$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: muocyCxXq8RNLBAbT+6NgDW9Ph2ee3TVoMOCJ3m3krQ= Subject key identifier: CB:82:30:35:3E:7D:A5:38:54:C9:F6:78:68:90:90:72:85:15:B9:4A Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 01CB Signing time: Fri 03 May 2024 04:30:17 +0000 Manifest this update: Fri 03 May 2024 04:30:16 +0000 Manifest next update: Fri 10 May 2024 04:30:16 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: nRwvwnqNcquG0D+/LJZ3TPNpPGmliwvCZ0AAlD6q3tA=) 2: F47441C4033011EDAB29E50DC4F9AE02.roa (hash: 4g/5gMrq6d4XAyu8coYJen7EjiTyTsR5YvLQIlT+hdw=) 3: F4F17C66033011EDAB29E50DC4F9AE02.roa (hash: WbZd0YimQJUSoCj6gyyfDj6+t1/4D8ZQ5qc1Bx+PO9Y=) 4: F3E36208033011EDAB29E50DC4F9AE02.roa (hash: ha56W80A9uFQeEmrya1xRLQM/DXpfrcveUUHFKt+s8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: May 3 04:30:16 2024 GMT Not After : May 10 04:30:16 2024 GMT Subject: CN=66346858-6f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:0f:90:67:7b:ee:db:5c:18:b6:fd:fe:ea: 2d:0c:1b:a6:ed:21:32:34:e3:1a:30:f9:7f:f3:da: 71:b5:84:71:c0:94:57:15:8d:82:8f:a9:59:4d:9e: 8d:95:53:ed:c0:14:ba:e8:69:ea:a1:7f:38:30:44: 75:78:93:b8:fb:cc:b8:6a:ca:2b:9f:f3:c3:98:05: 8f:fa:49:ce:03:e2:5c:3d:e3:90:dc:6d:0a:4c:3b: 3a:ad:d3:8e:bb:27:1a:1a:ff:eb:2c:23:a4:2a:2c: f8:a0:25:c1:5f:f9:99:cb:da:87:56:e1:01:ef:ed: c0:1b:d8:1b:a0:41:72:6d:ef:c9:33:63:39:88:4d: f6:a5:b2:a4:c3:43:ee:bd:8e:67:22:05:35:39:b8: 9f:36:06:d4:60:89:df:72:22:c5:d8:c6:24:d5:1f: 41:1c:53:d8:dc:23:91:52:d2:58:bc:99:26:fb:98: a0:05:84:aa:6e:90:43:ff:0f:b0:b3:77:74:78:a2: 3c:10:f4:a3:69:75:9a:9c:96:39:91:e9:df:74:85: a0:b4:d2:0f:67:44:5f:60:40:ed:be:dd:10:bd:22: 4d:9f:4d:86:f6:88:b6:06:83:e0:d8:e8:8d:d8:6f: 65:d5:b6:e6:72:04:32:c9:9c:3f:04:1c:c1:01:8a: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:30:35:3E:7D:A5:38:54:C9:F6:78:68:90:90:72:85:15:B9:4A X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:22:6f:61:5a:ec:62:b7:88:ea:14:19:4d:37:6a:a6:58:28: 62:e4:49:e1:ff:21:b1:83:0c:fa:38:6d:09:e2:1c:71:b9:27: 93:46:68:5a:4e:53:6d:9d:78:d3:36:29:7e:78:5a:61:18:c9: e9:78:9d:5f:46:8f:0f:d1:a7:34:05:c0:6c:18:a2:77:d9:49: e8:b7:67:0d:c0:c8:8a:07:ab:01:86:5f:6f:a0:fa:ab:ad:7c: d8:41:5b:53:fb:db:58:98:55:9a:97:1e:55:59:23:12:8a:8c: bd:37:23:fe:45:3a:78:61:04:fa:f0:c9:01:ca:a9:e9:fc:f5: 5b:07:85:0b:c4:c6:ee:49:82:72:a0:11:01:71:a6:c3:65:69: 4f:13:be:47:40:33:63:fc:dc:45:6e:c6:5c:08:0c:77:23:7d: 13:51:26:6d:c5:4e:fd:4d:f3:ae:fb:30:a7:cb:01:70:ab:a8: 52:69:2a:4f:17:d4:6b:bc:0b:13:72:98:d3:29:36:51:18:fc: 7e:3c:3b:5f:70:16:5b:48:0c:26:77:9b:93:8f:d4:4c:81:9f: 40:68:9b:4e:1e:50:1e:49:46:ba:44:ca:5e:5b:f0:2e:05:92: 73:86:02:90:89:7e:13:ec:4c:4e:86:3c:e3:83:2b:7e:ff:e6: df:d3:4e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjQwNTAzMDQzMDE2WhcNMjQwNTEwMDQzMDE2WjAYMRYwFAYD VQQDEw02NjM0Njg1OC02Zjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BIPkGd77ttcGLb9/uotDBum7SEyNOMaMPl/89pxtYRxwJRXFY2Cj6lZTZ6N lVPtwBS66GnqoX84MER1eJO4+8y4asorn/PDmAWP+knOA+JcPeOQ3G0KTDs6rdOO uycaGv/rLCOkKiz4oCXBX/mZy9qHVuEB7+3AG9gboEFybe/JM2M5iE32pbKkw0Pu vY5nIgU1ObifNgbUYInfciLF2MYk1R9BHFPY3CORUtJYvJkm+5igBYSqbpBD/w+w s3d0eKI8EPSjaXWanJY5kenfdIWgtNIPZ0RfYEDtvt0QvSJNn02G9oi2BoPg2OiN 2G9l1bbmcgQyyZw/BBzBAYpmvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuCMDU+ faU4VMn2eGiQkHKFFblKMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEIm9hWuxit4jqFBlNN2qmWChi5Enh/yGxgwz6OG0J4hxxuSeTRmha TlNtnXjTNil+eFphGMnpeJ1fRo8P0ac0BcBsGKJ32Unot2cNwMiKB6sBhl9voPqr rXzYQVtT+9tYmFWalx5VWSMSioy9NyP+RTp4YQT68MkByqnp/PVbB4ULxMbuSYJy oBEBcabDZWlPE75HQDNj/NxFbsZcCAx3I30TUSZtxU79TfOu+zCnywFwq6hSaSpP F9RrvAsTcpjTKTZRGPx+PDtfcBZbSAwmd5uTj9RMgZ9AaJtOHlAeSUa6RMpeW/Au BZJzhgKQiX4T7ExOhjzjgyt+/+bf006B -----END CERTIFICATE-----Generated at Fri May 3 06:28:37 2024 by rpki-client on console-fra.rpki-client.org