$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: cnh6Ab9rHvkGy7s8M4qN4R89beNXcOlJzboO5jA0BVs= Subject key identifier: F1:4C:84:08:5F:F0:80:8B:D6:89:04:26:20:04:3B:1B:36:9D:06:A7 Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 05A9 Signing time: Fri 03 May 2024 00:24:58 +0000 Manifest this update: Fri 03 May 2024 00:24:58 +0000 Manifest next update: Fri 10 May 2024 00:24:58 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: 4U1LQL/e52iORU7R47yuMITmYhcwM+k9lTM06UO4c/s=) 2: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: DsJu31VmqRJ0VhuZIHzXvyh3HyPC4dntssT9G4PSpBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: May 3 00:24:58 2024 GMT Not After : May 10 00:24:58 2024 GMT Subject: CN=66342eda-4e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:8f:cb:64:66:78:a5:13:fb:9f:9d:4d:47: 60:b3:60:4d:48:1a:85:e4:7b:6b:b0:40:c9:39:04: 73:9c:ed:cd:3a:35:40:3b:9a:43:2c:87:be:fd:77: 95:52:c5:0d:14:31:d6:b4:5a:7c:a6:ea:50:d3:b1: 7d:90:d6:d0:71:81:8f:51:b6:57:8e:e1:03:5a:6a: 45:44:13:3e:fb:79:47:bb:a6:d4:56:b3:77:22:37: 57:fe:d5:a6:3c:4e:4a:1c:ab:b8:d3:20:cf:80:f3: 8c:3c:59:91:b6:8b:80:b8:15:47:90:7b:88:cd:f2: 64:48:61:0e:0f:de:ff:58:12:26:9b:d6:2a:88:0b: 9e:28:c6:16:11:36:4f:ee:73:28:bc:e0:3b:b7:7c: ad:e5:25:93:cd:e7:c9:a2:c2:cb:c6:79:f5:ed:b1: 28:2e:84:7b:ca:83:a0:41:7a:d2:b5:ea:67:af:1d: ac:f1:7d:2f:72:c4:2e:cf:4d:5d:70:dc:89:f0:49: e3:55:a5:b0:1c:9a:b4:2a:f0:84:59:ae:9e:d6:00: a6:8a:14:66:0d:3a:48:05:cb:f6:63:f4:3b:9a:82: 87:e5:bb:39:af:25:8c:e9:f5:65:22:e2:c6:e1:ac: 6c:4d:20:16:1b:6d:8d:07:91:e7:7d:e2:4d:53:66: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4C:84:08:5F:F0:80:8B:D6:89:04:26:20:04:3B:1B:36:9D:06:A7 X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:81:19:af:39:32:a3:5d:37:cb:49:34:18:02:75:59:7b:4e: b7:a9:b2:e5:f5:0a:a8:42:ca:62:63:88:c6:a6:33:35:cf:d0: 69:12:f8:49:29:ef:f6:9c:d4:92:ac:c0:30:33:f7:40:e0:3d: ff:92:0b:0a:a7:9c:76:76:13:a5:6c:c1:23:b0:91:81:d4:54: ba:41:e1:4e:be:4a:54:f0:c7:ff:06:43:d6:21:3d:9f:60:e6: ab:31:66:b3:27:c2:95:8d:04:6a:6d:f4:a8:f6:d0:2a:a1:4c: e4:04:91:ca:99:fd:8f:50:e4:4d:84:62:ff:16:21:db:4c:0d: fc:e6:6f:31:d5:1c:4f:18:5e:49:86:3b:51:34:a2:81:69:2d: 87:8f:ad:5b:39:f2:48:fb:d6:4c:af:07:7f:23:d8:55:60:e3: 50:b4:a7:28:14:f7:3b:9a:a7:40:6b:3e:66:81:d2:3f:5b:a8: 04:b6:0a:6d:cb:28:04:0a:81:bb:3d:13:34:2c:02:83:a9:77: 08:10:be:ab:85:10:f4:3a:6b:ea:fb:e2:2f:1f:86:32:5a:99: 8c:8b:d1:37:b4:f7:b8:8c:57:4a:e6:42:a6:89:cd:b2:fe:ad: 67:f6:56:0c:ab:c3:8e:d9:e8:f1:02:93:a0:43:ba:0b:d5:e1: 3a:e6:97:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjQwNTAzMDAyNDU4WhcNMjQwNTEwMDAyNDU4WjAYMRYwFAYD VQQDEw02NjM0MmVkYS00ZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoaPy2RmeKUT+5+dTUdgs2BNSBqF5HtrsEDJOQRznO3NOjVAO5pDLIe+/XeV UsUNFDHWtFp8pupQ07F9kNbQcYGPUbZXjuEDWmpFRBM++3lHu6bUVrN3IjdX/tWm PE5KHKu40yDPgPOMPFmRtouAuBVHkHuIzfJkSGEOD97/WBImm9YqiAueKMYWETZP 7nMovOA7t3yt5SWTzefJosLLxnn17bEoLoR7yoOgQXrStepnrx2s8X0vcsQuz01d cNyJ8EnjVaWwHJq0KvCEWa6e1gCmihRmDTpIBcv2Y/Q7moKH5bs5ryWM6fVlIuLG 4axsTSAWG22NB5HnfeJNU2bnxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFMhAhf 8ICL1okEJiAEOxs2nQanMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlgRmvOTKjXTfLSTQYAnVZe063qbLl9QqoQspiY4jGpjM1z9BpEvhJ Ke/2nNSSrMAwM/dA4D3/kgsKp5x2dhOlbMEjsJGB1FS6QeFOvkpU8Mf/BkPWIT2f YOarMWazJ8KVjQRqbfSo9tAqoUzkBJHKmf2PUORNhGL/FiHbTA385m8x1RxPGF5J hjtRNKKBaS2Hj61bOfJI+9ZMrwd/I9hVYONQtKcoFPc7mqdAaz5mgdI/W6gEtgpt yygECoG7PRM0LAKDqXcIEL6rhRD0Omvq++IvH4YyWpmMi9E3tPe4jFdK5kKmic2y /q1n9lYMq8OO2ejxApOgQ7oL1eE65pdJ -----END CERTIFICATE-----Generated at Fri May 3 01:30:23 2024 by rpki-client on console-fra.rpki-client.org