$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: pm3eQEWwEGHGdxzeP1l0mM6ScqIhB+4kuKanCwspYsQ= Subject key identifier: 83:C5:AD:B5:AF:84:DC:8C:9B:BF:59:1C:C9:01:7D:FB:7E:EE:EC:26 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 09AC Signing time: Tue 14 May 2024 20:57:25 +0000 Manifest this update: Tue 14 May 2024 20:57:25 +0000 Manifest next update: Tue 21 May 2024 20:57:25 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: LM0vwV+y+IDBesfEiItmabbDaOvp2HrJQXhNRN6rwvY=) 2: E56559AA7CAD11EEB3536044C4F9AE02.roa (hash: mQHhbjcZjesdw8CGvTaqC+ZwbELZTj2o4sPH/U1ueLA=) 3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: u7yXnD3bGqVmUVwiLw2YbUnZGmEt5M03j3uj8hclD10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: May 14 20:57:25 2024 GMT Not After : May 21 20:57:25 2024 GMT Subject: CN=6643d035-5735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:6f:57:5e:06:dc:be:22:9d:92:5f:83:ec: b9:e1:56:0f:9b:a2:73:bd:dc:eb:69:72:63:1d:45: 6b:93:e4:3f:63:4e:48:25:32:42:97:b8:75:61:0e: bc:a1:f8:ee:f2:7a:da:ff:ee:a5:e4:71:ae:a7:b3: 13:32:32:6c:76:d4:22:06:b4:94:de:eb:fc:7f:7b: ce:62:23:3e:bb:b0:9b:fc:5d:91:4d:96:b6:90:62: 6e:e6:52:98:28:1b:c7:a3:34:2c:f6:fc:a7:fa:b3: 5c:34:93:73:41:c5:17:5e:ac:18:56:98:0e:0c:38: 78:63:3a:68:82:60:c2:e1:dd:76:ee:8f:f4:77:c7: 6e:ba:e8:6d:d9:72:86:2e:e7:5b:d4:cc:ca:55:37: ee:35:78:45:4b:a8:81:e0:29:7c:47:ff:b5:ef:fe: fa:7b:a3:1c:e7:31:0a:28:9b:69:57:96:52:1c:17: bf:0f:57:54:75:95:d0:01:48:40:dc:34:07:5b:65: 96:78:f2:08:bd:61:1a:3e:b1:11:d9:76:7b:0b:e9: a7:77:2d:f1:2e:04:cf:15:04:4c:25:56:25:d8:05: 03:23:30:7a:e9:ea:d2:da:bd:07:ff:81:e2:b6:da: b7:09:a2:96:83:63:40:6d:ec:37:01:0d:68:6d:e3: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:AD:B5:AF:84:DC:8C:9B:BF:59:1C:C9:01:7D:FB:7E:EE:EC:26 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5c:fb:a7:1c:de:2b:6b:a7:b1:66:e7:3b:0c:39:7e:96:4e: 51:2a:44:4e:38:54:78:e1:4e:55:ce:25:5a:c2:8f:3a:6f:c1: dd:c3:46:4d:c0:78:72:56:34:9d:86:ab:80:c8:a4:53:cc:85: db:a6:4c:1c:af:95:bf:7c:f9:87:80:92:16:a1:a6:69:30:5b: 86:94:98:3a:ac:91:91:89:c5:f6:c1:44:e9:2d:ca:f8:49:42: 4f:4c:28:63:9f:65:97:f1:6b:30:4a:69:ec:24:13:21:e2:25: 94:72:6c:70:81:6c:d3:2b:8e:6d:fb:f7:b9:e4:ec:90:e3:70: dc:66:1d:b9:ce:c4:67:42:b6:76:a2:ff:85:1e:8c:58:8f:25: 90:d5:83:d9:6a:12:18:9f:70:fd:65:c4:cb:4e:a3:59:e9:95: d8:38:ba:a6:cc:d0:0f:0d:b6:bc:13:ff:8f:b0:18:df:62:c6: 7a:d1:19:7e:a8:f6:ae:10:cc:af:25:7a:d1:f0:40:66:df:5e: 54:f0:ea:f9:24:c1:b8:9d:57:bd:16:00:4d:e5:08:ef:e5:c0: 40:98:22:51:89:72:56:ee:2f:c9:a3:ac:34:a6:ac:9a:29:62: 97:7e:68:93:cc:6d:2e:50:db:83:c4:92:73:eb:e9:b6:d7:d9: 95:e8:ad:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjQwNTE0MjA1NzI1WhcNMjQwNTIxMjA1NzI1WjAYMRYwFAYD VQQDEw02NjQzZDAzNS01NzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvxvV14G3L4inZJfg+y54VYPm6JzvdzraXJjHUVrk+Q/Y05IJTJCl7h1YQ68 ofju8nra/+6l5HGup7MTMjJsdtQiBrSU3uv8f3vOYiM+u7Cb/F2RTZa2kGJu5lKY KBvHozQs9vyn+rNcNJNzQcUXXqwYVpgODDh4YzpogmDC4d127o/0d8duuuht2XKG Ludb1MzKVTfuNXhFS6iB4Cl8R/+17/76e6Mc5zEKKJtpV5ZSHBe/D1dUdZXQAUhA 3DQHW2WWePIIvWEaPrER2XZ7C+mndy3xLgTPFQRMJVYl2AUDIzB66erS2r0H/4Hi ttq3CaKWg2NAbew3AQ1obeMs8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPFrbWv hNyMm79ZHMkBfft+7uwmMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXPunHN4ra6exZuc7DDl+lk5RKkROOFR44U5VziVawo86b8Hdw0ZN wHhyVjSdhquAyKRTzIXbpkwcr5W/fPmHgJIWoaZpMFuGlJg6rJGRicX2wUTpLcr4 SUJPTChjn2WX8WswSmnsJBMh4iWUcmxwgWzTK45t+/e55OyQ43DcZh25zsRnQrZ2 ov+FHoxYjyWQ1YPZahIYn3D9ZcTLTqNZ6ZXYOLqmzNAPDba8E/+PsBjfYsZ60Rl+ qPauEMyvJXrR8EBm315U8Or5JMG4nVe9FgBN5Qjv5cBAmCJRiXJW7i/Jo6w0pqya KWKXfmiTzG0uUNuDxJJz6+m219mV6K1h -----END CERTIFICATE-----Generated at Tue May 14 21:36:56 2024 by rpki-client on console-fra.rpki-client.org