$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json) Hash identifier: 1sTsAeebPLvMuR+vYm9GM5yineavn0sjrOzn+t9W4GA= Subject key identifier: A3:5F:A4:EA:24:0F:15:DE:F0:6E:F0:73:0D:CA:7E:91:91:95:A5:5D Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft Manifest number: 03E9 Signing time: Sun 19 May 2024 02:18:24 +0000 Manifest this update: Sun 19 May 2024 02:18:23 +0000 Manifest next update: Sun 26 May 2024 02:18:23 +0000 Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: o1wintKwjbpvHhOwbyR6tm5DzXBxQYoycHA5Xt87jOk=) 2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: xl0aXkUgSLZq37PZDGAWLTViCdCRJjkFnawxrIhMCz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Validity Not Before: May 19 02:18:23 2024 GMT Not After : May 26 02:18:23 2024 GMT Subject: CN=66496170-0438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2f:f3:0d:38:ad:ce:3f:08:10:26:c8:79:b2: f1:a9:82:4a:39:a1:70:41:3a:bd:fd:f5:63:bb:cb: b8:b4:17:c8:94:4b:b5:96:f0:47:50:f6:c4:75:a9: 1c:a2:46:f7:dc:a8:af:bc:7a:c7:a1:85:6b:53:79: 38:4d:1e:d2:43:6b:be:b1:f4:db:f5:d8:c7:3c:08: 66:3a:4f:61:d0:34:34:78:aa:22:68:4f:4b:16:a5: 96:68:cc:d7:78:ce:3c:f1:7c:e8:c8:44:da:08:9c: 06:a7:5c:b7:38:38:e3:e4:e7:6f:ab:cc:e0:92:fb: 15:db:81:61:19:b6:30:78:9d:d2:23:90:c9:f7:de: 29:a4:ac:de:17:b9:7e:9f:92:20:de:3b:f4:6b:8d: 2b:b6:01:66:d0:8d:4e:5a:ce:12:d2:80:db:67:99: 60:25:b0:86:42:55:44:d0:b9:7e:28:01:88:7b:8b: 37:c7:e9:14:3b:a3:9e:a2:db:71:70:c8:08:ca:39: eb:f5:5d:ad:de:cc:74:b4:89:2d:da:27:2f:e8:e7: a3:4c:2b:3b:64:4c:68:3d:30:3e:6f:e0:aa:6a:b4: b7:78:8e:a4:50:7e:08:19:60:e9:77:85:b6:e0:05: 85:c9:9b:b3:ff:7d:a9:8f:47:9e:fd:a6:2e:c0:01: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5F:A4:EA:24:0F:15:DE:F0:6E:F0:73:0D:CA:7E:91:91:95:A5:5D X509v3 Authority Key Identifier: keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:38:20:09:eb:2f:d3:07:1e:62:5e:45:94:dd:6b:49:76:b5: 03:c7:f3:da:81:68:4a:a4:62:8c:54:55:50:d0:a6:d4:82:3e: cf:e5:d6:b9:af:41:9a:5c:5b:9d:de:83:e8:1a:01:c9:0d:f6: 3f:cf:35:7d:69:91:fb:e9:f0:fe:6a:26:5b:22:7f:02:66:05: 84:05:da:0b:da:74:3e:3a:21:b9:59:ab:8f:42:cc:27:80:9c: 50:ed:0f:5c:28:d6:1b:1e:57:c9:5f:5e:2c:0f:c1:66:13:2d: c2:87:7b:c0:9b:80:9a:58:04:59:13:7f:13:d4:01:10:f9:0d: cf:f7:ca:4a:c0:95:d2:10:93:d4:a3:15:48:e6:ca:79:72:5a: 60:f6:69:5a:d2:d6:91:5b:7a:2f:96:67:57:da:0c:48:00:aa: 64:84:2c:5b:ca:e9:7c:f7:c4:8f:ae:06:36:56:0f:ac:2e:6a: ae:c6:85:7f:1f:62:4b:05:a5:0d:06:c2:d3:a4:6a:47:d7:d4: 2e:67:6f:22:4f:51:89:79:d7:91:99:81:ac:0c:86:4e:2a:ea: 7b:13:27:07:88:51:76:48:60:94:90:10:3f:c9:8c:fa:8c:5d: 3c:86:e3:11:e3:6a:f8:c6:a7:2f:ed:0d:5e:4b:17:e9:21:a5: eb:e1:fd:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NDAxMTAvBgNVBAUTKEM0MkExOEMyQjdCNzI1MUYyNTA2RjVGQTI3OEExNjJF ODQ0NDREQTYwHhcNMjQwNTE5MDIxODIzWhcNMjQwNTI2MDIxODIzWjAYMRYwFAYD VQQDEw02NjQ5NjE3MC0wNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9C/zDTitzj8IECbIebLxqYJKOaFwQTq9/fVju8u4tBfIlEu1lvBHUPbEdakc okb33KivvHrHoYVrU3k4TR7SQ2u+sfTb9djHPAhmOk9h0DQ0eKoiaE9LFqWWaMzX eM488XzoyETaCJwGp1y3ODjj5Odvq8zgkvsV24FhGbYweJ3SI5DJ994ppKzeF7l+ n5Ig3jv0a40rtgFm0I1OWs4S0oDbZ5lgJbCGQlVE0Ll+KAGIe4s3x+kUO6Oeottx cMgIyjnr9V2t3sx0tIkt2icv6OejTCs7ZExoPTA+b+CqarS3eI6kUH4IGWDpd4W2 4AWFyZuz/32pj0ee/aYuwAHkhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNfpOok DxXe8G7wcw3KfpGRlaVdMB8GA1UdIwQYMBaAFMQqGMK3tyUfJQb1+ieKFi6ERE2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc0MC9GM0E3MTlERTMy MzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pSOGxCdlg2SjRvV0xvUkVU YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDb1l3cmUzSlI4bEJ2WDZKNG9XTG9SRVRhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc0MC9GM0E3MTlERTMyMzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pS OGxCdlg2SjRvV0xvUkVUYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbOCAJ6y/TBx5iXkWU3WtJdrUDx/PagWhKpGKMVFVQ0KbUgj7P5da5 r0GaXFud3oPoGgHJDfY/zzV9aZH76fD+aiZbIn8CZgWEBdoL2nQ+OiG5WauPQswn gJxQ7Q9cKNYbHlfJX14sD8FmEy3Ch3vAm4CaWARZE38T1AEQ+Q3P98pKwJXSEJPU oxVI5sp5clpg9mla0taRW3ovlmdX2gxIAKpkhCxbyul898SPrgY2Vg+sLmquxoV/ H2JLBaUNBsLTpGpH19QuZ28iT1GJedeRmYGsDIZOKup7EycHiFF2SGCUkBA/yYz6 jF08huMR42r4xqcv7Q1eSxfpIaXr4f1I -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org