$ rpki-client -vvf rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft File: 9wpgFV53FUM_JUSW4nuAimPIyXQ.mft (raw, json) Hash identifier: 0wquLaa0L0a1YKNl8RtW30byI8fXEv25idWgrwawc3g= Subject key identifier: 4F:73:EF:AE:6F:19:D2:0D:AF:7D:05:B3:76:53:69:2C:E7:BF:3B:FC Authority key identifier: F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 Certificate issuer: /CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Certificate serial: 0D8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft Manifest number: 0D82 Signing time: Tue 30 Apr 2024 18:50:37 +0000 Manifest this update: Tue 30 Apr 2024 18:50:37 +0000 Manifest next update: Tue 07 May 2024 18:50:37 +0000 Files and hashes: 1: 9wpgFV53FUM_JUSW4nuAimPIyXQ.crl (hash: OXdW06kLj5w89Utlp3GA3O5f+MvJsiiv0hvjw+icS2w=) 2: A4DF63AA9E1B11E9AE66905DC4F9AE02.roa (hash: xlrIm71syElb/aOnzIyCu36SDcF64UpVAMaWhjdNz2s=) 3: A44F5CE29E1B11E9AE66905DC4F9AE02.roa (hash: jq/CHrH4OnQfIYl4mINY0nFNtMhwyXGlm6P1HOZekk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3471 (0xd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Validity Not Before: Apr 30 18:50:37 2024 GMT Not After : May 7 18:50:37 2024 GMT Subject: CN=66313d7d-e4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:59:95:32:1b:b6:ca:f4:d4:2c:d3:e7:76: 74:15:6d:05:c0:7d:b7:88:d9:51:16:ff:b2:f9:ab: c6:ee:2c:a6:50:ed:c0:d5:ff:a2:59:35:87:19:33: 2a:fd:4a:57:47:6e:3d:63:ae:3a:bb:da:88:27:d1: c3:50:20:fa:e4:d3:08:e3:ed:e7:bf:21:4a:42:34: 66:a7:37:86:c7:33:37:26:09:f3:62:84:23:ea:df: 80:dd:dd:13:4a:82:f8:ce:4e:cd:9d:19:2e:16:80: 47:d1:1c:de:f7:a6:2e:bb:24:15:64:e3:a1:8a:fe: 57:9e:84:ef:1c:16:bf:d5:34:a8:0b:c0:b3:a8:da: 0c:9c:d4:83:5d:03:c2:db:49:65:15:bf:52:44:30: c3:4a:9a:f2:70:e9:f2:81:bd:91:f9:96:8c:4b:2b: 4d:d0:f4:a3:f3:ce:87:d8:fc:9e:f1:77:56:2d:1d: 42:bc:a7:6a:8b:77:1e:bd:ba:11:13:0f:7e:7f:1c: 9b:97:24:9d:f2:ce:6a:cf:8b:54:b9:67:3e:14:97: c2:ea:33:40:5a:88:97:5e:80:7c:5a:85:79:3f:7a: 5b:cb:15:bd:2e:37:cf:6b:3d:f7:b9:31:b4:1e:53: ba:13:4f:8f:8c:8b:80:51:98:65:ce:ff:70:f9:78: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:EF:AE:6F:19:D2:0D:AF:7D:05:B3:76:53:69:2C:E7:BF:3B:FC X509v3 Authority Key Identifier: keyid:F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:74:dd:af:cf:b9:dd:17:ce:b2:04:47:60:ae:ed:71:29:ac: d9:2b:de:63:7b:4c:1e:75:8a:b4:2f:ec:96:5d:3f:82:67:0d: 5e:93:fe:65:c5:9a:3d:38:9e:f6:43:cb:15:3c:af:40:7e:49: 33:b8:aa:ed:82:f8:58:79:1e:f8:e1:5a:6e:54:be:e0:82:58: b1:da:22:58:2a:7e:47:79:fe:ba:a4:26:7a:da:04:b1:76:72: fc:f5:d8:07:9e:ab:01:30:b6:21:40:35:fd:0c:b7:65:1b:af: 7b:55:fe:cc:69:07:3d:05:0d:87:ca:88:b1:c4:90:83:9c:18: 9a:03:6d:a9:23:5c:26:08:a4:d1:ec:09:a8:96:5c:f7:15:b3: f6:8c:e9:3d:e3:5c:ad:27:b7:c8:8a:bf:cc:2b:fd:7a:db:94: 92:97:f0:d7:21:51:fe:cc:7c:74:30:9f:1a:5f:f5:ef:00:76: 82:13:4c:ba:79:2c:e8:81:92:ac:9f:67:ba:53:03:cf:c2:a1: 99:93:0f:50:0b:30:3c:63:fb:e1:6b:95:0c:c1:3e:c2:70:ac: a8:68:56:1c:2f:a3:50:ad:fc:98:e2:b6:85:bd:f4:a3:8f:31: f0:a0:0d:b9:d8:a9:e8:6b:6d:9b:61:80:69:6e:d5:dd:5d:ec: 23:8d:f0:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4M0UxMTAvBgNVBAUTKEY3MEE2MDE1NUU3NzE1NDMzRjI1NDQ5NkUyN0I4MDhB NjNDOEM5NzQwHhcNMjQwNDMwMTg1MDM3WhcNMjQwNTA3MTg1MDM3WjAYMRYwFAYD VQQDEw02NjMxM2Q3ZC1lNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5W5ZlTIbtsr01CzT53Z0FW0FwH23iNlRFv+y+avG7iymUO3A1f+iWTWHGTMq /UpXR249Y646u9qIJ9HDUCD65NMI4+3nvyFKQjRmpzeGxzM3JgnzYoQj6t+A3d0T SoL4zk7NnRkuFoBH0Rze96YuuyQVZOOhiv5XnoTvHBa/1TSoC8CzqNoMnNSDXQPC 20llFb9SRDDDSprycOnygb2R+ZaMSytN0PSj886H2Pye8XdWLR1CvKdqi3cevboR Ew9+fxyblySd8s5qz4tUuWc+FJfC6jNAWoiXXoB8WoV5P3pbyxW9LjfPaz33uTG0 HlO6E0+PjIuAUZhlzv9w+XhEHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9z765v GdINr30Fs3ZTaSznvzv8MB8GA1UdIwQYMBaAFPcKYBVedxVDPyVEluJ7gIpjyMl0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjgzRS81MzczOEZFMjlF MUExMUU5QUVDRTAzNThDNEY5QUUwMi85d3BnRlY1M0ZVTV9KVVNXNG51QWltUEl5 WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl3cGdGVjUzRlVNX0pVU1c0bnVBaW1QSXlYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjgzRS81MzczOEZFMjlFMUExMUU5QUVDRTAzNThDNEY5QUUwMi85d3BnRlY1M0ZV TV9KVVNXNG51QWltUEl5WFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIdN2vz7ndF86yBEdgru1xKazZK95je0wedYq0L+yWXT+CZw1ek/5l xZo9OJ72Q8sVPK9AfkkzuKrtgvhYeR744VpuVL7gglix2iJYKn5Hef66pCZ62gSx dnL89dgHnqsBMLYhQDX9DLdlG697Vf7MaQc9BQ2HyoixxJCDnBiaA22pI1wmCKTR 7Amollz3FbP2jOk941ytJ7fIir/MK/1625SSl/DXIVH+zHx0MJ8aX/XvAHaCE0y6 eSzogZKsn2e6UwPPwqGZkw9QCzA8Y/vha5UMwT7CcKyoaFYcL6NQrfyY4raFvfSj jzHwoA252Knoa22bYYBpbtXdXewjjfAJ -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:02 2024 by rpki-client on console-fra.rpki-client.org