$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: m0n/d7YU04CAD9Lys2uV75sllAtUnVE2ktQaZLeUoko= Subject key identifier: 89:43:62:48:0E:79:44:16:99:B6:41:72:BF:2F:E8:E2:B5:9A:07:68 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0939 Signing time: Thu 02 May 2024 21:39:58 +0000 Manifest this update: Thu 02 May 2024 21:39:58 +0000 Manifest next update: Thu 09 May 2024 21:39:58 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: OHaWWxZ/8pF2uN+4sXJ6nbVkQe7urx7j6rT0Z+a65ZM=) 2: CA67185A02E511EF8ED1355CC4F9AE02.roa (hash: wHhpRiqBr3hK50V+Phj70tryQ0HqBEHePg9PAHRjbTI=) 3: C98E616802E511EF8ED1355CC4F9AE02.roa (hash: g/vYt2sJquMykKKd8bZeSSOgmSqzVFIJK4b4vgQp8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: May 2 21:39:58 2024 GMT Not After : May 9 21:39:58 2024 GMT Subject: CN=6634082e-def3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:e2:fd:f1:46:d8:bb:e9:f6:6f:e0:3c:40: d6:90:ca:59:fe:7e:c1:a4:14:3c:2f:d7:c3:47:1d: 7c:6b:84:50:36:ff:c8:d3:bd:78:2b:99:3b:f6:b4: d8:e0:e0:de:ee:bb:f1:bd:c3:a2:2a:a3:1a:f3:b9: 88:63:92:70:15:51:46:d9:f7:e9:3f:1a:00:1e:e6: 70:5c:5f:ba:98:39:09:dd:7d:de:ac:66:9e:ba:f4: 63:b6:ab:69:4f:08:3a:00:5a:77:91:9f:de:ec:30: eb:ae:8f:dd:08:d4:28:f4:7a:98:6e:7a:b9:3d:82: c7:c9:5e:e5:63:18:f6:3f:ed:b2:d1:73:e6:a4:7e: af:64:90:b2:70:b7:50:3d:7c:0b:09:58:62:e7:47: 64:4d:eb:47:68:72:98:48:83:d4:a8:ea:28:2b:b5: 3e:85:2a:d8:05:04:5e:dc:50:0a:43:6c:75:79:20: 27:c9:0a:ad:18:85:92:23:1d:b5:14:f6:a8:80:50: bb:78:10:e7:60:cd:76:3e:35:b6:d7:34:5c:20:fe: 5b:62:9c:1b:f6:a4:65:e6:fd:88:fc:e8:1d:bb:d5: 2f:8e:11:57:5f:93:7b:9d:1c:5d:99:78:53:d0:06: 47:33:e5:29:b6:73:f2:34:13:7b:a5:93:bd:32:b1: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:43:62:48:0E:79:44:16:99:B6:41:72:BF:2F:E8:E2:B5:9A:07:68 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ee:62:11:46:79:eb:bb:90:fd:90:8f:e8:67:44:23:42:01: b3:52:76:6b:8a:e8:7b:f7:93:6b:d4:a7:22:8e:a9:29:99:78: 2e:f9:6a:0a:1f:ed:ab:66:4a:09:b4:26:f5:2f:c5:4c:71:aa: 45:ee:39:f0:83:d2:07:b7:b9:0f:25:ee:61:dd:99:55:29:f4: 3b:03:24:a0:93:65:c0:d0:4d:98:65:63:a9:55:d4:4f:b0:a1: 60:66:49:1c:9c:a9:2b:b3:8f:97:28:62:61:6e:5c:78:2f:3e: 07:66:0f:d4:50:2f:84:2b:7e:c8:6f:e3:ac:5c:c8:f2:35:2c: dc:b6:0f:0e:c1:c2:bb:f8:32:dd:08:ae:70:a0:ea:1b:77:f1: 9f:30:a6:6d:62:4d:6f:59:85:81:20:5f:d3:f5:b0:79:eb:4a: 25:19:10:cc:37:ab:2e:b2:4f:7e:6d:86:d0:45:23:cc:39:40: ea:77:96:e8:0b:be:3e:c4:de:61:cb:23:5e:28:c8:a5:a3:cb: 97:5e:83:b7:94:9f:f1:16:bb:bf:d3:10:ee:8f:0e:1d:55:f6: 56:e9:11:fd:ef:16:af:d5:ad:e6:a3:06:16:3f:f6:c8:34:b9: 79:cb:aa:fe:9c:96:34:2d:27:13:17:08:f8:de:97:0a:24:5a: c2:35:f0:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjQwNTAyMjEzOTU4WhcNMjQwNTA5MjEzOTU4WjAYMRYwFAYD VQQDEw02NjM0MDgyZS1kZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnfi/fFG2Lvp9m/gPEDWkMpZ/n7BpBQ8L9fDRx18a4RQNv/I0714K5k79rTY 4ODe7rvxvcOiKqMa87mIY5JwFVFG2ffpPxoAHuZwXF+6mDkJ3X3erGaeuvRjtqtp Twg6AFp3kZ/e7DDrro/dCNQo9HqYbnq5PYLHyV7lYxj2P+2y0XPmpH6vZJCycLdQ PXwLCVhi50dkTetHaHKYSIPUqOooK7U+hSrYBQRe3FAKQ2x1eSAnyQqtGIWSIx21 FPaogFC7eBDnYM12PjW21zRcIP5bYpwb9qRl5v2I/Ogdu9UvjhFXX5N7nRxdmXhT 0AZHM+UptnPyNBN7pZO9MrFH/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlDYkgO eUQWmbZBcr8v6OK1mgdoMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl7mIRRnnru5D9kI/oZ0QjQgGzUnZriuh795Nr1KcijqkpmXgu+WoK H+2rZkoJtCb1L8VMcapF7jnwg9IHt7kPJe5h3ZlVKfQ7AySgk2XA0E2YZWOpVdRP sKFgZkkcnKkrs4+XKGJhblx4Lz4HZg/UUC+EK37Ib+OsXMjyNSzctg8OwcK7+DLd CK5woOobd/GfMKZtYk1vWYWBIF/T9bB560olGRDMN6susk9+bYbQRSPMOUDqd5bo C74+xN5hyyNeKMilo8uXXoO3lJ/xFru/0xDujw4dVfZW6RH97xav1a3mowYWP/bI NLl5y6r+nJY0LScTFwj43pcKJFrCNfCR -----END CERTIFICATE-----Generated at Thu May 2 22:13:19 2024 by rpki-client on console-fra.rpki-client.org