$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: G1tuZywWe7fZeLHj8Hgg62CPp5e/e3Q7oSnhhQ+B1Iw= Subject key identifier: 94:DA:6C:AE:18:CE:31:5D:9D:14:EA:73:C0:59:3D:23:CB:20:57:66 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0C20 Signing time: Sat 18 May 2024 18:59:52 +0000 Manifest this update: Sat 18 May 2024 18:59:51 +0000 Manifest next update: Sat 25 May 2024 18:59:51 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: AxPs3tpqplYuVygjxZ7KyFz1fxImTIzlUduVlO5F+BE=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: XbZhqC+SWXG40xObMAPMUMkWbjxQGYlTOkWVpPfPZdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: May 18 18:59:51 2024 GMT Not After : May 25 18:59:51 2024 GMT Subject: CN=6648faa8-d860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:7e:c9:c4:5a:6c:b1:62:79:54:91:c5:98: f6:76:29:c9:b8:17:8a:28:75:82:a6:38:80:6e:7e: 83:50:73:e9:56:44:57:f9:9e:be:2b:01:4d:a0:8b: be:a4:23:68:ef:f0:74:71:71:f5:30:05:00:90:3f: db:85:0b:8a:1e:ce:84:02:8d:5b:61:b5:91:b0:d4: 28:43:59:0e:8e:80:f8:22:1f:ef:81:e8:1d:d7:34: 20:04:fd:17:cc:92:28:07:6c:7f:98:6c:3c:ca:a8: 0e:3b:c2:ab:0b:2d:ef:59:b3:96:06:ca:f8:55:62: 73:9d:e0:21:7c:c4:40:e4:cd:24:1b:ac:60:cc:eb: 66:82:f9:61:f9:f5:10:5a:91:4e:bc:63:f2:29:b5: 0d:f1:4a:d0:8f:ff:06:ac:6e:ae:7f:58:f1:ed:68: ad:5c:03:e8:ad:c9:a4:1a:a3:e1:a5:04:b2:f7:0b: 60:42:b1:26:eb:33:f3:3d:4c:5f:80:17:46:de:e9: 31:4d:9c:d4:b3:2d:44:6b:45:6f:35:bb:55:5c:ea: f1:8e:8c:83:bf:8e:d2:18:a4:86:aa:6e:dc:68:2a: fd:e6:7b:b1:d1:e6:78:cc:d7:84:49:bf:f0:9e:59: dc:cf:ff:94:79:ce:8f:e2:4c:b4:55:31:e4:d0:40: c4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DA:6C:AE:18:CE:31:5D:9D:14:EA:73:C0:59:3D:23:CB:20:57:66 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3f:cc:bb:9c:8a:c0:43:64:a5:59:34:f6:b6:c5:f7:76:4c: 10:56:40:a4:96:01:78:e9:80:dd:23:2d:d5:8f:22:24:95:16: 06:0d:2f:62:2a:60:fb:9d:29:fc:33:37:27:b6:39:ad:3c:9c: 1d:e2:7d:ae:0c:57:cc:3e:ad:18:bb:27:8d:02:cc:fa:61:03: 9b:95:44:4e:3f:4e:26:82:b5:e9:c8:85:25:2f:b7:2b:f6:ff: 3b:42:2a:a7:e0:31:2c:b9:87:66:73:6c:e4:44:f4:30:51:c9: 5e:02:e9:3c:ae:a6:56:36:76:d3:ed:7e:c0:ca:2a:21:07:62: b3:85:f0:eb:2e:93:f9:a4:32:b9:14:a6:95:9f:40:54:ac:b5: cf:c6:8b:35:9f:af:73:b4:6e:02:74:24:21:4c:b3:8c:94:7c: 07:7c:20:db:38:5b:cd:de:b2:ed:0e:90:2c:71:0f:b1:73:3c: e5:87:0f:bb:09:d1:30:51:d0:9b:68:17:47:66:bd:c6:08:16: 9d:42:f4:b5:ca:ee:31:b4:bf:1e:8d:b0:01:74:c7:af:83:78: c7:15:32:7b:3b:4f:07:28:e4:12:08:27:13:2c:4b:e8:80:d2: 35:85:70:ea:70:f7:c2:78:f1:29:e6:d3:a2:a6:6b:e8:72:d2: 36:6a:13:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjQwNTE4MTg1OTUxWhcNMjQwNTI1MTg1OTUxWjAYMRYwFAYD VQQDEw02NjQ4ZmFhOC1kODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHN+ycRabLFieVSRxZj2dinJuBeKKHWCpjiAbn6DUHPpVkRX+Z6+KwFNoIu+ pCNo7/B0cXH1MAUAkD/bhQuKHs6EAo1bYbWRsNQoQ1kOjoD4Ih/vgegd1zQgBP0X zJIoB2x/mGw8yqgOO8KrCy3vWbOWBsr4VWJzneAhfMRA5M0kG6xgzOtmgvlh+fUQ WpFOvGPyKbUN8UrQj/8GrG6uf1jx7WitXAPorcmkGqPhpQSy9wtgQrEm6zPzPUxf gBdG3ukxTZzUsy1Ea0VvNbtVXOrxjoyDv47SGKSGqm7caCr95nux0eZ4zNeESb/w nlncz/+Uec6P4ky0VTHk0EDE3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTabK4Y zjFdnRTqc8BZPSPLIFdmMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARP8y7nIrAQ2SlWTT2tsX3dkwQVkCklgF46YDdIy3VjyIklRYGDS9i KmD7nSn8MzcntjmtPJwd4n2uDFfMPq0YuyeNAsz6YQOblUROP04mgrXpyIUlL7cr 9v87Qiqn4DEsuYdmc2zkRPQwUcleAuk8rqZWNnbT7X7AyiohB2KzhfDrLpP5pDK5 FKaVn0BUrLXPxos1n69ztG4CdCQhTLOMlHwHfCDbOFvN3rLtDpAscQ+xczzlhw+7 CdEwUdCbaBdHZr3GCBadQvS1yu4xtL8ejbABdMevg3jHFTJ7O08HKOQSCCcTLEvo gNI1hXDqcPfCePEp5tOipmvoctI2ahMA -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org