$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: bcWvro5R9Wmk6XFfCzGw8jqvDyP436rYM1nkc4HCEt8= Subject key identifier: C5:F1:5E:36:81:BF:E7:2D:A4:8D:8D:04:AB:F5:7E:A8:09:A2:66:00 Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 22B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 2292 Signing time: Fri 31 May 2024 16:20:38 +0000 Manifest this update: Fri 31 May 2024 16:20:38 +0000 Manifest next update: Fri 07 Jun 2024 16:20:38 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: XxTgquUgY461hxPyOueHxoKcy5rzXYCbEQQFUW39qM0=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: 4f0d87mHdJ55WPEhB/LzJCM93K/2MRHd7H56GRmnhow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8882 (0x22b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: May 31 16:20:38 2024 GMT Not After : Jun 7 16:20:38 2024 GMT Subject: CN=6659f8d6-0731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:dc:f9:41:eb:fd:93:bf:76:7f:44:0c:ec: 22:9a:03:d8:d1:46:1a:f4:b4:67:65:ba:51:09:a7: 72:61:41:fb:04:8b:08:7c:36:21:68:0d:a1:91:84: 17:1f:1a:dd:b1:a1:f1:96:53:00:57:0b:45:fe:d7: ed:9e:a0:24:b3:8d:b0:6b:c8:0a:25:17:e4:90:87: c0:ea:ce:f0:03:42:da:f3:f6:1a:dd:80:8e:40:e4: b5:e4:af:a1:97:fa:c2:75:0b:56:a0:48:36:2c:78: a4:3a:fb:86:d7:a0:41:1b:1c:df:b5:06:5b:c9:59: 3c:37:9a:15:be:b3:52:4e:17:85:b2:54:be:cb:6a: 7c:ef:1c:4f:1e:c5:26:93:d8:0e:cc:fa:ba:67:04: 44:2f:dc:74:22:f0:ea:f0:cd:35:c0:47:de:a2:0e: b2:61:fc:c4:25:0d:ed:7e:e6:25:fd:00:e4:e7:d2: cb:a9:21:f9:2c:18:a0:b3:3c:7e:3b:1d:57:6e:3b: 0e:23:db:7f:ec:51:11:a4:c0:81:27:9a:6e:d0:97: d3:81:a2:9d:cf:7e:23:fd:e6:25:e7:87:2c:1f:e9: 8d:5b:f6:ad:5f:94:34:32:02:52:7c:f8:5d:e5:45: 20:f8:4a:90:8a:4c:1a:47:ef:f2:39:56:c8:da:44: 31:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:5E:36:81:BF:E7:2D:A4:8D:8D:04:AB:F5:7E:A8:09:A2:66:00 X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9c:15:30:01:73:b5:2b:35:79:97:19:db:dd:ee:a5:64:fc: 32:db:17:6d:51:f1:ad:09:67:9e:31:cb:ac:cf:32:4c:27:7c: 08:6a:32:d4:d2:24:2a:fc:e2:81:da:48:bf:f4:fa:49:e1:f6: e9:5d:62:7c:b2:58:c1:83:f1:d6:d1:60:1b:3c:2a:8a:4d:99: c1:70:15:c8:12:e5:6e:c4:9b:bc:82:c1:9c:6f:91:f6:90:b7: 22:05:3c:77:52:2b:fa:e5:a3:be:6d:72:38:ce:51:6a:3f:fd: 6d:9b:f4:25:88:68:a9:8e:81:a8:7b:a2:0a:cc:9e:d3:83:f4: 03:d8:ab:77:42:a9:aa:3e:92:61:fe:2d:82:50:a0:35:80:69: 70:80:3f:e7:a9:14:e5:5f:8f:b6:10:bc:0e:91:0a:4e:4e:d1: 6f:9e:54:1c:db:db:67:b3:30:39:40:5d:9b:a5:cf:2d:f5:59: 47:18:b2:ac:b9:33:bc:3e:d3:f2:1c:53:72:5a:bb:81:75:b5: 3c:f1:68:02:8d:cb:19:7d:e1:0f:f1:1a:ac:a6:df:9b:0d:6f: 73:5c:29:e5:04:7f:c3:5f:94:02:e0:8b:a8:3c:8c:3b:80:1f: 1b:fa:94:e9:f4:e4:c7:4b:d5:78:d8:c1:9c:ad:67:9f:a6:1a: 32:ad:1b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjQwNTMxMTYyMDM4WhcNMjQwNjA3MTYyMDM4WjAYMRYwFAYD VQQDEw02NjU5ZjhkNi0wNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrPc+UHr/ZO/dn9EDOwimgPY0UYa9LRnZbpRCadyYUH7BIsIfDYhaA2hkYQX HxrdsaHxllMAVwtF/tftnqAks42wa8gKJRfkkIfA6s7wA0La8/Ya3YCOQOS15K+h l/rCdQtWoEg2LHikOvuG16BBGxzftQZbyVk8N5oVvrNSTheFslS+y2p87xxPHsUm k9gOzPq6ZwREL9x0IvDq8M01wEfeog6yYfzEJQ3tfuYl/QDk59LLqSH5LBigszx+ Ox1XbjsOI9t/7FERpMCBJ5pu0JfTgaKdz34j/eYl54csH+mNW/atX5Q0MgJSfPhd 5UUg+EqQikwaR+/yOVbI2kQxMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXxXjaB v+ctpI2NBKv1fqgJomYAMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxnBUwAXO1KzV5lxnb3e6lZPwy2xdtUfGtCWeeMcuszzJMJ3wIajLU 0iQq/OKB2ki/9PpJ4fbpXWJ8sljBg/HW0WAbPCqKTZnBcBXIEuVuxJu8gsGcb5H2 kLciBTx3Uiv65aO+bXI4zlFqP/1tm/QliGipjoGoe6IKzJ7Tg/QD2Kt3QqmqPpJh /i2CUKA1gGlwgD/nqRTlX4+2ELwOkQpOTtFvnlQc29tnszA5QF2bpc8t9VlHGLKs uTO8PtPyHFNyWruBdbU88WgCjcsZfeEP8Rqspt+bDW9zXCnlBH/DX5QC4IuoPIw7 gB8b+pTp9OTHS9V42MGcrWefphoyrRsF -----END CERTIFICATE-----Generated at Fri May 31 20:34:10 2024 by rpki-client on console-ams.rpki-client.org