$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: cg3jJVhgImTfVrCB1Cjo2xcf6iFYExNLz6liuwVMimE= Subject key identifier: 49:DD:84:36:EB:3C:23:39:02:E4:AF:60:8A:00:C5:30:56:D5:D8:BE Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 04FC Signing time: Fri 03 May 2024 01:19:28 +0000 Manifest this update: Fri 03 May 2024 01:19:27 +0000 Manifest next update: Fri 10 May 2024 01:19:27 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: UjRL+jysIPMQ5aiLCdhBpHJdGYWUJjnx+Moyk1+ZOV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: May 3 01:19:27 2024 GMT Not After : May 10 01:19:27 2024 GMT Subject: CN=66343b9f-f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:b4:1e:c2:13:41:d1:07:58:d7:30:11:45: fa:c6:3c:1e:30:17:dc:b6:99:1d:0c:76:d7:de:a6: 03:b6:76:14:30:96:c6:3a:37:5f:4e:e0:10:61:df: 19:02:6f:e7:37:af:77:9e:44:89:79:9e:38:29:18: ab:07:4d:86:77:84:d5:9e:15:15:18:a3:ff:97:08: 9c:e6:96:76:b6:32:33:2c:bc:76:67:fa:48:9c:52: 28:dc:a6:ec:be:dd:94:d4:6c:fc:80:ff:9b:29:f5: d6:26:aa:92:55:3e:46:90:7c:70:36:9f:94:85:2b: 02:02:ed:eb:9f:b7:39:5f:1f:9a:db:3f:64:69:2b: f6:90:1b:51:65:c5:7d:9e:7b:e3:46:2e:7d:d1:f9: 34:7b:2c:45:ee:20:d5:33:67:10:b4:b3:a1:eb:f6: 09:71:9a:04:bc:cb:50:5c:31:a3:e8:3c:6b:e4:42: dc:9a:52:66:be:c4:b9:a6:5b:71:cb:07:73:b6:63: 9f:c0:7c:21:6d:ae:84:15:2b:83:c9:b0:1d:55:4f: a7:66:bb:4f:a5:d2:dc:36:44:6e:84:13:53:b2:49: 6f:7b:92:00:76:e1:43:3f:52:f3:0b:ca:f7:ab:9f: a9:dc:2d:bf:2b:1c:67:ec:f3:50:18:99:c3:9c:65: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:84:36:EB:3C:23:39:02:E4:AF:60:8A:00:C5:30:56:D5:D8:BE X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1f:76:85:92:03:11:a1:70:a4:db:20:92:1a:a7:59:ec:8d: e1:16:eb:5d:13:96:84:76:48:f9:5f:73:d6:d6:27:c5:f4:07: 4b:f9:e1:23:29:ae:40:e8:97:9b:4e:27:74:4b:29:30:69:70: e2:8d:9a:39:dd:f5:48:93:7b:ec:3f:b4:bb:41:2f:0e:e9:09: ab:89:3c:d5:b0:7a:2d:d4:84:bd:fb:f5:79:c0:ee:2f:b7:01: 4f:e9:d0:5b:10:b4:63:0b:9a:de:07:38:c2:97:b4:05:2c:18: eb:32:ae:26:91:ca:6a:88:be:27:4c:a1:6b:0d:b0:53:ac:2c: 86:0f:c4:c9:19:10:31:4a:b7:77:f2:fd:7d:05:d1:c1:c1:a9: 4e:26:80:e0:f7:2d:aa:a4:ea:d7:bf:a9:32:ca:c6:a3:79:fb: 70:0c:d4:3a:0d:fc:45:42:bc:e3:10:ec:77:43:90:e2:4e:c1: 77:ce:0a:8f:e9:cb:3d:34:22:da:57:3e:f2:e3:8c:9c:a6:7e: e0:63:10:a3:ba:8f:6f:5c:10:dd:fa:c7:d4:46:e5:d6:04:79: c0:42:83:2c:8c:77:29:ca:40:20:5e:c4:84:e4:a8:00:19:0f: 14:a6:dd:af:9c:10:c3:43:cd:16:1e:5f:11:d1:c7:c2:ac:9a: db:57:14:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjQwNTAzMDExOTI3WhcNMjQwNTEwMDExOTI3WjAYMRYwFAYD VQQDEw02NjM0M2I5Zi1mNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO60HsITQdEHWNcwEUX6xjweMBfctpkdDHbX3qYDtnYUMJbGOjdfTuAQYd8Z Am/nN693nkSJeZ44KRirB02Gd4TVnhUVGKP/lwic5pZ2tjIzLLx2Z/pInFIo3Kbs vt2U1Gz8gP+bKfXWJqqSVT5GkHxwNp+UhSsCAu3rn7c5Xx+a2z9kaSv2kBtRZcV9 nnvjRi590fk0eyxF7iDVM2cQtLOh6/YJcZoEvMtQXDGj6Dxr5ELcmlJmvsS5pltx ywdztmOfwHwhba6EFSuDybAdVU+nZrtPpdLcNkRuhBNTsklve5IAduFDP1LzC8r3 q5+p3C2/Kxxn7PNQGJnDnGUyhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEndhDbr PCM5AuSvYIoAxTBW1di+MB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfH3aFkgMRoXCk2yCSGqdZ7I3hFutdE5aEdkj5X3PW1ifF9AdL+eEj Ka5A6JebTid0SykwaXDijZo53fVIk3vsP7S7QS8O6QmriTzVsHot1IS9+/V5wO4v twFP6dBbELRjC5reBzjCl7QFLBjrMq4mkcpqiL4nTKFrDbBTrCyGD8TJGRAxSrd3 8v19BdHBwalOJoDg9y2qpOrXv6kyysajeftwDNQ6DfxFQrzjEOx3Q5DiTsF3zgqP 6cs9NCLaVz7y44ycpn7gYxCjuo9vXBDd+sfURuXWBHnAQoMsjHcpykAgXsSE5KgA GQ8Upt2vnBDDQ80WHl8R0cfCrJrbVxQ3 -----END CERTIFICATE-----Generated at Fri May 3 04:45:10 2024 by rpki-client on console-fra.rpki-client.org