$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: ++Zhbo8srAcaKhkMK0UNc87Jm4G2CpOQG8o9GjrhgdE= Subject key identifier: 83:1C:5B:4E:4D:98:32:F3:0E:64:E5:AC:6F:C9:FF:B9:7D:2E:A7:E5 Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 01B0 Signing time: Wed 01 May 2024 04:50:32 +0000 Manifest this update: Wed 01 May 2024 04:50:31 +0000 Manifest next update: Wed 08 May 2024 04:50:31 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: 5fSgL1ehzErdu4SD4OrMr6w3Qm7LFvTCzLPu6TKybg4=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: G36ewRS5s7bPp9/dcHEXmZNwv3jn8H254rjCjVbJ0UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: May 1 04:50:31 2024 GMT Not After : May 8 04:50:31 2024 GMT Subject: CN=6631ca17-1aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6b:ee:53:f7:43:22:40:0b:8d:41:bf:9a:a5: c1:fd:1f:44:f5:79:ff:c2:b6:f9:80:66:c3:fa:97: fd:1a:28:39:b5:96:dc:51:fa:25:f4:59:58:15:50: ca:e9:01:64:e0:78:29:ac:64:54:5a:bc:8e:34:c7: 81:40:ed:52:0c:70:52:a7:98:8c:61:e8:f4:0b:9f: 81:ef:e3:1b:9b:fe:1c:23:b8:61:2d:82:4a:99:5b: 28:d5:39:ad:16:d3:db:79:71:a3:91:6e:46:88:f5: ea:2d:89:6f:4d:d7:fb:da:15:01:00:a5:c8:11:7b: 4b:cd:ce:52:32:4f:eb:e6:ed:34:a9:03:81:9a:1e: 2e:36:ee:92:8b:53:66:94:fe:be:d8:6f:01:44:b1: 88:aa:22:fa:bc:14:57:8b:d8:72:bf:9d:21:ff:7e: 67:f8:78:b0:cd:f1:14:8e:94:42:7f:0a:bb:d4:eb: 23:14:8d:cf:05:5b:f5:26:4c:2f:d6:43:84:b1:0e: 2f:be:44:37:38:ac:1f:1f:32:77:55:f6:43:d2:91: ab:c1:4a:c9:33:96:9b:88:a2:50:35:c8:dd:4e:69: 34:ad:36:8b:7a:c9:36:d3:d4:38:5e:a6:0e:22:b2: c1:ec:b1:cf:86:2d:2d:c8:99:05:08:0e:f2:0e:82: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1C:5B:4E:4D:98:32:F3:0E:64:E5:AC:6F:C9:FF:B9:7D:2E:A7:E5 X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a9:a0:b9:c2:e4:20:eb:61:6b:24:63:c4:1e:2d:44:2a:02: 85:31:9a:de:dd:36:7a:e3:60:a0:e3:81:9a:36:d4:6a:01:f6: 07:d7:ec:45:fe:c4:10:72:7b:05:bc:eb:70:2e:8a:33:32:c7: 5d:2f:93:65:8e:93:53:a5:c7:1f:da:dc:26:1e:19:49:e4:f9: a6:58:64:98:ca:ac:a4:1b:f3:0e:91:eb:c9:7c:9b:68:b5:ad: d8:6d:12:3e:13:77:15:fd:9b:e1:51:fb:02:12:0a:28:f3:e7: 13:4d:3e:3c:8a:b2:50:cc:a4:99:a7:65:d2:3f:1a:4c:84:0d: a2:df:21:53:f2:43:a5:c3:f5:77:76:ae:e8:5d:3d:e8:db:d0: 19:39:4c:02:83:82:82:fb:d6:78:f6:7c:0f:8d:4e:fd:78:2e: ea:2d:a5:dd:5b:55:4d:bb:67:9f:2a:d4:c3:99:5e:9b:70:0f: 5c:f7:0f:4f:a7:b1:5c:3d:88:85:88:6e:89:42:b2:95:b5:39: e5:83:e1:24:37:32:39:e9:1b:95:45:6a:b4:6d:fe:f6:84:23: 75:28:f2:f1:e6:10:9b:65:7c:a8:8e:ca:cb:a0:6c:3c:6d:6d: 11:13:56:c6:83:9c:b6:9e:f3:ab:b1:95:0f:69:41:c4:f0:41: 0b:20:a5:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjQwNTAxMDQ1MDMxWhcNMjQwNTA4MDQ1MDMxWjAYMRYwFAYD VQQDEw02NjMxY2ExNy0xYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2vuU/dDIkALjUG/mqXB/R9E9Xn/wrb5gGbD+pf9Gig5tZbcUfol9FlYFVDK 6QFk4HgprGRUWryONMeBQO1SDHBSp5iMYej0C5+B7+Mbm/4cI7hhLYJKmVso1Tmt FtPbeXGjkW5GiPXqLYlvTdf72hUBAKXIEXtLzc5SMk/r5u00qQOBmh4uNu6Si1Nm lP6+2G8BRLGIqiL6vBRXi9hyv50h/35n+HiwzfEUjpRCfwq71OsjFI3PBVv1Jkwv 1kOEsQ4vvkQ3OKwfHzJ3VfZD0pGrwUrJM5abiKJQNcjdTmk0rTaLesk209Q4XqYO IrLB7LHPhi0tyJkFCA7yDoIa+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMcW05N mDLzDmTlrG/J/7l9LqflMB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeqaC5wuQg62FrJGPEHi1EKgKFMZre3TZ642Cg44GaNtRqAfYH1+xF /sQQcnsFvOtwLoozMsddL5NljpNTpccf2twmHhlJ5PmmWGSYyqykG/MOkevJfJto ta3YbRI+E3cV/ZvhUfsCEgoo8+cTTT48irJQzKSZp2XSPxpMhA2i3yFT8kOlw/V3 dq7oXT3o29AZOUwCg4KC+9Z49nwPjU79eC7qLaXdW1VNu2efKtTDmV6bcA9c9w9P p7FcPYiFiG6JQrKVtTnlg+EkNzI56RuVRWq0bf72hCN1KPLx5hCbZXyojsrLoGw8 bW0RE1bGg5y2nvOrsZUPaUHE8EELIKUm -----END CERTIFICATE-----Generated at Wed May 1 05:59:07 2024 by rpki-client on console-fra.rpki-client.org