$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: nzdKwtPv0rhawawxqpSkkSptYCOBebcvwZPkQ4rnlDg= Subject key identifier: D0:FE:35:3B:D1:82:43:EA:AA:96:68:16:0E:F5:4B:92:75:8B:B0:E5 Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 070B Signing time: Tue 30 Apr 2024 23:02:42 +0000 Manifest this update: Tue 30 Apr 2024 23:02:41 +0000 Manifest next update: Tue 07 May 2024 23:02:41 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: q9emCFDsKP5Fv7mFkLRi4drwKlv573+BeVKD1MaOMKs=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: bd4/8uksSz0JPVe0/MP4TV4QuwgHbxYqvp3g/9deP6E=) 3: 71050646F8BC11EA9EC9436CC4F9AE02.roa (hash: KuhIgGBj2jsGq33j4lnaL5AFce4+FbJJH8r5VaY7uT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Apr 30 23:02:41 2024 GMT Not After : May 7 23:02:41 2024 GMT Subject: CN=66317891-2c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:a0:a1:3d:83:c2:42:04:26:f5:25:ec:a2: 8b:5f:d7:7b:e1:67:08:7d:18:57:93:fa:dc:89:a9: c5:8c:a4:c6:fa:78:b6:3c:9f:99:d9:78:ad:4d:90: ae:04:e3:81:29:70:ee:e4:84:eb:ed:1a:1f:98:96: 73:c6:91:cc:1e:c0:6c:e4:2d:cf:5b:69:73:a2:d8: af:5d:49:fa:37:f5:0c:6a:f1:a6:50:0d:2f:95:08: 04:1d:9f:b9:39:bb:75:ab:1d:b3:ae:c7:e9:8d:b9: 3e:60:56:04:6c:02:ca:37:ba:cb:8b:72:fd:87:8d: da:dc:6b:0f:55:57:27:6c:8e:9c:9a:5a:54:54:72: a4:41:3c:91:51:82:be:54:92:73:95:80:f3:64:e9: 88:3c:99:36:ee:53:c2:db:ba:e0:10:cb:9c:c3:23: 9e:8f:4d:8e:c4:27:55:75:f9:6a:6a:bc:30:06:f0: 8e:73:f2:de:81:55:a3:eb:60:6e:1a:53:8b:0c:a9: 3a:d0:a6:c8:b8:8d:bf:69:ea:73:d2:a4:87:47:3c: f2:73:e6:61:0a:42:d6:36:5f:2b:5a:94:ce:87:d1: f6:93:60:47:9b:85:4e:82:94:20:4f:14:f1:85:cd: 92:64:45:f0:17:a9:0a:71:5a:49:d2:6d:17:16:f5: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FE:35:3B:D1:82:43:EA:AA:96:68:16:0E:F5:4B:92:75:8B:B0:E5 X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ca:33:64:d2:96:35:aa:00:a9:de:83:ac:56:d6:0b:15:e6: 4a:73:8e:65:e4:99:9d:94:3c:f2:c6:5e:96:3f:88:40:36:6c: 4b:49:b5:58:80:c4:45:78:92:c3:a8:74:e9:c6:1a:38:a5:f1: eb:bb:ac:78:4d:31:11:1f:c7:de:41:cd:5b:8a:23:c5:90:9c: 9b:fc:f5:59:27:6b:e9:14:0f:87:cd:84:a4:8d:86:ad:ee:83: fe:56:54:a7:38:3b:56:af:8f:67:01:a3:80:2f:fa:ab:b2:4a: 20:6d:c2:b6:c4:74:22:13:29:50:30:c9:2a:ae:99:35:23:a0: 47:29:63:fc:ba:b4:3d:1f:6a:a4:bb:33:60:05:64:f0:ef:a0: 97:59:a2:e0:87:6e:15:14:3b:93:29:61:96:96:80:de:fd:6b: d9:a1:30:92:0d:c8:7f:7c:f0:bb:5b:c5:39:7b:a7:54:f9:d8: da:b9:80:e1:c0:23:6e:f6:eb:48:25:94:44:85:1a:04:a5:46: 3c:6e:8e:97:5d:48:26:f6:61:e2:76:60:9a:0b:18:ec:82:a2: 6c:48:3c:fd:bc:16:6b:72:32:3b:e8:43:83:85:ed:db:e6:90: a7:61:f2:9f:2c:73:24:a1:58:9c:30:a2:9b:04:bc:b5:24:4c: 82:8e:b5:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjQwNDMwMjMwMjQxWhcNMjQwNTA3MjMwMjQxWjAYMRYwFAYD VQQDEw02NjMxNzg5MS0yYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kigoT2DwkIEJvUl7KKLX9d74WcIfRhXk/rcianFjKTG+ni2PJ+Z2XitTZCu BOOBKXDu5ITr7RofmJZzxpHMHsBs5C3PW2lzotivXUn6N/UMavGmUA0vlQgEHZ+5 Obt1qx2zrsfpjbk+YFYEbALKN7rLi3L9h43a3GsPVVcnbI6cmlpUVHKkQTyRUYK+ VJJzlYDzZOmIPJk27lPC27rgEMucwyOej02OxCdVdflqarwwBvCOc/LegVWj62Bu GlOLDKk60KbIuI2/aepz0qSHRzzyc+ZhCkLWNl8rWpTOh9H2k2BHm4VOgpQgTxTx hc2SZEXwF6kKcVpJ0m0XFvU7hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFND+NTvR gkPqqpZoFg71S5J1i7DlMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1yjNk0pY1qgCp3oOsVtYLFeZKc45l5JmdlDzyxl6WP4hANmxLSbVY gMRFeJLDqHTpxho4pfHru6x4TTERH8feQc1biiPFkJyb/PVZJ2vpFA+HzYSkjYat 7oP+VlSnODtWr49nAaOAL/qrskogbcK2xHQiEylQMMkqrpk1I6BHKWP8urQ9H2qk uzNgBWTw76CXWaLgh24VFDuTKWGWloDe/WvZoTCSDch/fPC7W8U5e6dU+djauYDh wCNu9utIJZREhRoEpUY8bo6XXUgm9mHidmCaCxjsgqJsSDz9vBZrcjI76EODhe3b 5pCnYfKfLHMkoVicMKKbBLy1JEyCjrVD -----END CERTIFICATE-----Generated at Tue Apr 30 23:52:28 2024 by rpki-client on console-ams.rpki-client.org