$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: dXR3ny2RmpH1FSNPNL2rgUKxm02yoUfD1Tej4izxVbg= Subject key identifier: DE:C5:BD:BD:CC:B5:C0:D5:5F:98:00:9D:AC:81:28:3D:DA:85:84:9F Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: D5 Signing time: Fri 03 May 2024 06:12:18 +0000 Manifest this update: Fri 03 May 2024 06:12:18 +0000 Manifest next update: Fri 10 May 2024 06:12:18 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: hscGRMji7NTNpeSTQs5yCHwG5B2iTAj8UlPPvZMfiFw=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: QgXD2g83uAfsRZ3zlwkeEmrEVbeOZyYkGqvp3sd6rZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: May 3 06:12:18 2024 GMT Not After : May 10 06:12:18 2024 GMT Subject: CN=66348042-3526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bc:1e:10:c2:54:3d:f3:ba:00:da:56:55:46: cc:fb:12:10:19:9e:75:48:c5:6c:c3:dc:2f:86:84: dc:4c:07:3e:c7:76:0d:4b:dd:7f:55:b4:56:67:c3: 5d:56:c5:be:91:f2:b3:8c:55:a2:38:c5:20:e1:dc: bb:97:56:b4:c2:34:aa:5d:a1:96:97:0f:3d:aa:4a: ed:e1:64:2d:02:4f:1a:e2:f6:4b:c8:5a:d8:3e:89: 9e:91:5a:8f:94:05:c1:1d:e9:e1:1b:e2:52:13:1c: b1:8c:e3:b0:f9:a5:d5:d1:e7:47:3f:f2:e4:a1:25: 27:c3:7a:1e:f8:e8:e6:16:e5:7f:14:44:68:a8:d1: 8a:e0:82:d2:dc:7d:df:e1:f3:57:b0:3c:2f:31:00: 59:4f:4f:90:1e:8f:7f:12:34:b4:70:4c:d0:6d:61: aa:6f:87:a0:4a:db:f9:40:60:6c:3c:c6:14:fc:14: 33:1e:a8:a6:2e:5f:08:33:29:e4:12:0e:ae:ad:5a: d7:7f:fe:fa:24:34:9f:31:86:dc:3a:5c:64:55:6e: 8e:79:b5:0f:f7:d9:45:c5:af:73:5f:b1:81:d6:e7: 82:18:f1:7f:57:7f:84:05:6b:1a:18:46:26:86:87: 80:47:e8:4e:1d:20:0a:43:6e:29:e9:aa:3f:09:fe: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C5:BD:BD:CC:B5:C0:D5:5F:98:00:9D:AC:81:28:3D:DA:85:84:9F X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bb:c6:b0:d0:8a:82:f7:6f:a9:27:2b:93:15:71:d3:3f:88: cb:41:e5:ea:2f:78:36:38:97:22:b8:e3:f8:e4:36:30:61:8c: d9:2f:2a:97:2a:a1:d6:fa:e7:0a:17:20:18:99:d5:86:a8:eb: 3f:f6:b4:2a:d3:fd:3d:9c:57:05:2f:1c:a4:30:a4:b5:0e:94: 9f:96:4d:2b:e3:46:7f:2a:16:2e:d2:df:af:d3:86:08:74:02: ce:1a:72:22:04:b1:33:9c:80:00:7c:2b:3c:e6:c5:53:d4:ae: 9e:2f:66:cb:e3:b7:fe:59:fb:54:e1:b2:ec:8e:66:2d:9a:b2: fb:64:da:6c:3a:63:34:99:8b:b2:72:4d:ef:ac:51:53:00:47: d0:d9:89:05:9a:aa:c2:79:7a:a1:90:f5:ec:fd:b6:a6:3f:3c: f1:da:11:b7:bf:e4:fc:f1:95:e4:08:24:d8:d1:62:2d:b2:fc: 6c:05:c0:f7:02:a9:06:af:2d:88:62:8b:5d:1e:03:6d:25:a3: ca:43:0f:8f:d7:ba:8d:2c:db:a8:38:69:13:96:7d:00:c6:e2: ec:96:27:30:11:eb:03:db:86:cf:10:e3:58:40:7c:e5:97:43: 28:aa:f8:0d:bf:5f:39:fe:a6:a2:ff:20:37:69:fb:8c:98:4b: d6:22:0d:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjQwNTAzMDYxMjE4WhcNMjQwNTEwMDYxMjE4WjAYMRYwFAYD VQQDEw02NjM0ODA0Mi0zNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8bweEMJUPfO6ANpWVUbM+xIQGZ51SMVsw9wvhoTcTAc+x3YNS91/VbRWZ8Nd VsW+kfKzjFWiOMUg4dy7l1a0wjSqXaGWlw89qkrt4WQtAk8a4vZLyFrYPomekVqP lAXBHenhG+JSExyxjOOw+aXV0edHP/LkoSUnw3oe+OjmFuV/FERoqNGK4ILS3H3f 4fNXsDwvMQBZT0+QHo9/EjS0cEzQbWGqb4egStv5QGBsPMYU/BQzHqimLl8IMynk Eg6urVrXf/76JDSfMYbcOlxkVW6OebUP99lFxa9zX7GB1ueCGPF/V3+EBWsaGEYm hoeAR+hOHSAKQ24p6ao/Cf7ZBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7Fvb3M tcDVX5gAnayBKD3ahYSfMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALu8aw0IqC92+pJyuTFXHTP4jLQeXqL3g2OJciuOP45DYwYYzZLyqX KqHW+ucKFyAYmdWGqOs/9rQq0/09nFcFLxykMKS1DpSflk0r40Z/KhYu0t+v04YI dALOGnIiBLEznIAAfCs85sVT1K6eL2bL47f+WftU4bLsjmYtmrL7ZNpsOmM0mYuy ck3vrFFTAEfQ2YkFmqrCeXqhkPXs/bamPzzx2hG3v+T88ZXkCCTY0WItsvxsBcD3 AqkGry2IYotdHgNtJaPKQw+P17qNLNuoOGkTln0AxuLslicwEesD24bPEONYQHzl l0MoqvgNv185/qai/yA3afuMmEvWIg1J -----END CERTIFICATE-----Generated at Fri May 3 09:08:51 2024 by rpki-client on console-fra.rpki-client.org