$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: /md5FSpRDHj2FogzsHTioldXiNMDuuByaHgRQLWpEEM= Subject key identifier: AE:2F:E4:2D:0B:5F:E0:FC:5B:2C:5D:F9:76:49:97:50:7D:33:91:4D Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: 13 Signing time: Wed 15 May 2024 08:57:17 +0000 Manifest this update: Wed 15 May 2024 08:57:17 +0000 Manifest next update: Wed 22 May 2024 08:57:17 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: VBD+UupmYG2umOrpjhXRkpMpXSV47ancT91Dv9xi8vY=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: a9RS5HIq3Dutxm5IOUvaCEzfSMQJVxzZjgdPZFPGcu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: May 15 08:57:17 2024 GMT Not After : May 22 08:57:17 2024 GMT Subject: CN=664478ed-3901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:c4:d6:1d:32:d0:2c:7d:6c:dd:1b:7d:4a: dd:4a:81:cd:92:fa:51:c4:36:83:46:31:65:e4:b2: f3:71:ad:3c:15:00:12:0f:e2:ab:1a:03:46:3c:35: 75:48:51:c3:84:b2:93:b2:c1:56:30:a6:7f:8c:d7: ae:8c:77:3e:eb:46:f5:10:88:88:92:07:d4:4c:05: 07:d9:f5:ae:86:3b:84:6b:53:e3:55:bb:3e:b0:5c: 8f:ce:7d:0e:84:d4:46:e7:5e:83:d9:7a:e1:4f:9c: 8e:bb:1c:cf:9a:47:3c:e8:1e:ec:13:03:de:5a:10: 25:9b:3e:f0:9d:d7:43:53:28:dc:12:9d:ee:9a:86: 25:3d:0a:78:81:e3:94:24:48:3c:c8:ef:80:c0:88: de:35:06:fa:39:b1:1a:c3:f9:d9:58:f7:d9:09:14: 66:2f:83:bc:71:f0:3d:4e:c8:f9:9c:50:ef:6d:2b: ee:2f:7b:f4:74:7f:56:fb:db:02:35:02:6e:92:fe: 5e:98:89:53:38:5f:8c:b8:2c:d0:f6:23:a2:d0:50: 59:07:ff:0c:fd:69:30:b7:9f:90:29:02:d1:dd:42: 21:47:6e:53:a6:83:56:3b:41:90:cf:3b:14:5b:01: 75:fe:6c:69:c2:9c:11:f8:a6:7e:60:ce:7b:3d:41: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2F:E4:2D:0B:5F:E0:FC:5B:2C:5D:F9:76:49:97:50:7D:33:91:4D X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:20:f9:22:cc:47:0d:01:76:db:e3:7d:29:ea:02:df:8c:1b: aa:51:49:ad:f8:6e:77:82:2b:1a:6f:31:5c:44:f5:3f:72:51: 4b:5a:c8:79:6c:36:d8:6a:16:d1:3e:f6:9f:d5:e9:0f:b0:42: 18:43:ea:bf:03:f3:e9:1e:06:32:ba:d7:5d:ca:63:66:80:38: 32:24:14:e5:bf:77:90:a4:d2:73:09:a8:d9:7a:43:5b:2e:87: 8a:77:a1:ba:9a:f1:ff:79:1c:04:96:f7:4b:0c:f5:11:1a:4b: 3e:62:c2:4f:5a:d3:12:63:ba:55:2d:01:66:28:da:0e:c8:30: 19:a8:b8:70:d8:5c:69:7c:ee:76:0f:35:a9:2c:0c:56:8d:ad: 6e:66:e7:f3:09:bf:71:cd:01:0f:79:94:68:39:85:03:70:59: 4d:f5:6d:3f:50:22:0f:c4:66:36:7e:17:c7:58:4d:87:52:54: 6a:2f:2d:98:b5:c7:e2:18:f2:c3:ca:ed:6b:c4:73:bb:7d:ef: 4b:54:2c:38:09:56:ad:3c:47:91:fe:1f:48:82:d7:96:d5:bf: ea:b7:47:ab:6e:eb:53:b7:66:2b:6d:03:96:0e:8d:c5:0c:ef: 05:8c:b3:75:03:75:27:ea:6d:b7:70:10:e1:29:e4:93:75:01: fe:b0:65:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjczQzExMC8GA1UEBRMoMTNDNzJERjFDNTFFMkNBMjExQ0E1NzY2NTE2OENGN0M3 Qzc0NzI5MjAeFw0yNDA1MTUwODU3MTdaFw0yNDA1MjIwODU3MTdaMBgxFjAUBgNV BAMTDTY2NDQ3OGVkLTM5MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPfcTWHTLQLH1s3Rt9St1Kgc2S+lHENoNGMWXksvNxrTwVABIP4qsaA0Y8NXVI UcOEspOywVYwpn+M166Mdz7rRvUQiIiSB9RMBQfZ9a6GO4RrU+NVuz6wXI/OfQ6E 1EbnXoPZeuFPnI67HM+aRzzoHuwTA95aECWbPvCd10NTKNwSne6ahiU9CniB45Qk SDzI74DAiN41Bvo5sRrD+dlY99kJFGYvg7xx8D1OyPmcUO9tK+4ve/R0f1b72wI1 Am6S/l6YiVM4X4y4LND2I6LQUFkH/wz9aTC3n5ApAtHdQiFHblOmg1Y7QZDPOxRb AXX+bGnCnBH4pn5gzns9QdvTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUri/kLQtf 4PxbLF35dkmXUH0zkU0wHwYDVR0jBBgwFoAUE8ct8cUeLKIRyldmUWjPfHx0cpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNzNDL0NCRDYyMTFDRjY0 ODExRUVBNEE2RkUwRUM0RjlBRTAyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRThjdDhjVWVMS0lSeWxkbVVXalBmSHgwY3BJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NzNDL0NCRDYyMTFDRjY0ODExRUVBNEE2RkUwRUM0RjlBRTAyL0U4Y3Q4Y1VlTEtJ UnlsZG1VV2pQZkh4MGNwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYg+SLMRw0BdtvjfSnqAt+MG6pRSa34bneCKxpvMVxE9T9yUUtayHls NthqFtE+9p/V6Q+wQhhD6r8D8+keBjK6113KY2aAODIkFOW/d5Ck0nMJqNl6Q1su h4p3obqa8f95HASW90sM9REaSz5iwk9a0xJjulUtAWYo2g7IMBmouHDYXGl87nYP NaksDFaNrW5m5/MJv3HNAQ95lGg5hQNwWU31bT9QIg/EZjZ+F8dYTYdSVGovLZi1 x+IY8sPK7WvEc7t970tULDgJVq08R5H+H0iC15bVv+q3R6tu61O3ZittA5YOjcUM 7wWMs3UDdSfqbbdwEOEp5JN1Af6wZT4= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org