$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: wqFXHsmc0l11+yZQ4C/3nM8IOVpMJFRxyqcpIbGUHlk= Subject key identifier: 17:8A:D2:D3:45:75:1D:BD:B0:A5:1C:0A:55:62:ED:5C:BE:FF:5F:77 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 0126 Signing time: Tue 07 May 2024 05:03:34 +0000 Manifest this update: Tue 07 May 2024 05:03:34 +0000 Manifest next update: Tue 14 May 2024 05:03:34 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: LDtl96ILms6zhD0mV/ogCxuJes+Z+wt58DArJNocAu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: May 7 05:03:34 2024 GMT Not After : May 14 05:03:34 2024 GMT Subject: CN=6639b626-589e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:ed:79:d8:3d:63:ea:0a:a7:88:cf:0d:ff: e2:74:c1:2a:d7:4a:bd:72:54:04:12:12:45:3c:e4: c1:ef:0a:16:66:fe:ec:37:d2:e2:0c:0f:a7:10:8d: cc:68:bf:06:c9:53:bf:72:3d:49:b5:09:aa:d1:c2: 04:16:4b:3c:c0:57:8a:1f:c0:18:7c:90:8c:f3:f8: ad:d7:22:bd:fe:49:f2:77:fd:de:b6:a0:84:75:64: 7a:74:58:13:e6:e1:99:db:d3:69:45:fa:03:d7:f6: 11:1b:6d:d0:6a:62:f6:74:2f:cf:a0:08:01:ff:1f: 9c:b1:44:1b:0d:f2:54:fb:8d:74:3a:fa:3a:7b:18: 4f:e3:15:96:d8:74:18:36:2e:cf:88:5a:14:0b:43: 08:aa:8e:d7:7e:32:c3:8b:a6:db:41:3a:23:5b:88: 65:f9:eb:bb:90:a8:4d:c2:0a:c9:e7:01:11:70:1f: ba:7d:ff:3f:65:fb:ec:46:cc:68:c0:7e:70:d6:14: 33:90:a4:d4:5a:28:6a:75:12:92:fc:4c:87:b0:f8: 83:0d:93:8c:48:a1:83:f6:40:0f:f3:f7:cb:b5:b5: cb:16:51:1a:b4:e8:13:2d:4d:59:10:93:21:62:42: e2:91:c5:97:2c:2d:51:8c:57:80:81:47:9b:46:7b: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:D2:D3:45:75:1D:BD:B0:A5:1C:0A:55:62:ED:5C:BE:FF:5F:77 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:5c:71:03:8d:a8:92:4b:a6:58:a4:b4:46:ff:e7:9e:7d:bd: f6:f4:a3:ee:10:5a:cb:66:30:b6:36:89:6f:61:67:05:87:af: 05:7c:0a:18:d1:dd:7b:37:86:79:b1:8b:00:5a:51:de:15:7c: 70:57:00:c7:39:ba:44:dd:e7:1a:84:c0:91:08:08:4a:7e:5b: 17:30:58:69:3e:6e:99:19:55:54:9e:e7:38:89:7a:e6:33:79: d4:12:97:f3:36:7b:3b:97:2a:db:66:05:01:88:66:f7:01:b5: cb:23:79:bd:3a:47:62:1e:37:4e:3d:fe:cd:db:7e:ff:0a:3f: 75:f7:14:17:50:c3:a8:a2:92:5f:05:92:fc:24:cb:9f:fe:8d: a3:1a:8d:26:da:87:2d:3c:17:bf:86:b0:a2:d0:4c:a8:43:da: 26:a4:4e:4b:3c:c5:a3:80:41:be:9b:8d:07:31:4b:e5:d4:e5: 19:03:d5:9c:73:18:7e:e1:fb:dd:73:4a:44:62:a2:56:7b:6d: f5:2e:d2:2b:36:c5:6e:a3:66:5f:0e:cd:07:39:a4:9a:ae:d9: f9:7e:e3:02:af:ac:db:5a:cd:1a:0f:ee:69:ad:2b:d0:78:04: ad:de:c5:94:8a:72:91:55:78:f6:7b:42:42:9a:c8:90:1a:b7: a0:f1:cf:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjQwNTA3MDUwMzM0WhcNMjQwNTE0MDUwMzM0WjAYMRYwFAYD VQQDEw02NjM5YjYyNi01ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmvtedg9Y+oKp4jPDf/idMEq10q9clQEEhJFPOTB7woWZv7sN9LiDA+nEI3M aL8GyVO/cj1JtQmq0cIEFks8wFeKH8AYfJCM8/it1yK9/knyd/3etqCEdWR6dFgT 5uGZ29NpRfoD1/YRG23QamL2dC/PoAgB/x+csUQbDfJU+410Ovo6exhP4xWW2HQY Ni7PiFoUC0MIqo7XfjLDi6bbQTojW4hl+eu7kKhNwgrJ5wERcB+6ff8/ZfvsRsxo wH5w1hQzkKTUWihqdRKS/EyHsPiDDZOMSKGD9kAP8/fLtbXLFlEatOgTLU1ZEJMh YkLikcWXLC1RjFeAgUebRnsiwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeK0tNF dR29sKUcClVi7Vy+/193MB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiXHEDjaiSS6ZYpLRG/+eefb329KPuEFrLZjC2NolvYWcFh68FfAoY 0d17N4Z5sYsAWlHeFXxwVwDHObpE3ecahMCRCAhKflsXMFhpPm6ZGVVUnuc4iXrm M3nUEpfzNns7lyrbZgUBiGb3AbXLI3m9OkdiHjdOPf7N237/Cj919xQXUMOoopJf BZL8JMuf/o2jGo0m2octPBe/hrCi0EyoQ9ompE5LPMWjgEG+m40HMUvl1OUZA9Wc cxh+4fvdc0pEYqJWe231LtIrNsVuo2ZfDs0HOaSartn5fuMCr6zbWs0aD+5prSvQ eASt3sWUinKRVXj2e0JCmsiQGreg8c8+ -----END CERTIFICATE-----Generated at Tue May 7 05:39:53 2024 by rpki-client on console-fra.rpki-client.org