$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft File: uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft (raw, json) Hash identifier: eek8T6+jhY8Dsmgo6F7DT6/JRYDeW0LkAZrQEDaTLkQ= Subject key identifier: D8:06:FE:81:5B:5E:D3:BF:2A:FA:E2:0C:A3:B1:D3:C0:A3:0C:FC:29 Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14 Certificate issuer: /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft Manifest number: 037B Signing time: Wed 01 May 2024 03:03:41 +0000 Manifest this update: Wed 01 May 2024 03:03:41 +0000 Manifest next update: Wed 08 May 2024 03:03:41 +0000 Files and hashes: 1: uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl (hash: pYApiM34nc9CPzQW3YGVJRxazHc4bHxbVPQTF4+2QaU=) 2: 4911720A694F11ECB6F9B541C4F9AE02.roa (hash: fkrNxXxWgmaMq1BuB3BwVSEW05xfQZ/eCq+CsEV5b8Y=) 3: 53E4239C99F811ECA0663D19C4F9AE02.roa (hash: HxbFWU6h6tzPFph+IhkzhxS3RFNguGFZCeyF1qS05kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314 Validity Not Before: May 1 03:03:41 2024 GMT Not After : May 8 03:03:41 2024 GMT Subject: CN=6631b10d-176d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:a6:ea:cb:84:7e:6d:a3:e9:aa:4c:a0:59: b1:ee:88:dd:2b:25:fc:ac:7c:2e:c4:ce:0f:2f:f1: 5b:9d:a1:19:45:ad:c2:0f:1d:f5:5f:df:df:a8:24: c7:9b:43:35:aa:99:9e:8f:80:47:e6:aa:46:dd:1b: d3:30:3e:f6:e9:b4:cc:9c:3a:72:c9:7e:c2:76:ad: 10:ea:fd:5f:c2:97:36:f4:9f:0d:58:fb:69:6f:b2: be:20:f1:df:f4:01:d0:67:f9:40:78:31:0b:b9:92: 52:bf:c4:e7:3d:fc:fb:35:ea:b6:9e:3d:b3:71:15: e0:fa:65:90:13:65:60:5f:bf:5f:2e:98:84:e8:85: 71:b2:bd:7b:4b:28:17:4b:81:30:6d:68:d2:b7:b9: c2:ca:7f:c5:67:e5:8f:52:89:1b:26:fa:0e:88:f8: d2:c1:04:50:ba:b2:06:c2:ff:47:bd:9c:9a:af:56: 3a:39:88:90:35:1c:5c:8b:88:79:19:d8:6d:36:a4: e1:a2:d5:a2:d6:59:f2:d9:b0:7d:58:49:de:e6:c3: b0:18:11:7c:50:ff:e0:71:e2:63:3e:d4:c4:70:13: fd:12:f5:bb:f9:f9:0d:7e:eb:71:e6:fc:98:60:d2: 4c:50:b4:93:9b:0d:ce:17:9b:9c:86:a5:db:bd:37: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:06:FE:81:5B:5E:D3:BF:2A:FA:E2:0C:A3:B1:D3:C0:A3:0C:FC:29 X509v3 Authority Key Identifier: keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:54:d9:17:50:e3:cd:8e:db:a4:85:18:b2:eb:ea:8b:d2:f0: 09:40:c6:8c:a5:88:3f:6c:8e:50:6b:fe:62:28:70:35:9d:00: c0:bc:78:24:91:9a:2c:d5:20:50:8b:36:31:b4:67:88:00:4c: 04:72:26:69:ef:61:36:a6:99:83:4e:e4:f8:e7:b5:d4:26:c5: 04:50:3e:c1:91:ed:16:35:21:ed:8a:b4:2a:fa:aa:49:f5:fa: 78:4b:f5:e1:1a:4f:93:18:d8:d3:85:9f:9c:37:34:ae:75:b6: e1:6d:12:ad:fd:a1:c2:f0:4f:76:99:3a:00:cf:5b:eb:a8:d1: 2f:44:3f:98:33:0b:8d:56:22:d3:25:bb:8f:05:4d:a7:8c:30: f6:b0:3f:76:90:0a:1f:34:e5:cf:7c:73:9a:60:6a:8a:49:d6: d1:3f:c8:86:bc:6e:3d:2a:9a:ff:08:ff:52:e5:de:23:1c:31: b7:d6:5e:d2:66:6b:52:7d:50:d8:25:0e:f5:97:18:23:28:52: 30:b0:ca:20:fb:68:14:5b:d5:f9:b1:35:47:91:16:e8:c4:07: 6e:dc:84:2b:02:ba:37:96:bf:d4:bc:53:e2:dc:e9:93:00:8d: 6a:13:d9:b5:a9:b3:b7:ec:e0:36:fa:13:0f:3e:e1:59:ef:de: d8:6b:39:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhDMTQxMTAvBgNVBAUTKEJCMEU1NTAzNzlGRUEyODFBODgxQTY3NDc5Qjc3Qzg2 MDJEMDEzMTQwHhcNMjQwNTAxMDMwMzQxWhcNMjQwNTA4MDMwMzQxWjAYMRYwFAYD VQQDEw02NjMxYjEwZC0xNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03Gm6suEfm2j6apMoFmx7ojdKyX8rHwuxM4PL/FbnaEZRa3CDx31X9/fqCTH m0M1qpmej4BH5qpG3RvTMD726bTMnDpyyX7Cdq0Q6v1fwpc29J8NWPtpb7K+IPHf 9AHQZ/lAeDELuZJSv8TnPfz7Neq2nj2zcRXg+mWQE2VgX79fLpiE6IVxsr17SygX S4EwbWjSt7nCyn/FZ+WPUokbJvoOiPjSwQRQurIGwv9HvZyar1Y6OYiQNRxci4h5 GdhtNqThotWi1lny2bB9WEne5sOwGBF8UP/gceJjPtTEcBP9EvW7+fkNfutx5vyY YNJMULSTmw3OF5uchqXbvTfkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgG/oFb XtO/KvriDKOx08CjDPwpMB8GA1UdIwQYMBaAFLsOVQN5/qKBqIGmdHm3fIYC0BMU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEMxNC8zRTRDNDYzMDVC QzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9vR29nYVowZWJkOGhnTFFF eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3NVZBM24tb29Hb2dhWjBlYmQ4aGdMUUV4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEMxNC8zRTRDNDYzMDVCQzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9v R29nYVowZWJkOGhnTFFFeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvVNkXUOPNjtukhRiy6+qL0vAJQMaMpYg/bI5Qa/5iKHA1nQDAvHgk kZos1SBQizYxtGeIAEwEciZp72E2ppmDTuT457XUJsUEUD7Bke0WNSHtirQq+qpJ 9fp4S/XhGk+TGNjThZ+cNzSudbbhbRKt/aHC8E92mToAz1vrqNEvRD+YMwuNViLT JbuPBU2njDD2sD92kAofNOXPfHOaYGqKSdbRP8iGvG49Kpr/CP9S5d4jHDG31l7S ZmtSfVDYJQ71lxgjKFIwsMog+2gUW9X5sTVHkRboxAdu3IQrAro3lr/UvFPi3OmT AI1qE9m1qbO37OA2+hMPPuFZ797Yazl/ -----END CERTIFICATE-----Generated at Wed May 1 05:59:00 2024 by rpki-client on console-fra.rpki-client.org