$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: VLrdDPtmlhmJW8U3G3GMxNZnvBJwfa0CuzMcLKvDFuM= Subject key identifier: 26:14:23:1C:41:CE:95:C6:0B:1C:2F:FC:B8:C0:42:44:6D:F8:2B:07 Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 0121 Signing time: Sun 05 May 2024 05:21:54 +0000 Manifest this update: Sun 05 May 2024 05:21:53 +0000 Manifest next update: Sun 12 May 2024 05:21:53 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: qEJ5hBAoHHAOtoMXsnF+1z9BASzmFXxDK+vWhWqF1mQ=) 2: 21A48214A7D911EEB0AE8467C4F9AE02.roa (hash: SrU7uhKnecjHqmpBSKVGu19D6xay2nbIyLWYXoCUT0A=) 3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: m/cyPXo2mSMGMGkQ+4yWSV8VFxtFDBcgFgT4fbQcVDI=) 4: 455D199EE38B11EE84566164C4F9AE02.roa (hash: rcCfUX+IknyNGdS5+buN5JHxPZRPqsrA/AOdKUmFPCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: May 5 05:21:53 2024 GMT Not After : May 12 05:21:53 2024 GMT Subject: CN=66371772-a088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:46:7b:7e:b9:ff:f8:df:27:37:23:a2:cf: 8b:a6:59:6c:22:83:98:41:b3:65:9c:1c:25:66:6e: f1:e2:37:01:3a:33:76:bc:e7:2e:2a:0c:9f:b0:66: 9a:d5:71:c7:18:ab:f1:7c:af:9c:d2:a2:fc:a5:99: 45:70:cf:2f:45:b1:83:74:64:4f:75:b3:4d:44:b7: 59:28:e8:87:96:a1:6a:a7:ac:e7:1e:e2:fe:5f:14: 2e:17:d2:43:35:84:ad:5c:7f:81:7f:0c:80:02:30: 2f:7a:a6:61:73:81:17:91:4c:58:26:d9:7f:71:71: fd:4c:e8:9d:10:03:93:e4:cf:f9:00:c4:fe:89:2d: f5:a4:96:e3:d3:bf:00:0b:a7:53:b6:b6:aa:7b:b2: 91:a2:0e:2d:e2:35:94:64:c8:7b:7d:da:a2:f0:f1: d9:fd:ac:38:80:a3:66:b4:a9:30:3d:53:01:a7:04: d2:d8:7f:bc:a2:54:c4:64:05:7b:e8:f1:38:6d:d0: 2d:27:e4:81:59:46:04:ea:ef:b4:24:0a:20:d4:95: a9:af:84:df:9d:68:55:09:25:63:a7:4e:70:20:17: 57:0d:5c:44:fd:0e:af:25:25:e0:51:54:49:dd:53: 40:5a:82:88:f2:15:aa:d4:5d:b0:21:b6:02:b8:17: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:14:23:1C:41:CE:95:C6:0B:1C:2F:FC:B8:C0:42:44:6D:F8:2B:07 X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9d:4e:b1:9a:6e:c1:b2:80:1b:4a:11:63:81:b5:d5:44:ac: 56:e7:b4:ed:b4:e7:4a:c9:ba:cd:96:b1:94:3a:68:bb:71:20: bb:06:09:b1:e4:44:15:d4:0b:f1:f8:71:c4:f6:3c:9c:1e:84: 11:48:91:5e:50:28:72:0b:25:0f:ec:7b:a0:e3:fc:91:69:ef: 44:bc:96:71:d8:60:8b:eb:2e:99:8b:50:ad:81:01:18:ae:ed: 8d:85:fb:5e:e9:54:18:9d:5d:c3:b7:fe:5b:a5:6b:e4:36:40: f1:0a:1c:10:d1:b2:3b:0e:86:31:e2:32:41:d7:13:b5:3e:5f: db:04:8a:5b:95:87:1f:56:e6:f4:a8:6b:1c:3b:42:b6:0f:d3: ac:2b:4e:64:87:f9:1b:1f:f8:37:bb:1e:8b:df:3e:dc:88:f9: 81:2f:dc:53:72:86:f7:af:90:82:ae:dd:93:fa:80:50:59:99: 87:1a:1a:c8:52:c4:d4:fa:b3:7d:ee:e4:8c:43:7b:ff:3a:a2: 0f:9a:0b:3b:42:98:b1:2e:71:e1:5c:a0:d3:35:04:49:c6:f5: 55:5f:80:12:7b:17:a8:27:5a:43:19:68:99:5c:19:1f:7a:eb: b9:6d:c0:4c:b1:9f:38:d4:c5:8c:b8:1a:bc:9b:39:73:9e:0b: ed:ec:00:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjQwNTA1MDUyMTUzWhcNMjQwNTEyMDUyMTUzWjAYMRYwFAYD VQQDEw02NjM3MTc3Mi1hMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfRGe365//jfJzcjos+LpllsIoOYQbNlnBwlZm7x4jcBOjN2vOcuKgyfsGaa 1XHHGKvxfK+c0qL8pZlFcM8vRbGDdGRPdbNNRLdZKOiHlqFqp6znHuL+XxQuF9JD NYStXH+BfwyAAjAveqZhc4EXkUxYJtl/cXH9TOidEAOT5M/5AMT+iS31pJbj078A C6dTtraqe7KRog4t4jWUZMh7fdqi8PHZ/aw4gKNmtKkwPVMBpwTS2H+8olTEZAV7 6PE4bdAtJ+SBWUYE6u+0JAog1JWpr4TfnWhVCSVjp05wIBdXDVxE/Q6vJSXgUVRJ 3VNAWoKI8hWq1F2wIbYCuBeLxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYUIxxB zpXGCxwv/LjAQkRt+CsHMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCynU6xmm7BsoAbShFjgbXVRKxW57TttOdKybrNlrGUOmi7cSC7Bgmx 5EQV1Avx+HHE9jycHoQRSJFeUChyCyUP7Hug4/yRae9EvJZx2GCL6y6Zi1CtgQEY ru2Nhfte6VQYnV3Dt/5bpWvkNkDxChwQ0bI7DoYx4jJB1xO1Pl/bBIpblYcfVub0 qGscO0K2D9OsK05kh/kbH/g3ux6L3z7ciPmBL9xTcob3r5CCrt2T+oBQWZmHGhrI UsTU+rN97uSMQ3v/OqIPmgs7QpixLnHhXKDTNQRJxvVVX4ASexeoJ1pDGWiZXBkf euu5bcBMsZ841MWMuBq8mzlzngvt7AAb -----END CERTIFICATE-----Generated at Sun May 5 06:01:18 2024 by rpki-client on console-fra.rpki-client.org