$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: xYcgeOOdcuSbJt/6zauSFt41iyxI2/ujIhHZ0U6VmZg= Subject key identifier: 25:50:E7:EB:A7:99:F2:EC:1A:13:82:0A:07:1A:97:1D:E2:B1:2D:BE Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0C80 Signing time: Thu 02 May 2024 18:59:33 +0000 Manifest this update: Thu 02 May 2024 18:59:33 +0000 Manifest next update: Thu 09 May 2024 18:59:33 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: 0X3GXKpDPtye59HnSqJ8joWdg9IXMJwqNMOPhbQ0WZI=) 2: D452D772061511EFAB39B411C4F9AE02.roa (hash: 7NwqvKoFjwItF6E+p/tXEQr4HPE3dCt/JNj/HBpk53k=) 3: D94D78866E4911EE8988954AC4F9AE02.roa (hash: j2q9q5UQtgIaZYDaxiTpFFtnOsxW/vGcYVBPEPpAfOA=) 4: 3971266E4A4A11EE9424B146C4F9AE02.roa (hash: fd0Lwdq/7SZ2UavzVgoHYT6CmTGiRbUxqj79hmV6+p0=) 5: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: MMURfJSKmXIALtdxYffDlMp75DQKdDxlaB+1HF062RY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: May 2 18:59:33 2024 GMT Not After : May 9 18:59:33 2024 GMT Subject: CN=6633e295-b829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:52:90:e8:45:01:2d:87:63:d0:32:26:de: 82:57:e0:1f:51:ca:76:64:72:06:4d:c2:0e:07:6d: 7b:c6:ea:8b:03:1b:67:02:07:2d:67:dc:7a:98:49: f8:36:37:e0:15:82:a3:c5:93:07:1c:ac:a3:c2:52: 04:a7:59:a4:19:17:b4:c7:ce:a9:c1:b0:66:80:fe: bf:35:c4:bb:a2:72:67:e1:e7:ef:e7:ff:65:a5:34: ec:61:3c:d3:43:15:56:63:4f:73:e6:35:1c:36:f1: ef:71:d7:b7:40:be:37:17:6e:23:f1:72:c4:09:81: 26:12:cd:d4:a5:22:48:c6:34:01:d1:b8:1f:6f:6e: 84:f7:81:02:75:c0:ab:cc:0d:59:3a:91:db:7c:d7: 26:de:48:16:4e:b9:1b:4f:c5:fd:ca:34:1c:a1:5e: 95:71:3b:69:60:47:8b:4f:56:f5:af:10:9d:cd:5f: f3:75:8f:1f:42:0c:e3:8b:48:14:18:d8:c7:36:c3: bc:a1:ef:7a:46:a6:44:5c:e2:fc:aa:5e:42:37:1a: 01:ea:8b:e3:54:65:77:9b:19:4b:af:cf:fc:c4:27: 6f:15:02:52:ba:29:42:87:2a:42:63:1e:38:a9:33: b3:a0:51:4d:e6:25:46:a0:46:18:a3:36:c5:01:5c: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:E7:EB:A7:99:F2:EC:1A:13:82:0A:07:1A:97:1D:E2:B1:2D:BE X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:15:79:da:62:b1:81:12:a6:6e:46:bb:d7:21:d5:af:1d: b9:9e:ac:6b:7f:d2:44:8e:9d:b6:24:84:5f:eb:08:90:cb:91: 26:82:61:12:43:bb:3b:0e:5a:8c:f5:53:84:69:d3:2e:73:48: 6d:94:8b:bb:22:6e:eb:8b:29:7b:c2:85:63:3d:d7:ee:55:1c: 48:61:d7:4b:c7:e1:f1:db:8c:63:77:c5:2e:82:8e:04:49:2a: 4f:5d:39:45:12:8e:45:73:a9:4d:fa:16:ed:88:a5:48:ab:0b: 89:51:7c:3d:80:82:71:bb:5a:d3:20:08:b4:6e:f0:d7:56:64: 59:25:94:25:93:23:e2:38:48:84:c0:6d:71:70:9c:58:c5:f8: 2f:7c:07:e3:24:3d:c4:ac:e5:dc:52:c4:fa:98:e9:d0:b9:9f: 46:18:51:90:47:52:e8:43:76:40:20:27:33:78:ca:8e:d3:06: 30:56:b6:73:6f:0f:e9:cf:1e:b3:46:62:c4:f7:72:4f:4b:23: 81:a1:f1:08:b3:9a:49:7c:7e:41:f0:26:07:44:88:48:8b:02: 0f:29:b1:a2:1d:4a:94:35:bf:0e:d5:60:09:09:e9:d1:4d:de: b5:cd:f6:a5:19:96:dc:c9:2d:9b:ef:e1:cf:7f:24:1e:3b:88: 35:a1:67:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjQwNTAyMTg1OTMzWhcNMjQwNTA5MTg1OTMzWjAYMRYwFAYD VQQDEw02NjMzZTI5NS1iODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDFSkOhFAS2HY9AyJt6CV+AfUcp2ZHIGTcIOB217xuqLAxtnAgctZ9x6mEn4 NjfgFYKjxZMHHKyjwlIEp1mkGRe0x86pwbBmgP6/NcS7onJn4efv5/9lpTTsYTzT QxVWY09z5jUcNvHvcde3QL43F24j8XLECYEmEs3UpSJIxjQB0bgfb26E94ECdcCr zA1ZOpHbfNcm3kgWTrkbT8X9yjQcoV6VcTtpYEeLT1b1rxCdzV/zdY8fQgzji0gU GNjHNsO8oe96RqZEXOL8ql5CNxoB6ovjVGV3mxlLr8/8xCdvFQJSuilChypCYx44 qTOzoFFN5iVGoEYYozbFAVxCfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVQ5+un mfLsGhOCCgcalx3isS2+MB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEdRV52mKxgRKmbka71yHVrx25nqxrf9JEjp22JIRf6wiQy5EmgmES Q7s7DlqM9VOEadMuc0htlIu7Im7riyl7woVjPdfuVRxIYddLx+Hx24xjd8Uugo4E SSpPXTlFEo5Fc6lN+hbtiKVIqwuJUXw9gIJxu1rTIAi0bvDXVmRZJZQlkyPiOEiE wG1xcJxYxfgvfAfjJD3ErOXcUsT6mOnQuZ9GGFGQR1LoQ3ZAICczeMqO0wYwVrZz bw/pzx6zRmLE93JPSyOBofEIs5pJfH5B8CYHRIhIiwIPKbGiHUqUNb8O1WAJCenR Td61zfalGZbcyS2b7+HPfyQeO4g1oWdO -----END CERTIFICATE-----Generated at Thu May 2 20:50:31 2024 by rpki-client on console-fra.rpki-client.org