$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: n6WaYSoC7OUx8ango4qCyNoSdnp21NfDjRvbasf+AHg= Subject key identifier: EF:1D:E6:B9:E1:B1:84:C7:50:83:39:0E:0A:AA:64:28:60:90:63:A1 Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: 38 Signing time: Tue 21 May 2024 08:14:44 +0000 Manifest this update: Tue 21 May 2024 08:14:43 +0000 Manifest next update: Tue 28 May 2024 08:14:43 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: nghbjPlWSPwK/HkzekddmfQOCuWw4mASy4Ga4mwyqfo=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: KkyhhPtlZMDBkBcDrSl5ZqGZpFEMDoQwWUdeAfA1gco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: May 21 08:14:43 2024 GMT Not After : May 28 08:14:43 2024 GMT Subject: CN=664c57f4-3e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:d3:86:28:74:d4:8b:9b:4a:92:e5:c0:47: b7:b9:f6:de:6c:e0:b8:43:50:70:f5:76:a8:3b:c3: 63:bf:f6:a6:b2:82:73:e1:8c:71:b2:4f:a6:cd:94: 0f:6c:47:7e:8f:a5:bc:b6:c7:c9:6d:fc:ce:13:d1: f6:ad:7d:a9:d9:18:9e:f0:61:2e:6f:4b:e1:e2:65: fb:85:db:75:19:82:16:1b:31:80:92:d0:18:31:76: 64:da:36:a2:df:d3:44:b6:5e:2b:68:4a:a5:20:a8: 90:f2:07:28:ec:95:7a:e4:c5:07:eb:38:b9:07:5e: ac:bd:5c:05:f7:75:9c:b6:ab:f0:12:a3:61:85:0c: eb:34:d1:2d:5c:29:55:ef:12:b1:64:40:9f:ad:4f: 3f:f8:6b:f5:b8:29:d3:b7:28:c7:3d:86:f0:47:c4: cb:7f:e2:b3:0b:2a:3b:f5:dd:69:cd:49:4c:d9:a3: 16:ad:8e:9c:39:cf:d8:df:af:c4:01:d1:7a:d6:20: 55:fe:37:ed:53:5e:fe:36:7a:0b:42:90:20:32:a7: 80:73:c6:7d:f7:b3:f2:b1:a0:fe:8b:be:5c:d6:10: 29:41:1e:7d:08:64:81:b2:27:26:f5:ef:46:c6:1a: 3d:e7:6f:de:8b:9a:e5:08:45:6e:da:f8:00:88:d4: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:E6:B9:E1:B1:84:C7:50:83:39:0E:0A:AA:64:28:60:90:63:A1 X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:95:31:63:88:9d:fe:ec:2b:19:34:cb:f7:46:52:89:fe:43: 2a:a6:c1:65:ad:c5:bd:86:f6:b0:3a:05:c0:e2:10:10:d3:ed: 29:b0:47:db:0a:70:21:e5:6d:74:54:83:96:b5:4c:f5:5c:34: 1d:98:d4:65:98:d1:17:73:39:ee:38:72:5c:bb:cd:cf:43:84: 85:90:38:99:7e:96:26:d7:6a:3e:e9:1e:37:33:f4:e5:40:d4: 4f:5f:eb:c2:fb:05:82:e0:3e:28:8f:5b:c2:72:c0:bc:cb:5a: 14:b7:a1:b5:76:a3:52:17:0f:08:d1:bd:63:21:be:0f:3c:b1: 85:a1:a0:28:4b:e4:6a:fb:49:7a:6e:a9:a8:10:ce:0e:4b:ab: e6:39:3b:38:17:9d:3d:6d:11:99:82:e8:fd:88:0a:d2:7a:f2: 5e:ac:5e:a4:2f:f5:63:39:05:f6:a5:d8:88:ed:8a:0b:c0:1e: 6d:a2:b5:dd:fa:c5:0b:f1:d1:5b:c8:6f:12:b8:3d:bd:36:21: 6c:a7:9c:6d:03:bc:1f:18:0a:ac:ee:60:3f:e8:0e:c0:76:1d: 06:92:aa:b2:78:52:b1:de:ff:0e:e9:8c:c7:84:df:74:2a:4d: 96:7e:b4:3a:89:48:9b:9f:2b:97:68:0c:92:14:4e:e6:9d:76: 99:30:de:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEMxRTExMC8GA1UEBRMoRjkzRUZBQTZBNkQwNTRBRTk5N0M4QTNDRkYyNUYxNjlD MzZGOEEwQzAeFw0yNDA1MjEwODE0NDNaFw0yNDA1MjgwODE0NDNaMBgxFjAUBgNV BAMTDTY2NGM1N2Y0LTNlNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhydOGKHTUi5tKkuXAR7e59t5s4LhDUHD1dqg7w2O/9qaygnPhjHGyT6bNlA9s R36Ppby2x8lt/M4T0fatfanZGJ7wYS5vS+HiZfuF23UZghYbMYCS0BgxdmTaNqLf 00S2XitoSqUgqJDyByjslXrkxQfrOLkHXqy9XAX3dZy2q/ASo2GFDOs00S1cKVXv ErFkQJ+tTz/4a/W4KdO3KMc9hvBHxMt/4rMLKjv13WnNSUzZoxatjpw5z9jfr8QB 0XrWIFX+N+1TXv42egtCkCAyp4Bzxn33s/KxoP6LvlzWEClBHn0IZIGyJyb170bG Gj3nb96LmuUIRW7a+ACI1BepAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7x3mueGx hMdQgzkOCqpkKGCQY6EwHwYDVR0jBBgwFoAU+T76pqbQVK6ZfIo8/yXxacNvigww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QzFFL0I5ODlGOEEyQzY0 NzExRUU5RDY4RUI3RkM0RjlBRTAyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmln dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLVQ3NnBxYlFWSzZaZklvOF95WHhhY052aWd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QzFFL0I5ODlGOEEyQzY0NzExRUU5RDY4RUI3RkM0RjlBRTAyLy1UNzZwcWJRVks2 WmZJbzhfeVh4YWNOdmlndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAaVMWOInf7sKxk0y/dGUon+QyqmwWWtxb2G9rA6BcDiEBDT7SmwR9sK cCHlbXRUg5a1TPVcNB2Y1GWY0RdzOe44cly7zc9DhIWQOJl+libXaj7pHjcz9OVA 1E9f68L7BYLgPiiPW8JywLzLWhS3obV2o1IXDwjRvWMhvg88sYWhoChL5Gr7SXpu qagQzg5Lq+Y5OzgXnT1tEZmC6P2ICtJ68l6sXqQv9WM5Bfal2IjtigvAHm2itd36 xQvx0VvIbxK4Pb02IWynnG0DvB8YCqzuYD/oDsB2HQaSqrJ4UrHe/w7pjMeE33Qq TZZ+tDqJSJufK5doDJIUTuaddpkw3oE= -----END CERTIFICATE-----Generated at Tue May 21 10:37:09 2024 by rpki-client on console-fra.rpki-client.org