$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: 3kFWQPcwoabpDS3bUzBQKlRmvXTYgjFcYHUZGsnVGuA= Subject key identifier: 17:31:50:25:0D:49:BA:F6:65:9C:13:7F:B6:2F:81:9E:61:43:93:61 Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 0352 Signing time: Sun 19 May 2024 02:53:41 +0000 Manifest this update: Sun 19 May 2024 02:53:40 +0000 Manifest next update: Sun 26 May 2024 02:53:40 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: brH7WBRp0z1FZhYfGQf2Eo+S+p1DOdFrBbKYjxv9QQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: May 19 02:53:40 2024 GMT Not After : May 26 02:53:40 2024 GMT Subject: CN=664969b5-19c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:aa:84:75:0c:ec:99:57:3f:1f:84:e9:43: e3:a4:7a:1f:be:0c:cf:0a:48:c6:37:ca:67:6d:99: 86:c9:23:41:c0:32:ba:39:ea:88:ab:26:1c:ee:bf: b8:50:44:44:4d:14:a1:e1:98:18:5f:33:4b:7b:54: 3a:42:f3:25:72:2b:95:14:0b:b5:9e:3d:9a:53:9e: 99:09:a1:2a:08:f6:37:14:bb:f2:ae:58:27:5d:07: 48:7c:94:c7:11:6b:ab:43:25:9e:df:1e:d8:b4:a5: 91:57:7c:96:95:30:c6:41:d7:06:21:65:2e:74:32: cf:7f:74:79:4f:cd:de:3a:37:14:86:5e:8a:38:72: 56:04:8c:f4:89:f1:62:5f:3f:51:90:aa:55:c5:a8: 0b:e5:fd:6a:e8:a8:49:6d:48:15:7a:0a:b5:f6:23: 52:84:9f:c6:61:02:7c:16:b7:95:55:7e:0c:f7:f5: 14:44:75:10:7c:eb:05:54:64:ec:ff:44:e5:14:9a: 69:b5:ec:90:ac:96:6b:a9:f8:e6:ea:dc:89:f2:aa: be:fd:b2:ff:6b:8d:83:5f:bd:57:ca:4c:b5:0e:99: 6b:7a:c5:96:12:f9:d3:4f:51:22:7b:4c:8e:11:62: 98:7e:88:dc:b1:9b:96:bc:18:88:f3:5e:17:8d:db: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:31:50:25:0D:49:BA:F6:65:9C:13:7F:B6:2F:81:9E:61:43:93:61 X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c6:9b:e9:da:d1:18:93:db:81:89:9b:f2:82:bc:b0:88:f2: 61:1d:d0:b0:94:76:82:d4:43:77:f2:cf:9e:65:05:35:c1:31: ae:c7:8c:3d:27:11:2c:5f:e5:af:c4:d9:73:42:5d:04:f7:47: 82:0b:33:6d:d3:9e:e8:33:16:82:b3:77:ec:20:24:5a:c7:e5: 28:2c:71:82:c4:89:ab:aa:ba:92:9d:a8:b5:9e:a6:a9:86:e4: a9:56:10:89:15:16:d1:31:a3:38:87:a7:5c:f7:79:ec:39:01: 72:fe:e0:0d:49:0c:32:04:5c:91:ef:1f:f6:b9:8c:d4:43:25: e9:18:ad:16:ed:be:0c:a1:1d:7d:76:65:54:8e:ef:9d:a6:c1: 64:e7:a8:26:30:3a:19:ac:5e:25:83:02:be:f1:ef:31:26:45: d8:92:7b:a0:12:5c:9b:b8:c3:87:6e:76:89:69:2b:5a:92:12: a3:b1:a4:3b:92:02:8a:09:a2:71:97:80:ec:a8:6c:12:e3:65: 99:7e:38:04:78:d5:bb:05:31:70:7d:c6:5f:dd:f3:de:78:eb: ea:0d:f6:4e:11:bb:9f:d1:ad:05:a7:54:20:ac:98:35:69:60: ff:53:3e:1e:17:e9:b1:a1:51:90:80:c9:99:8f:16:ac:a1:bb: b8:0b:bf:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjQwNTE5MDI1MzQwWhcNMjQwNTI2MDI1MzQwWjAYMRYwFAYD VQQDEw02NjQ5NjliNS0xOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzOqhHUM7JlXPx+E6UPjpHofvgzPCkjGN8pnbZmGySNBwDK6OeqIqyYc7r+4 UERETRSh4ZgYXzNLe1Q6QvMlciuVFAu1nj2aU56ZCaEqCPY3FLvyrlgnXQdIfJTH EWurQyWe3x7YtKWRV3yWlTDGQdcGIWUudDLPf3R5T83eOjcUhl6KOHJWBIz0ifFi Xz9RkKpVxagL5f1q6KhJbUgVegq19iNShJ/GYQJ8FreVVX4M9/UURHUQfOsFVGTs /0TlFJppteyQrJZrqfjm6tyJ8qq+/bL/a42DX71Xyky1DplresWWEvnTT1Eie0yO EWKYfojcsZuWvBiI814XjdsGgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcxUCUN Sbr2ZZwTf7YvgZ5hQ5NhMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnxpvp2tEYk9uBiZvygrywiPJhHdCwlHaC1EN38s+eZQU1wTGux4w9 JxEsX+WvxNlzQl0E90eCCzNt057oMxaCs3fsICRax+UoLHGCxImrqrqSnai1nqap huSpVhCJFRbRMaM4h6dc93nsOQFy/uANSQwyBFyR7x/2uYzUQyXpGK0W7b4MoR19 dmVUju+dpsFk56gmMDoZrF4lgwK+8e8xJkXYknugElybuMOHbnaJaStakhKjsaQ7 kgKKCaJxl4DsqGwS42WZfjgEeNW7BTFwfcZf3fPeeOvqDfZOEbuf0a0Fp1QgrJg1 aWD/Uz4eF+mxoVGQgMmZjxasobu4C7/Y -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org