$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: xB+hjbqu5ZXezmvjPqxENwR2JgOTgRh0gOleu60bUMY= Subject key identifier: 29:BB:DD:D2:A0:99:4F:05:6D:5F:A6:DB:E1:B9:84:50:EB:4F:3B:81 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 8E Signing time: Fri 17 May 2024 07:09:19 +0000 Manifest this update: Fri 17 May 2024 07:09:19 +0000 Manifest next update: Fri 24 May 2024 07:09:19 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: dn8Wg07vx33MywlN8FlVBwThU+Rrv/FFIgtZjgeNyF0=) 2: 7664C566BE6D11EE99A9E384C4F9AE02.roa (hash: J0X863hvnPaJB+YqbSd16WKt6GmxnqfAMWDcyGO6bYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: May 17 07:09:19 2024 GMT Not After : May 24 07:09:19 2024 GMT Subject: CN=6647029f-5eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:77:a3:25:b9:00:b1:69:71:93:6c:f7:0e: 92:37:f9:01:11:b8:ed:3b:84:c5:47:36:99:c0:7c: ef:96:54:17:d5:ab:d0:df:42:6a:dd:56:78:18:e0: 32:8a:63:d6:ca:dd:7d:71:4d:b4:86:22:34:46:e5: da:54:53:ea:63:cd:7d:c8:06:fa:d0:35:97:48:c3: c1:fe:92:7a:e7:0a:7d:80:cb:70:f5:80:c0:61:21: e9:33:78:cc:21:61:8e:bb:78:d3:32:d5:9a:d7:5c: 51:bd:3d:3e:87:ee:46:ac:f4:ab:38:3a:53:84:a0: 2d:08:4f:34:f3:ac:55:98:18:d8:62:81:9a:78:5d: 1a:bc:cc:0f:b7:9f:55:c5:87:8f:69:33:72:3a:3a: 23:09:df:f8:2c:53:0a:03:0c:7c:79:82:0f:02:21: 42:c2:52:4b:ee:b8:6d:13:b2:cc:23:17:b8:59:a8: e3:91:6e:7c:70:9e:a8:ec:07:a5:08:64:1b:0d:e9: 06:ab:a8:6b:2a:d0:d3:f3:e5:a0:7a:a4:b1:20:17: a8:30:1b:49:8b:b2:2c:de:57:78:9d:cc:c6:d3:4d: 32:f2:b1:02:64:5b:a3:c0:a9:aa:d7:33:d2:3d:49: 99:4e:e5:8a:0f:49:c8:10:dc:0c:09:10:0e:67:c9: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:DD:D2:A0:99:4F:05:6D:5F:A6:DB:E1:B9:84:50:EB:4F:3B:81 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f2:e9:f4:5a:07:99:5f:30:77:fa:36:25:5b:81:7d:6f:63: b7:c7:1c:e5:3c:a2:49:81:7e:ca:76:f0:ea:1d:33:8d:88:a5: fb:27:0c:6e:49:20:b9:fd:81:4c:7f:e4:9d:85:59:a7:87:6d: 27:0f:77:51:85:91:3a:09:44:d7:33:50:c0:bb:44:91:f7:4b: 81:8f:65:fb:f9:57:ed:0f:8c:f5:c8:9b:ab:ea:b8:9c:69:12: d2:f3:62:44:d6:5e:49:a6:e2:3b:54:26:d7:8b:5f:a7:5e:14: 5a:42:8b:1e:81:e6:7f:f4:97:8a:f2:4b:1b:97:b9:9c:95:15: fc:9a:a2:d0:26:e8:58:05:bb:80:37:21:98:19:86:71:1b:79: 48:0d:e8:27:cb:12:5b:f2:da:da:4e:d5:e6:85:85:4e:d8:dd: 5a:63:99:0d:b0:e0:6f:12:b9:7a:04:ec:b6:26:07:17:27:89: 2c:c2:49:e5:b7:de:23:0d:3f:ee:5f:f0:a9:01:71:2c:62:5e: 16:65:4f:bb:d7:28:6e:aa:4f:1a:83:eb:c5:5f:9a:f2:7c:5e: e8:a5:ee:75:19:9b:9f:05:5b:da:55:00:46:21:93:a4:22:e1: 9e:7d:9f:e8:ea:ca:d9:a7:21:db:2e:07:61:56:64:9a:0c:88: cd:66:2b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjQwNTE3MDcwOTE5WhcNMjQwNTI0MDcwOTE5WjAYMRYwFAYD VQQDEw02NjQ3MDI5Zi01ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvl3oyW5ALFpcZNs9w6SN/kBEbjtO4TFRzaZwHzvllQX1avQ30Jq3VZ4GOAy imPWyt19cU20hiI0RuXaVFPqY819yAb60DWXSMPB/pJ65wp9gMtw9YDAYSHpM3jM IWGOu3jTMtWa11xRvT0+h+5GrPSrODpThKAtCE8086xVmBjYYoGaeF0avMwPt59V xYePaTNyOjojCd/4LFMKAwx8eYIPAiFCwlJL7rhtE7LMIxe4WajjkW58cJ6o7Ael CGQbDekGq6hrKtDT8+WgeqSxIBeoMBtJi7Is3ld4nczG000y8rECZFujwKmq1zPS PUmZTuWKD0nIENwMCRAOZ8kmvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCm73dKg mU8FbV+m2+G5hFDrTzuBMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ8un0WgeZXzB3+jYlW4F9b2O3xxzlPKJJgX7KdvDqHTONiKX7Jwxu SSC5/YFMf+SdhVmnh20nD3dRhZE6CUTXM1DAu0SR90uBj2X7+VftD4z1yJur6ric aRLS82JE1l5JpuI7VCbXi1+nXhRaQosegeZ/9JeK8ksbl7mclRX8mqLQJuhYBbuA NyGYGYZxG3lIDegnyxJb8traTtXmhYVO2N1aY5kNsOBvErl6BOy2JgcXJ4kswknl t94jDT/uX/CpAXEsYl4WZU+71yhuqk8ag+vFX5ryfF7ope51GZufBVvaVQBGIZOk IuGefZ/o6srZpyHbLgdhVmSaDIjNZisT -----END CERTIFICATE-----Generated at Fri May 17 08:13:49 2024 by rpki-client on console-fra.rpki-client.org