$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json) Hash identifier: TToWThqn+DQkdKnAhBg0Fhm2Osud+CrW+2eT72Oy58s= Subject key identifier: 39:A5:8F:4A:99:79:C0:4D:9C:BC:D3:39:9E:64:CC:9C:51:9E:47:A6 Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Certificate serial: 33DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft Manifest number: 33CF Signing time: Sat 18 May 2024 15:16:34 +0000 Manifest this update: Sat 18 May 2024 15:16:34 +0000 Manifest next update: Sat 25 May 2024 15:16:34 +0000 Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: OvNNM5KK7byH0DYjzN01zcLXG2TjO9VfMkPuKIY1JDw=) 2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: p1DcZCxxWxT83QfiSUFdOLnaWHBTsUqO24QETQRc+8c=) 3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: 5kZEntap8SxUFuL31LpZ9/fO4biC2dX7IAv5FNiMlp4=) 4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: SwJ2X1A9A5qXtXFAHQ6Zd6q3zF72hT+xMRuLRWt1XKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13278 (0x33de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Validity Not Before: May 18 15:16:34 2024 GMT Not After : May 25 15:16:34 2024 GMT Subject: CN=6648c652-7f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:55:83:6e:1f:70:f0:e2:9a:cb:ca:64:65: 08:1b:72:70:d0:9d:ed:41:30:83:55:3f:61:85:f9: f2:45:e1:1b:a2:ae:b4:dd:b3:06:72:5e:69:fa:8f: ab:8a:2d:bc:b8:68:8e:88:42:d6:be:3f:c6:85:95: 2e:c5:5b:b5:b6:11:8e:0c:6b:e7:c6:5b:e5:9b:ad: ff:e4:d3:18:f4:0b:2b:6d:0e:d3:31:f5:6b:f9:69: 63:c6:0e:c0:c4:ce:9e:57:6b:50:b0:fb:19:2f:5b: ca:0e:3f:be:a7:2b:69:2d:48:5f:3e:5c:b0:c7:b6: 4a:40:1c:52:27:60:bb:3e:3f:71:b2:02:43:e4:b5: d1:4f:77:1e:e7:1b:81:07:f1:55:fe:21:e7:0e:c4: ac:e0:e6:aa:b0:a6:59:86:6f:41:5c:75:8a:cb:1a: 22:ea:dd:48:ae:3c:46:72:45:cf:82:b9:a1:2e:58: cc:ba:20:8e:f9:31:b4:ab:46:58:06:d8:c6:6a:1b: 6a:14:89:92:c6:75:5d:21:c5:50:d6:26:34:0f:e7: d1:56:74:b4:7c:4b:98:77:b6:af:1d:7c:ae:28:29: f7:59:eb:0e:2e:16:c3:44:af:8b:a0:cb:b4:bc:27: 34:bc:2d:5a:8a:9f:28:6e:06:6e:c6:de:6a:75:27: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A5:8F:4A:99:79:C0:4D:9C:BC:D3:39:9E:64:CC:9C:51:9E:47:A6 X509v3 Authority Key Identifier: keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:97:fc:ed:c3:d2:45:39:83:9a:76:19:6f:91:59:82:11:85: af:42:88:64:00:54:e4:c5:0c:41:32:26:6b:94:a3:6f:5f:44: 2d:cf:b8:67:cc:63:31:19:7a:a7:4f:97:72:34:e9:49:ec:74: c3:25:f8:fb:64:81:5b:b4:f5:ec:62:e5:6b:40:e5:b7:02:38: f9:be:73:e9:ae:a7:98:7a:0a:f6:e6:6d:2b:19:12:54:62:42: cf:a7:d5:db:4b:71:f1:98:d7:68:f1:db:e4:ce:cc:a4:65:b5: 1f:f4:76:ad:81:d8:23:c3:84:e2:36:e6:a4:be:ae:2b:aa:bb: 99:ad:27:6e:ff:b1:57:07:de:63:8b:08:4a:d1:be:fe:c8:f8: 69:4c:51:e8:7e:d1:53:0c:48:f8:bd:6a:a9:51:2a:27:77:ca: ac:d0:30:e2:10:07:aa:f7:ce:d9:e6:c4:5d:9a:bb:a6:a5:6e: fb:99:25:e6:3c:56:19:15:d3:2a:8f:9c:7d:8f:27:4f:1e:74: 06:f9:cd:46:b7:1e:51:5d:a9:4f:15:1b:df:17:a7:5b:45:02: 76:34:e7:23:7a:33:33:20:d4:ae:36:e4:ca:cf:03:35:54:6b: 55:d3:c0:33:35:f0:ff:4d:d6:e4:43:09:05:86:4b:16:9c:d1: c3:97:7d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz MTE4NTgwMEIwHhcNMjQwNTE4MTUxNjM0WhcNMjQwNTI1MTUxNjM0WjAYMRYwFAYD VQQDEw02NjQ4YzY1Mi03ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwABVg24fcPDimsvKZGUIG3Jw0J3tQTCDVT9hhfnyReEboq603bMGcl5p+o+r ii28uGiOiELWvj/GhZUuxVu1thGODGvnxlvlm63/5NMY9AsrbQ7TMfVr+Wljxg7A xM6eV2tQsPsZL1vKDj++pytpLUhfPlywx7ZKQBxSJ2C7Pj9xsgJD5LXRT3ce5xuB B/FV/iHnDsSs4OaqsKZZhm9BXHWKyxoi6t1IrjxGckXPgrmhLljMuiCO+TG0q0ZY BtjGahtqFImSxnVdIcVQ1iY0D+fRVnS0fEuYd7avHXyuKCn3WesOLhbDRK+LoMu0 vCc0vC1aip8obgZuxt5qdSdvGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmlj0qZ ecBNnLzTOZ5kzJxRnkemMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ UVNLV19ycHM1dGd4R0ZnQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtl/ztw9JFOYOadhlvkVmCEYWvQohkAFTkxQxBMiZrlKNvX0Qtz7hn zGMxGXqnT5dyNOlJ7HTDJfj7ZIFbtPXsYuVrQOW3Ajj5vnPprqeYegr25m0rGRJU YkLPp9XbS3HxmNdo8dvkzsykZbUf9Hatgdgjw4TiNuakvq4rqruZrSdu/7FXB95j iwhK0b7+yPhpTFHoftFTDEj4vWqpUSond8qs0DDiEAeq987Z5sRdmrumpW77mSXm PFYZFdMqj5x9jydPHnQG+c1Gtx5RXalPFRvfF6dbRQJ2NOcjejMzINSuNuTKzwM1 VGtV08AzNfD/TdbkQwkFhksWnNHDl315 -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org