$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json) Hash identifier: uY55rqoIU06OPa77OZoj2CUvpi27IRb03Rh16tBoC1s= Subject key identifier: 0A:07:B3:E5:10:0D:B4:5C:08:38:A3:2A:D1:DE:A0:8A:72:5C:3E:D0 Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft Manifest number: B1 Signing time: Wed 01 May 2024 03:51:20 +0000 Manifest this update: Wed 01 May 2024 03:51:19 +0000 Manifest next update: Wed 08 May 2024 03:51:19 +0000 Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: /YOSuIFGUMgKCIYAc0igBSQrFzx/aHGhuWbFcyV4GQk=) 2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: h1m9sLre/7LN5ad1i+1GbnT3wM3IJOvLq7MEJkLNy3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Validity Not Before: May 1 03:51:19 2024 GMT Not After : May 8 03:51:19 2024 GMT Subject: CN=6631bc38-60e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:47:bf:32:8a:71:62:45:7c:0d:97:f5:4b: 38:47:03:3b:6f:d0:a7:6d:58:42:81:22:b2:74:76: a1:02:31:8f:af:a5:41:8e:fd:c3:70:7a:06:89:69: fb:68:ef:46:36:9c:ba:b2:f3:1e:3b:77:50:12:5e: c8:f3:78:7c:ee:4e:e4:be:55:d6:37:50:a4:04:68: 7d:63:4b:8a:50:ad:25:1d:a0:b4:bd:8f:c1:38:24: 71:30:de:af:ad:62:fa:89:65:4c:c4:cc:76:4a:ee: 18:e1:e3:d5:09:23:90:f0:31:59:68:3e:63:20:e2: fe:d9:32:ab:06:ed:c8:a8:a2:03:d3:80:92:f7:85: 33:d5:1e:8e:78:53:a8:20:31:2f:44:fe:84:a7:2c: 3e:73:f0:d6:6c:71:56:8c:39:3c:84:af:bf:7f:ed: e4:79:e6:58:af:ac:1e:a5:70:7b:db:51:52:15:4d: 2a:3a:41:e7:1f:ad:44:67:02:3f:8b:14:b4:d1:fb: 08:61:54:62:2e:1b:3f:03:30:e1:d0:b5:f7:83:7a: 46:34:44:f5:76:25:c9:e1:cd:21:70:f5:d1:a3:45: 05:e9:7b:ae:2e:43:17:a0:a4:29:ff:66:e8:9a:55: f4:18:33:54:13:7b:a2:a6:04:bd:97:ac:45:6c:23: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:07:B3:E5:10:0D:B4:5C:08:38:A3:2A:D1:DE:A0:8A:72:5C:3E:D0 X509v3 Authority Key Identifier: keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4d:2e:10:29:e8:ed:41:d2:69:ef:f4:8d:40:88:93:20:12: 9f:5d:60:c5:ef:ed:31:fb:92:9b:7f:f5:6f:a1:04:e5:58:4a: 45:b8:fe:c1:e6:c0:1e:ab:47:80:46:52:86:cc:e4:85:0a:09: 0f:53:c5:bd:f0:e2:c7:a6:dd:b9:fc:5f:84:f1:9b:f1:6d:ed: 05:da:5c:65:49:34:ba:c3:ed:85:c5:1a:99:71:ba:a3:ac:61: b3:1e:f0:6a:0e:63:d4:a4:55:82:b2:f4:2e:ad:27:f2:8b:30: 6b:c9:fe:43:fe:b3:ff:d3:68:ed:9e:d4:cf:68:ab:9d:b4:e4: a5:c9:28:26:2e:9b:5c:d3:2e:e8:e9:8e:5c:25:7d:1d:fc:84: f3:9d:f8:3e:7c:39:7f:e3:9c:70:ad:db:ef:be:e0:e2:12:ba: d4:7b:47:59:b6:68:4c:d0:20:21:71:7a:9b:d9:e4:17:6a:04: 25:42:19:1a:f9:59:d2:4f:26:fc:ac:f3:57:81:58:04:ac:4c: 76:39:da:26:43:48:fd:da:a3:3b:5b:af:e9:7b:f7:24:58:00: 86:8a:25:bd:7c:46:e5:61:6a:52:da:d0:ea:f7:4a:f1:56:ac: f6:f7:26:b4:20:87:1f:f2:03:6f:2e:4b:f4:f8:7b:64:58:4c: b9:6e:bd:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDUzNkI5MUIxN0I2RTFCQjE2MzhDODM1OEEwRkE1RUE1 RDBFQkVGQjcwHhcNMjQwNTAxMDM1MTE5WhcNMjQwNTA4MDM1MTE5WjAYMRYwFAYD VQQDEw02NjMxYmMzOC02MGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtERHvzKKcWJFfA2X9Us4RwM7b9CnbVhCgSKydHahAjGPr6VBjv3DcHoGiWn7 aO9GNpy6svMeO3dQEl7I83h87k7kvlXWN1CkBGh9Y0uKUK0lHaC0vY/BOCRxMN6v rWL6iWVMxMx2Su4Y4ePVCSOQ8DFZaD5jIOL+2TKrBu3IqKID04CS94Uz1R6OeFOo IDEvRP6Epyw+c/DWbHFWjDk8hK+/f+3keeZYr6wepXB721FSFU0qOkHnH61EZwI/ ixS00fsIYVRiLhs/AzDh0LX3g3pGNET1diXJ4c0hcPXRo0UF6XuuLkMXoKQp/2bo mlX0GDNUE3uipgS9l6xFbCM6ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoHs+UQ DbRcCDijKtHeoIpyXD7QMB8GA1UdIwQYMBaAFFNrkbF7bhuxY4yDWKD6XqXQ6++3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC8yMzIzRkQ4MDAw RDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3RmpqSU5Zb1BwZXBkRHI3 N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1UydVJzWHR1RzdGampJTllvUHBlcGREcjc3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC8yMzIzRkQ4MDAwRDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3 RmpqSU5Zb1BwZXBkRHI3N2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbTS4QKejtQdJp7/SNQIiTIBKfXWDF7+0x+5Kbf/VvoQTlWEpFuP7B 5sAeq0eARlKGzOSFCgkPU8W98OLHpt25/F+E8Zvxbe0F2lxlSTS6w+2FxRqZcbqj rGGzHvBqDmPUpFWCsvQurSfyizBryf5D/rP/02jtntTPaKudtOSlySgmLptc0y7o 6Y5cJX0d/ITznfg+fDl/45xwrdvvvuDiErrUe0dZtmhM0CAhcXqb2eQXagQlQhka +VnSTyb8rPNXgVgErEx2OdomQ0j92qM7W6/pe/ckWACGiiW9fEblYWpS2tDq90rx Vqz29ya0IIcf8gNvLkv0+HtkWEy5br15 -----END CERTIFICATE-----Generated at Wed May 1 05:58:56 2024 by rpki-client on console-fra.rpki-client.org