FGQ3S27RP0uhev1uebKPlKQ1QHxMJ5sHq5Dl3S43CfbAUJyBCDm00A0I9Zx0TV2 gG5e/Mbu7wqVfPpIXX/qMnYzWPbFiCdrPK6AoM/MWalQYZkDAb7UBTmxy0Ghd3Zz CvEzKFzlFIfQQBLYqnvWiNvlQ1qJA6/u8MZTu/osMKBOlLmSMnP9TmTmZKloj5Ib s0cGNOGLoI8JKoEQzs7mmYTrXDbvONporknOGFq4+6thT1s0OhrLNDWpyyO8rObs 9yEDblvuFZxF3/8Qc7GXME3Z9Ut3usRl -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org