$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: r+gUPAuM14t8dyjGAu+XfwCup7prTEVtALKHD9+4MHY= Subject key identifier: 14:9D:F7:11:3B:96:AB:35:96:D9:41:51:2C:51:A1:1B:78:B3:00:22 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0BF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0BDF Signing time: Thu 02 May 2024 19:12:18 +0000 Manifest this update: Thu 02 May 2024 19:12:18 +0000 Manifest next update: Thu 09 May 2024 19:12:18 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: N96AiV+m1TIQTKoqopWVgABy3QsCkal6pyelcCnE1JI=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: kGiMX/ZCj2F1RD0hf/MASn7a/9svGAa8QqpEpSHnnWI=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: gHQRJNI3LjfYS9Bbr8bsO62hT8L8x2thvoPlurO05B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3064 (0xbf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: May 2 19:12:18 2024 GMT Not After : May 9 19:12:18 2024 GMT Subject: CN=6633e592-3a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:43:3d:bc:3d:88:1b:63:24:ea:58:3a:f8: 6f:ec:eb:3d:38:74:d1:e0:d7:66:e0:b5:e4:dc:9e: 85:1c:1d:b6:c1:b4:4d:a4:36:aa:a6:7d:a4:cd:7b: cb:43:ab:e7:bf:8b:c5:63:26:19:f7:ce:19:04:ea: 09:af:b1:0c:c6:59:94:e6:b9:83:7d:4a:ae:1a:61: ee:2f:18:6b:e7:55:57:6d:98:f1:95:5a:63:6e:4f: 68:39:83:6c:db:71:a2:db:6c:30:41:30:0f:cc:da: de:06:e3:84:ae:61:b6:75:2c:9e:71:90:b9:22:da: b6:b6:ff:a4:e5:4e:a9:a3:fd:da:ef:ba:fe:f0:77: 06:06:09:8b:9f:11:b5:f3:f3:ac:5d:a2:bf:47:c1: fe:cf:bd:3b:fa:4c:b2:61:fc:f4:23:99:af:6b:83: 0a:6c:fa:be:17:01:96:aa:bf:2c:4a:6f:85:e3:b6: 98:7e:ac:da:ee:e3:dd:09:24:60:4b:72:55:45:17: 35:e3:e2:d3:b2:5f:31:b3:34:cb:39:e8:9c:d5:88: 56:cf:45:e3:59:84:90:ff:2f:04:fc:33:3a:7b:4c: 57:0c:0e:6d:f9:56:e9:e9:91:32:ca:a3:86:70:b5: 93:97:5e:0b:14:a5:1d:cf:e7:ae:09:fc:13:5e:c8: 00:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:F7:11:3B:96:AB:35:96:D9:41:51:2C:51:A1:1B:78:B3:00:22 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6b:c7:ee:72:55:75:0d:f0:ad:2c:86:61:e1:73:12:6f:69: 1f:c2:e9:d0:a1:14:91:67:18:75:41:ed:01:23:46:9a:8f:3b: a7:66:a8:1b:e1:28:3e:f6:f2:7c:32:fb:54:30:81:84:ea:31: 1d:8a:9e:a6:6b:cf:db:c4:68:21:f5:ea:b8:c6:ff:87:0b:07: 59:7a:76:03:62:7a:5f:45:34:6b:e8:cb:ac:7d:a3:f9:9d:0b: 41:c4:e1:93:1d:ec:39:3b:96:21:86:79:f1:61:b3:2f:34:b3: 7c:7b:f3:93:a9:52:3c:ca:56:f8:9c:31:c1:ee:b7:3a:93:9b: e5:9a:56:50:e7:f7:3a:74:42:ca:3b:e8:b2:4e:05:ee:bf:0a: 81:d3:14:c1:00:1d:9f:6d:b7:09:57:fa:a2:51:57:07:3b:69: 20:24:d3:83:28:e3:42:5e:07:b8:1d:3b:1d:95:b2:8d:ba:4e: d6:44:b6:e0:f5:ca:84:9d:4a:e2:6f:8a:d2:40:fc:8e:95:71: 93:f8:c3:42:52:3c:16:63:73:dd:d3:52:e6:7f:4a:77:30:6a: 5c:17:ea:3a:e5:a9:08:8a:de:4c:5f:c4:c5:f3:bf:74:3f:c3: 00:db:83:6c:9f:18:b1:6a:1d:52:b0:fe:d8:69:5b:a9:25:e4: 4d:54:dd:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjQwNTAyMTkxMjE4WhcNMjQwNTA5MTkxMjE4WjAYMRYwFAYD VQQDEw02NjMzZTU5Mi0zYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwutDPbw9iBtjJOpYOvhv7Os9OHTR4Ndm4LXk3J6FHB22wbRNpDaqpn2kzXvL Q6vnv4vFYyYZ984ZBOoJr7EMxlmU5rmDfUquGmHuLxhr51VXbZjxlVpjbk9oOYNs 23Gi22wwQTAPzNreBuOErmG2dSyecZC5Itq2tv+k5U6po/3a77r+8HcGBgmLnxG1 8/OsXaK/R8H+z707+kyyYfz0I5mva4MKbPq+FwGWqr8sSm+F47aYfqza7uPdCSRg S3JVRRc14+LTsl8xszTLOeic1YhWz0XjWYSQ/y8E/DM6e0xXDA5t+Vbp6ZEyyqOG cLWTl14LFKUdz+euCfwTXsgABQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSd9xE7 lqs1ltlBUSxRoRt4swAiMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBea8fuclV1DfCtLIZh4XMSb2kfwunQoRSRZxh1Qe0BI0aajzunZqgb 4Sg+9vJ8MvtUMIGE6jEdip6ma8/bxGgh9eq4xv+HCwdZenYDYnpfRTRr6MusfaP5 nQtBxOGTHew5O5YhhnnxYbMvNLN8e/OTqVI8ylb4nDHB7rc6k5vlmlZQ5/c6dELK O+iyTgXuvwqB0xTBAB2fbbcJV/qiUVcHO2kgJNODKONCXge4HTsdlbKNuk7WRLbg 9cqEnUrib4rSQPyOlXGT+MNCUjwWY3Pd01Lmf0p3MGpcF+o65akIit5MX8TF8790 P8MA24Nsnxixah1SsP7YaVupJeRNVN1V -----END CERTIFICATE-----Generated at Thu May 2 20:50:24 2024 by rpki-client on console-fra.rpki-client.org