$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft File: RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json) Hash identifier: H3Q6fGZJaAEht18pGlxB4v2nijyw8ebKCfT+XGMlmLA= Subject key identifier: A1:85:79:3D:53:15:43:FB:C5:DC:06:AB:3D:90:6B:D8:13:35:96:2A Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86 Certificate issuer: /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft Manifest number: F4 Signing time: Wed 01 May 2024 06:00:35 +0000 Manifest this update: Wed 01 May 2024 06:00:35 +0000 Manifest next update: Wed 08 May 2024 06:00:35 +0000 Files and hashes: 1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: JBOvV77+uSpEliHdabb2TU0L7i7G43ATveECsXrdPBo=) 2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: aWeGcwo+7uKNQSW4Ntew9XLYTtyOnPpUefRzhFuvQqc=) 3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: epiQvTpBAPUjrJhksVffAMtVFi86tak47vpaBV0eqns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886 Validity Not Before: May 1 06:00:35 2024 GMT Not After : May 8 06:00:35 2024 GMT Subject: CN=6631da83-3b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:9a:a8:40:94:65:11:36:e1:77:7a:eb:a6: bf:56:1e:fd:d4:75:a3:f2:73:c2:e7:58:a7:ef:2d: f0:37:2e:f7:d0:82:47:fa:ea:6c:5f:ea:e7:9e:f9: fb:fc:68:7d:0b:1b:af:d9:74:c0:d0:0b:1e:59:ec: 0f:6c:5a:b9:5a:49:63:15:8d:37:d6:99:a3:56:45: c6:86:dc:c6:5c:ff:64:5c:15:dc:9a:9f:a2:a8:0c: 63:46:2b:d1:4b:90:ed:ee:16:0f:e0:73:eb:6b:1a: 7d:20:ff:c0:17:75:6c:45:0e:ce:bf:7d:72:cc:4d: 56:de:90:d2:e8:ba:9b:ba:ca:56:19:5f:be:07:4a: ea:9d:ad:7d:f1:5d:ea:62:89:51:02:29:24:a6:2b: 95:d6:d3:28:b0:d3:5d:ca:84:fe:a7:94:97:44:6e: 8c:a9:cf:04:61:ef:2a:fe:58:13:0e:0f:2b:9c:9d: c8:8f:83:35:e5:25:9b:34:3b:27:60:a6:32:11:71: 17:1a:34:66:54:c2:5b:2e:fd:e3:bb:30:9b:d3:30: 65:a6:3e:02:d8:56:6a:f7:39:81:70:bc:de:40:c5: c4:e9:03:ee:e0:eb:dc:a2:03:8e:7b:2d:a5:e8:ad: c2:fa:f2:b8:e4:65:d5:f9:34:c2:cc:6d:2b:ed:f0: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:85:79:3D:53:15:43:FB:C5:DC:06:AB:3D:90:6B:D8:13:35:96:2A X509v3 Authority Key Identifier: keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:5a:83:5c:62:5e:02:2a:5d:15:2f:bf:99:2f:ab:02:ba:06: 14:ca:ca:9e:52:7a:05:8c:c1:c4:30:b8:0c:06:9b:6b:7b:a6: 96:3c:cd:7f:86:5d:75:66:2a:56:25:6d:e8:bb:1d:d9:4b:e3: 1d:c4:66:99:40:9e:4f:53:30:e5:65:3b:2d:88:ae:91:8c:0b: 37:ba:b9:cd:7a:15:f4:24:cb:a9:db:a9:8c:fb:d3:7a:b5:4f: dd:fe:df:53:9c:97:d5:9d:b7:64:3a:48:2f:ad:b3:3e:f0:c3: cf:2c:05:2b:39:51:cf:14:10:0d:a3:35:e0:80:0b:03:b6:7a: 12:cd:7a:cd:6d:e0:35:ae:35:c2:84:ff:c2:57:40:06:d6:37: a8:71:84:25:e4:49:ce:ef:64:e2:80:8b:78:7d:5f:77:68:6d: d5:b0:a0:52:9b:63:f6:8b:b8:38:6f:3b:68:84:75:86:a4:79: 12:52:d1:50:4c:1d:40:60:5e:2b:3e:3e:8d:5b:c3:f1:60:a2: b5:42:2f:d4:e7:c3:66:d3:69:90:0b:34:d2:81:20:c5:2f:84: 91:f5:08:c4:6d:ea:58:e5:4f:66:37:91:d5:ee:70:11:c9:85: a3:0c:90:ac:d7:ff:7c:b4:b3:23:d7:a0:70:39:35:a1:84:77: 79:89:95:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1OTAxMTAvBgNVBAUTKDQ0OEE2RDgyOTc2QTU1REM1NzBCQTU4MDM3NzBBQzZB RERCQkQ4ODYwHhcNMjQwNTAxMDYwMDM1WhcNMjQwNTA4MDYwMDM1WjAYMRYwFAYD VQQDEw02NjMxZGE4My0zYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCmaqECUZRE24Xd666a/Vh791HWj8nPC51in7y3wNy730IJH+upsX+rnnvn7 /Gh9Cxuv2XTA0AseWewPbFq5WkljFY031pmjVkXGhtzGXP9kXBXcmp+iqAxjRivR S5Dt7hYP4HPraxp9IP/AF3VsRQ7Ov31yzE1W3pDS6LqbuspWGV++B0rqna198V3q YolRAikkpiuV1tMosNNdyoT+p5SXRG6Mqc8EYe8q/lgTDg8rnJ3Ij4M15SWbNDsn YKYyEXEXGjRmVMJbLv3juzCb0zBlpj4C2FZq9zmBcLzeQMXE6QPu4OvcogOOey2l 6K3C+vK45GXV+TTCzG0r7fDzUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGFeT1T FUP7xdwGqz2Qa9gTNZYqMB8GA1UdIwQYMBaAFESKbYKXalXcVwulgDdwrGrdu9iG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU5MC8zNjM1NTk1Mjkx OUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZkeFhDNldBTjNDc2F0Mjcy SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJcHRncGRxVmR4WEM2V0FOM0NzYXQyNzJJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU5MC8zNjM1NTk1MjkxOUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZk eFhDNldBTjNDc2F0MjcySVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzWoNcYl4CKl0VL7+ZL6sCugYUysqeUnoFjMHEMLgMBptre6aWPM1/ hl11ZipWJW3oux3ZS+MdxGaZQJ5PUzDlZTstiK6RjAs3urnNehX0JMup26mM+9N6 tU/d/t9TnJfVnbdkOkgvrbM+8MPPLAUrOVHPFBANozXggAsDtnoSzXrNbeA1rjXC hP/CV0AG1jeocYQl5EnO72TigIt4fV93aG3VsKBSm2P2i7g4bztohHWGpHkSUtFQ TB1AYF4rPj6NW8PxYKK1Qi/U58Nm02mQCzTSgSDFL4SR9QjEbepY5U9mN5HV7nAR yYWjDJCs1/98tLMj16BwOTWhhHd5iZWo -----END CERTIFICATE-----Generated at Wed May 1 07:07:04 2024 by rpki-client on console-fra.rpki-client.org