$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: igR0nQG/a7FUTpZ3baTvQ7xPTlJfwMoeWhGulu7m5PM= Subject key identifier: 2D:5F:11:96:AD:A3:41:56:26:5F:C4:62:ED:67:CA:48:04:00:F8:AA Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 052F Signing time: Sun 05 May 2024 01:07:42 +0000 Manifest this update: Sun 05 May 2024 01:07:42 +0000 Manifest next update: Sun 12 May 2024 01:07:42 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: jwA80/lq726O2BPwyzqxRBXjMdPsWvZ2dtKmTQHQLRA=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: XOMUO0jWAovTKb5iTxELptx/mbrH0GNMhGdtxbgO81I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: May 5 01:07:42 2024 GMT Not After : May 12 01:07:42 2024 GMT Subject: CN=6636dbde-f762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:72:b8:84:0a:f3:45:f3:dd:46:aa:0d:3d: 2b:72:b4:60:b5:d2:4f:dd:c6:26:83:7e:a7:70:01: 09:f5:ad:1b:84:57:ae:cd:1f:0b:a1:68:b5:bb:56: 1b:d1:fb:de:44:aa:7d:85:16:c3:eb:8c:c0:d0:dd: b4:e2:ce:9a:d6:86:58:06:78:bf:5d:d7:9b:64:3f: 40:95:37:24:c5:93:fa:da:33:a6:38:93:fa:49:f4: 89:bc:2a:5b:10:49:d8:80:1e:b1:ac:79:8c:a6:67: 9a:dc:d3:f3:36:1a:96:b0:a3:e1:1d:08:0f:a5:f0: 4c:dd:4c:4a:bf:5a:2f:63:59:f5:bd:7a:38:53:aa: b5:51:55:d7:ff:0b:8c:6a:72:0f:62:22:86:2f:82: be:a6:c5:b8:c7:be:1f:5e:55:54:79:db:bf:75:56: b4:48:b5:79:86:7a:35:83:89:9b:ae:71:9d:04:d8: ea:8f:6a:1e:9c:13:b7:c7:2b:4f:18:a0:64:eb:d5: 3a:52:0b:ac:9f:96:91:ba:d7:82:e7:e3:70:3f:b2: f5:32:bb:50:ed:cc:64:c2:cd:2c:8f:92:4a:0a:76: e4:4c:f1:c0:a4:91:0c:16:25:3d:e6:82:e3:9f:8a: ac:a6:f3:8e:a1:98:70:cc:64:e2:32:1e:3f:62:de: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5F:11:96:AD:A3:41:56:26:5F:C4:62:ED:67:CA:48:04:00:F8:AA X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7c:b2:9c:13:74:6a:e2:6b:75:10:90:2d:55:a2:5b:ca:61: 14:6d:06:23:47:2f:84:05:39:36:58:d0:a9:60:14:de:ec:70: f1:a2:39:87:b8:6a:99:3a:f2:a4:55:bd:71:98:11:f3:48:7b: 8b:75:31:d7:0f:1c:4d:f5:87:37:c7:ec:cd:b3:92:81:c7:6e: 20:e8:3f:ba:2c:02:79:db:57:b0:1e:4d:52:b7:a4:d3:af:4f: 57:8b:39:10:4e:91:f7:9e:f3:9b:74:c9:ae:43:2b:31:da:20: e0:b2:fb:9d:48:b1:77:a7:6b:c9:9e:b7:38:fe:dd:c9:89:91: 6a:be:79:41:54:1e:0f:89:7e:6d:13:0c:83:0d:71:3d:70:2f: 80:66:63:b3:56:08:9e:8f:70:e5:d5:54:e2:39:d1:e8:75:f0: b4:41:47:b9:63:c0:31:7c:44:34:27:e3:02:0f:f7:1f:eb:cf: ca:90:89:6a:95:d4:0a:e8:13:0e:7c:87:20:6e:bc:a4:16:3a: 0d:70:b5:5b:a9:6d:b2:de:2f:19:82:32:95:e0:76:2d:99:8a: ae:12:05:ea:5a:ee:0c:31:55:6e:da:63:24:36:7d:99:7c:7b: fd:44:f2:ee:ef:76:51:93:a9:c8:bb:cc:79:56:04:53:cf:d4: 29:96:05:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjQwNTA1MDEwNzQyWhcNMjQwNTEyMDEwNzQyWjAYMRYwFAYD VQQDEw02NjM2ZGJkZS1mNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzlyuIQK80Xz3UaqDT0rcrRgtdJP3cYmg36ncAEJ9a0bhFeuzR8LoWi1u1Yb 0fveRKp9hRbD64zA0N204s6a1oZYBni/XdebZD9AlTckxZP62jOmOJP6SfSJvCpb EEnYgB6xrHmMpmea3NPzNhqWsKPhHQgPpfBM3UxKv1ovY1n1vXo4U6q1UVXX/wuM anIPYiKGL4K+psW4x74fXlVUedu/dVa0SLV5hno1g4mbrnGdBNjqj2oenBO3xytP GKBk69U6Ugusn5aRuteC5+NwP7L1MrtQ7cxkws0sj5JKCnbkTPHApJEMFiU95oLj n4qspvOOoZhwzGTiMh4/Yt5/OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1fEZat o0FWJl/EYu1nykgEAPiqMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCifLKcE3Rq4mt1EJAtVaJbymEUbQYjRy+EBTk2WNCpYBTe7HDxojmH uGqZOvKkVb1xmBHzSHuLdTHXDxxN9Yc3x+zNs5KBx24g6D+6LAJ521ewHk1St6TT r09XizkQTpH3nvObdMmuQysx2iDgsvudSLF3p2vJnrc4/t3JiZFqvnlBVB4PiX5t EwyDDXE9cC+AZmOzVgiej3Dl1VTiOdHodfC0QUe5Y8AxfEQ0J+MCD/cf68/KkIlq ldQK6BMOfIcgbrykFjoNcLVbqW2y3i8ZgjKV4HYtmYquEgXqWu4MMVVu2mMkNn2Z fHv9RPLu73ZRk6nIu8x5VgRTz9QplgXM -----END CERTIFICATE-----Generated at Sun May 5 02:33:33 2024 by rpki-client on console-fra.rpki-client.org