$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: xmiiN2a/463LUt04IN/GSWGlxKxwmE2fkzqAfYY1leE= Subject key identifier: 9C:EF:2B:8F:D1:12:00:93:2E:23:1B:71:F2:E2:58:DF:65:03:3B:11 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0452 Signing time: Tue 07 May 2024 01:54:17 +0000 Manifest this update: Tue 07 May 2024 01:54:16 +0000 Manifest next update: Tue 14 May 2024 01:54:16 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: Z5VUv+Ta/YWiSBHtahgliCK622WwoLA+wbQ6U4HbR14=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: NEnL41sKwi9Xh8V53AxkINqIgekZAQhbXuGpIRDftnY=) 3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: 75j2/PaU0ayu5rgNK6jGfNnOnRX5lzxllgr71zLKF/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: May 7 01:54:16 2024 GMT Not After : May 14 01:54:16 2024 GMT Subject: CN=663989c9-631c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:27:f2:83:84:69:2d:67:e9:b3:1e:27:e3: 57:b8:d0:5e:9b:4c:f9:7e:3b:2a:97:1e:3a:4c:43: a4:06:94:1d:5d:3e:0a:8d:c8:b0:de:20:83:ca:4a: 20:2f:b0:3f:fa:de:a2:2f:18:d1:bd:a0:a5:d6:4e: 40:8f:d2:8e:43:c3:64:d5:9d:b9:93:bc:89:84:93: 29:1f:bc:ca:ce:e7:75:29:26:40:e0:54:c8:ef:72: 8f:f2:50:dc:98:03:7a:3d:7d:90:36:af:8a:b6:55: 6b:43:13:43:fc:08:26:c9:de:bb:c0:ae:5a:88:81: 80:8e:6c:6d:0e:de:27:c8:00:40:50:4e:3d:c4:4e: ce:db:6e:f1:8e:03:7c:c4:f3:da:4d:e0:29:e8:cb: 8c:8c:da:0c:3e:21:97:ac:c8:99:49:d4:14:85:27: 2d:be:08:99:4f:00:dd:f2:bf:63:c2:73:59:38:cf: f5:f4:08:0c:02:0d:a0:9c:3c:c8:a9:42:ed:f4:50: ed:18:5d:96:8f:bc:ec:ce:8d:cf:11:86:e4:c1:11: f0:66:e5:45:86:f4:97:5d:83:69:69:91:50:c9:46: 37:79:1d:43:94:82:14:8b:b2:fb:1e:d6:6f:81:71: 12:08:9d:5b:f3:7c:5e:e9:93:45:30:bb:6b:df:45: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EF:2B:8F:D1:12:00:93:2E:23:1B:71:F2:E2:58:DF:65:03:3B:11 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:27:77:82:66:14:61:a4:94:8b:25:fd:8e:c1:1a:29:01:c1: 2a:7c:14:93:a8:53:51:4a:76:5a:8a:14:52:95:df:e1:12:fa: ea:fe:ef:96:ba:8f:77:f2:70:91:cb:99:fd:fa:6a:94:a9:11: dc:1e:0b:a9:1d:07:d1:c3:ee:db:bf:a4:db:77:51:3b:2c:d8: be:0f:34:54:90:02:f8:aa:ed:68:8b:a3:ea:3c:bb:d9:2e:54: 85:2d:da:5a:3d:a6:df:05:c1:4b:0b:be:06:95:a6:49:36:5c: 3c:9e:0b:c8:81:d1:25:c6:bb:29:7f:7c:4d:46:58:bd:77:9b: b9:6c:34:3c:a6:1d:fb:3a:16:08:64:6d:4e:0e:2d:9f:2b:e3: f7:61:6a:7c:7b:0c:1b:1e:b0:50:b3:7c:a3:f2:5e:6e:59:06: 2d:ab:d9:d7:cc:9c:03:c2:28:9a:18:6f:27:c2:68:75:f1:71: c0:9c:5c:72:2d:64:b1:42:68:71:32:22:9e:ff:d5:a4:00:b1: 8c:15:c3:11:e8:d2:db:31:e3:6e:e9:dd:8a:24:d5:25:5c:17: 84:2c:2d:9b:e1:40:74:08:9d:9b:6b:8f:44:34:92:f3:59:67: 74:3c:03:d5:a9:11:c4:ec:bf:d6:22:2e:12:63:1b:7a:ba:a6: e0:e9:8b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjQwNTA3MDE1NDE2WhcNMjQwNTE0MDE1NDE2WjAYMRYwFAYD VQQDEw02NjM5ODljOS02MzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAml0n8oOEaS1n6bMeJ+NXuNBem0z5fjsqlx46TEOkBpQdXT4Kjciw3iCDykog L7A/+t6iLxjRvaCl1k5Aj9KOQ8Nk1Z25k7yJhJMpH7zKzud1KSZA4FTI73KP8lDc mAN6PX2QNq+KtlVrQxND/Agmyd67wK5aiIGAjmxtDt4nyABAUE49xE7O227xjgN8 xPPaTeAp6MuMjNoMPiGXrMiZSdQUhSctvgiZTwDd8r9jwnNZOM/19AgMAg2gnDzI qULt9FDtGF2Wj7zszo3PEYbkwRHwZuVFhvSXXYNpaZFQyUY3eR1DlIIUi7L7HtZv gXESCJ1b83xe6ZNFMLtr30VOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzvK4/R EgCTLiMbcfLiWN9lAzsRMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABJ3eCZhRhpJSLJf2OwRopAcEqfBSTqFNRSnZaihRSld/hEvrq/u+W uo938nCRy5n9+mqUqRHcHgupHQfRw+7bv6Tbd1E7LNi+DzRUkAL4qu1oi6PqPLvZ LlSFLdpaPabfBcFLC74GlaZJNlw8ngvIgdElxrspf3xNRli9d5u5bDQ8ph37OhYI ZG1ODi2fK+P3YWp8ewwbHrBQs3yj8l5uWQYtq9nXzJwDwiiaGG8nwmh18XHAnFxy LWSxQmhxMiKe/9WkALGMFcMR6NLbMeNu6d2KJNUlXBeELC2b4UB0CJ2ba49ENJLz WWd0PAPVqRHE7L/WIi4SYxt6uqbg6Yta -----END CERTIFICATE-----Generated at Tue May 7 03:10:21 2024 by rpki-client on console-ams.rpki-client.org