$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: zp0+b72SS5VMDhrWHwcmcm9EVZD2mGQ/Elx6aS1CgME= Subject key identifier: B5:B0:87:7B:6E:52:E8:75:75:EC:C9:F9:1B:62:F6:2E:F0:23:15:7D Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 15A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1590 Signing time: Thu 02 May 2024 17:19:53 +0000 Manifest this update: Thu 02 May 2024 17:19:52 +0000 Manifest next update: Thu 09 May 2024 17:19:52 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: wDY9dDFd8WVNrsxg+FhkVMywPl24MsIMcv6+wtc1MYo=) 2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: eVrv/7SB7Sw9s1UVLWjNWn1S1KymWPk3lNtET/pCiNk=) 3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: mBC+S8sbLCZZz8GfGm6iJpoFGjL0QOywm004JclbsFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5536 (0x15a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: May 2 17:19:52 2024 GMT Not After : May 9 17:19:52 2024 GMT Subject: CN=6633cb38-0e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:32:9a:cd:82:96:d4:3b:d2:52:ff:4a:24: 9d:ae:40:54:0f:3f:0e:0c:dc:72:e1:16:ab:b3:64: d0:7b:97:2f:07:05:5e:a9:a0:ea:dd:80:94:8e:45: ad:34:1b:2f:17:6c:11:e0:92:35:9d:a1:7b:3d:f7: 9f:09:83:5a:43:0c:de:85:f6:a0:0f:d5:73:15:80: 28:99:e7:cf:e3:e3:c9:3c:d9:ad:3f:30:aa:ee:d2: db:d4:68:7c:1c:16:10:ba:ca:92:af:35:a0:20:66: 73:68:17:eb:35:2d:bb:8f:2f:c5:37:a3:ab:e8:d7: cf:f0:3b:d1:08:5c:3c:d0:2e:b8:57:33:5e:e0:68: ac:64:0c:43:6c:c6:8b:43:73:3c:27:ce:57:a1:e6: e1:b8:77:75:e6:17:2c:de:e8:c8:9d:6a:a8:57:12: 51:03:73:15:1d:b6:2b:c5:6f:5a:8a:b7:26:2a:e6: ae:07:77:ce:f0:bd:13:eb:a9:c5:74:93:e9:db:be: 2c:9d:6d:fd:a8:e2:af:a1:12:61:67:2b:d5:a8:5d: de:16:09:8b:c3:a9:be:ff:b2:18:ae:76:6c:0f:7d: fb:e2:ab:f4:4a:cc:78:fc:af:b3:75:91:b6:59:36: 98:33:50:b7:59:a9:e2:61:ba:fb:68:2e:49:e1:4d: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:87:7B:6E:52:E8:75:75:EC:C9:F9:1B:62:F6:2E:F0:23:15:7D X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:24:00:34:5b:8f:3f:ee:e0:7c:2b:a6:77:6d:35:10:37:6f: cd:4b:eb:8d:19:f4:01:d6:60:a2:07:79:08:32:2d:b1:04:a4: 32:2b:1d:5d:f9:8e:67:c8:b6:6e:a1:32:af:14:d3:f9:38:c9: ba:e2:e8:fa:be:b9:9d:48:e2:e5:40:e4:53:7d:07:a2:7e:63: b7:32:cf:7a:94:ff:6d:73:5e:cd:26:fd:80:49:ef:a2:b4:24: 6f:6f:7d:ab:16:58:76:dc:df:9d:c1:b6:39:c3:19:db:89:e4: f5:1a:74:d6:47:3b:c7:0c:2b:b6:35:a5:aa:80:d8:83:a5:0a: 36:6d:92:09:44:07:10:c5:57:9d:c7:f5:7a:12:2e:6d:5b:8a: d4:2b:fe:61:80:28:f1:3f:85:7e:a6:e4:86:5f:d3:08:e2:a6: 6d:ad:bd:31:4f:aa:c7:8e:71:35:8a:c2:2d:55:d2:be:02:e1: 69:5b:27:da:70:45:dc:1e:8a:7a:ef:40:30:d3:f3:76:a8:b9: f4:53:c3:81:00:30:7c:0f:07:ba:c9:cc:ae:b8:77:f9:29:f4: 6a:c8:53:97:24:72:fa:67:eb:87:f0:07:a3:71:e4:68:c1:1d: d3:1e:35:f1:b5:be:2d:0f:e4:e1:6c:b6:46:d7:c4:3d:55:42: 09:9b:ee:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjQwNTAyMTcxOTUyWhcNMjQwNTA5MTcxOTUyWjAYMRYwFAYD VQQDEw02NjMzY2IzOC0wZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs24yms2CltQ70lL/SiSdrkBUDz8ODNxy4Rars2TQe5cvBwVeqaDq3YCUjkWt NBsvF2wR4JI1naF7PfefCYNaQwzehfagD9VzFYAomefP4+PJPNmtPzCq7tLb1Gh8 HBYQusqSrzWgIGZzaBfrNS27jy/FN6Or6NfP8DvRCFw80C64VzNe4GisZAxDbMaL Q3M8J85XoebhuHd15hcs3ujInWqoVxJRA3MVHbYrxW9aircmKuauB3fO8L0T66nF dJPp274snW39qOKvoRJhZyvVqF3eFgmLw6m+/7IYrnZsD3374qv0Ssx4/K+zdZG2 WTaYM1C3WaniYbr7aC5J4U3lAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWwh3tu Uuh1dezJ+Rti9i7wIxV9MB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzJAA0W48/7uB8K6Z3bTUQN2/NS+uNGfQB1mCiB3kIMi2xBKQyKx1d +Y5nyLZuoTKvFNP5OMm64uj6vrmdSOLlQORTfQeifmO3Ms96lP9tc17NJv2ASe+i tCRvb32rFlh23N+dwbY5wxnbieT1GnTWRzvHDCu2NaWqgNiDpQo2bZIJRAcQxVed x/V6Ei5tW4rUK/5hgCjxP4V+puSGX9MI4qZtrb0xT6rHjnE1isItVdK+AuFpWyfa cEXcHop670Aw0/N2qLn0U8OBADB8Dwe6ycyuuHf5KfRqyFOXJHL6Z+uH8AejceRo wR3THjXxtb4tD+ThbLZG18Q9VUIJm+7+ -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org