$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: Tsutq5W5uoP86+d0a08PC3tnqdCWjOUlCeL+8kVQGXg= Subject key identifier: 07:85:5A:62:2B:8E:65:F0:7D:F9:91:7E:5E:29:44:50:EA:FB:EF:42 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 0124 Signing time: Fri 17 May 2024 05:15:06 +0000 Manifest this update: Fri 17 May 2024 05:15:05 +0000 Manifest next update: Fri 24 May 2024 05:15:05 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: 5YzYbGspOljp+PDdsV0QzDF6RAK2kkLqk5qZlyMCUIo=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: CnZFdnUYkRr1r1D6iUYUF7dcdA1ihaNtl+PTNkD87JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: May 17 05:15:05 2024 GMT Not After : May 24 05:15:05 2024 GMT Subject: CN=6646e7d9-aa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:95:df:40:1a:b6:13:19:41:d6:1e:2b:1f: 1c:06:79:2e:33:84:03:4e:c3:fe:6c:8e:65:44:59: 97:d6:64:11:31:ce:80:53:9d:6e:3f:3a:d4:7d:91: 1e:6f:9f:07:57:45:41:98:64:ee:03:3e:c0:99:e9: 2b:72:c7:47:05:de:cf:1e:89:80:94:6b:ef:8b:b4: 77:a3:27:8a:de:5e:8c:bd:2e:09:f9:ac:d3:f7:14: 78:37:38:9d:bb:08:c4:be:85:da:e8:43:0f:97:a8: 02:31:49:12:a5:9c:8b:e3:40:3f:c7:77:67:8c:a0: 5b:97:68:d5:ed:21:44:93:eb:bc:cd:47:b9:03:e2: df:aa:c6:2b:4a:3e:13:b1:23:c1:59:7e:d7:c2:46: e3:25:57:2c:55:52:6b:da:c2:00:cb:1a:65:b5:84: 92:80:53:1e:7d:de:dd:e1:aa:98:69:47:5a:02:ee: 90:dd:c8:da:c6:02:2c:68:e7:21:75:af:fc:0d:28: 75:0f:4a:b7:de:c6:32:99:41:79:7b:90:df:55:12: 98:ce:92:13:73:ad:89:f4:af:52:f8:67:a3:a7:59: a1:4f:ba:fc:c4:c1:93:ff:33:a2:d0:c9:36:4b:0e: 40:56:53:59:56:9c:86:69:e6:6b:93:bd:57:32:00: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:85:5A:62:2B:8E:65:F0:7D:F9:91:7E:5E:29:44:50:EA:FB:EF:42 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:eb:e5:5e:79:fe:6c:51:b9:40:e9:47:a7:59:56:69:c6:eb: 6c:1b:7d:21:e2:cb:75:29:2b:a1:e6:36:d6:89:9e:e8:cc:61: 6e:6f:c7:f1:45:d8:e0:2c:50:eb:0d:d0:70:69:1e:0b:d5:47: 76:7e:67:f4:11:76:45:4e:da:41:79:da:aa:25:b4:c2:c8:ab: db:64:78:c7:d8:4e:8f:9a:7f:7a:33:59:1c:a5:95:03:cc:a7: d1:e4:ad:22:5e:66:8e:27:5f:2c:96:f2:44:58:7f:0a:df:0d: 00:bd:e8:fa:59:90:1a:b9:f9:ec:51:6c:a5:9d:b3:9b:23:a5: e0:6f:32:45:93:1a:43:78:65:58:34:95:6b:d6:46:a1:b8:10: 85:a5:39:4e:35:ef:db:79:01:0a:bd:bc:63:2a:3d:1e:8d:e9: 44:2a:19:b8:cd:e0:fd:a9:e6:99:c4:ab:f1:6a:57:9f:a4:19: 1b:6e:95:4d:c7:11:97:c3:f7:5a:f3:ef:fe:97:61:14:1a:bf: 42:51:00:31:c8:39:8b:c6:de:15:6c:e3:ff:df:2b:48:4e:d8: bb:e8:56:96:5a:ab:aa:ca:2d:56:f6:8b:8c:22:3e:9d:b3:ec: 58:7f:8b:57:7b:8f:ce:32:9e:b9:b7:ed:2c:16:66:06:02:be: 8d:7a:01:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjQwNTE3MDUxNTA1WhcNMjQwNTI0MDUxNTA1WjAYMRYwFAYD VQQDEw02NjQ2ZTdkOS1hYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2KV30AathMZQdYeKx8cBnkuM4QDTsP+bI5lRFmX1mQRMc6AU51uPzrUfZEe b58HV0VBmGTuAz7AmekrcsdHBd7PHomAlGvvi7R3oyeK3l6MvS4J+azT9xR4Nzid uwjEvoXa6EMPl6gCMUkSpZyL40A/x3dnjKBbl2jV7SFEk+u8zUe5A+LfqsYrSj4T sSPBWX7XwkbjJVcsVVJr2sIAyxpltYSSgFMefd7d4aqYaUdaAu6Q3cjaxgIsaOch da/8DSh1D0q33sYymUF5e5DfVRKYzpITc62J9K9S+Gejp1mhT7r8xMGT/zOi0Mk2 Sw5AVlNZVpyGaeZrk71XMgDu+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeFWmIr jmXwffmRfl4pRFDq++9CMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS6+Veef5sUblA6UenWVZpxutsG30h4st1KSuh5jbWiZ7ozGFub8fx RdjgLFDrDdBwaR4L1Ud2fmf0EXZFTtpBedqqJbTCyKvbZHjH2E6Pmn96M1kcpZUD zKfR5K0iXmaOJ18slvJEWH8K3w0Avej6WZAaufnsUWylnbObI6XgbzJFkxpDeGVY NJVr1kahuBCFpTlONe/beQEKvbxjKj0ejelEKhm4zeD9qeaZxKvxalefpBkbbpVN xxGXw/da8+/+l2EUGr9CUQAxyDmLxt4VbOP/3ytITti76FaWWquqyi1W9ouMIj6d s+xYf4tXe4/OMp65t+0sFmYGAr6NegGm -----END CERTIFICATE-----Generated at Fri May 17 06:18:05 2024 by rpki-client on console-fra.rpki-client.org