$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft File: wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json) Hash identifier: m5RwVh1mUq3ammBwfLT8Bx7L7VhRZm+H6DQTJLMMeIs= Subject key identifier: F7:77:54:74:A0:50:81:C5:57:4D:2F:5A:92:FA:94:EA:54:C3:86:B9 Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft Manifest number: 07D4 Signing time: Tue 30 Apr 2024 22:22:06 +0000 Manifest this update: Tue 30 Apr 2024 22:22:06 +0000 Manifest next update: Tue 07 May 2024 22:22:06 +0000 Files and hashes: 1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: pzFQmw0ekLXEOsPVsCSFWag2KnSyRRP4Xs7VqWjD9PM=) 2: AE735F98E19D11ECA439802EC4F9AE02.roa (hash: SJu2RSsSvRcV4Mk1Y5p1dw2RdAYsWxBHDyxjfEHTENo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Validity Not Before: Apr 30 22:22:06 2024 GMT Not After : May 7 22:22:06 2024 GMT Subject: CN=66316f0e-2a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:1a:55:4b:45:71:84:4f:89:c1:33:49:d3: b8:e8:3f:c5:79:7f:9e:77:17:59:ab:b6:10:7a:7f: 09:c3:31:10:6c:39:cc:a1:42:db:76:40:d1:b0:dd: ed:bc:7e:80:b9:36:97:2d:2f:ce:15:76:11:43:6c: b0:07:41:f6:24:ff:53:7b:d8:22:d6:62:b3:5e:b1: d5:44:bc:96:76:8c:dd:74:58:1d:a0:2a:2c:4e:c9: b6:b1:3d:ef:91:c3:bd:f0:4b:86:49:9c:7f:33:cd: 19:24:bc:4b:ae:a8:a6:74:c3:50:c0:3e:6c:8b:83: c1:90:1e:2d:a7:03:44:2d:b9:7b:7e:21:4d:e7:66: a4:a4:95:4f:b5:e8:99:de:3d:b0:2f:ea:97:d0:84: 5b:4f:cc:a1:7c:69:d4:ea:04:97:22:74:71:d6:52: 86:12:f9:d6:4a:9a:68:02:12:71:ef:3c:3d:d0:57: 66:26:9c:29:d5:ff:98:9a:5e:fd:e9:67:c8:d8:75: 92:fe:3b:08:b0:83:a6:5b:e0:c4:0f:73:4e:46:64: b5:cc:8f:d1:cc:db:0e:f1:64:39:d7:47:0b:e3:e2: ff:9c:29:b4:03:03:8e:a4:71:f1:4f:80:83:95:b6: 19:a7:6b:d7:21:72:ec:df:33:f7:74:04:0d:3c:e9: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:77:54:74:A0:50:81:C5:57:4D:2F:5A:92:FA:94:EA:54:C3:86:B9 X509v3 Authority Key Identifier: keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e7:60:b2:cd:6f:30:02:c7:9e:76:3e:66:cc:f6:e6:86:a3: ce:fa:46:9d:9b:ff:fb:df:89:77:06:1d:67:a2:9a:ca:cb:c9: d8:8b:b1:9f:2e:40:c1:32:6c:8f:36:66:7e:1a:60:7e:05:49: f4:77:b7:85:16:56:23:95:6b:7a:8c:f2:0b:74:00:76:bb:c2: 5c:72:b4:d6:da:72:59:3d:7c:23:f9:e9:b5:cd:61:af:32:be: 2e:3d:91:81:86:7b:55:1d:eb:ac:87:4d:2a:7b:ec:ee:6d:5d: 97:7e:4f:1f:90:6d:78:12:b4:8f:16:92:2e:36:e0:af:70:38: 29:75:a2:86:0b:3f:8a:18:30:36:27:6a:9e:f9:10:bf:06:bc: b7:69:29:d6:12:9b:a3:54:70:73:e3:b7:92:7a:18:7c:ed:ab: 5f:7e:d6:48:3e:6b:4c:b8:d1:e4:83:79:35:b4:ec:26:27:fb: 06:01:70:52:1d:e7:44:9a:11:8c:23:71:e9:60:0d:22:e9:5c: cd:02:5c:eb:bc:8f:e5:46:1c:cb:3c:b7:78:65:41:f5:bf:77: 64:a0:46:53:49:fe:e3:ea:cc:0f:ad:23:8d:f7:33:d6:d4:e9: 41:18:57:a1:37:ae:d7:8b:5a:1f:d1:29:94:2f:b9:ab:77:1f: 67:2f:56:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKEMwMzA1NkY2ODA5OTY0N0FGNzU4NUU1M0Y2QTk4RUNG RjNEOTg4REYwHhcNMjQwNDMwMjIyMjA2WhcNMjQwNTA3MjIyMjA2WjAYMRYwFAYD VQQDEw02NjMxNmYwZS0yYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAQaVUtFcYRPicEzSdO46D/FeX+edxdZq7YQen8JwzEQbDnMoULbdkDRsN3t vH6AuTaXLS/OFXYRQ2ywB0H2JP9Te9gi1mKzXrHVRLyWdozddFgdoCosTsm2sT3v kcO98EuGSZx/M80ZJLxLrqimdMNQwD5si4PBkB4tpwNELbl7fiFN52akpJVPteiZ 3j2wL+qX0IRbT8yhfGnU6gSXInRx1lKGEvnWSppoAhJx7zw90FdmJpwp1f+Yml79 6WfI2HWS/jsIsIOmW+DED3NORmS1zI/RzNsO8WQ510cL4+L/nCm0AwOOpHHxT4CD lbYZp2vXIXLs3zP3dAQNPOlCmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd3VHSg UIHFV00vWpL6lOpUw4a5MB8GA1UdIwQYMBaAFMAwVvaAmWR691heU/apjs/z2Yjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpIcjNXRjVUOXFtT3pfUFpp TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEQlc5b0NaWkhyM1dGNVQ5cW1Pel9QWmlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpI cjNXRjVUOXFtT3pfUFppTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT52CyzW8wAseedj5mzPbmhqPO+kadm//734l3Bh1noprKy8nYi7Gf LkDBMmyPNmZ+GmB+BUn0d7eFFlYjlWt6jPILdAB2u8JccrTW2nJZPXwj+em1zWGv Mr4uPZGBhntVHeush00qe+zubV2Xfk8fkG14ErSPFpIuNuCvcDgpdaKGCz+KGDA2 J2qe+RC/Bry3aSnWEpujVHBz47eSehh87atfftZIPmtMuNHkg3k1tOwmJ/sGAXBS HedEmhGMI3HpYA0i6VzNAlzrvI/lRhzLPLd4ZUH1v3dkoEZTSf7j6swPrSON9zPW 1OlBGFehN67Xi1of0SmUL7mrdx9nL1YC -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:12 2024 by rpki-client on console-fra.rpki-client.org