$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: SChodByPdxwYjyW3DJfCpQEOGRXPgVlhouXDPC80dy4= Subject key identifier: B3:F8:D2:89:57:4B:8A:4E:2A:18:29:2D:D3:2D:B5:95:5E:D2:7E:89 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0561 Signing time: Sun 05 May 2024 01:10:53 +0000 Manifest this update: Sun 05 May 2024 01:10:53 +0000 Manifest next update: Sun 12 May 2024 01:10:53 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: d4SMZniY6NsxDFsvyIbzoBlwDrH3q2TLiy6xswpSUzw=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: wKLWNuRTWdHZ+FYW6NBJf7517//f9bbqxj5BE5RLIbI=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: oYXJQm/bjAibaz8nsXjKJt8mNmtyiHFVv07p/FS+Uv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: May 5 01:10:53 2024 GMT Not After : May 12 01:10:53 2024 GMT Subject: CN=6636dc9d-2705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:1e:86:47:20:77:35:48:d0:df:53:ef:b3: 61:cd:ef:db:ff:01:02:e3:b1:3a:19:de:6a:ed:04: 80:42:46:4b:77:15:b9:c3:a8:9a:09:d8:0d:8a:73: b7:d6:a4:38:d0:3c:ba:3a:80:3e:d3:39:64:65:71: 2c:37:2e:d8:54:0a:5b:38:c1:4c:65:e3:85:e0:ad: 9e:e6:33:73:a6:65:2a:45:70:91:0d:43:14:b3:b9: b8:c9:35:a0:a1:1d:51:25:dc:ef:02:d8:e7:bf:7a: f7:19:d7:10:c9:22:d9:7d:45:54:51:4c:d6:85:37: 79:96:cc:57:59:96:71:7a:00:ee:a7:d4:01:3f:54: 97:ea:12:f2:b2:d2:3d:ca:d7:ba:19:64:e3:ce:65: 94:20:95:1e:b8:5a:c0:06:1b:c1:b1:0f:31:6a:45: 19:33:9c:fd:db:bd:6a:3e:4a:81:90:00:29:57:cc: 16:ff:de:0b:8e:89:4a:40:0c:bd:5f:13:a9:40:66: cf:21:8e:62:7a:85:48:26:ba:4c:a2:61:95:48:15: 1b:ec:af:65:52:2d:3a:78:9a:00:39:a7:b6:6d:13: 8a:34:f7:a0:48:7f:01:14:e9:c2:3c:bb:a7:a8:b2: 6f:42:b4:e3:ce:fb:4b:72:19:03:04:60:cb:fe:8d: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F8:D2:89:57:4B:8A:4E:2A:18:29:2D:D3:2D:B5:95:5E:D2:7E:89 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:26:4c:24:c1:b1:8a:60:76:41:f1:7d:70:c9:5e:4a:f2:10: 86:39:ee:13:5f:b9:ce:a4:0c:02:e3:b3:20:ef:82:ff:aa:7f: dc:64:45:3c:96:27:c0:f5:c2:9f:f4:7e:66:40:52:5c:e9:12: 5b:3e:d4:13:38:3a:03:c4:14:17:eb:09:22:d8:36:1b:72:4a: f0:8e:f3:c8:42:f5:e1:f1:6d:2f:e9:7e:68:fd:c4:11:a7:28: 79:40:b0:a1:a2:ea:50:73:fa:4e:de:b9:1d:9b:33:ba:70:a4: da:01:2c:c0:eb:49:28:72:db:a3:9d:cd:d7:37:aa:31:4d:38: 09:e5:76:9d:75:22:a9:88:91:8f:99:5f:14:98:76:f8:f1:2a: 75:1b:6d:ed:45:e4:83:eb:46:e8:e0:a7:a5:3f:51:59:78:89: 4f:69:31:39:2a:05:d4:a2:71:84:d5:76:4f:8b:dc:4a:35:cb: 4e:c2:83:8b:de:19:ff:ea:f4:27:e2:48:c1:31:04:95:e9:67: 48:a2:68:76:c9:a8:c2:20:0a:f5:51:57:75:e8:ed:77:aa:b1: 2b:a4:7a:de:db:86:b0:12:c5:1b:c7:40:e6:af:c8:21:88:59: 68:5f:9e:59:69:87:30:0b:48:05:c5:35:b3:99:f0:51:50:4a: ec:d5:3a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjQwNTA1MDExMDUzWhcNMjQwNTEyMDExMDUzWjAYMRYwFAYD VQQDEw02NjM2ZGM5ZC0yNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KoehkcgdzVI0N9T77Nhze/b/wEC47E6Gd5q7QSAQkZLdxW5w6iaCdgNinO3 1qQ40Dy6OoA+0zlkZXEsNy7YVApbOMFMZeOF4K2e5jNzpmUqRXCRDUMUs7m4yTWg oR1RJdzvAtjnv3r3GdcQySLZfUVUUUzWhTd5lsxXWZZxegDup9QBP1SX6hLystI9 yte6GWTjzmWUIJUeuFrABhvBsQ8xakUZM5z9271qPkqBkAApV8wW/94LjolKQAy9 XxOpQGbPIY5ieoVIJrpMomGVSBUb7K9lUi06eJoAOae2bROKNPegSH8BFOnCPLun qLJvQrTjzvtLchkDBGDL/o1L0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP40olX S4pOKhgpLdMttZVe0n6JMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMJkwkwbGKYHZB8X1wyV5K8hCGOe4TX7nOpAwC47Mg74L/qn/cZEU8 lifA9cKf9H5mQFJc6RJbPtQTODoDxBQX6wki2DYbckrwjvPIQvXh8W0v6X5o/cQR pyh5QLChoupQc/pO3rkdmzO6cKTaASzA60koctujnc3XN6oxTTgJ5XaddSKpiJGP mV8UmHb48Sp1G23tReSD60bo4KelP1FZeIlPaTE5KgXUonGE1XZPi9xKNctOwoOL 3hn/6vQn4kjBMQSV6WdIomh2yajCIAr1UVd16O13qrErpHre24awEsUbx0Dmr8gh iFloX55ZaYcwC0gFxTWzmfBRUErs1Tqa -----END CERTIFICATE-----Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org