$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: GpcFDyZvg5/qr8ZCdR48Sp26EcIcU8+Txar0QYZEL+k= Subject key identifier: EE:F0:3F:65:33:A0:10:FD:B5:DB:0C:02:76:34:D2:C7:18:56:D1:EE Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 0646 Signing time: Mon 06 May 2024 23:43:57 +0000 Manifest this update: Mon 06 May 2024 23:43:57 +0000 Manifest next update: Mon 13 May 2024 23:43:57 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: HqYnZ2yicmeHwiTFU63Lj4cEHLbEDtRVCYiWVvIWVlE=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: 6ikPRivM9dyX+oWH7lTRKsL9Xko5L5LgnDcsklfd0Jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: May 6 23:43:57 2024 GMT Not After : May 13 23:43:57 2024 GMT Subject: CN=66396b3d-96f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:90:c7:ce:d3:93:0b:3c:4a:86:88:14:b4: d3:b3:78:a9:a5:5a:08:88:11:59:e8:26:41:57:68: bd:c6:82:aa:1f:96:a6:71:1e:0a:3b:25:a1:d2:91: e3:cf:fe:f9:6e:3a:1a:1d:63:52:a2:a8:fe:57:e9: 72:b0:d7:0a:cb:0e:30:33:f8:3d:3c:7a:33:36:75: ff:9c:34:59:b7:0b:16:81:1f:59:1c:08:36:00:14: a9:da:d4:5d:cc:37:43:37:a2:c8:dc:7f:1f:fa:c6: b2:13:eb:80:cd:8c:e2:91:ab:1c:a5:84:63:a4:fd: 17:14:70:8a:64:46:93:78:ab:c8:f0:ec:8e:fb:99: 34:21:0e:6e:30:ad:f8:3f:6e:79:a3:a6:62:7d:ac: a9:49:b6:75:d6:97:b8:20:34:98:4b:08:a1:15:df: bc:9a:56:7c:15:9f:5e:3d:c5:7c:fd:f4:48:8f:74: ff:5f:85:78:c3:eb:ea:12:2a:92:f4:34:97:4a:7a: 7f:fb:08:36:db:f0:73:92:3f:ae:ee:d6:e6:62:70: 2a:74:a4:9f:4d:aa:d8:b1:1c:db:17:11:50:5b:16: 72:de:99:98:95:f7:30:9d:d0:fb:27:5b:77:36:bc: 40:d1:92:f5:1f:42:cc:0c:59:be:fa:36:b1:60:98: 0a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F0:3F:65:33:A0:10:FD:B5:DB:0C:02:76:34:D2:C7:18:56:D1:EE X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f9:01:d9:05:d4:3a:92:4d:8d:ca:d2:48:cf:0b:4d:a5:d3: 9b:ff:3e:19:ee:75:99:52:e7:85:a6:e8:37:1e:6a:c9:5f:ce: 41:f4:f8:9b:09:5b:06:09:62:a7:0b:68:14:5d:b7:a1:da:89: 6b:10:54:f6:fb:a2:83:08:9f:18:92:e3:1d:96:67:f7:b3:d4: 9b:44:a4:23:4d:f3:c3:21:9e:59:c0:12:07:91:c5:70:4b:f3: 9b:9d:f6:18:85:60:d4:86:6a:cd:e3:e3:72:09:ba:a7:2b:e9: 43:2b:b5:8f:b6:32:84:47:a3:41:22:84:b4:4e:7a:67:26:ae: b0:c2:c6:9c:4f:e2:6b:ef:04:8f:63:89:9c:7c:80:82:de:b5: 60:2f:6c:61:ad:1c:71:be:ae:d9:e6:d3:58:2c:bb:b1:2a:18: 0b:af:64:93:10:11:2f:e6:69:39:a0:58:27:f0:ec:60:68:5e: 9c:23:90:fb:ce:29:88:b8:16:3e:47:12:64:de:f5:1d:48:9a: aa:8e:e4:cb:8e:b5:19:a6:69:71:bf:e8:bf:cd:b2:f9:e9:70: 7e:6c:8e:23:ad:5f:17:67:e3:0a:65:55:0d:c3:c5:43:6a:a4: b8:23:5a:be:4c:21:96:c1:d0:22:dc:30:d4:a4:49:59:88:4c: 9b:25:af:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjQwNTA2MjM0MzU3WhcNMjQwNTEzMjM0MzU3WjAYMRYwFAYD VQQDEw02NjM5NmIzZC05NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC+Qx87Tkws8SoaIFLTTs3ippVoIiBFZ6CZBV2i9xoKqH5amcR4KOyWh0pHj z/75bjoaHWNSoqj+V+lysNcKyw4wM/g9PHozNnX/nDRZtwsWgR9ZHAg2ABSp2tRd zDdDN6LI3H8f+sayE+uAzYzikascpYRjpP0XFHCKZEaTeKvI8OyO+5k0IQ5uMK34 P255o6ZifaypSbZ11pe4IDSYSwihFd+8mlZ8FZ9ePcV8/fRIj3T/X4V4w+vqEiqS 9DSXSnp/+wg22/Bzkj+u7tbmYnAqdKSfTarYsRzbFxFQWxZy3pmYlfcwndD7J1t3 NrxA0ZL1H0LMDFm++jaxYJgKMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7wP2Uz oBD9tdsMAnY00scYVtHuMB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+QHZBdQ6kk2NytJIzwtNpdOb/z4Z7nWZUueFpug3HmrJX85B9Pib CVsGCWKnC2gUXbeh2olrEFT2+6KDCJ8YkuMdlmf3s9SbRKQjTfPDIZ5ZwBIHkcVw S/ObnfYYhWDUhmrN4+NyCbqnK+lDK7WPtjKER6NBIoS0TnpnJq6wwsacT+Jr7wSP Y4mcfICC3rVgL2xhrRxxvq7Z5tNYLLuxKhgLr2STEBEv5mk5oFgn8OxgaF6cI5D7 zimIuBY+RxJk3vUdSJqqjuTLjrUZpmlxv+i/zbL56XB+bI4jrV8XZ+MKZVUNw8VD aqS4I1q+TCGWwdAi3DDUpElZiEybJa+i -----END CERTIFICATE-----Generated at Tue May 7 01:58:15 2024 by rpki-client on console-fra.rpki-client.org