$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: fCeR25VHh4cXWLa8hm5ayx9RpjoYKmB5TY6KygtAags= Subject key identifier: F7:EC:D2:83:1D:8F:EB:14:63:0A:77:7A:9E:3A:81:82:AC:12:F2:19 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: C4 Signing time: Sun 05 May 2024 06:21:53 +0000 Manifest this update: Sun 05 May 2024 06:21:53 +0000 Manifest next update: Sun 12 May 2024 06:21:53 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: Z1rj9cEwoA755k+JZhAynMYyXXRzjpABJALyDT1/LpU=) 2: 2F8FA932DD1B11ED8036C53DC4F9AE02.roa (hash: bffxfBwkFiKBPMW7pfQbRCXkMP8H/a2UJttf3Fj1Vy8=) 3: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: NBgmxedgv+2wsI5zrueeGxtioaqoLArW4yRo/kaB0M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: May 5 06:21:53 2024 GMT Not After : May 12 06:21:53 2024 GMT Subject: CN=66372581-4f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:02:25:ae:9b:36:c2:88:86:9f:c2:eb:43: 35:af:b4:a1:7d:07:f7:8a:d1:51:e6:51:2c:fd:b9: 23:87:16:41:30:92:34:65:56:bd:9b:a8:5d:e3:99: e7:a2:dc:e3:94:0e:a0:8b:8b:a2:12:05:13:57:2c: 64:6a:60:dd:41:c6:43:9d:b7:e1:e8:6b:94:36:4f: 1c:29:b0:cf:e3:17:2e:59:21:5e:8f:b2:e8:ca:41: 2d:d5:f6:5d:2c:e7:e0:8d:cd:fc:ac:d3:5d:8d:77: c0:13:02:04:be:6d:02:bd:b8:0a:15:47:d1:f8:f7: 4a:c3:7b:18:6a:ba:e3:cc:b6:13:8f:3f:cb:6a:61: f5:f0:fd:c1:d1:01:a6:5b:f5:94:2a:01:1a:45:5d: cb:c1:4c:7b:ee:72:ba:cf:48:cc:9d:bf:0b:84:01: 4c:6a:a0:e3:23:f4:8b:92:32:bd:1e:a5:4e:c4:3e: 2d:dd:a8:86:48:1e:ec:7e:41:fe:92:3f:7f:67:66: 9d:de:7d:be:9c:14:36:ad:b3:a1:68:5b:01:35:db: d6:1f:58:01:6d:57:1a:f2:24:7d:db:ed:3c:ab:cc: 4f:8a:e1:75:70:79:3c:8c:83:e9:7d:35:a5:87:f4: 51:38:24:27:f6:47:91:7e:f7:fb:24:25:08:03:ac: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EC:D2:83:1D:8F:EB:14:63:0A:77:7A:9E:3A:81:82:AC:12:F2:19 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:5b:c4:bb:48:37:93:c6:6c:1b:3a:a1:5a:b8:33:27:70:98: a8:c0:cb:7d:ed:34:b8:0c:19:7a:e9:df:ec:4d:83:93:fa:7a: f1:2b:52:60:e8:a9:76:79:cc:a3:9f:28:cd:91:00:11:7c:f5: 14:2e:8b:9b:b0:6f:11:7d:e5:a2:39:28:53:02:33:75:7e:15: 9f:76:ab:b2:9d:91:ec:5e:3e:5d:0d:11:3a:c8:39:07:b9:a0: ab:07:ac:f4:a3:2e:b9:ac:6c:2d:03:d7:0e:50:41:21:a4:f1: 6a:ad:8a:ac:dd:57:3c:70:76:15:a9:1f:ab:47:55:8d:b5:d6: 55:03:d3:c2:8b:c2:d4:85:59:b4:2e:a3:bc:67:ef:e1:97:03: b4:f6:de:5b:c0:f1:0d:bf:d6:19:d9:7c:a8:b2:50:b4:25:e2: 8a:5f:94:95:a9:f5:a3:f3:d1:77:34:9d:2a:52:02:d5:2c:cc: 98:76:af:4a:51:5a:fd:80:97:8d:9f:58:a7:8f:f3:e3:21:b1: 02:fe:e9:5f:6a:33:24:65:4d:aa:38:91:b5:52:47:05:79:54: d8:2d:72:f4:ec:21:c0:c8:5c:18:55:ce:13:22:0f:d3:e9:a0: be:29:a8:81:2d:0f:e3:06:b7:cf:66:72:23:21:16:f1:f2:53: 3c:02:dc:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjQwNTA1MDYyMTUzWhcNMjQwNTEyMDYyMTUzWjAYMRYwFAYD VQQDEw02NjM3MjU4MS00ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG8CJa6bNsKIhp/C60M1r7ShfQf3itFR5lEs/bkjhxZBMJI0ZVa9m6hd45nn otzjlA6gi4uiEgUTVyxkamDdQcZDnbfh6GuUNk8cKbDP4xcuWSFej7LoykEt1fZd LOfgjc38rNNdjXfAEwIEvm0CvbgKFUfR+PdKw3sYarrjzLYTjz/LamH18P3B0QGm W/WUKgEaRV3LwUx77nK6z0jMnb8LhAFMaqDjI/SLkjK9HqVOxD4t3aiGSB7sfkH+ kj9/Z2ad3n2+nBQ2rbOhaFsBNdvWH1gBbVca8iR92+08q8xPiuF1cHk8jIPpfTWl h/RROCQn9keRfvf7JCUIA6z85wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfs0oMd j+sUYwp3ep46gYKsEvIZMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATW8S7SDeTxmwbOqFauDMncJiowMt97TS4DBl66d/sTYOT+nrxK1Jg 6Kl2ecyjnyjNkQARfPUULoubsG8RfeWiOShTAjN1fhWfdquynZHsXj5dDRE6yDkH uaCrB6z0oy65rGwtA9cOUEEhpPFqrYqs3Vc8cHYVqR+rR1WNtdZVA9PCi8LUhVm0 LqO8Z+/hlwO09t5bwPENv9YZ2XyoslC0JeKKX5SVqfWj89F3NJ0qUgLVLMyYdq9K UVr9gJeNn1inj/PjIbEC/ulfajMkZU2qOJG1UkcFeVTYLXL07CHAyFwYVc4TIg/T 6aC+KaiBLQ/jBrfPZnIjIRbx8lM8Atx7 -----END CERTIFICATE-----Generated at Sun May 5 08:38:59 2024 by rpki-client on console-fra.rpki-client.org