$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: X/1XLDlvHMmdtzvtK4r3IZbUKnOWYbPhIZhnO5Wof5c= Subject key identifier: E9:22:EB:23:F8:2D:D5:D9:EC:39:F6:90:FD:73:45:7D:6C:79:34:7D Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 02C2 Signing time: Tue 07 May 2024 03:30:28 +0000 Manifest this update: Tue 07 May 2024 03:30:28 +0000 Manifest next update: Tue 14 May 2024 03:30:28 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: G2o9DU3DzSDicm7co3SNRgVmHZAqMAedFZaTHqgTwOk=) 2: 5BAD43C6ECA811ECB429C769C4F9AE02.roa (hash: sBRxNMyO5cgErQP99ZtGbaHwbr7zeOeL5Al4JKyVOm4=) 3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: 0iilf+ewcCHfBiolJYNIAXD//CPGH9dwNN6NaTR2wTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: May 7 03:30:28 2024 GMT Not After : May 14 03:30:28 2024 GMT Subject: CN=6639a054-fd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:f0:ef:7a:96:81:45:02:fd:c9:da:a1:2c: 4e:83:8f:55:c5:c6:9a:44:56:c2:aa:d0:bc:86:e0: 4a:2f:ea:2a:60:8e:7b:9a:70:fb:cf:82:7c:57:92: 79:d1:bc:f4:46:ff:aa:1c:a3:06:86:aa:72:ca:5a: 7d:20:09:d6:c9:fb:bf:75:06:cc:ea:81:7e:30:b5: 0c:d6:33:dc:ce:b3:3b:dd:01:5a:7a:4c:f6:e5:dd: ac:3b:ce:2c:6e:7a:60:ae:03:23:b0:de:e9:11:65: 89:ac:d7:ff:69:c1:a0:ea:70:09:67:a3:c0:e4:20: 04:b2:be:ff:a5:d6:6d:9b:42:28:7e:9d:44:b9:e0: 9e:d8:f1:18:9b:17:cd:0e:02:a7:20:88:7f:f9:11: 62:d9:bb:50:0e:03:41:bc:16:e0:50:d0:57:ba:29: 8a:b6:46:3f:32:da:d0:32:27:a3:66:a1:71:35:51: de:0b:70:63:1a:68:4e:76:95:2e:72:59:e9:42:d5: 7d:21:d2:bb:89:7c:ab:db:bc:46:be:73:c9:0a:f4: d4:f0:4b:d3:bd:45:9c:62:6b:4e:7d:55:ca:1b:9b: af:30:2f:e1:20:4a:d2:60:a1:7c:4a:4b:6d:ed:54: a8:15:58:c9:e2:4a:25:1d:9e:33:95:62:59:fe:58: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:22:EB:23:F8:2D:D5:D9:EC:39:F6:90:FD:73:45:7D:6C:79:34:7D X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:13:c7:e9:5f:a0:8c:eb:68:74:ba:f4:13:4d:da:4d:e7:4c: a8:87:fa:80:67:d7:25:e5:50:61:f7:fe:3c:8a:8e:83:2a:a4: 06:3b:33:34:1f:56:0b:c8:f4:65:d3:7c:61:95:e5:9f:ad:63: e8:44:82:7c:79:6d:3d:35:5e:85:5f:fc:42:c6:fd:ff:9e:e2: 72:b5:77:77:2f:51:2a:ec:78:1f:b2:6b:17:5e:6f:ab:88:d7: 63:25:e0:15:52:3e:4c:e9:52:a6:23:0a:8e:4a:04:95:44:22: 5f:a8:77:05:9e:ff:f0:42:6c:c9:cc:c2:55:eb:9d:58:42:b7: bd:81:29:05:e9:0f:51:4f:6e:69:69:95:a4:86:3e:f8:2c:3d: 18:3b:43:a9:8f:81:21:25:b4:b6:4f:fe:2c:29:8b:50:cd:39: 12:fa:1e:a5:bc:5e:e8:cd:58:6a:ab:5c:04:16:54:62:a1:12: 8f:3b:88:0c:5f:77:d6:a3:bd:7d:f9:99:c6:5c:d6:32:fb:d7: 18:f1:fc:0c:94:84:42:1e:a1:ac:f4:e7:f0:f5:79:88:70:e0: ec:aa:4e:de:f0:bc:aa:c6:37:30:56:f9:e8:2a:74:3b:8f:38: 06:56:e4:bf:da:c9:f1:0c:43:fb:1d:c0:34:9d:fb:ae:4a:e4: ed:9e:3b:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjQwNTA3MDMzMDI4WhcNMjQwNTE0MDMzMDI4WjAYMRYwFAYD VQQDEw02NjM5YTA1NC1mZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstPw73qWgUUC/cnaoSxOg49VxcaaRFbCqtC8huBKL+oqYI57mnD7z4J8V5J5 0bz0Rv+qHKMGhqpyylp9IAnWyfu/dQbM6oF+MLUM1jPczrM73QFaekz25d2sO84s bnpgrgMjsN7pEWWJrNf/acGg6nAJZ6PA5CAEsr7/pdZtm0Iofp1EueCe2PEYmxfN DgKnIIh/+RFi2btQDgNBvBbgUNBXuimKtkY/MtrQMiejZqFxNVHeC3BjGmhOdpUu clnpQtV9IdK7iXyr27xGvnPJCvTU8EvTvUWcYmtOfVXKG5uvMC/hIErSYKF8Sktt 7VSoFVjJ4kolHZ4zlWJZ/li3+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOki6yP4 LdXZ7Dn2kP1zRX1seTR9MB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlE8fpX6CM62h0uvQTTdpN50yoh/qAZ9cl5VBh9/48io6DKqQGOzM0 H1YLyPRl03xhleWfrWPoRIJ8eW09NV6FX/xCxv3/nuJytXd3L1Eq7HgfsmsXXm+r iNdjJeAVUj5M6VKmIwqOSgSVRCJfqHcFnv/wQmzJzMJV651YQre9gSkF6Q9RT25p aZWkhj74LD0YO0Opj4EhJbS2T/4sKYtQzTkS+h6lvF7ozVhqq1wEFlRioRKPO4gM X3fWo719+ZnGXNYy+9cY8fwMlIRCHqGs9Ofw9XmIcODsqk7e8LyqxjcwVvnoKnQ7 jzgGVuS/2snxDEP7HcA0nfuuSuTtnjsI -----END CERTIFICATE-----Generated at Tue May 7 04:34:48 2024 by rpki-client on console-fra.rpki-client.org