$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: EqlhLUYkmwRwvuBl4yffS6GMGt4kHpKCOsLPuWDWLBI= Subject key identifier: 84:BE:B9:31:EC:E4:FA:B6:29:A1:D9:26:16:5C:18:A2:56:AC:5F:C8 Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: B6 Signing time: Wed 01 May 2024 06:46:32 +0000 Manifest this update: Wed 01 May 2024 06:46:31 +0000 Manifest next update: Wed 08 May 2024 06:46:31 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: W+EuI/OUkvKeXjs2oCPrCyWdTmLZvEhizk5Aofk8EWg=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: UeveUVSDva9upTSXKBhN39qv6P5ruOyYyA0iKp0Rsto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: May 1 06:46:31 2024 GMT Not After : May 8 06:46:31 2024 GMT Subject: CN=6631e548-985c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:de:3d:19:c5:6a:f5:8a:bf:d8:71:4e:80: b9:ef:2d:f7:6b:e5:ad:7a:c6:da:21:ae:73:3a:df: 90:ce:d8:e8:44:0e:51:e6:fe:f4:f7:ed:2a:13:e5: 3d:b9:aa:14:c0:df:b9:ad:4e:8e:d7:95:bf:3d:64: 21:35:44:9f:ba:b7:3e:f0:56:41:2b:78:26:da:e8: 8e:97:10:23:30:59:4d:df:68:d5:6e:df:d9:7c:54: 9f:74:2b:55:f3:7e:79:6e:55:70:07:f1:35:5b:fa: 42:2c:21:e1:7b:c8:a1:3f:c3:d2:60:5f:5b:bb:30: fa:81:c8:4c:ca:7e:7c:9f:f1:05:c2:0d:c2:d0:bd: ea:b2:b2:1e:56:9f:33:44:d0:f1:95:c5:a4:4d:3e: 97:6a:cd:26:2f:a0:b4:01:f4:e2:bf:46:51:9a:86: 47:44:3d:58:c2:8a:11:26:90:f2:9a:db:b8:83:be: c3:3b:4a:0b:60:2f:e4:83:9e:dc:dc:e5:b1:c4:bf: 0c:5b:df:55:5d:1d:61:4e:05:f2:25:be:b7:29:25: c4:a0:5a:8b:87:c6:3a:6e:cf:7d:bb:08:dd:b1:ef: f3:2d:2a:f2:ca:35:56:33:cf:77:81:36:e5:1e:b4: cc:98:bf:2d:d2:65:72:49:94:8b:0e:f0:f6:12:24: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:B9:31:EC:E4:FA:B6:29:A1:D9:26:16:5C:18:A2:56:AC:5F:C8 X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ef:5e:5d:c3:3f:50:01:f6:70:97:2a:7b:57:e4:3e:d9:0d: b1:f3:01:71:90:2f:0d:a1:69:06:c6:b4:31:bd:88:17:b7:4a: fd:20:04:75:be:f9:33:bb:43:d0:a6:b7:d0:dc:de:c5:76:f8: ec:4f:14:1c:c7:b0:95:9c:fb:28:87:30:59:90:bb:53:79:36: 04:d4:1d:c2:a3:ed:2a:b4:d4:50:54:8a:63:94:c4:73:bc:6d: 18:86:54:07:cf:ea:35:6a:7b:fe:d5:bc:f9:86:64:3b:35:46: 2f:20:83:63:b6:e3:2a:55:dd:e5:8c:b8:d0:91:da:e3:60:e4: 70:b9:63:c1:ec:0d:a3:46:78:cc:c9:19:b4:ca:af:e7:41:7a: 63:76:da:42:44:4b:4b:b9:82:79:24:f0:09:a4:75:75:8f:e3: 30:16:24:75:69:bc:8f:a5:62:07:3b:77:17:d1:ab:a3:46:10: 69:0d:1c:df:5f:14:7f:32:ae:23:53:6e:e7:6b:ce:42:36:5a: fd:6a:71:2d:19:03:c5:0b:e0:78:40:b3:8d:85:d3:03:bd:10: 58:e3:6e:db:78:f8:da:d0:74:3a:99:2f:2f:6f:8d:44:1d:f5: 52:c8:dd:3c:49:5c:11:ee:ef:66:3c:78:c5:33:3b:ab:f0:25: ff:e7:0d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjQwNTAxMDY0NjMxWhcNMjQwNTA4MDY0NjMxWjAYMRYwFAYD VQQDEw02NjMxZTU0OC05ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw67ePRnFavWKv9hxToC57y33a+WtesbaIa5zOt+QztjoRA5R5v709+0qE+U9 uaoUwN+5rU6O15W/PWQhNUSfurc+8FZBK3gm2uiOlxAjMFlN32jVbt/ZfFSfdCtV 8355blVwB/E1W/pCLCHhe8ihP8PSYF9buzD6gchMyn58n/EFwg3C0L3qsrIeVp8z RNDxlcWkTT6Xas0mL6C0AfTiv0ZRmoZHRD1YwooRJpDymtu4g77DO0oLYC/kg57c 3OWxxL8MW99VXR1hTgXyJb63KSXEoFqLh8Y6bs99uwjdse/zLSryyjVWM893gTbl HrTMmL8t0mVySZSLDvD2EiQ2JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS+uTHs 5Pq2KaHZJhZcGKJWrF/IMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2715dwz9QAfZwlyp7V+Q+2Q2x8wFxkC8NoWkGxrQxvYgXt0r9IAR1 vvkzu0PQprfQ3N7FdvjsTxQcx7CVnPsohzBZkLtTeTYE1B3Co+0qtNRQVIpjlMRz vG0YhlQHz+o1anv+1bz5hmQ7NUYvIINjtuMqVd3ljLjQkdrjYORwuWPB7A2jRnjM yRm0yq/nQXpjdtpCREtLuYJ5JPAJpHV1j+MwFiR1abyPpWIHO3cX0aujRhBpDRzf XxR/Mq4jU27na85CNlr9anEtGQPFC+B4QLONhdMDvRBY427bePja0HQ6mS8vb41E HfVSyN08SVwR7u9mPHjFMzur8CX/5w39 -----END CERTIFICATE-----Generated at Wed May 1 07:55:40 2024 by rpki-client on console-fra.rpki-client.org