$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: rScfeoDEajwFC3ZsFOBPQc1ljBlngwwXO+u41PGRI2c= Subject key identifier: F3:B1:E8:1D:DE:3C:DA:EC:4A:25:EE:4E:AE:6E:17:43:D2:94:8A:3D Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 0485 Signing time: Tue 07 May 2024 01:42:49 +0000 Manifest this update: Tue 07 May 2024 01:42:48 +0000 Manifest next update: Tue 14 May 2024 01:42:48 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: +DH8vcWZOH8qPh6JPSYDrymS04R4yr0QI/KDRztpBD4=) 2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: FNKGDn8U4KUsDU4wfsdk54mwxe49RF9Rnp6Ax+CRvWA=) 3: 243C54088DAC11EEBFC67C56C4F9AE02.roa (hash: d1p4Xhr7ufm8ypv8MhI4KjIiid+LZdXFKJD36On3DJY=) 4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: QDARhfmXCcZMZ5S8T2hfYErvUUxQhZJ/5Bfo6AM7egs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: May 7 01:42:48 2024 GMT Not After : May 14 01:42:48 2024 GMT Subject: CN=66398719-c672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:bd:29:57:4d:53:5e:91:3e:b6:08:c1:74: 42:9f:25:64:cc:ee:c9:6f:a0:d3:db:af:5d:e4:ef: d6:65:ea:97:e1:eb:bc:b9:00:96:6a:1f:a7:80:38: 99:86:14:80:96:c0:ac:c0:a3:03:02:bf:49:0a:22: d6:ac:54:d3:1a:75:4e:12:44:da:fa:ce:3e:60:89: 43:b2:a5:d9:0a:89:f1:05:38:87:45:e2:4d:b8:d3: 6d:9c:d2:d1:01:02:af:00:28:ed:1b:38:34:d6:bc: 25:2c:38:86:56:b5:22:a9:fa:32:62:9a:62:ef:e4: 9d:2f:1b:ca:ae:92:a2:4b:0c:d2:9e:55:6c:08:90: c2:dd:14:82:de:5a:74:89:ab:fc:bd:0d:10:61:7d: b0:24:13:53:ad:e7:74:ab:d7:b9:48:c3:27:74:bd: 68:6c:12:fe:45:64:a7:17:3e:07:83:a5:2d:40:37: fb:54:89:00:e7:14:e9:ef:61:0c:cb:35:c1:55:67: c7:35:41:56:a1:5d:a7:7f:fc:5f:90:58:a5:fe:a2: 8f:50:c1:d6:6b:f1:88:a9:5f:e9:91:4f:09:7a:e0: a7:00:09:04:ab:1d:9a:9e:45:55:8b:62:37:dc:d6: 1c:bb:fd:db:78:3d:c5:d7:9c:c3:96:96:12:0f:a0: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B1:E8:1D:DE:3C:DA:EC:4A:25:EE:4E:AE:6E:17:43:D2:94:8A:3D X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:af:92:f5:6f:95:52:26:e4:49:60:da:6f:bf:66:56:6c:ee: cd:78:c1:02:fd:52:56:84:24:60:4c:ed:68:3e:1f:c7:69:76: 24:00:a9:7c:b7:cf:98:81:f6:73:da:be:60:be:82:97:16:24: e9:94:01:05:02:5c:68:c7:49:71:f5:b9:18:b1:68:c9:3f:3d: 0b:48:6f:9d:21:b6:ef:a2:51:26:9d:2a:a2:4a:f8:5b:89:62: 0a:f8:7f:e1:1d:d8:3b:01:13:0f:4b:b4:9e:a4:85:6d:5a:1c: 7f:f6:c5:30:ea:14:4d:59:8e:b6:2f:f3:de:3d:80:fb:fa:1c: 04:83:9b:5d:18:e4:38:57:e7:1b:79:3a:82:5a:c7:08:b1:c6: 1a:8b:f1:e7:7e:0a:f7:b2:bb:c2:13:6b:74:d9:0f:1e:ec:0a: d3:5f:fc:7f:41:96:e1:66:a0:b5:e9:8b:50:06:3c:76:dc:78: 33:e5:e7:47:e4:82:bf:42:d3:21:7c:11:46:ab:56:f8:f3:c5: 0b:9a:04:c0:78:18:7d:a9:4e:f5:18:f0:75:53:06:3f:c3:f0: d7:6d:20:1d:31:7d:6b:fb:66:6a:9d:25:ba:bb:8c:50:1d:ae: cc:5b:0f:36:da:ef:c3:2b:c3:a9:cb:5a:61:a9:78:61:dd:26: 32:6b:0a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjQwNTA3MDE0MjQ4WhcNMjQwNTE0MDE0MjQ4WjAYMRYwFAYD VQQDEw02NjM5ODcxOS1jNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRK9KVdNU16RPrYIwXRCnyVkzO7Jb6DT269d5O/WZeqX4eu8uQCWah+ngDiZ hhSAlsCswKMDAr9JCiLWrFTTGnVOEkTa+s4+YIlDsqXZConxBTiHReJNuNNtnNLR AQKvACjtGzg01rwlLDiGVrUiqfoyYppi7+SdLxvKrpKiSwzSnlVsCJDC3RSC3lp0 iav8vQ0QYX2wJBNTred0q9e5SMMndL1obBL+RWSnFz4Hg6UtQDf7VIkA5xTp72EM yzXBVWfHNUFWoV2nf/xfkFil/qKPUMHWa/GIqV/pkU8JeuCnAAkEqx2ankVVi2I3 3NYcu/3beD3F15zDlpYSD6CDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOx6B3e PNrsSiXuTq5uF0PSlIo9MB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNr5L1b5VSJuRJYNpvv2ZWbO7NeMEC/VJWhCRgTO1oPh/HaXYkAKl8 t8+YgfZz2r5gvoKXFiTplAEFAlxox0lx9bkYsWjJPz0LSG+dIbbvolEmnSqiSvhb iWIK+H/hHdg7ARMPS7SepIVtWhx/9sUw6hRNWY62L/PePYD7+hwEg5tdGOQ4V+cb eTqCWscIscYai/Hnfgr3srvCE2t02Q8e7ArTX/x/QZbhZqC16YtQBjx23Hgz5edH 5IK/QtMhfBFGq1b488ULmgTAeBh9qU71GPB1UwY/w/DXbSAdMX1r+2ZqnSW6u4xQ Ha7MWw822u/DK8Opy1phqXhh3SYyawra -----END CERTIFICATE-----Generated at Tue May 7 03:10:20 2024 by rpki-client on console-ams.rpki-client.org