$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft File: r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json) Hash identifier: +HG2ZXbm9z6R9UJJ/mc14wJdTNvk8E/bzPrlKChGjsw= Subject key identifier: FB:F8:61:84:86:9C:0E:E3:B8:A5:AD:83:75:2C:D0:66:45:22:31:C7 Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 Certificate issuer: /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft Manifest number: 066C Signing time: Mon 06 May 2024 23:35:08 +0000 Manifest this update: Mon 06 May 2024 23:35:07 +0000 Manifest next update: Mon 13 May 2024 23:35:07 +0000 Files and hashes: 1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: k3TBGBDZBx8bq1yr7h55gFl0tJdGvV2oX9hOUYzYG7A=) 2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: W74p/U+ZKm+i2aa6ytxthZ3GiXWBjWMUpOEQvBU+HkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Validity Not Before: May 6 23:35:07 2024 GMT Not After : May 13 23:35:07 2024 GMT Subject: CN=6639692b-a5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:e5:43:7f:ca:aa:66:64:41:43:68:1b:28: 96:24:93:25:2c:09:ed:6d:ff:2d:68:d7:9d:96:5f: 2d:30:79:b6:ea:4e:f9:19:0b:7d:35:e8:02:10:e5: b2:fd:4e:2c:42:b3:ee:7d:b6:cd:ce:9b:a8:5b:8b: 4f:9e:5c:62:57:15:c8:6e:f6:2e:d4:0b:b1:d4:11: 55:78:e9:2a:e9:f2:6d:60:05:97:f6:75:d0:b4:f5: 3e:91:e7:c3:e8:58:12:5f:d7:1e:ad:1d:10:90:17: 4b:88:63:d1:14:d2:b3:df:4d:ce:32:7e:06:9d:a2: f7:91:60:95:a7:33:90:af:f7:d9:97:1a:b1:75:a3: 41:9b:69:07:d6:00:ce:dc:52:a8:f0:e3:96:d5:b8: ab:c2:09:cb:b6:72:d1:d3:e2:43:69:db:b7:d4:c6: 00:fa:d0:ec:ff:ca:43:b7:63:9d:06:8d:c5:99:35: 25:4c:d7:9d:29:9f:9b:09:83:81:c7:ad:c8:36:09: f7:7c:e2:59:c2:ec:48:2f:05:a2:e0:aa:a8:91:1e: 0b:da:4a:9c:9f:6e:b6:f7:36:f8:26:87:13:c1:43: 2e:18:ba:39:07:28:6d:4c:c3:fc:2d:56:c5:a5:a3: 8a:9c:70:d2:e1:1c:a7:5d:b9:e9:f8:80:ee:5d:dc: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:61:84:86:9C:0E:E3:B8:A5:AD:83:75:2C:D0:66:45:22:31:C7 X509v3 Authority Key Identifier: keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:23:90:0b:65:6b:01:24:92:23:35:7a:1f:c6:f6:16:70:b8: 18:c2:7b:12:ba:ff:80:6f:7f:6d:47:b5:b7:7f:6e:32:6e:b9: d7:72:54:d9:f0:0c:ce:9c:90:9a:a9:5a:5b:b9:ee:7f:a7:6d: 6d:a2:d8:42:98:ca:30:0b:e7:ac:04:ab:d2:15:9f:03:9a:7d: c1:5d:5c:8d:70:4f:6e:a7:79:89:0c:64:00:c1:0b:72:42:a2: 01:19:f1:0a:ae:27:55:ac:0d:46:6e:98:6f:d7:bb:68:f0:8b: 6d:fd:64:a5:c4:23:67:01:f8:20:18:02:1d:51:54:69:64:14: fe:b1:85:d5:27:e9:01:2d:97:3a:ce:9a:4c:65:19:db:8a:20: 47:1a:7a:f8:2c:7f:99:e3:21:e6:af:1d:4b:9f:97:8d:69:87: de:61:2a:c2:1c:38:02:58:88:9b:65:c4:7f:11:ae:07:98:9c: 32:65:44:c5:58:51:9e:60:78:56:3b:7f:d6:ad:da:db:20:da: 04:2f:21:f2:09:f0:86:72:06:ae:cc:fe:39:b5:37:22:27:3b: 5d:38:d1:a1:e6:34:ed:14:53:b9:4c:d8:8a:b2:87:52:7f:a2: 62:f4:01:e8:21:97:dd:b2:d7:6c:cc:ff:77:16:9e:aa:9a:ef: 0e:e0:8c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1M0ExMTAvBgNVBAUTKEFGODU3ODhCOEM1MkQxMjhENTM0MEE3NTA5NUI4RjBG MTE3NzlDNDgwHhcNMjQwNTA2MjMzNTA3WhcNMjQwNTEzMjMzNTA3WjAYMRYwFAYD VQQDEw02NjM5NjkyYi1hNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9PlQ3/KqmZkQUNoGyiWJJMlLAntbf8taNedll8tMHm26k75GQt9NegCEOWy /U4sQrPufbbNzpuoW4tPnlxiVxXIbvYu1Aux1BFVeOkq6fJtYAWX9nXQtPU+kefD 6FgSX9cerR0QkBdLiGPRFNKz303OMn4GnaL3kWCVpzOQr/fZlxqxdaNBm2kH1gDO 3FKo8OOW1birwgnLtnLR0+JDadu31MYA+tDs/8pDt2OdBo3FmTUlTNedKZ+bCYOB x63INgn3fOJZwuxILwWi4KqokR4L2kqcn2629zb4JocTwUMuGLo5ByhtTMP8LVbF paOKnHDS4RynXbnp+IDuXdytSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv4YYSG nA7juKWtg3Us0GZFIjHHMB8GA1UdIwQYMBaAFK+FeIuMUtEo1TQKdQlbjw8Rd5xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUzQS8zNkI1MkRGQTJG QzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBTalZOQXAxQ1Z1UER4RjNu RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0VjRpNHhTMFNqVk5BcDFDVnVQRHhGM25FZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUzQS8zNkI1MkRGQTJGQzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBT alZOQXAxQ1Z1UER4RjNuRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBII5ALZWsBJJIjNXofxvYWcLgYwnsSuv+Ab39tR7W3f24ybrnXclTZ 8AzOnJCaqVpbue5/p21tothCmMowC+esBKvSFZ8Dmn3BXVyNcE9up3mJDGQAwQty QqIBGfEKridVrA1Gbphv17to8Itt/WSlxCNnAfggGAIdUVRpZBT+sYXVJ+kBLZc6 zppMZRnbiiBHGnr4LH+Z4yHmrx1Ln5eNaYfeYSrCHDgCWIibZcR/Ea4HmJwyZUTF WFGeYHhWO3/WrdrbINoELyHyCfCGcgauzP45tTciJztdONGh5jTtFFO5TNiKsodS f6Ji9AHoIZfdstdszP93Fp6qmu8O4Iwm -----END CERTIFICATE-----Generated at Tue May 7 01:58:25 2024 by rpki-client on console-fra.rpki-client.org