$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json) Hash identifier: sbtXSnfxS1stk0o7OzcrycJ7LLu0ha2Z/X6GPu5Q7wg= Subject key identifier: C4:1A:25:B9:3C:13:D1:07:36:27:80:9C:5A:53:FE:C5:74:88:E8:FD Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft Manifest number: 05C7 Signing time: Fri 03 May 2024 00:14:26 +0000 Manifest this update: Fri 03 May 2024 00:14:26 +0000 Manifest next update: Fri 10 May 2024 00:14:26 +0000 Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: AtrTey5vutsi3wWOj+ACnsIPOGTXbK7E75vsJYTh3VU=) 2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: D49IVGBetrELlZp6KsvwowY1vvGfTkWRv87/BEpy9oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Validity Not Before: May 3 00:14:26 2024 GMT Not After : May 10 00:14:26 2024 GMT Subject: CN=66342c62-c8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:48:77:f2:47:64:d7:24:94:a7:a8:23:48: cd:4f:9d:20:52:af:60:7b:73:c9:97:9d:3f:10:58: d3:c1:b9:81:0e:eb:f0:7f:eb:91:02:84:5f:ae:ac: 86:a9:11:4d:d1:eb:4e:42:fd:e0:47:c1:dc:42:ca: e8:1b:d3:bf:79:0f:60:aa:b3:9a:e9:3f:e0:2e:e6: 2e:2a:9e:b9:d5:9b:09:44:5a:5b:1e:5c:b3:00:eb: 43:35:38:b4:96:bf:3c:b2:7c:dc:2c:d9:b8:38:ea: ad:a6:7a:a5:95:06:cc:e8:27:ba:d3:6b:40:7b:e9: 92:b6:37:a1:5e:3d:02:d3:d3:43:01:aa:31:d3:b2: 87:09:0f:a8:2f:37:02:88:3b:43:27:d4:af:10:11: 56:ca:b9:2f:53:e6:a7:b5:2e:3c:35:15:4f:80:ad: 97:3e:93:0c:c3:c7:66:2a:43:2f:77:9b:7f:4a:24: f3:1f:77:77:bb:31:4b:e3:72:a8:4c:4a:72:ef:ff: 50:ac:fb:c4:aa:55:28:00:f7:97:3c:90:5b:b3:5d: 7b:b4:e4:7a:c2:f4:da:3a:d0:18:a4:00:a0:2c:a8: 5a:2a:3f:3a:5e:71:3f:ab:67:2f:94:fb:6f:fb:a4: 7c:48:eb:f7:86:90:a1:38:29:cb:c1:05:dc:09:c1: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:25:B9:3C:13:D1:07:36:27:80:9C:5A:53:FE:C5:74:88:E8:FD X509v3 Authority Key Identifier: keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:49:09:54:5f:0b:6b:73:dc:48:27:98:78:6f:75:68:38:63: f2:54:01:9e:2c:03:68:01:c3:88:79:e9:dc:a1:08:c8:c5:bd: 84:4e:db:71:d4:21:46:60:4e:a6:5f:cd:16:80:60:05:47:c5: ea:d0:fa:fa:84:8b:b2:f3:19:1d:30:ce:4c:20:ce:e6:51:e9: e6:af:7d:13:ea:71:7d:f7:3a:60:8e:4f:3a:86:a4:a3:00:91: 02:45:f5:97:de:61:0f:b4:99:9e:1b:1a:c8:1f:a7:ec:66:71: 3b:ce:a1:b8:e5:dc:5e:95:b5:92:c1:e2:99:ba:34:02:2e:a8: 2f:0d:56:5b:ea:bf:10:df:01:fb:1c:9d:36:52:b0:7f:3b:c7: e8:72:1b:61:8d:b4:51:3c:89:e9:01:83:e3:7e:3e:00:f1:98: 3a:f7:23:64:d3:a0:2e:8a:46:b4:96:08:b6:5b:b9:d7:01:4e: 16:9c:57:23:b4:fc:92:6b:f3:95:88:fa:31:e1:64:1a:7d:d1: fc:9b:7c:07:29:25:86:38:b0:bf:1f:14:f5:f8:1f:d5:09:90: 9d:6c:0f:43:de:80:c6:4e:77:c4:8c:31:3f:6a:cd:4e:2e:eb: 9f:05:34:17:70:b9:4f:79:6a:54:e7:3b:b9:be:67:32:1f:bf: 6f:b1:53:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRTMxMTAvBgNVBAUTKEJCQ0M3NjBBRkUzRTlGMEE5Qjg4QzhFQzdBNDlFRDdD REQwMzk2RjcwHhcNMjQwNTAzMDAxNDI2WhcNMjQwNTEwMDAxNDI2WjAYMRYwFAYD VQQDEw02NjM0MmM2Mi1jOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo9Id/JHZNcklKeoI0jNT50gUq9ge3PJl50/EFjTwbmBDuvwf+uRAoRfrqyG qRFN0etOQv3gR8HcQsroG9O/eQ9gqrOa6T/gLuYuKp651ZsJRFpbHlyzAOtDNTi0 lr88snzcLNm4OOqtpnqllQbM6Ce602tAe+mStjehXj0C09NDAaox07KHCQ+oLzcC iDtDJ9SvEBFWyrkvU+antS48NRVPgK2XPpMMw8dmKkMvd5t/SiTzH3d3uzFL43Ko TEpy7/9QrPvEqlUoAPeXPJBbs117tOR6wvTaOtAYpACgLKhaKj86XnE/q2cvlPtv +6R8SOv3hpChOCnLwQXcCcFH0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQaJbk8 E9EHNieAnFpT/sV0iOj9MB8GA1UdIwQYMBaAFLvMdgr+Pp8Km4jI7HpJ7XzdA5b3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNFMy8wOEI4RDBEMjZG M0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53cWJpTWpzZWtudGZOMERs dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U4eDJDdjQtbndxYmlNanNla250Zk4wRGx2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNFMy8wOEI4RDBEMjZGM0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53 cWJpTWpzZWtudGZOMERsdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6SQlUXwtrc9xIJ5h4b3VoOGPyVAGeLANoAcOIeencoQjIxb2ETttx 1CFGYE6mX80WgGAFR8Xq0Pr6hIuy8xkdMM5MIM7mUenmr30T6nF99zpgjk86hqSj AJECRfWX3mEPtJmeGxrIH6fsZnE7zqG45dxelbWSweKZujQCLqgvDVZb6r8Q3wH7 HJ02UrB/O8fochthjbRRPInpAYPjfj4A8Zg69yNk06Auika0lgi2W7nXAU4WnFcj tPySa/OViPox4WQafdH8m3wHKSWGOLC/HxT1+B/VCZCdbA9D3oDGTnfEjDE/as1O LuufBTQXcLlPeWpU5zu5vmcyH79vsVPi -----END CERTIFICATE-----Generated at Fri May 3 01:30:27 2024 by rpki-client on console-fra.rpki-client.org