$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: OfdkP9QIRdpO+ZXgsYSKKbM8nv1Gd9BlyBttKWfCxdY= Subject key identifier: C0:23:38:36:43:A4:46:61:A5:A0:20:8A:16:36:BD:18:A8:92:B8:02 Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0B56 Signing time: Thu 02 May 2024 19:43:11 +0000 Manifest this update: Thu 02 May 2024 19:43:10 +0000 Manifest next update: Thu 09 May 2024 19:43:10 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: raBfUTh2CYzlI30j/zCEIbCQLKVlYfHCZspRne+wfgA=) 2: E938CA160B8311EABDDD354EC4F9AE02.roa (hash: p9dbIcqnoAuCJhNNaUEynVsoUs5YC13EgZnj2lLl7ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: May 2 19:43:10 2024 GMT Not After : May 9 19:43:10 2024 GMT Subject: CN=6633eccf-7e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:df:c4:ec:74:d7:62:db:03:a9:dc:16:90: a1:51:29:44:b5:75:05:82:df:5b:32:69:fd:08:cc: 4f:c3:27:a9:f2:99:84:25:42:3d:21:e4:a6:cf:f1: 4b:2a:dd:5c:a8:77:7b:74:df:d1:0a:a4:b0:4b:f1: 29:ca:74:de:c6:5b:ee:95:75:bd:2f:7b:68:7d:21: 28:ab:f8:56:c1:87:88:cd:eb:ff:36:f7:12:07:1f: 3a:cf:3b:98:43:a8:b9:f9:73:ce:8d:c8:81:5f:a6: 00:d7:84:2b:6f:a1:35:be:1b:20:f7:ad:85:7c:65: 75:cb:17:b9:2a:3b:a2:48:de:6c:1b:e7:1c:36:69: 22:cf:d4:c2:06:e4:a2:1f:41:f8:f2:de:37:4e:f2: 18:1f:14:f8:81:1a:c2:ab:94:ec:d6:4e:65:65:d8: bf:e8:92:c7:2b:a4:cf:bd:4a:08:48:68:56:51:67: 5b:ad:04:91:4a:5e:85:1f:cc:ed:15:1c:1d:4e:a3: 04:38:7f:ea:b7:90:37:db:d8:af:42:26:a6:a1:27: 71:18:a9:e7:5c:d1:62:b2:a9:f4:b7:cb:ff:72:f3: fa:b3:ec:f1:57:e6:2b:dc:82:09:5e:43:c3:57:a5: 94:4d:0b:2d:31:7f:15:07:5d:e9:3c:f6:e4:e6:20: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:38:36:43:A4:46:61:A5:A0:20:8A:16:36:BD:18:A8:92:B8:02 X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f7:1f:2b:2f:74:74:52:0c:29:89:6c:96:a9:93:e4:4f:d9: 85:42:0b:0b:21:a3:d9:8f:d0:5f:fc:98:46:04:bf:e3:9f:aa: 36:50:a4:0b:43:65:0a:fd:c1:70:bd:4b:ee:9b:4f:2f:8f:f0: 57:3a:a9:49:94:6a:47:a1:c1:f6:f6:7c:ee:18:85:e7:08:ee: a5:69:3b:33:b0:ae:4e:b6:cd:d0:da:52:77:5b:e1:96:11:9d: 2c:6b:af:9f:3c:5f:0e:a8:5e:14:15:f4:d6:9f:40:7a:94:5d: 2d:81:9f:6d:80:e8:94:74:49:21:64:bf:01:c1:c3:a1:4f:c3: 1c:c7:00:a4:d5:81:e4:1b:ee:09:0a:06:7f:77:2f:53:d9:ce: 94:d2:cc:2a:c1:bb:43:01:0d:09:18:99:41:65:0a:c8:69:0e: 1c:20:d0:f1:c3:be:e7:f1:bc:6f:9c:89:24:03:81:1c:eb:f5: 4b:f0:ad:b3:90:f1:62:88:e8:0a:68:85:79:87:9d:f4:e9:d7: c7:2b:96:37:be:1b:35:6a:3a:66:a1:f1:f0:af:47:77:62:c1: c0:2a:26:eb:8d:24:4b:37:66:83:5d:8f:21:78:01:ef:8c:18: 96:79:9a:d7:f5:e2:8b:f1:51:77:91:e8:71:41:cf:9b:a5:60: e6:88:c3:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjQwNTAyMTk0MzEwWhcNMjQwNTA5MTk0MzEwWjAYMRYwFAYD VQQDEw02NjMzZWNjZi03ZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVzfxOx012LbA6ncFpChUSlEtXUFgt9bMmn9CMxPwyep8pmEJUI9IeSmz/FL Kt1cqHd7dN/RCqSwS/EpynTexlvulXW9L3tofSEoq/hWwYeIzev/NvcSBx86zzuY Q6i5+XPOjciBX6YA14Qrb6E1vhsg962FfGV1yxe5KjuiSN5sG+ccNmkiz9TCBuSi H0H48t43TvIYHxT4gRrCq5Ts1k5lZdi/6JLHK6TPvUoISGhWUWdbrQSRSl6FH8zt FRwdTqMEOH/qt5A329ivQiamoSdxGKnnXNFisqn0t8v/cvP6s+zxV+Yr3IIJXkPD V6WUTQstMX8VB13pPPbk5iDN9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAjODZD pEZhpaAgihY2vRiokrgCMB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC59x8rL3R0UgwpiWyWqZPkT9mFQgsLIaPZj9Bf/JhGBL/jn6o2UKQL Q2UK/cFwvUvum08vj/BXOqlJlGpHocH29nzuGIXnCO6laTszsK5Ots3Q2lJ3W+GW EZ0sa6+fPF8OqF4UFfTWn0B6lF0tgZ9tgOiUdEkhZL8BwcOhT8McxwCk1YHkG+4J CgZ/dy9T2c6U0swqwbtDAQ0JGJlBZQrIaQ4cINDxw77n8bxvnIkkA4Ec6/VL8K2z kPFiiOgKaIV5h5306dfHK5Y3vhs1ajpmofHwr0d3YsHAKibrjSRLN2aDXY8heAHv jBiWeZrX9eKL8VF3kehxQc+bpWDmiMND -----END CERTIFICATE-----Generated at Thu May 2 20:50:25 2024 by rpki-client on console-fra.rpki-client.org