$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: 5n+OnNsHJz2xHrn/ZZ0+dekb//V8oG8MHsDXhCftpHM= Subject key identifier: 9D:A7:67:6E:2A:26:A9:FD:E9:3F:BD:F2:97:AF:43:14:CF:6A:C3:54 Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 0284 Signing time: Wed 01 May 2024 04:02:02 +0000 Manifest this update: Wed 01 May 2024 04:02:01 +0000 Manifest next update: Wed 08 May 2024 04:02:01 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: wCnA8hjUuoXK/++fgkPgs9sB72E6bfxlmj3GwTpK+f8=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: RBsZfQ0KicBrU4yaM84xnMz+5ewzEgbPfvc8Ksv4tmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: May 1 04:02:01 2024 GMT Not After : May 8 04:02:01 2024 GMT Subject: CN=6631beb9-fa75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:9c:cd:c1:f2:b5:51:b4:47:77:37:74:0c: 83:b4:46:07:e8:e8:39:6c:46:4e:f3:19:81:db:8c: d2:bb:94:13:b7:62:e7:cf:53:f0:8f:3e:09:20:91: 8a:4b:62:cb:70:d2:1c:3e:98:07:7b:96:d7:e2:ba: 23:71:2d:0d:1e:6f:e7:f2:ba:02:c8:fd:72:95:cb: fe:27:27:99:18:f4:21:e1:17:8a:e8:a0:e0:80:98: b4:ce:39:36:c1:90:c9:03:63:9c:10:20:e2:4a:75: 4e:23:ea:55:7e:fc:03:c2:ab:de:4b:02:0d:68:40: 43:45:7c:20:04:be:82:c9:ca:c8:66:00:21:bd:eb: c4:84:03:8c:6a:eb:7f:73:ae:bb:2e:39:bb:42:af: 6b:34:3d:63:7d:13:fb:35:0b:67:f9:d0:70:72:3b: a4:6a:a3:3a:74:87:96:3c:26:cc:71:98:80:b2:7b: 24:6e:f9:a4:cd:9e:50:15:07:9a:7c:38:9a:b9:25: 9e:08:0c:0f:69:8d:7a:80:f1:ae:94:70:ec:1c:63: 31:92:14:69:31:10:6d:d5:96:e8:8d:d5:8c:b5:f3: 59:38:ce:08:f1:09:b8:68:af:19:37:ec:17:d5:fa: f1:04:61:3e:37:69:cc:0e:84:1b:1f:7e:27:79:21: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A7:67:6E:2A:26:A9:FD:E9:3F:BD:F2:97:AF:43:14:CF:6A:C3:54 X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:3d:34:28:c3:6a:17:db:4d:33:57:86:7a:0a:c3:7b:6f:41: ea:53:9e:47:ec:b7:26:7d:b2:6d:61:1e:51:eb:13:5f:ec:e8: 00:a3:f0:e1:c6:24:e3:e3:2f:ab:60:8f:df:e3:81:6f:e9:b7: 92:0c:81:29:11:b5:ac:53:e3:74:f8:f9:ec:4c:3a:2d:b7:cc: ca:12:a5:7f:01:7b:e0:17:67:e9:c0:17:68:ac:cb:37:7b:3c: 11:9a:df:50:60:1a:2a:0c:7c:ef:4b:13:cb:c9:bf:05:05:29: 83:54:f4:fa:16:99:94:ce:35:03:a3:51:6a:9b:f5:e0:cd:33: 6d:97:a6:5f:42:45:77:1b:7e:b3:87:af:17:a4:10:de:86:b3: 90:ac:78:f6:d8:d5:5f:c0:a4:b5:ba:53:bc:c6:aa:83:82:97: 03:32:c8:21:bf:24:a2:55:03:51:2b:8a:9b:f4:0d:b4:50:9e: 40:42:a3:21:36:99:a9:96:a8:b1:17:74:d5:b6:f5:98:91:63: 22:22:af:d2:6d:4d:3d:8d:7a:21:2d:57:19:f1:7d:35:a8:fe: 48:67:5a:c9:96:12:3b:25:28:40:5a:81:ab:1a:9c:b2:32:3a: 5f:b1:04:b5:e6:6f:42:f6:cd:65:f6:e9:05:a3:77:0a:89:fb: 25:55:5a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjQwNTAxMDQwMjAxWhcNMjQwNTA4MDQwMjAxWjAYMRYwFAYD VQQDEw02NjMxYmViOS1mYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1OczcHytVG0R3c3dAyDtEYH6Og5bEZO8xmB24zSu5QTt2Lnz1Pwjz4JIJGK S2LLcNIcPpgHe5bX4rojcS0NHm/n8roCyP1ylcv+JyeZGPQh4ReK6KDggJi0zjk2 wZDJA2OcECDiSnVOI+pVfvwDwqveSwINaEBDRXwgBL6CycrIZgAhvevEhAOMaut/ c667Ljm7Qq9rND1jfRP7NQtn+dBwcjukaqM6dIeWPCbMcZiAsnskbvmkzZ5QFQea fDiauSWeCAwPaY16gPGulHDsHGMxkhRpMRBt1ZbojdWMtfNZOM4I8Qm4aK8ZN+wX 1frxBGE+N2nMDoQbH34neSEnDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2nZ24q Jqn96T+98pevQxTPasNUMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoPTQow2oX200zV4Z6CsN7b0HqU55H7LcmfbJtYR5R6xNf7OgAo/Dh xiTj4y+rYI/f44Fv6beSDIEpEbWsU+N0+PnsTDott8zKEqV/AXvgF2fpwBdorMs3 ezwRmt9QYBoqDHzvSxPLyb8FBSmDVPT6FpmUzjUDo1Fqm/XgzTNtl6ZfQkV3G36z h68XpBDehrOQrHj22NVfwKS1ulO8xqqDgpcDMsghvySiVQNRK4qb9A20UJ5AQqMh NpmplqixF3TVtvWYkWMiIq/SbU09jXohLVcZ8X01qP5IZ1rJlhI7JShAWoGrGpyy MjpfsQS15m9C9s1l9ukFo3cKifslVVrh -----END CERTIFICATE-----Generated at Wed May 1 05:59:04 2024 by rpki-client on console-fra.rpki-client.org