$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: 4EPMrM23pFearQCVXRD9hbhkDdMzyrranHvgNRKyfP4= Subject key identifier: 29:20:5B:EF:17:3C:D6:B2:27:85:92:8C:4C:A8:16:80:D1:92:EA:E5 Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0D0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0D03 Signing time: Thu 02 May 2024 18:48:52 +0000 Manifest this update: Thu 02 May 2024 18:48:52 +0000 Manifest next update: Thu 09 May 2024 18:48:52 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: FkfxTrucmS0pGGA+uPTVC1sRbcx4SO+pHY12dylsv0M=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: gxatBMJxzJVFhi2OhDZcobAamssK44JADN8sTBmFx6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3339 (0xd0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: May 2 18:48:52 2024 GMT Not After : May 9 18:48:52 2024 GMT Subject: CN=6633e014-2ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:65:66:42:9d:ce:8f:4e:d9:ce:c1:8a:9a:02: aa:9f:44:fd:e1:c4:4d:62:e2:9a:6d:24:7a:5e:7d: e6:52:3c:00:88:d1:07:c5:b5:f8:eb:3b:64:e4:be: 24:80:65:df:d0:b1:14:71:6d:fe:9d:6a:f0:68:44: a9:d6:f1:11:67:01:5f:9f:6d:c1:cd:78:b3:61:ff: d1:0e:ac:1f:e2:ee:db:22:31:e7:de:01:94:24:b7: 33:e2:8a:ea:c7:77:cc:65:f4:dd:06:9c:01:f1:40: 65:49:df:09:a6:41:f8:e2:64:b2:0a:93:65:c1:54: 3c:ad:1a:c8:6b:43:c2:91:dc:24:5e:9b:38:47:8b: e0:6c:48:50:6d:02:30:a6:dd:05:53:03:8a:70:56: 8e:96:ec:85:4c:55:c9:66:53:f0:a9:c9:bc:a9:d5: 9f:5a:70:2f:ba:dd:eb:7e:3e:f3:b2:d9:fe:31:56: 5a:8b:c1:1c:23:29:e8:3e:9a:b7:f8:84:ae:91:3f: 8d:da:24:7d:25:d0:e7:64:df:57:56:6b:06:be:22: 7a:2c:2b:75:8a:b4:0b:58:34:ea:df:b4:e6:d3:81: ab:28:70:be:f1:ac:fd:7f:e6:79:78:94:c8:d7:4f: d2:17:de:23:e4:07:f4:60:e7:fa:65:b6:7a:0b:23: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:5B:EF:17:3C:D6:B2:27:85:92:8C:4C:A8:16:80:D1:92:EA:E5 X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:50:28:d8:d2:a1:f3:c1:ac:c3:ca:1c:7a:46:9c:88:03:3a: 52:0b:40:fc:a5:e3:d3:9b:96:df:9a:1a:81:a6:e7:b3:6e:c2: f8:2f:2b:80:42:58:2f:08:4c:15:fc:22:4e:fe:8e:8a:7b:20: 01:c8:3c:cd:69:cf:c3:e1:53:fe:e3:5e:e6:8e:78:31:aa:23: 0d:7b:2a:68:3c:61:9d:2c:a7:8e:30:87:4c:fb:d0:ba:cb:65: ce:f7:f9:e2:ee:22:b5:4a:69:be:3f:e0:0b:02:ac:2d:32:83: 97:37:f6:2f:95:75:04:b7:c3:af:51:a8:be:89:d7:98:77:51: e8:2f:da:40:0e:fb:9c:0f:df:a2:94:16:e1:32:d1:90:ec:69: 93:24:b8:fb:e7:9d:94:f3:2e:49:8f:48:29:f8:c5:a4:74:d0: 71:5e:10:84:0e:5d:bb:d4:f8:a4:63:e4:96:9d:95:2f:54:52: 24:6d:a1:75:2b:57:7c:03:97:d0:25:33:79:4b:d5:25:c1:d1: af:39:26:10:62:77:6d:2b:ed:4a:6a:87:97:27:e3:e9:cd:d5: 93:8b:bb:82:a3:b1:2b:3f:fa:06:91:f5:ab:d1:8b:69:11:70: 81:37:04:44:51:00:5b:b1:6d:ad:b1:7b:50:4c:ef:fb:9c:de: 7b:54:9f:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjQwNTAyMTg0ODUyWhcNMjQwNTA5MTg0ODUyWjAYMRYwFAYD VQQDEw02NjMzZTAxNC0yYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GVmQp3Oj07ZzsGKmgKqn0T94cRNYuKabSR6Xn3mUjwAiNEHxbX46ztk5L4k gGXf0LEUcW3+nWrwaESp1vERZwFfn23BzXizYf/RDqwf4u7bIjHn3gGUJLcz4orq x3fMZfTdBpwB8UBlSd8JpkH44mSyCpNlwVQ8rRrIa0PCkdwkXps4R4vgbEhQbQIw pt0FUwOKcFaOluyFTFXJZlPwqcm8qdWfWnAvut3rfj7zstn+MVZai8EcIynoPpq3 +ISukT+N2iR9JdDnZN9XVmsGviJ6LCt1irQLWDTq37Tm04GrKHC+8az9f+Z5eJTI 10/SF94j5Af0YOf6ZbZ6CyPxmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkgW+8X PNayJ4WSjEyoFoDRkurlMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1UCjY0qHzwazDyhx6RpyIAzpSC0D8pePTm5bfmhqBpuezbsL4LyuA QlgvCEwV/CJO/o6KeyAByDzNac/D4VP+417mjngxqiMNeypoPGGdLKeOMIdM+9C6 y2XO9/ni7iK1Smm+P+ALAqwtMoOXN/YvlXUEt8OvUai+ideYd1HoL9pADvucD9+i lBbhMtGQ7GmTJLj7552U8y5Jj0gp+MWkdNBxXhCEDl271PikY+SWnZUvVFIkbaF1 K1d8A5fQJTN5S9UlwdGvOSYQYndtK+1KaoeXJ+PpzdWTi7uCo7ErP/oGkfWr0Ytp EXCBNwREUQBbsW2tsXtQTO/7nN57VJ/v -----END CERTIFICATE-----Generated at Thu May 2 20:04:37 2024 by rpki-client on console-ams.rpki-client.org