$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json) Hash identifier: B2ABBYz5uBzJ13bZT2XAOffyIGg/8vnjk80e838tJfc= Subject key identifier: 3C:63:05:D4:34:B1:22:B3:C6:13:FD:84:F9:73:AC:83:FC:04:50:B5 Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft Manifest number: 0523 Signing time: Fri 03 May 2024 01:10:17 +0000 Manifest this update: Fri 03 May 2024 01:10:17 +0000 Manifest next update: Fri 10 May 2024 01:10:17 +0000 Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: iH/hZd8dr+6CJRZK0/tzwE8rDVPev1Tb4kvv9pty6Tw=) 2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: BuPNx9YiOyVFSHrdQHhrN7N1yvLCRMULzv8+GYWVJlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Validity Not Before: May 3 01:10:17 2024 GMT Not After : May 10 01:10:17 2024 GMT Subject: CN=66343979-af87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:09:d1:33:33:80:35:77:13:2d:86:a7:01: 03:2d:c9:49:dd:d8:d3:6a:4b:62:3c:d2:30:f2:6e: ff:85:b8:3c:8a:50:64:d6:21:61:96:0b:81:15:38: f9:72:1c:6b:a6:45:80:73:f3:e0:73:8a:37:be:a6: 3c:33:3f:32:7a:af:8d:11:17:9c:de:8a:73:30:82: b8:a1:73:af:bf:a3:a8:f9:b3:bc:29:e4:28:53:6d: 7a:ef:38:99:fb:25:f2:8d:38:85:79:e0:69:a6:ca: 81:d1:5a:6e:66:a2:67:fe:ad:46:67:99:bf:a3:98: a4:d0:25:ee:12:da:8a:2f:e0:85:1f:97:64:03:96: 58:f2:93:58:db:80:d3:5a:ad:1b:87:85:f6:a2:13: bf:34:b6:8c:d3:a1:5d:c2:b5:5d:46:ab:3b:4a:d6: 60:4a:46:71:95:11:78:e8:46:de:9c:c4:d1:4c:4d: 37:dc:64:53:df:83:bf:fe:a6:af:31:a6:25:b8:fa: 31:e3:f8:4f:86:93:c6:cb:bc:bf:e8:ab:ae:e7:8a: d9:d5:cf:36:bb:ac:a9:92:ba:e7:10:f6:6c:71:34: 32:43:70:34:43:e3:62:cb:2f:34:73:64:b9:c0:7f: 71:df:ad:7d:77:bb:5e:aa:df:ca:7d:c6:fb:2f:d5: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:63:05:D4:34:B1:22:B3:C6:13:FD:84:F9:73:AC:83:FC:04:50:B5 X509v3 Authority Key Identifier: keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2b:dc:bd:18:7f:eb:79:e8:c8:77:5e:f5:bc:ad:f3:b4:dc: a1:57:e5:1b:31:5f:ea:41:1c:4b:f1:bb:93:a2:d1:71:d9:f3: 03:34:1d:24:d6:e2:fe:90:20:11:72:95:9f:d5:5d:f6:94:76: ea:d6:db:88:65:b6:37:f8:01:a3:eb:2f:bc:a5:c2:8e:60:8e: 66:90:64:1a:41:b0:8a:97:c9:8d:ea:93:7a:79:5b:0a:a5:12: 96:52:19:c3:0b:8e:c7:dd:51:a1:6e:4f:c3:87:f1:fa:d2:25: ef:83:8b:9a:d1:74:0a:c7:dd:0d:c9:db:d8:63:f1:17:21:8d: 71:5b:df:18:35:8c:75:69:11:d9:7b:1b:ec:39:0c:43:28:e1: 1f:b6:44:1e:8e:b7:4b:16:b4:17:ed:33:0c:21:8e:81:af:32: 44:06:3e:4c:3d:ab:aa:c2:71:c5:04:6a:93:31:16:63:dc:aa: 7f:56:10:55:86:a8:7d:be:87:5d:67:37:11:4a:e4:73:fb:0b: 25:90:a1:4f:ac:27:bf:b6:21:f0:77:74:e0:b3:05:17:c1:12: ab:6e:61:bc:49:2f:5e:d5:2c:39:fb:71:b3:1a:ad:d5:de:68: d8:47:b7:a7:0e:5e:b8:59:09:3a:e5:31:95:49:8a:7c:81:f1: 26:a6:6f:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFODkxMTAvBgNVBAUTKDdDMkE5NkE1QTkwMzRDREYyQTc4NkY2NEJERjI3RkQ4 QUM1MUM5MkIwHhcNMjQwNTAzMDExMDE3WhcNMjQwNTEwMDExMDE3WjAYMRYwFAYD VQQDEw02NjM0Mzk3OS1hZjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMQJ0TMzgDV3Ey2GpwEDLclJ3djTaktiPNIw8m7/hbg8ilBk1iFhlguBFTj5 chxrpkWAc/Pgc4o3vqY8Mz8yeq+NERec3opzMIK4oXOvv6Oo+bO8KeQoU2167ziZ +yXyjTiFeeBppsqB0VpuZqJn/q1GZ5m/o5ik0CXuEtqKL+CFH5dkA5ZY8pNY24DT Wq0bh4X2ohO/NLaM06FdwrVdRqs7StZgSkZxlRF46EbenMTRTE033GRT34O//qav MaYluPox4/hPhpPGy7y/6Kuu54rZ1c82u6ypkrrnEPZscTQyQ3A0Q+Niyy80c2S5 wH9x3619d7teqt/Kfcb7L9XEZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxjBdQ0 sSKzxhP9hPlzrIP8BFC1MB8GA1UdIwQYMBaAFHwqlqWpA0zfKnhvZL3yf9isUckr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUU4OS83NjAxMDc3OEIy NDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFROOHFlRzlrdmZKXzJLeFJ5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZDcVdwYWtEVE44cWVHOWt2ZkpfMkt4UnlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUU4OS83NjAxMDc3OEIyNDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFRO OHFlRzlrdmZKXzJLeFJ5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOK9y9GH/reejId171vK3ztNyhV+UbMV/qQRxL8buTotFx2fMDNB0k 1uL+kCARcpWf1V32lHbq1tuIZbY3+AGj6y+8pcKOYI5mkGQaQbCKl8mN6pN6eVsK pRKWUhnDC47H3VGhbk/Dh/H60iXvg4ua0XQKx90NydvYY/EXIY1xW98YNYx1aRHZ exvsOQxDKOEftkQejrdLFrQX7TMMIY6BrzJEBj5MPauqwnHFBGqTMRZj3Kp/VhBV hqh9voddZzcRSuRz+wslkKFPrCe/tiHwd3TgswUXwRKrbmG8SS9e1Sw5+3GzGq3V 3mjYR7enDl64WQk65TGVSYp8gfEmpm9J -----END CERTIFICATE-----Generated at Fri May 3 04:45:08 2024 by rpki-client on console-fra.rpki-client.org