$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: ey/fnPlHYvFJjKsxlCdLv3hmXt9BlorgqoEU9N8oDbE= Subject key identifier: 53:80:4A:5A:0F:F4:76:67:67:F5:96:86:7F:F9:32:03:E9:D7:C5:72 Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: 6A Signing time: Sun 19 May 2024 07:32:46 +0000 Manifest this update: Sun 19 May 2024 07:32:45 +0000 Manifest next update: Sun 26 May 2024 07:32:45 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: MoeDX0hX4mTyfiH2fvcL1FI8P6i+NJWSsO8q9tBOlpc=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: iXfC933F5qXNmETSjvIrjbzXpKOAbyO+/gWWUW8vo2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: May 19 07:32:45 2024 GMT Not After : May 26 07:32:45 2024 GMT Subject: CN=6649ab1d-d966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:33:9a:c2:08:10:e6:52:94:d0:53:e5:d0: c6:00:66:ed:83:3f:26:db:44:ee:81:d2:29:f2:5b: ba:45:04:d9:6c:fb:73:73:42:5a:91:7c:a3:f1:a4: 56:ee:f6:13:0f:95:26:e7:08:e1:ab:6a:a4:2d:ca: 64:dc:9e:5b:7c:2c:55:0d:76:7f:fe:c3:e7:1a:a7: 0e:c6:f0:8a:18:72:6b:29:79:26:ff:4a:ff:21:79: 89:3b:e5:b2:2a:f9:12:27:b1:56:2c:1c:d8:07:38: 8f:b2:0c:3a:64:b8:ae:6c:5f:1d:89:dd:1c:e0:4f: bb:8e:a1:84:15:65:1a:0d:ec:e0:3f:0d:af:46:a9: 4e:8c:9e:67:6c:ed:fb:50:ec:65:c0:32:68:b0:fa: 09:84:54:ce:08:76:80:63:16:c7:da:7b:d7:56:99: 13:53:b7:83:38:6d:f1:ef:9a:14:14:12:2d:db:ea: 4f:88:9f:41:0d:1a:f0:f7:11:51:94:b9:24:1c:d5: 73:0d:66:fe:b4:98:7f:a0:f8:53:ad:73:57:d5:4e: 16:00:a4:97:25:f2:eb:a0:dd:b8:b3:13:f7:c4:82: a1:84:56:1b:e5:35:fb:dc:70:11:15:d0:04:74:88: 46:e8:27:9a:4a:f0:34:4e:09:7b:ad:c7:7c:23:e6: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:80:4A:5A:0F:F4:76:67:67:F5:96:86:7F:F9:32:03:E9:D7:C5:72 X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:93:d3:5a:e5:ae:df:e3:9f:13:36:25:68:6d:8f:a8:44:bd: 76:0b:96:eb:67:67:bc:4f:cf:e6:c0:5f:4b:65:d5:85:37:1c: c7:8d:84:2c:44:61:53:14:7e:e3:67:8e:eb:90:25:c7:2c:da: 82:57:05:8f:9b:78:44:aa:0a:12:12:68:28:9d:3e:dd:9b:26: 70:8a:0a:bc:88:28:48:37:18:95:2d:6c:e6:4b:e4:7b:55:97: 45:be:8a:1e:e3:6c:a3:15:3b:10:fd:59:85:b7:0c:99:3f:1d: bc:3b:95:e0:cc:80:5f:90:a8:ec:d4:5f:96:d9:22:16:d1:3f: 76:47:10:e7:9a:98:39:8d:8e:dc:a8:35:53:8e:48:8a:4a:fa: 77:fa:87:fe:97:57:07:73:30:9e:6e:65:9c:bd:05:d5:d6:b0: 49:23:d4:df:bb:b5:3c:a2:61:50:c0:89:69:b3:8e:ec:db:38: d3:fc:8b:e5:92:ff:a5:2e:b1:e5:1b:85:9c:63:96:37:f4:c2: 28:59:b0:2c:ce:db:b7:ee:8d:4e:b3:50:0f:ba:b9:f0:9c:64: 9d:a5:a8:dd:ee:90:c7:af:bc:cd:23:20:d7:df:2d:c1:51:1c: bc:0d:2b:0d:9d:f4:39:83:cd:57:33:b5:0f:b8:87:68:ab:f9: ff:ab:c0:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTlBNDExMC8GA1UEBRMoMjBCRDNGN0Y5OThFRDQzRDVGQzRGODYyOUREMEMxODhF QzdEREFFMDAeFw0yNDA1MTkwNzMyNDVaFw0yNDA1MjYwNzMyNDVaMBgxFjAUBgNV BAMTDTY2NDlhYjFkLWQ5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+iTOawggQ5lKU0FPl0MYAZu2DPybbRO6B0inyW7pFBNls+3NzQlqRfKPxpFbu 9hMPlSbnCOGraqQtymTcnlt8LFUNdn/+w+capw7G8IoYcmspeSb/Sv8heYk75bIq +RInsVYsHNgHOI+yDDpkuK5sXx2J3RzgT7uOoYQVZRoN7OA/Da9GqU6Mnmds7ftQ 7GXAMmiw+gmEVM4IdoBjFsfae9dWmRNTt4M4bfHvmhQUEi3b6k+In0ENGvD3EVGU uSQc1XMNZv60mH+g+FOtc1fVThYApJcl8uug3bizE/fEgqGEVhvlNfvccBEV0AR0 iEboJ5pK8DROCXutx3wj5s2nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU4BKWg/0 dmdn9ZaGf/kyA+nXxXIwHwYDVR0jBBgwFoAUIL0/f5mO1D1fxPhindDBiOx92uAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOUE0LzBENURDNTI0NzMw MjExRUVCNUNDQzI0NEM0RjlBRTAyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSUwwX2Y1bU8xRDFmeFBoaW5kREJpT3g5MnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OUE0LzBENURDNTI0NzMwMjExRUVCNUNDQzI0NEM0RjlBRTAyL0lMMF9mNW1PMUQx ZnhQaGluZERCaU94OTJ1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADyT01rlrt/jnxM2JWhtj6hEvXYLlutnZ7xPz+bAX0tl1YU3HMeNhCxE YVMUfuNnjuuQJccs2oJXBY+beESqChISaCidPt2bJnCKCryIKEg3GJUtbOZL5HtV l0W+ih7jbKMVOxD9WYW3DJk/Hbw7leDMgF+QqOzUX5bZIhbRP3ZHEOeamDmNjtyo NVOOSIpK+nf6h/6XVwdzMJ5uZZy9BdXWsEkj1N+7tTyiYVDAiWmzjuzbONP8i+WS /6UuseUbhZxjljf0wihZsCzO27fujU6zUA+6ufCcZJ2lqN3ukMevvM0jINffLcFR HLwNKw2d9DmDzVcztQ+4h2ir+f+rwHk= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org