$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: Cs66ycx0vyLN7GcvKces/mXMKV0OQCmTvefzoELrN/s= Subject key identifier: 78:DC:F8:5C:49:58:59:FD:4E:5C:9E:AB:51:5C:9B:DB:98:0F:91:57 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 0506 Signing time: Fri 03 May 2024 01:16:59 +0000 Manifest this update: Fri 03 May 2024 01:16:58 +0000 Manifest next update: Fri 10 May 2024 01:16:58 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: 8gL1oZm2CoiwjCnrIMwN4UpqXkw2s8N9maDKsntboAo=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: o2zEoY22pk3whF08IqjADBlvA+FXNXH03ZTCdev15kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: May 3 01:16:58 2024 GMT Not After : May 10 01:16:58 2024 GMT Subject: CN=66343b0b-753e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:e9:29:31:ca:56:59:60:6b:6e:a4:d0:8a: ed:12:fa:16:b6:e0:79:55:41:03:2b:b7:29:27:08: f2:fb:f4:ce:e7:5a:82:93:65:5f:22:fa:75:9c:7c: 08:0c:cb:a8:c3:a3:e5:6f:6d:20:62:7a:ee:20:cf: 09:48:8a:5d:5c:17:4e:1c:67:08:17:57:a2:4f:b5: a0:f9:df:2b:ef:69:a7:30:f1:68:1b:e6:af:a1:4f: 83:a1:ab:ce:5b:d9:a6:1c:58:89:9c:9a:80:89:6d: a5:e3:8f:02:7d:b9:51:7b:12:e1:f5:24:0b:dd:d6: ac:b4:82:6a:0a:7e:9b:2e:a8:b3:66:c3:e8:a6:72: c0:1f:a0:75:18:b4:9a:9f:f6:7c:04:a7:b6:8d:5e: f6:73:0d:bf:06:a4:60:46:9d:7d:08:94:68:0c:85: ad:f6:89:f3:0a:41:03:8f:26:64:18:81:e8:0a:d0: 4d:95:bb:9a:8d:db:55:4e:5f:03:1c:de:bd:f0:1f: c9:05:c4:62:0f:85:75:21:21:ea:61:9c:f4:a9:4c: 47:5c:a5:44:ce:c4:e9:e2:8a:86:d2:10:b5:9b:24: fd:21:f5:86:c1:a6:53:9c:3e:f9:81:18:6e:d7:95: fa:e0:2b:a4:30:90:22:f1:98:37:fc:32:17:d0:12: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:F8:5C:49:58:59:FD:4E:5C:9E:AB:51:5C:9B:DB:98:0F:91:57 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:eb:17:cd:37:89:ec:a8:0e:12:71:cc:bf:3c:22:bf:3e:34: 7e:7b:6d:74:54:10:d8:82:ce:26:74:4f:d0:98:5b:08:d8:b1: 83:9c:90:51:23:80:47:01:85:b5:db:84:3d:9c:08:a7:a2:99: 90:44:e3:2e:66:35:5a:b0:ca:6a:59:88:5e:59:2f:f8:4d:54: 97:12:2b:34:fe:e3:43:d0:93:c5:ae:60:17:44:c8:32:a8:35: 88:86:fd:18:8a:22:36:ac:cd:d0:a7:c0:b2:38:46:d1:36:64: a5:42:ef:a1:80:0b:e8:73:fe:98:9d:47:45:59:df:f5:f1:f1: 9a:cd:7c:9b:de:18:12:9c:bc:e5:67:5a:52:55:70:87:51:38: c4:d3:08:a3:93:27:35:3d:ef:d6:9a:e8:e3:51:77:85:d8:7d: 3a:73:b7:13:7f:5e:6e:a6:26:d2:62:e4:70:02:dc:75:b4:1f: 0e:da:f8:36:8d:e1:79:6c:a7:ae:ce:1c:c1:f8:5b:38:61:ee: e2:ad:7b:8c:93:12:e3:04:d5:dd:20:35:88:40:67:ab:ac:e7: 12:06:4c:06:7c:3e:81:de:9a:96:08:5a:a6:a4:e6:55:e5:c4: ca:cd:57:d9:ec:77:ff:a9:89:83:c1:75:a4:69:3e:85:f2:70: e3:0f:af:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjQwNTAzMDExNjU4WhcNMjQwNTEwMDExNjU4WjAYMRYwFAYD VQQDEw02NjM0M2IwYi03NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLHpKTHKVllga26k0IrtEvoWtuB5VUEDK7cpJwjy+/TO51qCk2VfIvp1nHwI DMuow6Plb20gYnruIM8JSIpdXBdOHGcIF1eiT7Wg+d8r72mnMPFoG+avoU+DoavO W9mmHFiJnJqAiW2l448CfblRexLh9SQL3dastIJqCn6bLqizZsPopnLAH6B1GLSa n/Z8BKe2jV72cw2/BqRgRp19CJRoDIWt9onzCkEDjyZkGIHoCtBNlbuajdtVTl8D HN698B/JBcRiD4V1ISHqYZz0qUxHXKVEzsTp4oqG0hC1myT9IfWGwaZTnD75gRhu 15X64CukMJAi8Zg3/DIX0BK7UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjc+FxJ WFn9Tlyeq1Fcm9uYD5FXMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY6xfNN4nsqA4Sccy/PCK/PjR+e210VBDYgs4mdE/QmFsI2LGDnJBR I4BHAYW124Q9nAinopmQROMuZjVasMpqWYheWS/4TVSXEis0/uND0JPFrmAXRMgy qDWIhv0YiiI2rM3Qp8CyOEbRNmSlQu+hgAvoc/6YnUdFWd/18fGazXyb3hgSnLzl Z1pSVXCHUTjE0wijkyc1Pe/WmujjUXeF2H06c7cTf15upibSYuRwAtx1tB8O2vg2 jeF5bKeuzhzB+Fs4Ye7irXuMkxLjBNXdIDWIQGerrOcSBkwGfD6B3pqWCFqmpOZV 5cTKzVfZ7Hf/qYmDwXWkaT6F8nDjD698 -----END CERTIFICATE-----Generated at Fri May 3 04:45:09 2024 by rpki-client on console-fra.rpki-client.org