$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: ZGemy8gTfYeiyED1zQsUcp2xccamlS/Y05Hm4c1y9PQ= Subject key identifier: CD:92:0B:A6:55:16:77:76:79:70:9E:CC:BB:88:56:86:5C:62:25:3D Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 7D Signing time: Sun 19 May 2024 07:17:50 +0000 Manifest this update: Sun 19 May 2024 07:17:49 +0000 Manifest next update: Sun 26 May 2024 07:17:49 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: cuHOhggd/IPXSXt7CU38IsvMpHe5PNcGB96XKAexlHc=) 2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: 2kS0OWTGFXukQK/9Cb/H9mnSUIUYEGmhm7BUDWiVisg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: May 19 07:17:49 2024 GMT Not After : May 26 07:17:49 2024 GMT Subject: CN=6649a79d-de58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:49:de:4a:c5:0a:f0:b1:07:ce:b8:6d:34: 8f:9b:4f:1d:f6:41:14:9b:d4:c9:99:0e:52:f9:55: 1b:b4:75:fa:1d:24:af:e5:50:80:53:44:14:1d:f6: f8:d6:5d:92:b7:bc:ef:31:72:b6:67:48:14:62:7d: 7c:eb:f7:dc:6a:cf:77:65:9e:09:bc:33:e6:16:46: 5b:21:af:f5:d8:a0:50:b1:0b:27:fd:32:a1:78:78: 84:c3:59:eb:87:c3:8f:31:0e:0b:c0:c6:15:42:b5: e5:5e:11:c4:79:7e:57:6b:0f:d2:fc:f1:a7:81:a9: 51:1d:27:a5:99:b6:06:9e:c9:51:a3:9b:74:a3:5d: 0a:1a:fd:f5:df:1b:bf:7d:bb:b8:03:36:a5:44:37: 81:b3:39:ef:89:9e:4b:5a:85:5f:e7:4b:3e:7c:81: 47:9f:3a:9c:38:3a:44:24:a8:ce:f1:8a:1a:eb:17: 34:ab:c0:00:ef:af:4b:b3:d2:a1:b9:15:6d:a8:5c: 99:2b:73:50:fb:6f:fc:95:36:e8:81:4f:ee:f5:ab: cc:43:bc:48:b9:9b:9f:11:05:42:25:3b:48:a7:dc: 26:89:3c:23:07:2d:96:55:00:b2:cd:8b:70:89:5f: c2:13:bb:10:ec:d3:1f:c1:31:4f:7e:68:3e:47:56: 01:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:0B:A6:55:16:77:76:79:70:9E:CC:BB:88:56:86:5C:62:25:3D X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:0f:83:03:a2:3a:00:c2:72:4f:44:f2:03:db:30:30:33:ca: 02:58:2e:e6:d9:a8:c2:b2:0f:ea:29:4a:72:1f:e0:7c:77:d8: 92:40:8b:0c:03:e5:af:93:69:92:b5:bd:e5:67:0e:01:c4:66: f7:06:69:9a:76:77:37:74:6b:26:ce:9c:53:d4:7e:dc:bb:db: 4b:70:c3:02:31:3e:31:3e:e4:3c:b7:e7:40:ca:88:53:68:cc: d8:74:7c:ef:08:c6:6a:2c:ab:29:3e:27:3c:6a:da:e4:c2:56: fc:8d:f2:55:76:2a:80:e9:02:b9:e6:f5:c4:29:fa:b4:07:8b: 0a:03:18:cf:9a:c2:c5:14:aa:e1:5b:ff:b3:9c:74:1f:b0:0d: 3a:15:7f:1d:10:de:33:14:67:0e:c3:96:ae:47:8d:50:94:26: 2e:ed:4e:69:87:71:6e:5a:fd:a2:db:0f:42:03:4e:f4:df:b2: 74:f6:75:a4:4d:b5:6d:11:ba:61:18:cb:20:ef:56:c8:cf:a6: bf:15:e0:8c:b6:e6:0f:4b:3e:1a:93:1b:1e:94:4f:1a:9a:58: df:58:15:ab:82:1d:bc:32:89:bc:2d:84:70:a0:62:99:95:67: 2b:4d:53:22:e8:b5:44:26:f8:28:50:a6:10:74:57:31:b7:f7: 0a:36:60:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDc1MzExMC8GA1UEBRMoREFENzhDQUMzNkQxNDNGMTc0QUJFMTEyRDQ5NUVENUEw NkVDQTc0MDAeFw0yNDA1MTkwNzE3NDlaFw0yNDA1MjYwNzE3NDlaMBgxFjAUBgNV BAMTDTY2NDlhNzlkLWRlNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg60neSsUK8LEHzrhtNI+bTx32QRSb1MmZDlL5VRu0dfodJK/lUIBTRBQd9vjW XZK3vO8xcrZnSBRifXzr99xqz3dlngm8M+YWRlshr/XYoFCxCyf9MqF4eITDWeuH w48xDgvAxhVCteVeEcR5fldrD9L88aeBqVEdJ6WZtgaeyVGjm3SjXQoa/fXfG799 u7gDNqVEN4GzOe+JnktahV/nSz58gUefOpw4OkQkqM7xihrrFzSrwADvr0uz0qG5 FW2oXJkrc1D7b/yVNuiBT+71q8xDvEi5m58RBUIlO0in3CaJPCMHLZZVALLNi3CJ X8ITuxDs0x/BMU9+aD5HVgHHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzZILplUW d3Z5cJ7Mu4hWhlxiJT0wHwYDVR0jBBgwFoAU2teMrDbRQ/F0q+ES1JXtWgbsp0Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwNzUzLzhFRjI0QTEyNUI2 RDExRUVCQzc5NjMyNUM0RjlBRTAyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3Aw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnRlTXJEYlJRX0YwcS1FUzFKWHRXZ2JzcDBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw NzUzLzhFRjI0QTEyNUI2RDExRUVCQzc5NjMyNUM0RjlBRTAyLzJ0ZU1yRGJSUV9G MHEtRVMxSlh0V2dic3AwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKUPgwOiOgDCck9E8gPbMDAzygJYLubZqMKyD+opSnIf4Hx32JJAiwwD 5a+TaZK1veVnDgHEZvcGaZp2dzd0aybOnFPUfty720twwwIxPjE+5Dy350DKiFNo zNh0fO8Ixmosqyk+Jzxq2uTCVvyN8lV2KoDpArnm9cQp+rQHiwoDGM+awsUUquFb /7OcdB+wDToVfx0Q3jMUZw7Dlq5HjVCUJi7tTmmHcW5a/aLbD0IDTvTfsnT2daRN tW0RumEYyyDvVsjPpr8V4Iy25g9LPhqTGx6UTxqaWN9YFauCHbwyibwthHCgYpmV ZytNUyLotUQm+ChQphB0VzG39wo2YEI= -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org