$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: q3rnGk40Qnk8d220FMfylpDHUoC5DMlHrgEHNyPI9ok= Subject key identifier: D8:52:CB:1A:10:84:04:F4:B6:5E:C2:3A:F8:C7:B2:2E:FE:FB:A1:D7 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 0563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 0558 Signing time: Fri 03 May 2024 00:58:08 +0000 Manifest this update: Fri 03 May 2024 00:58:08 +0000 Manifest next update: Fri 10 May 2024 00:58:08 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: G8SMtskCk/BHikigFVPhJU63wR5GRWiWjI6m1ioi9LQ=) 2: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (hash: 3hRCIGv8J6ZPD7eqCFcSdXHz6UnDLueLvhKMUoFXKZg=) 3: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: VUfYYGUfVgXIhkgz5s5HyLNUsWHidDwIj7X1Pl5aTe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: May 3 00:58:08 2024 GMT Not After : May 10 00:58:08 2024 GMT Subject: CN=663436a0-91d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4c:64:86:50:64:63:24:2e:e4:d0:b2:7e:c5: 72:d4:ec:bb:f9:c5:e9:bb:f7:45:18:27:fc:d4:cf: 28:bd:1f:b4:09:29:21:4f:9f:09:e4:56:8f:19:ba: 8f:27:5e:ec:45:a4:2d:4a:95:d3:9c:24:c9:b0:1c: 20:16:0e:dc:33:2a:9a:fc:0a:1f:47:31:0c:05:60: f3:b2:c1:13:d7:38:5b:39:0b:85:96:c2:ff:9a:db: ca:62:f9:06:e3:b8:10:b7:15:75:17:77:ef:2a:d0: 57:b3:7e:ab:c4:15:de:f3:cc:83:aa:f8:ab:52:6c: 3e:fa:7f:cd:8b:47:3a:ac:82:87:3e:df:7a:7f:f8: f3:9e:40:c8:aa:48:86:c8:ae:b5:a9:3f:a5:18:d9: 50:40:62:1c:78:32:fe:95:db:b8:cd:b6:e0:32:59: bc:d0:bb:52:27:b1:de:29:1f:b0:af:38:92:30:30: 95:b7:bb:5f:cd:d4:61:7d:58:2c:6e:3d:ba:91:79: 3f:3f:b9:d9:25:b0:fd:41:a6:0b:1b:71:eb:c6:34: 69:1f:b4:9e:ea:30:bf:ca:f1:7f:10:94:5c:ab:98: 40:45:9f:ec:ec:85:07:3e:10:79:80:a9:90:e9:70: 8c:82:35:3e:c8:01:47:75:fb:8c:fc:c1:ad:52:e2: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:52:CB:1A:10:84:04:F4:B6:5E:C2:3A:F8:C7:B2:2E:FE:FB:A1:D7 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:7c:70:0d:64:97:c7:e6:7a:d6:d7:cc:23:cb:8c:28:5b:e9: 99:25:9a:e6:ae:45:19:64:14:9b:e4:15:33:6c:c2:ce:f1:b8: 2a:2b:6b:95:ee:e2:33:45:c8:df:c3:1f:41:03:02:c8:5b:8a: 61:ca:78:4a:b4:6c:a0:14:14:b8:fd:05:95:44:3e:fb:cd:27: e4:23:c2:08:7a:42:07:7e:b5:01:92:8f:15:a4:e6:fe:84:1c: d7:09:aa:65:63:bd:b9:13:63:81:78:58:91:20:da:ba:de:56: 22:84:74:f4:4a:48:41:f8:68:ca:38:3c:4f:fc:9b:18:7c:34: f7:b5:d2:d8:d6:f9:cd:9b:1b:75:94:ff:2b:5f:34:7f:d2:bc: 46:12:ce:be:e8:ea:ed:da:0e:5a:d6:35:14:f7:e5:aa:dc:93: 9a:f3:97:3a:59:09:f0:27:5c:5c:7a:1f:ab:d8:80:2e:55:80: fb:02:18:27:e9:9d:48:92:f1:aa:14:3b:06:a5:9d:47:1b:59: 4e:f6:e3:bf:a9:70:45:c0:8f:e6:29:45:b0:64:39:65:86:f9: 90:26:a1:66:df:51:48:bc:cd:c6:ab:dd:39:7e:25:98:54:b9: b4:00:04:30:68:02:f5:49:3c:62:ec:9d:3c:28:3f:4a:b8:b1: 3b:e9:c8:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjQwNTAzMDA1ODA4WhcNMjQwNTEwMDA1ODA4WjAYMRYwFAYD VQQDEw02NjM0MzZhMC05MWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UxkhlBkYyQu5NCyfsVy1Oy7+cXpu/dFGCf81M8ovR+0CSkhT58J5FaPGbqP J17sRaQtSpXTnCTJsBwgFg7cMyqa/AofRzEMBWDzssET1zhbOQuFlsL/mtvKYvkG 47gQtxV1F3fvKtBXs36rxBXe88yDqvirUmw++n/Ni0c6rIKHPt96f/jznkDIqkiG yK61qT+lGNlQQGIceDL+ldu4zbbgMlm80LtSJ7HeKR+wrziSMDCVt7tfzdRhfVgs bj26kXk/P7nZJbD9QaYLG3HrxjRpH7Se6jC/yvF/EJRcq5hARZ/s7IUHPhB5gKmQ 6XCMgjU+yAFHdfuM/MGtUuL2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhSyxoQ hAT0tl7COvjHsi7++6HXMB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgfHANZJfH5nrW18wjy4woW+mZJZrmrkUZZBSb5BUzbMLO8bgqK2uV 7uIzRcjfwx9BAwLIW4phynhKtGygFBS4/QWVRD77zSfkI8IIekIHfrUBko8VpOb+ hBzXCaplY725E2OBeFiRINq63lYihHT0SkhB+GjKODxP/JsYfDT3tdLY1vnNmxt1 lP8rXzR/0rxGEs6+6Ort2g5a1jUU9+Wq3JOa85c6WQnwJ1xceh+r2IAuVYD7Ahgn 6Z1IkvGqFDsGpZ1HG1lO9uO/qXBFwI/mKUWwZDllhvmQJqFm31FIvM3Gq905fiWY VLm0AAQwaAL1STxi7J08KD9KuLE76cjB -----END CERTIFICATE-----Generated at Fri May 3 01:30:26 2024 by rpki-client on console-fra.rpki-client.org