$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft File: 5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json) Hash identifier: OgZqLpXNyvavXk+GG8iUevQ/a8Djc31fUtwpGhdGy/c= Subject key identifier: 3B:0E:64:DF:D2:86:D2:27:BE:C2:68:CA:FB:26:EE:84:CA:E8:1A:EB Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Certificate serial: 1A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft Manifest number: 1A21 Signing time: Tue 30 Apr 2024 16:52:01 +0000 Manifest this update: Tue 30 Apr 2024 16:52:00 +0000 Manifest next update: Tue 07 May 2024 16:52:00 +0000 Files and hashes: 1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: YW8XM6HhhY9XywdQBq9xqOBeo9hgXQkPZanxEwxiZEU=) 2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: Qv5AAU60Mi7+dJ3KtkU01WrlemqwaBBxsC0pxuHLu6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6697 (0x1a29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Validity Not Before: Apr 30 16:52:00 2024 GMT Not After : May 7 16:52:00 2024 GMT Subject: CN=663121b0-29df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:60:6d:d8:a4:f5:4e:de:7e:cb:fa:54:4b: 50:08:25:86:54:6a:c7:0e:4b:4c:0f:83:e5:11:d0: ec:be:13:e6:46:f0:74:29:32:47:4f:95:04:a6:67: 89:24:32:9f:d5:4a:66:e1:96:04:9e:07:71:86:4d: c0:23:35:88:56:47:1f:45:2e:75:aa:d2:79:1d:db: ae:25:53:97:9b:7a:c0:a3:1a:dd:05:ea:e7:1f:33: 92:92:7d:ff:88:41:6e:cd:93:42:d9:ae:b2:b8:82: 63:2f:4a:46:33:fe:3c:90:72:c0:de:f9:dc:7d:f6: 5b:40:49:50:63:9c:61:06:14:23:d7:49:ef:2b:7a: a9:4d:2a:31:a2:81:37:95:e0:8b:90:ae:13:9a:9a: bd:5d:e2:28:5b:82:97:48:21:c5:01:62:1a:f1:c6: 75:ba:5c:22:d6:cc:b6:f1:f0:1e:9e:39:c1:79:d0: da:bc:38:55:7a:0e:e5:bf:53:54:54:12:95:6a:6e: 19:98:d1:29:03:2f:1e:74:2e:e6:02:89:ce:1b:ab: 01:74:d5:8a:b7:0b:9e:6f:0a:d0:3e:89:a3:6f:fb: 35:31:3b:32:d8:d9:6e:bc:a5:1e:8a:20:34:01:1a: 7f:11:da:7a:bf:bf:03:19:c3:30:53:ce:a9:0c:72: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0E:64:DF:D2:86:D2:27:BE:C2:68:CA:FB:26:EE:84:CA:E8:1A:EB X509v3 Authority Key Identifier: keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:5a:48:92:47:21:0c:01:f9:42:a0:79:d4:01:bb:0c:d3:a4: 27:eb:97:f2:15:bc:7a:dc:04:52:3c:50:2b:ec:15:be:22:d3: 7b:d4:54:c2:e4:e6:6d:5c:45:b2:2a:bf:c7:8c:35:9d:ee:26: 8d:53:3a:48:fe:4e:d5:d7:b4:95:8b:a0:90:8d:d4:91:9d:1f: 92:58:b1:9f:50:53:85:08:5f:42:9c:5d:87:d7:99:b9:d8:5a: 69:0f:94:48:2a:a7:77:34:7d:a5:e4:ce:44:22:4a:6e:cd:17: b6:3f:b5:05:04:fd:d1:81:81:ed:12:5b:d6:47:6b:8f:ad:32: 65:c4:13:fe:b6:d3:40:77:77:4f:14:ea:1e:9d:7e:01:36:b3: b3:82:37:0a:3d:e5:c2:72:a5:c1:ad:37:a8:37:1a:2f:35:de: 98:79:01:ec:77:d7:2b:1a:0b:ed:c6:b8:6c:e2:ee:76:62:38: 07:f9:6e:ab:2b:c9:82:f8:17:f5:99:dc:45:8e:88:2e:84:fa: 16:37:f1:c8:ae:6a:bb:d3:18:e6:30:af:7d:af:95:11:cd:ba: d3:42:01:96:02:59:38:2b:1b:52:44:b9:3b:89:9b:a8:dc:f6: 36:33:f0:4f:5a:96:77:32:be:f0:42:f6:ca:dd:ae:fa:cf:42: 53:be:c1:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzQzIxMTAvBgNVBAUTKEU3MDYxREIyMjI4MzhERTY4QTkzQ0UyMUVGMjkxQjA1 NTQyRDg3MjYwHhcNMjQwNDMwMTY1MjAwWhcNMjQwNTA3MTY1MjAwWjAYMRYwFAYD VQQDEw02NjMxMjFiMC0yOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dBgbdik9U7efsv6VEtQCCWGVGrHDktMD4PlEdDsvhPmRvB0KTJHT5UEpmeJ JDKf1Upm4ZYEngdxhk3AIzWIVkcfRS51qtJ5HduuJVOXm3rAoxrdBernHzOSkn3/ iEFuzZNC2a6yuIJjL0pGM/48kHLA3vncffZbQElQY5xhBhQj10nvK3qpTSoxooE3 leCLkK4Tmpq9XeIoW4KXSCHFAWIa8cZ1ulwi1sy28fAenjnBedDavDhVeg7lv1NU VBKVam4ZmNEpAy8edC7mAonOG6sBdNWKtwuebwrQPomjb/s1MTsy2NluvKUeiiA0 ARp/Edp6v78DGcMwU86pDHKW+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsOZN/S htInvsJoyvsm7oTK6BrrMB8GA1UdIwQYMBaAFOcGHbIig43mipPOIe8pGwVULYcm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNDMi83MkQ3Q0ZENjIz RjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGplYUtrODRoN3lrYkJWUXRo eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3WWRzaUtEamVhS2s4NGg3eWtiQlZRdGh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDNDMi83MkQ3Q0ZENjIzRjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGpl YUtrODRoN3lrYkJWUXRoeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHWkiSRyEMAflCoHnUAbsM06Qn65fyFbx63ARSPFAr7BW+ItN71FTC 5OZtXEWyKr/HjDWd7iaNUzpI/k7V17SVi6CQjdSRnR+SWLGfUFOFCF9CnF2H15m5 2FppD5RIKqd3NH2l5M5EIkpuzRe2P7UFBP3RgYHtElvWR2uPrTJlxBP+ttNAd3dP FOoenX4BNrOzgjcKPeXCcqXBrTeoNxovNd6YeQHsd9crGgvtxrhs4u52YjgH+W6r K8mC+Bf1mdxFjoguhPoWN/HIrmq70xjmMK99r5URzbrTQgGWAlk4KxtSRLk7iZuo 3PY2M/BPWpZ3Mr7wQvbK3a76z0JTvsG5 -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:36 2024 by rpki-client on console-fra.rpki-client.org