$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: p84iAN8h634VJjznZJqPvZdualKPjpcZY4PqpQd4HrU= Subject key identifier: 88:08:ED:7F:DD:7E:C0:CC:8F:D2:D9:05:92:42:CF:8B:AD:59:09:D1 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0D7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0D65 Signing time: Mon 06 May 2024 18:41:33 +0000 Manifest this update: Mon 06 May 2024 18:41:32 +0000 Manifest next update: Mon 13 May 2024 18:41:32 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: OiCgxZzD05HHERN5UuMYZn2KKWkWGGJGTY4hvLVqke0=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: /MAfFsCX3raA/f7POApleax8y0KylFoyhT7LCg2+x5I=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: LK9gK8M2L2ZMh3tmQmG2YkeThdi/Q41kPuFCkYYXDA8=) 4: F612D886FB0111E98B628F2BC4F9AE02.roa (hash: pnn8hwOelnSfyfQ/tyqXUGUD6iWsZWLW4T34rUYBJ98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: May 6 18:41:32 2024 GMT Not After : May 13 18:41:32 2024 GMT Subject: CN=6639245d-9c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:d1:4f:0e:c7:8b:8b:90:16:e7:89:da:a5: 77:4d:62:da:c5:d0:44:8d:87:b7:83:cc:f1:a3:87: 3a:89:40:d1:08:7b:c5:0a:ed:13:4f:34:59:f9:02: da:4d:c6:1c:4b:7a:e5:28:f5:83:69:4c:f6:47:62: a4:6f:2d:fb:1d:04:22:f3:06:e2:af:9b:fc:2a:75: bc:3e:4a:71:f5:37:28:f4:05:ad:a7:7d:a5:75:88: d1:f5:22:5f:a1:d0:a2:f9:28:62:de:00:32:2d:41: 22:b6:41:16:5e:16:6b:0f:bc:98:22:a1:d1:91:58: d2:e9:0a:18:b9:6f:e7:63:1e:77:c2:82:db:74:3d: 39:35:08:f4:01:d5:f9:7e:7c:36:ff:a2:a4:57:8b: cc:03:4a:70:ed:c9:a9:d6:d6:cc:b2:48:9e:11:6d: 54:ca:b5:29:2f:23:b6:75:74:4f:de:ec:20:c3:f2: 0b:ef:ef:e2:62:e4:41:1a:69:08:f3:49:1d:2b:ea: f3:86:fd:39:be:b2:b4:ff:b0:9e:90:8a:97:ee:e1: b2:3d:96:48:0b:bb:4c:83:f0:44:a3:25:4f:ea:2f: c3:e1:49:c2:1a:5e:41:09:b4:45:ed:c3:5c:2d:5b: 6e:89:64:da:e3:57:bc:ee:91:a0:fe:4d:08:6a:e4: b7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:08:ED:7F:DD:7E:C0:CC:8F:D2:D9:05:92:42:CF:8B:AD:59:09:D1 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fb:36:db:46:5c:8c:3b:1c:2e:fc:73:38:43:70:2b:63:41: 8b:e6:f7:b5:1b:20:66:5f:b1:ab:79:9b:81:53:b7:74:ef:35: cc:be:fb:c7:2c:38:a6:54:b0:51:f5:42:3f:c1:bc:ab:c5:79: 2c:b2:1b:4e:3d:c7:b7:bd:b8:ab:ff:61:5e:5d:83:68:02:a8: 5e:9a:3c:c5:70:c7:e4:e8:20:ac:4c:aa:54:26:5e:e6:36:52: 2c:50:90:76:36:31:d0:ec:53:2f:d4:3c:88:fe:e3:b6:50:3f: 91:03:37:98:41:34:a1:33:4c:2a:d8:33:74:16:23:34:35:1f: d1:86:9a:76:c0:9c:1c:f4:10:98:2a:ea:e6:96:bb:50:16:de: ac:59:a9:61:62:ed:2f:f4:7a:aa:4c:26:a8:e9:87:25:b8:b3: ab:e9:87:37:66:cb:2c:f7:97:9a:e6:2b:5d:b6:27:e3:f2:80: a3:09:1b:92:e4:f1:9a:2a:f3:48:64:90:cd:ae:1d:2d:09:98: 1c:8e:48:a9:42:82:ef:22:24:a7:40:f8:d1:52:fd:56:60:b0: 8d:f6:b9:83:fd:34:b4:dd:7b:c1:a8:3a:07:f5:14:f1:74:9d: f1:3b:e8:90:49:90:c1:0f:5f:74:ab:6d:57:56:08:a0:58:60: 9a:13:39:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjQwNTA2MTg0MTMyWhcNMjQwNTEzMTg0MTMyWjAYMRYwFAYD VQQDEw02NjM5MjQ1ZC05YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9bRTw7Hi4uQFueJ2qV3TWLaxdBEjYe3g8zxo4c6iUDRCHvFCu0TTzRZ+QLa TcYcS3rlKPWDaUz2R2Kkby37HQQi8wbir5v8KnW8Pkpx9Tco9AWtp32ldYjR9SJf odCi+Shi3gAyLUEitkEWXhZrD7yYIqHRkVjS6QoYuW/nYx53woLbdD05NQj0AdX5 fnw2/6KkV4vMA0pw7cmp1tbMskieEW1UyrUpLyO2dXRP3uwgw/IL7+/iYuRBGmkI 80kdK+rzhv05vrK0/7CekIqX7uGyPZZIC7tMg/BEoyVP6i/D4UnCGl5BCbRF7cNc LVtuiWTa41e87pGg/k0IauS3yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgI7X/d fsDMj9LZBZJCz4utWQnRMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt+zbbRlyMOxwu/HM4Q3ArY0GL5ve1GyBmX7GreZuBU7d07zXMvvvH LDimVLBR9UI/wbyrxXksshtOPce3vbir/2FeXYNoAqhemjzFcMfk6CCsTKpUJl7m NlIsUJB2NjHQ7FMv1DyI/uO2UD+RAzeYQTShM0wq2DN0FiM0NR/Rhpp2wJwc9BCY KurmlrtQFt6sWalhYu0v9HqqTCao6YcluLOr6Yc3Zsss95ea5itdtifj8oCjCRuS 5PGaKvNIZJDNrh0tCZgcjkipQoLvIiSnQPjRUv1WYLCN9rmD/TS03XvBqDoH9RTx dJ3xO+iQSZDBD190q21XVgigWGCaEzlJ -----END CERTIFICATE-----Generated at Mon May 6 20:19:12 2024 by rpki-client on console-fra.rpki-client.org