$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft File: rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json) Hash identifier: ghBIVIQDcaFr7VhAbuK1ajNFsunUSTHQk3mPQOmgizk= Subject key identifier: 20:29:28:8F:24:0B:58:84:CB:A5:50:76:06:C1:C7:F7:72:CA:B3:A6 Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft Manifest number: 01BF Signing time: Sun 19 May 2024 04:29:08 +0000 Manifest this update: Sun 19 May 2024 04:29:08 +0000 Manifest next update: Sun 26 May 2024 04:29:08 +0000 Files and hashes: 1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: VG/8WyhmJGLXKQrZZAbf3yV0LEmaT6wrZUXh4hJD/4U=) 2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: 7MYe95Dg9StTC8B6i+6IlKmaEnZaWeos8v9u3t+jNTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: May 19 04:29:08 2024 GMT Not After : May 26 04:29:08 2024 GMT Subject: CN=66498014-0c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:cc:60:24:24:b0:08:53:30:92:bd:ba:99: 33:3c:af:fd:93:7b:37:22:27:54:7b:25:3f:d6:a9: ba:83:9b:82:7c:e4:e9:44:a8:b6:8f:45:8b:09:7b: ef:4c:f5:c8:23:c7:22:a1:ea:e8:74:4f:a4:3d:72: a7:0c:7b:14:bb:c6:e0:8f:20:e0:bf:f9:0e:a5:45: a7:5a:11:8b:d4:5e:bb:8b:68:6c:59:49:49:97:d9: 5d:ba:57:5b:47:30:b3:13:12:e6:1a:74:2a:8f:5c: 73:3d:8b:25:5f:85:d3:e3:75:37:d7:7e:fa:91:5b: e3:e5:66:3d:8a:e3:4d:49:bf:10:d4:cd:32:07:8b: db:96:9a:fa:f9:0b:81:ec:f5:dc:0a:7c:27:1f:bd: 06:41:e7:c9:82:00:b7:b8:44:c2:66:0d:ae:c7:63: 98:b1:8f:7d:36:56:e9:f1:3c:ea:b1:57:82:32:96: 71:55:3d:5d:fd:e2:d4:13:86:66:3f:08:9c:4e:1c: a9:f6:81:f2:cb:de:2e:88:92:2a:3e:56:65:23:6d: e5:d2:a3:53:05:0a:cb:8b:ef:35:9a:40:d5:38:49: 52:11:fe:d2:98:d5:e7:b0:48:8c:48:4f:44:8a:d2: ff:63:1e:75:69:55:46:f2:d3:e1:9c:f1:f1:c2:52: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:29:28:8F:24:0B:58:84:CB:A5:50:76:06:C1:C7:F7:72:CA:B3:A6 X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:24:82:34:ad:76:6c:4c:95:5f:03:b3:3c:d4:0a:b4:f5:10: 91:ff:32:32:fd:06:36:e2:4d:71:0c:71:d7:54:1d:c6:f4:81: 1d:0d:c9:3f:6a:b8:f0:ef:06:67:2d:36:e5:53:f3:85:ae:15: 04:1a:a1:f5:f2:48:b7:5b:07:5c:55:d6:80:76:05:f9:33:12: 7c:53:91:4c:b5:ec:d1:b2:11:1d:36:85:67:41:aa:84:34:9d: 6d:80:e4:a5:8f:f3:70:ba:5a:f5:fb:a1:07:5e:3a:42:45:da: 49:b5:9a:be:ab:ff:73:dd:29:30:54:b6:da:23:31:07:0d:fd: b8:b0:aa:c1:c2:c9:d6:75:f3:04:90:8c:d8:29:e3:18:56:bc: 04:73:41:8e:1f:1f:80:19:31:6d:ba:ef:8a:52:ab:2f:1d:9d: 0c:68:93:59:24:15:58:13:25:7e:a8:0f:72:9d:b7:1f:94:b6: 59:10:ed:80:70:05:ee:3a:20:9b:57:2a:33:9f:28:82:e1:63: 63:a1:72:9d:62:1a:68:a0:47:cd:e5:b5:40:e4:d5:6a:66:bc: 6e:d3:3a:04:83:bd:dc:11:6a:1b:9f:3d:31:b7:71:95:69:9b: 07:33:31:24:3d:3b:e3:90:4f:99:db:c1:f0:5a:e5:cd:b0:d1: cb:a8:2a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjQwNTE5MDQyOTA4WhcNMjQwNTI2MDQyOTA4WjAYMRYwFAYD VQQDEw02NjQ5ODAxNC0wYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kfMYCQksAhTMJK9upkzPK/9k3s3IidUeyU/1qm6g5uCfOTpRKi2j0WLCXvv TPXII8cioerodE+kPXKnDHsUu8bgjyDgv/kOpUWnWhGL1F67i2hsWUlJl9lduldb RzCzExLmGnQqj1xzPYslX4XT43U31376kVvj5WY9iuNNSb8Q1M0yB4vblpr6+QuB 7PXcCnwnH70GQefJggC3uETCZg2ux2OYsY99Nlbp8TzqsVeCMpZxVT1d/eLUE4Zm PwicThyp9oHyy94uiJIqPlZlI23l0qNTBQrLi+81mkDVOElSEf7SmNXnsEiMSE9E itL/Yx51aVVG8tPhnPHxwlL1WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCApKI8k C1iEy6VQdgbBx/dyyrOmMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1JII0rXZsTJVfA7M81Aq09RCR/zIy/QY24k1xDHHXVB3G9IEdDck/ arjw7wZnLTblU/OFrhUEGqH18ki3WwdcVdaAdgX5MxJ8U5FMtezRshEdNoVnQaqE NJ1tgOSlj/Nwulr1+6EHXjpCRdpJtZq+q/9z3SkwVLbaIzEHDf24sKrBwsnWdfME kIzYKeMYVrwEc0GOHx+AGTFtuu+KUqsvHZ0MaJNZJBVYEyV+qA9ynbcflLZZEO2A cAXuOiCbVyoznyiC4WNjoXKdYhpooEfN5bVA5NVqZrxu0zoEg73cEWobnz0xt3GV aZsHMzEkPTvjkE+Z28HwWuXNsNHLqCqV -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org