$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: dXB1SdCatBhXI6OSW8V8MRtXsVEdwz6OgFsheHhxkLI= Subject key identifier: B0:F5:46:AA:4D:8F:51:FF:8E:9D:74:A8:13:1E:04:39:2C:E9:F2:A6 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: 2D Signing time: Sun 15 Sep 2024 10:06:41 +0000 Manifest this update: Sun 15 Sep 2024 10:06:40 +0000 Manifest next update: Sun 22 Sep 2024 10:06:40 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: twe0sVOhn4strKwRw5LKXFBzSwOr6vTeu3bpkzzteP4=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: tsoBMusAYtzjMEQt6uZAdSSMkNs5iOHuJdHdIDa6SSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Sep 15 10:06:40 2024 GMT Not After : Sep 22 10:06:40 2024 GMT Subject: CN=66e6b1b0-180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:b0:9e:03:95:5b:70:81:d8:bc:66:4a:b0: 61:8f:e5:35:e8:af:45:6e:c9:16:83:60:87:8b:23: aa:7b:ad:13:89:f7:ec:64:41:1c:25:5e:5d:2b:33: bc:aa:98:18:d4:1e:2c:67:2f:0f:cd:bb:f0:68:47: 36:05:2e:a2:a1:72:e8:1c:f4:63:3c:04:55:52:89: e3:11:98:9a:21:c3:27:d6:c7:5c:c8:15:10:f0:eb: 1a:73:e7:e8:4d:12:a6:50:83:54:8a:96:44:dd:af: 7c:5c:3f:c0:6b:0d:10:ca:d6:cb:e5:46:4e:1e:60: 45:ee:c4:ad:d9:f0:4d:af:f9:c1:7d:fe:45:24:5e: 24:20:fe:f5:17:bb:80:27:dd:c8:76:c7:99:18:48: 45:d3:01:0f:ce:76:a2:e3:7d:88:b0:fd:9e:a9:9d: 0b:5c:a4:28:d4:f5:78:1b:e7:b1:2a:ff:93:7c:83: d4:5b:54:b5:f3:2e:05:bf:24:77:c2:35:35:80:30: 06:fe:70:4f:62:b2:a0:c7:ed:1b:4b:57:69:40:a6: 88:6b:57:44:8f:aa:8b:48:59:25:4c:f0:93:d9:a2: 53:cc:70:6c:f4:4e:0b:00:d8:ec:84:0e:b0:bb:9e: b0:97:31:23:35:17:f8:d7:2e:48:28:cb:58:03:06: 54:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:46:AA:4D:8F:51:FF:8E:9D:74:A8:13:1E:04:39:2C:E9:F2:A6 X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:51:51:17:88:1a:62:9b:4a:68:63:66:9b:fb:9d:27:e9:29: b8:99:27:85:6e:e6:ed:57:58:fc:e2:11:3b:64:5c:07:61:35: 95:03:26:98:c2:6a:05:39:d9:b2:ce:bc:8a:20:ed:24:a1:aa: e6:c0:a9:1a:ad:86:6a:9f:4b:f0:fe:fb:e8:6a:2f:af:fc:02: ee:e0:4f:fe:71:7a:32:df:88:62:12:7e:27:60:08:eb:8e:89: 59:38:93:22:66:7b:33:a6:d2:1f:4d:02:e5:aa:d1:f1:1c:1f: 96:d5:c9:af:e4:bb:30:be:aa:b2:fe:f6:00:f2:b8:a9:79:3b: 0b:61:0b:b6:ab:3b:ea:74:04:db:cb:5e:6d:88:cd:5f:18:8d: 6b:c3:57:7c:b5:98:d7:b9:b8:8f:f4:a1:53:bf:39:e6:64:a7: 6d:78:3e:7c:18:81:a9:58:d9:fe:be:f0:ec:07:de:79:b9:16: 0b:5a:76:11:17:0d:02:7f:69:96:7c:fa:df:5c:81:3c:84:e6: 33:cf:46:67:d2:ab:e3:cb:d4:d5:a9:c1:f5:39:7b:9e:a6:42: 8a:f8:14:8e:98:e2:58:5b:be:b5:c2:ea:8c:a3:97:9f:09:48: 9d:8e:6a:2f:6b:bc:fe:21:c7:13:6f:41:79:56:d1:7b:1c:4f: f8:01:c5:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REI3MjExMC8GA1UEBRMoMzM5M0Y5RDA3MEIyRTcwOTQ5QUNBMkFBQ0M4RTY1RTg5 MEU3NDA5OTAeFw0yNDA5MTUxMDA2NDBaFw0yNDA5MjIxMDA2NDBaMBgxFjAUBgNV BAMTDTY2ZTZiMWIwLTE4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC78rCeA5VbcIHYvGZKsGGP5TXor0VuyRaDYIeLI6p7rROJ9+xkQRwlXl0rM7yq mBjUHixnLw/Nu/BoRzYFLqKhcugc9GM8BFVSieMRmJohwyfWx1zIFRDw6xpz5+hN EqZQg1SKlkTdr3xcP8BrDRDK1svlRk4eYEXuxK3Z8E2v+cF9/kUkXiQg/vUXu4An 3ch2x5kYSEXTAQ/OdqLjfYiw/Z6pnQtcpCjU9Xgb57Eq/5N8g9RbVLXzLgW/JHfC NTWAMAb+cE9isqDH7RtLV2lApohrV0SPqotIWSVM8JPZolPMcGz0TgsA2OyEDrC7 nrCXMSM1F/jXLkgoy1gDBlSpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsPVGqk2P Uf+OnXSoEx4EOSzp8qYwHwYDVR0jBBgwFoAUM5P50HCy5wlJrKKqzI5l6JDnQJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQjcyLzg2MTFFNjJFMzFG NDExRUZBRTkxQTAwQ0M0RjlBRTAyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTVQNTBIQ3k1d2xKcktLcXpJNWw2SkRuUUprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE QjcyLzg2MTFFNjJFMzFGNDExRUZBRTkxQTAwQ0M0RjlBRTAyL001UDUwSEN5NXds SnJLS3F6STVsNkpEblFKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxRUReIGmKbSmhjZpv7nSfpKbiZJ4Vu5u1XWPziETtkXAdhNZUDJpjC agU52bLOvIog7SShqubAqRqthmqfS/D+++hqL6/8Au7gT/5xejLfiGISfidgCOuO iVk4kyJmezOm0h9NAuWq0fEcH5bVya/kuzC+qrL+9gDyuKl5OwthC7arO+p0BNvL Xm2IzV8YjWvDV3y1mNe5uI/0oVO/OeZkp214PnwYgalY2f6+8OwH3nm5FgtadhEX DQJ/aZZ8+t9cgTyE5jPPRmfSq+PL1NWpwfU5e56mQor4FI6Y4lhbvrXC6oyjl58J SJ2Oai9rvP4hxxNvQXlW0XscT/gBxeY= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:10 2024 by rpki-client on console-fra.rpki-client.org