$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft File: sEu6HxjA5wgx81T3RV7hXTIpQbM.mft (raw, json) Hash identifier: Bgw1sdfxlWr+Rx6WsehuYjiR1NmpHKrIcg9aMxohVZs= Subject key identifier: 03:59:54:A4:CD:8B:F7:3B:39:3D:4C:58:54:58:DB:EE:67:4A:A3:82 Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 Certificate issuer: /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft Manifest number: 05AC Signing time: Wed 01 May 2024 00:34:06 +0000 Manifest this update: Wed 01 May 2024 00:34:06 +0000 Manifest next update: Wed 08 May 2024 00:34:06 +0000 Files and hashes: 1: sEu6HxjA5wgx81T3RV7hXTIpQbM.crl (hash: gxGGh3XAAfXpbMbufbKg1ziitx84VuABV5u8lYkB/Eg=) 2: DA33C49E08E211ED8B10721AC4F9AE02.roa (hash: WpUqYbuojdoOfl91yzHziRWkBcMCiTexaux4ADWPmmc=) 3: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (hash: /OljMqzaIdjyEY5EHfGGDYXJwfVnBvHEoJ3jmTQEntk=) 4: 710DB204831D11ECA37CC12EC4F9AE02.roa (hash: M5LybcNqKuuPfP5bucc0Nv0oxRK5wDugmDOdcyR9j2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Validity Not Before: May 1 00:34:06 2024 GMT Not After : May 8 00:34:06 2024 GMT Subject: CN=66318dfe-d7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:9c:16:90:0b:42:2c:22:4c:ca:0f:00:41: c0:2f:ad:88:06:2d:cc:67:d2:60:fa:e4:78:a1:c9: ce:49:2b:c3:7c:f1:07:71:2f:f2:23:e5:ed:53:2c: a8:8d:38:44:1b:2c:34:d1:85:0c:a0:50:4b:61:48: 0a:78:65:06:d7:fa:a7:0c:85:6c:6a:ad:02:1c:64: 7c:24:12:e1:2e:fe:31:07:a4:18:1b:59:7a:69:bf: 47:4b:14:c5:11:c1:d0:54:31:66:9d:be:be:90:b0: 17:b1:5a:ea:2f:ba:c5:ed:f9:01:23:7e:2c:df:e9: 78:72:33:6e:ce:14:4c:e8:46:84:9a:2b:50:90:0e: 7d:9f:d3:3f:be:dd:e8:21:36:44:83:f9:ba:03:88: 73:b2:26:cd:53:3f:78:b0:c1:1d:5c:4b:26:15:35: 9d:49:a0:78:3d:17:70:9c:48:e0:5d:34:3d:21:9a: a6:df:8c:fc:33:51:45:ea:ea:e5:5c:e1:2d:f6:47: c9:20:7e:ed:7e:62:09:14:c3:6f:a4:dd:ec:fc:d0: 79:c0:27:d4:02:79:3b:08:9c:06:86:2d:e1:4f:c4: 68:df:87:e6:6e:4b:6d:25:d2:80:9b:a4:8e:b9:81: 0b:a0:26:c0:af:c6:24:5b:86:4d:ec:0b:65:03:8b: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:59:54:A4:CD:8B:F7:3B:39:3D:4C:58:54:58:DB:EE:67:4A:A3:82 X509v3 Authority Key Identifier: keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fd:7f:c5:0b:8a:3f:44:80:df:8d:c9:ba:53:6f:0b:80:ee: 7b:6f:d2:c1:98:f5:f6:6a:a7:24:56:75:92:4a:46:1d:23:2f: a0:71:ef:67:12:0d:ec:64:4f:90:e6:48:3c:f7:b3:e2:7e:07: 26:14:7a:fc:cf:5c:45:94:d2:55:e8:c9:9c:a6:b2:41:11:3d: 55:04:1b:eb:88:c8:0c:d3:07:06:0e:2c:14:f0:f8:f0:ec:50: eb:00:13:f0:58:a9:1b:0b:78:74:6e:c0:ec:73:e6:a6:79:62: 33:86:63:5d:fb:20:49:d9:d8:9d:18:52:6a:81:b1:2f:23:64: 5a:3e:da:f6:c8:df:76:ef:f4:ac:43:a8:0c:06:4e:39:b4:27: 3b:ba:6b:59:14:16:f1:0d:df:56:9d:ae:35:7d:e0:a6:fa:e1: a0:3d:8f:82:f5:d4:e7:89:3b:ea:c9:fe:6c:ae:be:da:bc:23: 2e:92:d1:36:5f:42:aa:d7:a5:f0:e4:e3:45:b5:06:f6:ab:df: 4e:ea:da:9a:10:3e:d5:c1:a4:3c:1b:70:ba:d0:09:0c:a9:c2: b3:23:a9:66:d3:38:cc:27:f6:43:19:08:b1:6d:b6:fc:6d:3a: d0:60:aa:d1:3a:e6:ea:81:70:ff:27:84:dd:25:5f:3e:6e:7c: 36:b9:54:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczRkQxMTAvBgNVBAUTKEIwNEJCQTFGMThDMEU3MDgzMUYzNTRGNzQ1NUVFMTVE MzIyOTQxQjMwHhcNMjQwNTAxMDAzNDA2WhcNMjQwNTA4MDAzNDA2WjAYMRYwFAYD VQQDEw02NjMxOGRmZS1kN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA366cFpALQiwiTMoPAEHAL62IBi3MZ9Jg+uR4ocnOSSvDfPEHcS/yI+XtUyyo jThEGyw00YUMoFBLYUgKeGUG1/qnDIVsaq0CHGR8JBLhLv4xB6QYG1l6ab9HSxTF EcHQVDFmnb6+kLAXsVrqL7rF7fkBI34s3+l4cjNuzhRM6EaEmitQkA59n9M/vt3o ITZEg/m6A4hzsibNUz94sMEdXEsmFTWdSaB4PRdwnEjgXTQ9IZqm34z8M1FF6url XOEt9kfJIH7tfmIJFMNvpN3s/NB5wCfUAnk7CJwGhi3hT8Ro34fmbkttJdKAm6SO uYELoCbAr8YkW4ZN7AtlA4txrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANZVKTN i/c7OT1MWFRY2+5nSqOCMB8GA1UdIwQYMBaAFLBLuh8YwOcIMfNU90Ve4V0yKUGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNGRC9EQ0IyNUI5NjdC NDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3Z3g4MVQzUlY3aFhUSXBR Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdTZIeGpBNXdneDgxVDNSVjdoWFRJcFFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNGRC9EQ0IyNUI5NjdCNDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3 Z3g4MVQzUlY3aFhUSXBRYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf/X/FC4o/RIDfjcm6U28LgO57b9LBmPX2aqckVnWSSkYdIy+gce9n Eg3sZE+Q5kg897PifgcmFHr8z1xFlNJV6MmcprJBET1VBBvriMgM0wcGDiwU8Pjw 7FDrABPwWKkbC3h0bsDsc+ameWIzhmNd+yBJ2didGFJqgbEvI2RaPtr2yN927/Ss Q6gMBk45tCc7umtZFBbxDd9Wna41feCm+uGgPY+C9dTniTvqyf5srr7avCMuktE2 X0Kq16Xw5ONFtQb2q99O6tqaED7VwaQ8G3C60AkMqcKzI6lm0zjMJ/ZDGQixbbb8 bTrQYKrROubqgXD/J4TdJV8+bnw2uVTe -----END CERTIFICATE-----Generated at Wed May 1 01:04:06 2024 by rpki-client on console-fra.rpki-client.org