$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: KL5IHLyiALnr96lpsWqXPDOg0ZRbJOG40fPnhD4XPso= Subject key identifier: 14:39:86:E3:2E:34:BE:2C:7B:0E:05:9C:24:97:38:59:73:FE:DC:C4 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 0133 Signing time: Sun 19 May 2024 05:04:40 +0000 Manifest this update: Sun 19 May 2024 05:04:40 +0000 Manifest next update: Sun 26 May 2024 05:04:40 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: 52OC3KU2Es+wIaF48S33bP0jjQ9IcDJ4JxDk3/g/8ts=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: PmfbaoHvU/qXLbta2paypuXbKvL6PMIjEc6Ef19DWCE=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: CVJKmajOEqiUUSBkudExAdBPL7vUeTji19yjsLM2lHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: May 19 05:04:40 2024 GMT Not After : May 26 05:04:40 2024 GMT Subject: CN=66498868-d134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:43:9e:a3:d0:b3:6d:0b:70:ee:bb:2d:91: dc:09:c1:97:f0:98:a0:41:dc:1d:d7:c0:2d:c3:32: 20:c9:e1:34:04:88:00:fb:b5:05:29:25:5a:eb:fb: 0d:f6:04:84:61:4b:f7:58:f4:4d:ad:c9:23:43:af: c3:9d:16:57:6d:3e:ba:1f:48:6f:92:30:a5:a9:a7: dd:34:90:9a:da:83:85:8f:27:f1:24:be:43:a7:c7: aa:a3:05:8e:85:fd:87:25:0b:29:5b:83:3a:c4:d2: f1:fb:08:51:f2:65:7f:7a:2d:01:37:4f:96:e2:8a: 85:c8:30:73:79:f3:c5:6d:3f:13:9c:7d:b6:93:ce: 7b:c1:dd:e8:00:64:15:0f:9f:70:44:fc:75:33:e0: b5:d0:e2:79:91:34:70:74:ff:84:8e:fa:15:70:11: 9d:cd:c2:e3:65:50:e4:1c:30:05:22:55:2b:2f:ab: 27:77:d8:3c:69:45:20:8a:28:d7:93:e2:2a:04:1b: 43:60:01:df:66:87:ce:c0:a4:08:07:d8:22:64:cd: 25:18:c7:42:0e:64:e7:f2:bb:17:d9:9a:b1:f4:7e: 02:83:fd:32:db:28:d2:23:da:9b:cf:1f:b6:b1:31: 92:82:c3:bf:8c:f3:ee:00:08:bf:29:a5:c7:38:9a: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:39:86:E3:2E:34:BE:2C:7B:0E:05:9C:24:97:38:59:73:FE:DC:C4 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c3:ea:62:1e:da:d4:10:f2:8a:d3:05:ab:9e:25:8d:61:fa: 97:96:b8:9b:2b:9d:12:b3:b0:b5:b0:00:64:e7:51:87:5a:fb: d5:a9:8e:65:03:84:6e:36:62:56:31:d2:0e:7a:61:86:c6:ea: 41:04:a1:32:bc:2b:f3:de:68:b8:c9:0a:f4:49:30:dd:d2:b3: bf:3c:9c:4e:c8:66:4e:5a:98:de:e2:89:b9:29:3f:64:73:ee: 45:f8:af:63:6e:2d:6d:6d:af:5f:1c:b0:7f:86:8c:4e:69:ad: 5d:9f:27:c3:63:ad:0a:0b:de:ac:c4:36:ae:c1:d7:93:82:82: fb:37:0b:3d:f2:69:ac:c3:7f:48:91:a9:65:32:fc:d9:ac:61: c2:82:79:8b:19:cd:01:50:d7:82:8e:91:85:11:54:79:40:39: 2f:eb:18:8c:ed:c7:e0:2b:21:bf:db:23:d7:da:bf:d4:a2:ea: 4c:49:27:7f:89:21:38:0f:93:fc:c2:f2:f5:d2:ee:dc:be:72: 97:d6:3a:e0:db:46:c8:9a:43:1a:82:3b:69:af:31:2a:5e:ea: eb:08:04:43:b8:3d:54:34:f4:3e:27:22:70:2a:ec:f1:4e:d7: 33:16:2f:90:c3:8b:fe:7d:0d:b2:ec:ec:71:81:59:3e:07:b4: c3:a4:39:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjQwNTE5MDUwNDQwWhcNMjQwNTI2MDUwNDQwWjAYMRYwFAYD VQQDEw02NjQ5ODg2OC1kMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwRDnqPQs20LcO67LZHcCcGX8JigQdwd18AtwzIgyeE0BIgA+7UFKSVa6/sN 9gSEYUv3WPRNrckjQ6/DnRZXbT66H0hvkjClqafdNJCa2oOFjyfxJL5Dp8eqowWO hf2HJQspW4M6xNLx+whR8mV/ei0BN0+W4oqFyDBzefPFbT8TnH22k857wd3oAGQV D59wRPx1M+C10OJ5kTRwdP+EjvoVcBGdzcLjZVDkHDAFIlUrL6snd9g8aUUgiijX k+IqBBtDYAHfZofOwKQIB9giZM0lGMdCDmTn8rsX2Zqx9H4Cg/0y2yjSI9qbzx+2 sTGSgsO/jPPuAAi/KaXHOJr/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ5huMu NL4sew4FnCSXOFlz/tzEMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcw+piHtrUEPKK0wWrniWNYfqXlribK50Ss7C1sABk51GHWvvVqY5l A4RuNmJWMdIOemGGxupBBKEyvCvz3mi4yQr0STDd0rO/PJxOyGZOWpje4om5KT9k c+5F+K9jbi1tba9fHLB/hoxOaa1dnyfDY60KC96sxDauwdeTgoL7Nws98mmsw39I kallMvzZrGHCgnmLGc0BUNeCjpGFEVR5QDkv6xiM7cfgKyG/2yPX2r/UoupMSSd/ iSE4D5P8wvL10u7cvnKX1jrg20bImkMagjtprzEqXurrCARDuD1UNPQ+JyJwKuzx TtczFi+Qw4v+fQ2y7OxxgVk+B7TDpDlv -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org