$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: ZtRhPiR4Lc3UmDOJQJkBWMyQ+P8zU0EnZ+eW9NvMsIg= Subject key identifier: E9:BD:C6:16:7E:83:8C:46:6C:0C:43:A7:2D:FC:EB:C1:97:ED:14:4B Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 44 Signing time: Wed 15 May 2024 08:43:15 +0000 Manifest this update: Wed 15 May 2024 08:43:15 +0000 Manifest next update: Wed 22 May 2024 08:43:15 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: tk3kL32KI6fvld0ff8KPSQ+XIA3jKKBZ4xlPepJ7NfY=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: kortXzDV3z8yqdb7hUTvSq2L5JWGq27VKKVJ2FtpSxc=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: rRm+rUr3qcN16z/Oqf9uTNEkdYMxgFxb6sxz/dypYvc=) 4: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: O9tYO6kupKQU9ptuAQl06h/ZNlTFKl9W/lRHr1Y6j4E=) 5: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: vihfleeETh6RhPkPr9fPr5Gym7kQ9gHXsPSD/cQHxVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: May 15 08:43:15 2024 GMT Not After : May 22 08:43:15 2024 GMT Subject: CN=664475a3-4a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:3e:11:29:84:ee:09:94:3f:6d:4b:bc:ea: 21:f5:80:07:17:4f:63:c8:4e:59:65:8e:69:a7:21: 44:a8:00:52:66:bc:f3:de:a4:f9:3f:77:f3:d9:ff: 35:e8:eb:af:2b:92:35:10:79:8c:32:5d:a1:96:39: e3:4c:b4:16:93:df:0d:2c:66:e4:06:85:b8:32:d0: fd:b2:ee:12:3d:92:bf:29:0a:b7:8e:3c:86:6a:16: b1:3a:9a:b1:96:a1:4a:bf:44:9d:7b:cf:8f:b2:81: 52:df:88:a1:ce:c5:c8:d4:4b:cb:c5:c3:eb:0d:51: 08:03:3b:79:7c:09:af:c4:1c:e6:31:a7:bb:1c:2d: 3b:f6:5a:3f:16:7f:c5:9e:48:01:3e:42:63:30:68: f5:4c:f8:58:ea:f3:48:6b:75:23:68:c8:58:8d:9e: 61:c7:64:d9:9a:fb:6a:7c:13:14:e8:fa:33:3c:c8: db:d2:6e:e9:ac:9e:06:9a:d1:78:66:3d:d7:67:03: 66:d3:36:2b:bf:67:38:0c:3f:87:4e:57:3a:b3:3e: 46:91:90:27:30:4b:1b:28:f8:69:81:5d:bd:7c:e4: bb:9a:1f:8f:76:67:14:63:43:ab:a5:98:3f:40:82: 93:1a:98:5c:91:64:3b:99:b4:34:98:99:71:6e:51: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BD:C6:16:7E:83:8C:46:6C:0C:43:A7:2D:FC:EB:C1:97:ED:14:4B X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ab:7f:1a:80:14:bb:82:26:c0:db:4b:52:93:ec:c4:dc:40: 5d:7f:e1:14:63:2e:d8:6e:a5:14:4d:33:7a:f4:a9:dc:db:b8: 7a:c6:ab:26:d0:0f:ee:43:95:95:34:b8:a6:7a:28:9e:21:c7: 4c:b5:a8:12:b6:44:db:03:2c:41:04:92:4c:e1:eb:a6:36:a0: f3:6c:3f:f8:15:d8:33:1b:fc:1e:38:1c:30:84:12:19:bc:d2: 4f:f5:d4:30:b4:dc:5d:c4:ff:6b:66:2a:f3:e1:b5:76:8c:fe: 28:10:c6:5b:cd:71:d4:3d:86:e4:b8:fa:98:d2:a5:e6:ae:6f: 78:5a:46:51:74:ee:27:69:de:a4:bf:eb:58:fd:cb:7a:e9:75: 48:c1:eb:07:08:c7:f2:06:f7:1b:e1:62:15:f1:6e:0c:4e:f4: 3f:9b:0a:a9:ec:74:f8:7b:d9:a2:8b:16:94:3a:28:a7:67:a0: d6:1a:0b:a5:79:bc:13:5f:21:9a:2c:31:ec:16:bd:98:98:38: 97:00:29:75:5a:20:17:cf:0b:e0:9c:d1:68:20:c5:2f:fc:f9: 9e:c0:c9:10:c1:b8:eb:c4:89:c4:02:82:5d:48:44:ed:69:98: 4d:97:5f:59:c5:6a:c2:25:7c:09:05:54:7e:71:4e:7c:06:9f: 3f:91:01:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjUzNTExMC8GA1UEBRMoRDQ4Q0VEMThGNjhDQTIyNjk4M0Y5Rjk5OUExNDA2MzYy NzVCNkE1NTAeFw0yNDA1MTUwODQzMTVaFw0yNDA1MjIwODQzMTVaMBgxFjAUBgNV BAMTDTY2NDQ3NWEzLTRhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM6T4RKYTuCZQ/bUu86iH1gAcXT2PITllljmmnIUSoAFJmvPPepPk/d/PZ/zXo 668rkjUQeYwyXaGWOeNMtBaT3w0sZuQGhbgy0P2y7hI9kr8pCreOPIZqFrE6mrGW oUq/RJ17z4+ygVLfiKHOxcjUS8vFw+sNUQgDO3l8Ca/EHOYxp7scLTv2Wj8Wf8We SAE+QmMwaPVM+Fjq80hrdSNoyFiNnmHHZNma+2p8ExTo+jM8yNvSbumsngaa0Xhm PddnA2bTNiu/ZzgMP4dOVzqzPkaRkCcwSxso+GmBXb185LuaH492ZxRjQ6ulmD9A gpMamFyRZDuZtDSYmXFuUXTbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6b3GFn6D jEZsDEOnLfzrwZftFEswHwYDVR0jBBgwFoAU1IztGPaMoiaYP5+ZmhQGNidbalUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNTM1LzY5QTU4MDc4QkE2 NjExRUVCQzM5NjI2RUM0RjlBRTAyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFs VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUl6dEdQYU1vaWFZUDUtWm1oUUdOaWRiYWxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NTM1LzY5QTU4MDc4QkE2NjExRUVCQzM5NjI2RUM0RjlBRTAyLzFJenRHUGFNb2lh WVA1LVptaFFHTmlkYmFsVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGKrfxqAFLuCJsDbS1KT7MTcQF1/4RRjLthupRRNM3r0qdzbuHrGqybQ D+5DlZU0uKZ6KJ4hx0y1qBK2RNsDLEEEkkzh66Y2oPNsP/gV2DMb/B44HDCEEhm8 0k/11DC03F3E/2tmKvPhtXaM/igQxlvNcdQ9huS4+pjSpeaub3haRlF07idp3qS/ 61j9y3rpdUjB6wcIx/IG9xvhYhXxbgxO9D+bCqnsdPh72aKLFpQ6KKdnoNYaC6V5 vBNfIZosMewWvZiYOJcAKXVaIBfPC+Cc0WggxS/8+Z7AyRDBuOvEicQCgl1IRO1p mE2XX1nFasIlfAkFVH5xTnwGnz+RAZg= -----END CERTIFICATE-----Generated at Wed May 15 09:27:29 2024 by rpki-client on console-fra.rpki-client.org