$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json) Hash identifier: Ov3Zr6YThhexqprtZCyxitHAteGVOM+G2Lp7fa4WxUo= Subject key identifier: 52:0A:EF:BA:0E:D2:23:E0:39:6C:4E:ED:39:B6:06:2E:13:43:26:FB Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft Manifest number: 019F Signing time: Tue 07 May 2024 04:37:48 +0000 Manifest this update: Tue 07 May 2024 04:37:48 +0000 Manifest next update: Tue 14 May 2024 04:37:48 +0000 Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: nFrTLYkOMkJoiHa/XzKahYJNaUurXRLit31QvkDleY0=) 2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: sSRGVEBzASY8Umw1zkpTyHPoXEabklGOxKI2hTKzelI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Validity Not Before: May 7 04:37:48 2024 GMT Not After : May 14 04:37:48 2024 GMT Subject: CN=6639b01c-5a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:1d:6b:bb:56:0e:82:5f:a1:37:c7:6c:c9: 58:da:b9:dd:95:34:db:9d:60:53:ec:45:be:c3:51: 07:81:9b:ba:56:45:14:94:5d:f9:6a:44:46:04:a0: 3f:f1:52:da:2b:22:06:7e:e9:49:e9:d4:f3:3d:36: 17:c6:19:9f:6a:3b:f8:99:4d:ca:0e:08:9b:09:af: 04:04:9c:c4:df:d7:b8:91:64:98:73:cd:b7:ae:f8: 0d:ef:7e:da:bf:0b:c6:3e:ef:00:b1:2b:09:05:ba: 8d:38:b5:91:e1:af:08:67:15:b3:aa:bf:bd:09:79: c2:5b:f0:43:a5:6e:89:ff:b5:cf:a6:93:c0:10:f3: 62:9b:fa:f4:e0:45:00:d0:e4:d9:4e:76:a9:ee:0d: 72:9f:6d:83:c5:1a:38:fe:d6:75:c1:bd:4b:05:0f: ac:29:d4:5b:0a:dd:68:f9:dc:f3:3d:7a:2e:42:65: 0d:27:e7:0a:19:26:00:d1:65:b1:94:29:70:64:58: 5e:f7:97:72:a4:37:60:ed:db:53:01:a6:50:6b:b5: bf:0b:de:a6:6b:68:20:17:64:3d:65:91:2b:b7:10: 27:46:e5:e8:66:fb:36:cc:e4:82:c2:4d:8f:45:4f: 6b:93:f6:be:1f:03:7f:d4:10:34:95:c7:fc:14:c1: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0A:EF:BA:0E:D2:23:E0:39:6C:4E:ED:39:B6:06:2E:13:43:26:FB X509v3 Authority Key Identifier: keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:21:8e:ce:1c:a4:75:ad:11:30:47:a3:96:f0:9e:56:48:50: 8a:52:73:7a:ac:90:92:bc:3b:08:d3:01:0b:74:20:d3:44:eb: 70:66:10:e5:84:3a:7f:aa:f8:a2:52:d0:7d:2e:09:14:24:64: 4f:97:2b:ae:14:13:8d:99:3e:e8:fe:62:c6:d9:a8:af:ba:9b: 2a:0b:10:1b:ed:eb:2b:b7:98:8a:57:5a:18:f6:29:2d:8b:be: b2:77:4a:1d:ab:19:ec:7d:08:bb:61:71:27:7e:9d:1d:28:aa: 0e:e8:39:a9:8b:f0:14:68:6f:ce:88:81:ed:37:df:6b:3b:87: 22:0b:7a:ca:d6:dd:f6:20:6b:20:63:cf:c7:37:23:e4:34:31: 2a:31:87:07:df:d1:d3:55:98:5f:37:30:bd:32:8f:19:19:e9: 7b:06:eb:45:80:85:52:b4:52:39:a7:2a:9c:0e:b8:3d:d1:ed: 3e:25:24:4b:55:33:3c:c8:c6:c0:59:72:48:cc:b7:41:9f:c0: 4e:df:fa:f0:e4:b2:26:19:6b:c6:63:1e:4e:38:b5:64:ef:72: bf:ea:13:11:8e:9b:e7:9c:8d:b5:1d:b4:ff:cf:a3:6d:13:ac: 04:1d:ab:77:22:89:b4:42:fd:a7:eb:b3:14:ab:9f:08:76:95: 66:ff:8e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZGNkYxMTAvBgNVBAUTKEZCMTFBMkQ4MzY4QzE1MDIxQTVCRjMxMkY1MUQ0NENF NThGRDQ0NTEwHhcNMjQwNTA3MDQzNzQ4WhcNMjQwNTE0MDQzNzQ4WjAYMRYwFAYD VQQDEw02NjM5YjAxYy01YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IUda7tWDoJfoTfHbMlY2rndlTTbnWBT7EW+w1EHgZu6VkUUlF35akRGBKA/ 8VLaKyIGfulJ6dTzPTYXxhmfajv4mU3KDgibCa8EBJzE39e4kWSYc823rvgN737a vwvGPu8AsSsJBbqNOLWR4a8IZxWzqr+9CXnCW/BDpW6J/7XPppPAEPNim/r04EUA 0OTZTnap7g1yn22DxRo4/tZ1wb1LBQ+sKdRbCt1o+dzzPXouQmUNJ+cKGSYA0WWx lClwZFhe95dypDdg7dtTAaZQa7W/C96ma2ggF2Q9ZZErtxAnRuXoZvs2zOSCwk2P RU9rk/a+HwN/1BA0lcf8FMGFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIK77oO 0iPgOWxO7Tm2Bi4TQyb7MB8GA1UdIwQYMBaAFPsRotg2jBUCGlvzEvUdRM5Y/URR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkY2Ri8xMkUyNTE3QzE0 NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZRSWFXX01TOVIxRXpsajlS RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14R2kyRGFNRlFJYVdfTVM5UjFFemxqOVJGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkY2Ri8xMkUyNTE3QzE0NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZR SWFXX01TOVIxRXpsajlSRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQIY7OHKR1rREwR6OW8J5WSFCKUnN6rJCSvDsI0wELdCDTROtwZhDl hDp/qviiUtB9LgkUJGRPlyuuFBONmT7o/mLG2aivupsqCxAb7esrt5iKV1oY9ikt i76yd0odqxnsfQi7YXEnfp0dKKoO6Dmpi/AUaG/OiIHtN99rO4ciC3rK1t32IGsg Y8/HNyPkNDEqMYcH39HTVZhfNzC9Mo8ZGel7ButFgIVStFI5pyqcDrg90e0+JSRL VTM8yMbAWXJIzLdBn8BO3/rw5LImGWvGYx5OOLVk73K/6hMRjpvnnI21HbT/z6Nt E6wEHat3Iom0Qv2n67MUq58IdpVm/46K -----END CERTIFICATE-----Generated at Tue May 7 05:39:51 2024 by rpki-client on console-fra.rpki-client.org