$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json) Hash identifier: tyLx5kQys/zniiV4Wd8irP33zGVvsXxxXlKJEjMvnps= Subject key identifier: 20:F2:E8:E3:4B:C3:3A:B8:CA:CE:E3:0F:72:D3:FD:0E:69:23:ED:56 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 0FEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft Manifest number: 0FE1 Signing time: Sat 04 May 2024 18:11:22 +0000 Manifest this update: Sat 04 May 2024 18:11:21 +0000 Manifest next update: Sat 11 May 2024 18:11:21 +0000 Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: NoK8PAcoBUKpgIuIayF+F4+swi5bKSLbI+mBSigPhWk=) 2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: TX2hYfP29RX4mcIF+OM8Ynn7C2G46AbxOagvnNGTLGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4079 (0xfef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: May 4 18:11:21 2024 GMT Not After : May 11 18:11:21 2024 GMT Subject: CN=66367a4a-07b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:fd:41:8f:cc:33:94:16:a7:d0:66:92:1f: 80:3b:b0:9e:0a:3c:93:32:67:99:8c:7e:75:12:5d: 83:68:6d:38:7a:27:a1:7a:f1:f9:c4:d6:17:d1:7a: 38:bd:6a:69:dd:fd:f8:6e:a4:f5:b6:0e:74:ca:68: c6:f4:64:94:16:97:62:54:ef:dd:f3:be:cd:7e:7a: 37:2b:93:11:c4:c7:65:c6:77:0c:58:f3:e1:ff:fe: a8:66:f7:31:bc:29:cf:72:11:33:0c:1f:cb:df:c6: 65:63:c3:43:53:f6:d1:66:0c:71:09:9a:69:4f:d9: e0:57:77:c8:2b:6e:c9:bb:b4:97:79:5b:df:62:74: a9:81:bf:54:b7:b0:00:00:0d:7a:bd:de:40:f3:fb: 6a:5f:a0:61:12:aa:ab:fc:d6:95:b2:e6:d4:8d:23: 0b:0f:6c:c7:b8:14:d4:22:9e:a9:ee:24:16:1b:1f: d9:68:87:8d:fb:28:af:8d:09:42:4c:81:ae:98:c8: 13:8d:2b:d5:57:4b:ae:cf:d0:60:4f:74:c7:49:61: a3:0d:51:1e:17:18:56:05:f6:ca:7f:4a:e7:22:c0: 96:11:96:8d:14:cb:16:11:ac:2f:72:36:be:10:15: 83:14:b9:2e:68:b2:b4:24:89:65:06:b3:f3:72:c2: 5c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F2:E8:E3:4B:C3:3A:B8:CA:CE:E3:0F:72:D3:FD:0E:69:23:ED:56 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:bf:91:2f:60:0a:69:7d:10:69:59:06:bf:6b:f9:df:3d:fd: 8c:e7:1a:2e:05:22:6d:bc:ca:aa:20:20:07:0b:f5:c9:7a:53: f0:66:cf:99:43:b5:e0:1e:cc:96:9d:c9:51:89:90:ba:12:a5: 47:bc:f0:78:2a:c1:f0:55:5b:a6:01:dd:94:39:39:b3:af:4a: 27:e8:e1:e1:db:5b:a9:fa:db:ee:db:1f:b0:16:05:7a:99:1e: b3:b0:1c:b6:f7:92:11:7e:b6:df:b7:a1:28:a0:88:17:e1:0c: 1e:a9:5e:c1:8f:c6:fa:b6:3f:c0:fd:68:af:a9:6a:33:bc:54: 1f:28:07:14:28:fd:0f:2c:2c:8a:b4:ce:43:4d:5e:a4:eb:5e: fa:b6:b3:ba:58:8c:4f:5e:3a:4d:82:c1:d9:b4:f4:53:cf:6c: 22:61:cb:a8:81:e2:4c:8e:77:9f:c8:79:67:ee:d8:d6:2b:f1: ff:0e:6b:a9:75:5a:05:07:41:b8:f9:de:25:05:92:41:ea:ff: b1:26:8f:f5:34:79:a4:15:db:6e:6c:2e:f6:9d:8f:db:7e:3e: 18:b5:21:16:12:25:a5:37:17:c1:c3:5a:36:c5:22:e2:dc:e9: b2:6f:ad:2d:a4:eb:4e:ee:f3:af:91:97:34:27:43:67:d1:64: ba:37:d4:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjQwNTA0MTgxMTIxWhcNMjQwNTExMTgxMTIxWjAYMRYwFAYD VQQDEw02NjM2N2E0YS0wN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLf9QY/MM5QWp9Bmkh+AO7CeCjyTMmeZjH51El2DaG04eiehevH5xNYX0Xo4 vWpp3f34bqT1tg50ymjG9GSUFpdiVO/d877Nfno3K5MRxMdlxncMWPPh//6oZvcx vCnPchEzDB/L38ZlY8NDU/bRZgxxCZppT9ngV3fIK27Ju7SXeVvfYnSpgb9Ut7AA AA16vd5A8/tqX6BhEqqr/NaVsubUjSMLD2zHuBTUIp6p7iQWGx/ZaIeN+yivjQlC TIGumMgTjSvVV0uuz9BgT3THSWGjDVEeFxhWBfbKf0rnIsCWEZaNFMsWEawvcja+ EBWDFLkuaLK0JIllBrPzcsJcEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDy6ONL wzq4ys7jD3LT/Q5pI+1WMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWv5EvYAppfRBpWQa/a/nfPf2M5xouBSJtvMqqICAHC/XJelPwZs+Z Q7XgHsyWnclRiZC6EqVHvPB4KsHwVVumAd2UOTmzr0on6OHh21up+tvu2x+wFgV6 mR6zsBy295IRfrbft6EooIgX4QweqV7Bj8b6tj/A/WivqWozvFQfKAcUKP0PLCyK tM5DTV6k6176trO6WIxPXjpNgsHZtPRTz2wiYcuogeJMjnefyHln7tjWK/H/Dmup dVoFB0G4+d4lBZJB6v+xJo/1NHmkFdtubC72nY/bfj4YtSEWEiWlNxfBw1o2xSLi 3Omyb60tpOtO7vOvkZc0J0Nn0WS6N9St -----END CERTIFICATE-----Generated at Sat May 4 19:58:38 2024 by rpki-client on console-ams.rpki-client.org