$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft File: r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json) Hash identifier: Qtx6MHBcPI9O8OzycQkSkvm/fzCOgpwCP9vUfGrbquA= Subject key identifier: 83:BB:4C:35:87:8E:E6:DB:72:A1:1D:0E:89:05:B4:DF:68:4B:29:51 Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E Certificate issuer: /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft Manifest number: 99 Signing time: Sun 19 May 2024 06:51:47 +0000 Manifest this update: Sun 19 May 2024 06:51:46 +0000 Manifest next update: Sun 26 May 2024 06:51:46 +0000 Files and hashes: 1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: U2k4l1drdabr0uOAFgYD0xxY94g0uI/2fCPr93cd0C0=) 2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: Zg9sWjL3HxN6OW2Qa9iKEyirWmOxGxgL8KGAGSKG/e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Validity Not Before: May 19 06:51:46 2024 GMT Not After : May 26 06:51:46 2024 GMT Subject: CN=6649a182-40a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:ff:1f:9d:59:a1:aa:c7:0f:c4:15:fa:ed: cb:31:79:35:e4:7d:78:ff:d3:24:10:06:46:8b:22: 25:ef:ec:6e:a4:19:2b:2e:bd:cf:3e:aa:68:a7:a9: 69:76:13:4f:87:bf:b9:5e:6a:3c:af:2e:34:fd:66: 10:a2:93:2b:43:0a:6b:4e:b9:df:df:9d:9d:c7:e4: 3c:f9:03:f5:38:b7:18:2f:a2:bc:6e:81:56:55:66: 0d:a4:21:49:70:6d:0a:cd:23:11:65:30:34:44:71: 04:c5:32:35:c1:45:aa:19:4c:21:a7:cc:b4:e6:54: c0:68:49:06:ed:83:36:0f:23:94:d9:bf:c2:66:35: 8e:65:db:ac:33:4e:4f:af:5b:72:7f:a8:6a:bc:c0: 30:a8:c4:b1:f0:e9:6b:48:a0:01:0b:a6:9d:75:34: 58:62:79:40:35:ca:71:45:4d:fe:03:ba:11:69:ef: 28:7b:ed:6d:e5:b3:6d:4e:fc:3b:64:2e:4a:bc:a3: 5c:88:3f:31:d2:af:ce:da:be:f0:f2:b7:ab:44:d3: 8a:08:a1:25:2a:c3:f4:a6:0c:1d:5f:4f:26:13:b7: 08:45:5b:85:5f:fa:5c:83:08:7f:fa:2e:39:44:de: a9:28:ae:48:00:c0:3e:ea:f2:2e:0e:aa:10:19:1a: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BB:4C:35:87:8E:E6:DB:72:A1:1D:0E:89:05:B4:DF:68:4B:29:51 X509v3 Authority Key Identifier: keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:18:71:d7:0a:42:05:f0:ee:bc:f7:82:17:94:dc:ef:4c:86: 05:78:1c:65:1a:ee:71:d3:83:01:1a:b5:0c:c0:5f:bb:16:c6: 6d:d7:e3:78:ec:31:24:56:d2:d6:16:87:32:da:91:5f:5b:5d: 5f:87:47:81:dd:e1:04:61:4a:32:ce:5f:b1:45:05:26:b0:e8: fb:7c:ca:f6:21:bb:12:c1:37:71:f5:f0:22:63:a9:80:57:4e: d2:fe:9c:4b:38:a1:cc:07:7b:f4:5a:4a:6e:6c:68:ae:b8:47: 88:95:b0:68:97:80:2d:99:e8:ad:42:2b:af:63:59:91:b8:24: 2a:6e:f2:37:f4:74:45:fc:2c:0f:dc:2e:6d:e0:bd:dd:f3:41: 83:47:8d:ea:e3:5b:ac:20:51:94:cb:66:86:d6:f0:7e:2f:98: 87:d3:75:4a:8e:04:d3:a3:ab:8d:ac:ff:5a:40:7b:64:9d:b5: 3a:ef:65:25:f9:04:81:07:45:c3:df:45:ed:8f:0d:a3:84:9b: 84:3b:e5:63:9b:32:79:9d:d9:ab:05:05:51:89:6c:d6:d0:09: a1:55:6c:34:04:d0:32:1a:1f:d2:10:83:89:a8:b8:a2:55:5f: 5a:a1:a0:1c:5b:5f:e3:d0:15:b3:49:71:fe:1b:c1:cd:79:f4: b5:58:c7:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2NjMxMTAvBgNVBAUTKEFGQkE0REMxRkE0NTg5MjQ5MDIzMjMxQzZGRUVFM0Y3 QTcxREE0MEUwHhcNMjQwNTE5MDY1MTQ2WhcNMjQwNTI2MDY1MTQ2WjAYMRYwFAYD VQQDEw02NjQ5YTE4Mi00MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrL/H51ZoarHD8QV+u3LMXk15H14/9MkEAZGiyIl7+xupBkrLr3PPqpop6lp dhNPh7+5Xmo8ry40/WYQopMrQwprTrnf352dx+Q8+QP1OLcYL6K8boFWVWYNpCFJ cG0KzSMRZTA0RHEExTI1wUWqGUwhp8y05lTAaEkG7YM2DyOU2b/CZjWOZdusM05P r1tyf6hqvMAwqMSx8OlrSKABC6addTRYYnlANcpxRU3+A7oRae8oe+1t5bNtTvw7 ZC5KvKNciD8x0q/O2r7w8rerRNOKCKElKsP0pgwdX08mE7cIRVuFX/pcgwh/+i45 RN6pKK5IAMA+6vIuDqoQGRot9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIO7TDWH jubbcqEdDokFtN9oSylRMB8GA1UdIwQYMBaAFK+6TcH6RYkkkCMjHG/u4/enHaQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjY2My80RUNGRUI5ODJD RTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlTU1FJeU1jYi03ajk2Y2Rw QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cE53ZnBGaVNTUUl5TWNiLTdqOTZjZHBBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjY2My80RUNGRUI5ODJDRTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlT U1FJeU1jYi03ajk2Y2RwQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPGHHXCkIF8O6894IXlNzvTIYFeBxlGu5x04MBGrUMwF+7FsZt1+N4 7DEkVtLWFocy2pFfW11fh0eB3eEEYUoyzl+xRQUmsOj7fMr2IbsSwTdx9fAiY6mA V07S/pxLOKHMB3v0WkpubGiuuEeIlbBol4AtmeitQiuvY1mRuCQqbvI39HRF/CwP 3C5t4L3d80GDR43q41usIFGUy2aG1vB+L5iH03VKjgTTo6uNrP9aQHtknbU672Ul +QSBB0XD30Xtjw2jhJuEO+VjmzJ5ndmrBQVRiWzW0AmhVWw0BNAyGh/SEIOJqLii VV9aoaAcW1/j0BWzSXH+G8HNefS1WMfl -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org