$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: Pk7InerrIoJvpmqALOQZL/sOZPqQlWGr6QuWB6Uk+co= Subject key identifier: EC:A6:20:DB:D5:59:15:FF:C0:C4:FD:35:A9:1F:5B:C5:06:A3:0E:15 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: E7 Signing time: Wed 29 May 2024 06:38:07 +0000 Manifest this update: Wed 29 May 2024 06:38:07 +0000 Manifest next update: Wed 05 Jun 2024 06:38:07 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: 4x/X4LdWn+otwXrH1Rrmk0mvlF2Qt45RABKhLqfrAMA=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: E+oIn482BPyJkmibWcETKP/96GJSMoGPWaphK0YLOX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: May 29 06:38:07 2024 GMT Not After : Jun 5 06:38:07 2024 GMT Subject: CN=6656cd4f-7cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bd:6b:78:c4:9d:f7:a6:90:8f:dc:5b:2e:54: 24:7a:b2:b1:f4:a6:80:13:25:60:a3:74:a4:bb:d1: 4d:4a:50:e5:24:9e:34:14:b8:34:dc:c9:fc:65:01: e8:c8:b1:86:7f:56:11:15:54:5a:ee:37:51:fc:25: 8a:ec:aa:34:b1:4e:1a:cf:cd:ac:c0:fd:d6:fa:51: cd:e8:04:80:f0:29:d0:87:5a:dd:63:e6:2d:91:5a: bf:71:58:13:34:15:0e:f2:29:37:f5:88:21:79:22: b9:7d:f9:06:c9:a8:ac:83:5f:37:b3:0b:ff:75:b3: 06:a1:22:24:07:bd:b9:ef:4f:e9:79:ba:95:72:ca: f4:d2:cf:f2:68:ea:41:75:79:2e:be:89:7c:f5:38: 22:15:7b:d9:09:cf:a0:63:5e:a6:a7:48:7e:5f:da: 25:14:78:45:37:e8:ca:ac:60:19:93:a6:55:f4:a3: dc:01:59:b5:35:e4:a6:16:f3:3b:bb:d1:f1:18:25: 68:7a:c5:4a:82:67:ac:91:7a:b5:e7:57:17:9c:b8: 25:3b:89:8a:bd:0c:46:85:c3:86:3a:ff:66:40:40: a2:0e:34:e3:10:18:18:4c:a2:64:e3:ee:d7:cb:2a: 12:de:63:ff:34:ca:b0:d5:ed:ca:7e:34:e2:38:82: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:20:DB:D5:59:15:FF:C0:C4:FD:35:A9:1F:5B:C5:06:A3:0E:15 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:88:eb:d9:92:f3:af:75:ad:af:4d:40:37:0c:ce:12:f1:fc: 0a:7b:f1:26:ae:87:34:49:7e:9e:f3:c1:87:1b:e9:a6:ec:1a: de:dc:e4:b5:2a:3f:71:c9:d7:6c:26:4a:fb:4f:00:d9:09:12: 7c:ce:e8:58:c2:86:7e:54:d2:60:ec:6e:8b:5f:bf:8f:b1:ab: c2:fb:6a:74:38:2a:b3:f1:f2:31:ca:9d:5c:1b:b8:aa:82:7e: 7b:3f:99:d6:84:d3:7e:3e:65:40:61:49:e9:4e:1b:4f:6e:22: 42:41:46:59:b6:4f:a0:c7:28:82:e7:be:08:38:5a:87:ef:d1: a2:ab:13:78:08:f2:e8:cd:41:9b:5f:af:f8:1f:3d:57:d7:49: d4:db:57:8d:58:e6:79:fa:3b:30:cb:34:73:dc:56:11:bd:0f: 03:18:18:31:b8:39:84:65:ac:e5:1b:27:20:f8:9b:95:c7:bb: d5:31:6f:1e:2e:63:46:c9:fd:8e:8f:2d:18:30:9c:7d:1e:0a: d4:57:76:a4:9b:75:fe:f8:58:40:29:c7:ca:89:dc:93:e5:e1: ef:cc:61:34:f2:d7:28:8d:f8:09:16:44:14:6c:93:0d:65:7a: 71:7b:16:a5:b6:17:74:c2:41:36:b6:67:62:ff:43:5b:90:e5: a0:3e:dd:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjQwNTI5MDYzODA3WhcNMjQwNjA1MDYzODA3WjAYMRYwFAYD VQQDEw02NjU2Y2Q0Zi03Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8L1reMSd96aQj9xbLlQkerKx9KaAEyVgo3Sku9FNSlDlJJ40FLg03Mn8ZQHo yLGGf1YRFVRa7jdR/CWK7Ko0sU4az82swP3W+lHN6ASA8CnQh1rdY+YtkVq/cVgT NBUO8ik39YgheSK5ffkGyaisg183swv/dbMGoSIkB72570/pebqVcsr00s/yaOpB dXkuvol89TgiFXvZCc+gY16mp0h+X9olFHhFN+jKrGAZk6ZV9KPcAVm1NeSmFvM7 u9HxGCVoesVKgmeskXq151cXnLglO4mKvQxGhcOGOv9mQECiDjTjEBgYTKJk4+7X yyoS3mP/NMqw1e3KfjTiOIJXuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOymINvV WRX/wMT9NakfW8UGow4VMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwiOvZkvOvda2vTUA3DM4S8fwKe/Emroc0SX6e88GHG+mm7Bre3OS1 Kj9xyddsJkr7TwDZCRJ8zuhYwoZ+VNJg7G6LX7+PsavC+2p0OCqz8fIxyp1cG7iq gn57P5nWhNN+PmVAYUnpThtPbiJCQUZZtk+gxyiC574IOFqH79GiqxN4CPLozUGb X6/4Hz1X10nU21eNWOZ5+jswyzRz3FYRvQ8DGBgxuDmEZazlGycg+JuVx7vVMW8e LmNGyf2Ojy0YMJx9HgrUV3akm3X++FhAKcfKidyT5eHvzGE08tcojfgJFkQUbJMN ZXpxexalthd0wkE2tmdi/0NbkOWgPt1R -----END CERTIFICATE-----Generated at Wed May 29 09:16:17 2024 by rpki-client on console-fra.rpki-client.org