$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: W2B/jtAJD2Xhzr7zkh5+SXZLxmE3t8CYus3zvBL9DAE= Subject key identifier: F4:3B:27:B7:46:F1:90:E7:BD:EC:86:C5:23:15:3D:A9:F9:CB:B6:F0 Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 06ED Signing time: Sat 04 May 2024 22:56:15 +0000 Manifest this update: Sat 04 May 2024 22:56:15 +0000 Manifest next update: Sat 11 May 2024 22:56:15 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: MkhJiiva0uFSjMQUyO95i9x56V96QS9Zkuqe4fyWzYA=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 1cNfAYmpbOEdoWLSyXtNNq6uEMwh87XzDRUaAEMQHxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: May 4 22:56:15 2024 GMT Not After : May 11 22:56:15 2024 GMT Subject: CN=6636bd0f-eac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:4f:2f:56:de:40:1a:6b:78:1b:ff:de:12: f4:c6:ed:96:46:30:d7:1f:ad:c4:a8:17:00:c5:a3: 12:05:80:7f:96:f0:3d:5b:d5:a2:1e:43:67:c8:d5: 5c:f0:28:64:c6:35:d1:36:0a:25:12:3a:15:4c:95: 98:9e:22:9f:f4:f3:b1:56:a2:69:31:4a:93:c2:88: dc:ef:0b:58:29:ad:86:9a:10:11:4f:e6:19:10:b9: 5a:4e:d3:4b:85:38:ea:4c:20:ac:62:c0:f0:dd:7d: 21:fd:6e:28:9b:03:3b:7e:57:ed:df:37:96:0f:2e: c6:01:f3:72:b8:49:fd:bb:f1:c7:25:9d:80:0e:6c: ef:d1:71:99:17:84:4d:7a:9a:e0:84:18:3b:a3:38: 58:bf:45:2a:ed:46:ff:9e:d2:5c:67:2c:ea:24:10: 17:fa:95:60:9e:02:90:c2:3c:ce:e1:a6:7f:e2:13: a5:f1:96:f0:5b:ce:a0:82:3a:32:cb:08:ff:11:c1: 81:dd:c1:cb:55:24:a9:5a:e8:aa:bb:94:9f:3d:b8: a6:71:0a:98:0d:59:d7:ab:5e:0d:33:86:63:6b:76: a9:83:6e:c1:a3:19:98:86:96:7f:70:7d:60:2e:9b: f9:47:06:f9:fe:55:26:f7:31:b8:f8:0d:cd:83:d1: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3B:27:B7:46:F1:90:E7:BD:EC:86:C5:23:15:3D:A9:F9:CB:B6:F0 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:45:dd:2f:b2:c4:3d:2a:31:d4:22:66:50:63:7d:54:40:f4: 73:8c:df:22:e3:6f:f6:03:0b:f2:b0:e3:b7:ee:d6:47:78:a5: 96:c5:4f:18:27:99:cd:5a:dc:c5:28:47:cc:c9:37:6b:96:4d: cb:83:26:79:0e:fc:82:92:c3:a6:55:f5:23:99:e9:1f:33:7d: 7b:be:e5:a4:1a:c4:aa:aa:77:b5:c8:70:e3:0b:68:fa:62:c0: eb:cb:05:c8:f8:31:f7:d1:83:7b:2a:81:68:f8:3e:ce:97:24: 74:42:76:f6:7f:6e:a6:ec:b2:8f:3a:43:03:42:11:a6:89:cb: d1:9b:88:38:e9:91:a8:0f:39:29:9f:16:62:ee:f0:c2:af:0b: 79:89:56:d7:b8:71:a7:8c:90:0f:9c:ec:48:b1:ab:10:6f:ab: d0:05:57:ed:46:d7:48:9a:5b:f4:a2:b2:37:91:11:44:19:19: c0:70:29:66:74:c7:60:f7:e1:43:50:b4:16:7b:8c:aa:20:cd: 51:f0:c5:9f:4d:20:c2:03:46:80:fe:c0:1c:1f:64:ac:42:7d: bd:ff:2b:29:d4:46:d7:a6:32:67:8e:b7:2b:50:75:ae:cf:db: 4b:b7:b0:6d:11:28:6a:fd:10:9f:2d:fb:4c:74:1f:fb:78:df: eb:4c:8f:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjQwNTA0MjI1NjE1WhcNMjQwNTExMjI1NjE1WjAYMRYwFAYD VQQDEw02NjM2YmQwZi1lYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnJPL1beQBpreBv/3hL0xu2WRjDXH63EqBcAxaMSBYB/lvA9W9WiHkNnyNVc 8ChkxjXRNgolEjoVTJWYniKf9POxVqJpMUqTwojc7wtYKa2GmhART+YZELlaTtNL hTjqTCCsYsDw3X0h/W4omwM7flft3zeWDy7GAfNyuEn9u/HHJZ2ADmzv0XGZF4RN eprghBg7ozhYv0Uq7Ub/ntJcZyzqJBAX+pVgngKQwjzO4aZ/4hOl8ZbwW86ggjoy ywj/EcGB3cHLVSSpWuiqu5SfPbimcQqYDVnXq14NM4Zja3apg27BoxmYhpZ/cH1g Lpv5Rwb5/lUm9zG4+A3Ng9EiCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ7J7dG 8ZDnveyGxSMVPan5y7bwMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSRd0vssQ9KjHUImZQY31UQPRzjN8i42/2AwvysOO37tZHeKWWxU8Y J5nNWtzFKEfMyTdrlk3LgyZ5DvyCksOmVfUjmekfM317vuWkGsSqqne1yHDjC2j6 YsDrywXI+DH30YN7KoFo+D7OlyR0Qnb2f26m7LKPOkMDQhGmicvRm4g46ZGoDzkp nxZi7vDCrwt5iVbXuHGnjJAPnOxIsasQb6vQBVftRtdImlv0orI3kRFEGRnAcClm dMdg9+FDULQWe4yqIM1R8MWfTSDCA0aA/sAcH2SsQn29/ysp1EbXpjJnjrcrUHWu z9tLt7BtEShq/RCfLftMdB/7eN/rTI/a -----END CERTIFICATE-----Generated at Sun May 5 00:12:25 2024 by rpki-client on console-fra.rpki-client.org