$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft File: d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json) Hash identifier: kTJMjSxfYAXxG0VYpVBtGz672GGzNqn4UWXC+fLpsgI= Subject key identifier: 3A:F1:4D:FC:1B:F9:84:BF:A2:8A:D1:35:8A:4C:43:7B:28:D0:DD:D5 Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 Certificate issuer: /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft Manifest number: 098A Signing time: Mon 06 May 2024 21:01:45 +0000 Manifest this update: Mon 06 May 2024 21:01:45 +0000 Manifest next update: Mon 13 May 2024 21:01:45 +0000 Files and hashes: 1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: ntFqBm7BssNqJgqb0c4r9OD67QruJQkaBaYKBL6Yb+U=) 2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: wcas8hwm2SsOezrjKRuYetaNuSdRzjiKwQDbaDpGAJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Validity Not Before: May 6 21:01:45 2024 GMT Not After : May 13 21:01:45 2024 GMT Subject: CN=66394539-4647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:c3:36:bc:85:47:24:76:61:a8:47:7e:7d: e1:4e:28:57:3b:c2:8c:a5:5f:b6:11:72:c7:31:47: a5:ed:0b:a1:19:bf:31:c6:21:e2:7a:21:fe:35:ba: 73:31:72:61:b5:77:13:36:92:cc:5b:42:f9:48:6f: 44:86:ad:68:dd:37:fa:87:62:19:2c:64:39:44:c0: f6:05:fd:a8:b1:5a:b6:14:53:e9:db:96:4f:58:e9: c9:bd:e2:94:90:4f:85:00:98:8d:b0:0b:07:f5:d5: de:43:99:b2:48:f2:fd:d8:c2:9d:d9:ed:96:82:90: 7d:ff:78:67:0c:42:86:e9:79:cd:1a:b6:94:0b:cc: d0:02:2e:13:cb:00:c3:d6:f7:d9:d0:81:37:db:58: 72:76:5e:50:83:72:3c:5b:ac:36:85:19:88:82:14: d5:7f:2a:39:54:07:95:8c:ba:62:eb:8c:9f:f0:2a: 7b:48:0a:aa:49:d8:44:b2:c2:9b:2e:c6:59:75:94: b6:1f:09:30:bc:62:2b:9a:4a:33:c4:87:b2:57:d2: 36:7d:3b:6f:81:30:53:02:c8:64:cb:b8:2c:70:9d: 12:b2:ab:00:93:6f:49:4d:a2:ee:47:ab:ed:6f:b3: b0:96:e0:00:a2:db:58:48:58:a2:89:51:23:d2:46: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F1:4D:FC:1B:F9:84:BF:A2:8A:D1:35:8A:4C:43:7B:28:D0:DD:D5 X509v3 Authority Key Identifier: keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:65:71:a1:4d:59:b7:b9:e4:b2:e9:e7:34:06:b0:60:72:cc: 70:48:30:ad:7d:41:39:99:3e:5c:74:56:b9:1d:4a:c7:88:f4: b9:7f:5d:bc:23:0f:ce:b4:73:88:d9:f6:07:69:da:bf:fe:62: c9:0e:10:35:54:ba:32:ce:c7:91:03:60:7b:13:31:1e:24:e5: fb:89:90:00:0a:89:00:6e:46:a9:33:8c:66:22:ba:dd:5c:b2: 65:ea:f4:50:d2:dc:e0:9d:22:82:48:8b:26:8b:23:34:bb:d2: 48:f4:b0:18:06:ac:48:d9:37:f7:06:84:7e:65:fc:16:cc:40: 3f:46:65:94:33:39:af:3c:0d:0b:a9:25:2f:6c:13:57:18:7f: 2a:39:24:77:95:9f:64:ff:ec:5b:13:e6:b1:77:a5:7d:78:e1: de:09:cf:0f:3d:00:f0:9b:19:0b:20:8d:e1:70:1e:a9:88:b4: 42:10:73:f4:6d:dd:cb:fd:63:9b:aa:cd:9b:f8:c5:a7:79:ec: 92:9f:75:46:d1:42:7e:7f:a9:64:b1:f0:04:89:ae:ee:49:dc: ad:8d:37:74:b3:95:6d:3a:64:01:3f:bd:0e:be:eb:61:e7:5e: 1b:94:dc:22:51:72:d3:82:51:62:b3:9f:dc:72:ff:20:4b:68: 1a:f3:a8:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MjExMTAvBgNVBAUTKDc3QTEzNERGQTdBMjM5NEVEMjQ0NzUzOUYxM0ZFNEE4 RDFFMDU2QzkwHhcNMjQwNTA2MjEwMTQ1WhcNMjQwNTEzMjEwMTQ1WjAYMRYwFAYD VQQDEw02NjM5NDUzOS00NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMbDNryFRyR2YahHfn3hTihXO8KMpV+2EXLHMUel7QuhGb8xxiHieiH+Nbpz MXJhtXcTNpLMW0L5SG9Ehq1o3Tf6h2IZLGQ5RMD2Bf2osVq2FFPp25ZPWOnJveKU kE+FAJiNsAsH9dXeQ5mySPL92MKd2e2WgpB9/3hnDEKG6XnNGraUC8zQAi4TywDD 1vfZ0IE321hydl5Qg3I8W6w2hRmIghTVfyo5VAeVjLpi64yf8Cp7SAqqSdhEssKb LsZZdZS2HwkwvGIrmkozxIeyV9I2fTtvgTBTAshky7gscJ0SsqsAk29JTaLuR6vt b7OwluAAottYSFiiiVEj0kbV+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrxTfwb +YS/oorRNYpMQ3so0N3VMB8GA1UdIwQYMBaAFHehNN+nojlO0kR1OfE/5KjR4FbJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgyMS8yMzlCRkM2NDY2 MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9VN1NSSFU1OFRfa3FOSGdW c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2RTAzNmVpT1U3U1JIVTU4VF9rcU5IZ1Zzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgyMS8yMzlCRkM2NDY2MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9V N1NSSFU1OFRfa3FOSGdWc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvZXGhTVm3ueSy6ec0BrBgcsxwSDCtfUE5mT5cdFa5HUrHiPS5f128 Iw/OtHOI2fYHadq//mLJDhA1VLoyzseRA2B7EzEeJOX7iZAACokAbkapM4xmIrrd XLJl6vRQ0tzgnSKCSIsmiyM0u9JI9LAYBqxI2Tf3BoR+ZfwWzEA/RmWUMzmvPA0L qSUvbBNXGH8qOSR3lZ9k/+xbE+axd6V9eOHeCc8PPQDwmxkLII3hcB6piLRCEHP0 bd3L/WObqs2b+MWneeySn3VG0UJ+f6lksfAEia7uSdytjTd0s5VtOmQBP70Ovuth 514blNwiUXLTglFis5/ccv8gS2ga86jI -----END CERTIFICATE-----Generated at Mon May 6 23:05:39 2024 by rpki-client on console-fra.rpki-client.org