$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: n/DMyhnpG0TIBgrADdXke2ExuWkVi/xCgirlno+DoYM= Subject key identifier: E2:D3:0E:92:31:CB:24:6B:C5:4B:22:64:16:46:F4:FB:86:FE:E9:3F Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0250 Signing time: Sun 05 May 2024 04:05:06 +0000 Manifest this update: Sun 05 May 2024 04:05:05 +0000 Manifest next update: Sun 12 May 2024 04:05:05 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: 9UUzdUJbS4exnWqcxEpHXmYs0HxT5dRKcY9m8qnDveQ=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: M3PzSROQRjKAL+kwNDxhkvHBkl4aI2qgVUbL7InyJVo=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: cO8jFcBIw78UFhLzmH1tbggMtAXv+rY30GeLNAx0yfk=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: G4VXW6vDMBEED4R1MSQ7McJNectJ6DVXEAqaeW3eyU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: May 5 04:05:05 2024 GMT Not After : May 12 04:05:05 2024 GMT Subject: CN=66370572-c230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:31:19:37:d3:2f:8d:a2:67:15:7a:bf:4f: a1:d2:c2:c2:6b:19:c3:82:a4:e7:98:57:f9:bd:5f: ff:27:b9:d2:c5:7c:34:43:5e:6e:09:8b:a0:40:cd: 4f:53:60:a9:96:47:8e:96:ba:42:60:ce:20:48:ca: 90:83:77:a6:b7:e1:66:24:bb:04:91:eb:25:76:16: d1:c9:e9:99:e5:7b:ab:cf:81:62:35:0c:be:71:49: 82:78:73:d8:75:bb:44:aa:9c:e6:ac:91:7e:d2:9b: a6:e7:60:3c:b9:53:5b:2d:2b:aa:53:e9:d5:4b:02: d7:ac:44:f6:7e:73:8c:fc:98:d3:ab:4d:46:ce:c8: ec:e8:5d:05:c3:ee:d6:8a:76:1f:5a:58:7d:44:a8: 3a:4b:7c:72:39:6a:17:96:b0:7d:c0:b9:7e:fd:be: f5:7d:f0:18:e1:61:17:67:f0:63:9c:7a:5a:cc:00: 41:98:84:ab:82:79:b9:64:59:58:46:dd:4a:e8:50: fb:91:e1:e9:4d:29:5f:90:86:d1:31:4a:67:53:9d: 9b:9c:cb:ec:4f:6b:24:a5:32:f1:f2:f0:08:bc:aa: c3:f6:3a:07:dc:4f:38:ae:5c:a2:93:c4:9c:cb:7c: e4:ab:8d:4f:64:d5:26:54:32:59:a3:f7:5c:af:18: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:0E:92:31:CB:24:6B:C5:4B:22:64:16:46:F4:FB:86:FE:E9:3F X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:01:81:9c:1c:bc:22:36:24:63:2b:e0:19:37:57:38:b3:e1: 25:02:eb:dd:93:bd:8d:16:3c:00:1f:e5:70:62:41:aa:66:02: 11:d6:41:7c:ce:26:9b:16:87:60:5e:ee:eb:9c:d1:fd:b3:ec: 00:49:0e:2a:3b:12:88:78:fc:4c:09:50:9e:fb:ca:40:ce:6d: f7:80:fa:3d:ce:09:fc:c6:26:2c:3b:ca:28:88:07:61:85:c7: 01:5f:36:12:5f:ce:c2:43:33:5f:5d:3e:9a:62:d5:68:8d:1f: 6a:53:6b:42:28:aa:d6:d7:f1:bd:e0:60:b7:4a:b7:44:82:c5: 82:ee:f2:10:26:fe:7d:65:4d:fd:27:3a:5c:c9:84:91:b2:1e: b1:3c:08:ac:e1:7c:0e:c9:5e:5b:15:04:ff:6c:ce:fd:cd:0b: 83:20:df:15:8f:5d:61:01:ae:f4:89:ee:64:ac:08:cc:d4:a2: 4d:36:e3:de:49:3f:bd:79:12:39:85:59:19:86:c6:53:eb:87: 51:be:0e:fa:07:00:11:5e:a7:1b:e3:d3:2e:47:87:71:63:0c: 71:64:07:3a:83:26:95:1c:2d:34:c7:af:3e:89:3f:49:c0:0a: 01:bd:63:0a:52:5a:6a:08:16:60:0b:71:df:61:7f:e6:cb:54: 64:35:8c:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjQwNTA1MDQwNTA1WhcNMjQwNTEyMDQwNTA1WjAYMRYwFAYD VQQDEw02NjM3MDU3Mi1jMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2YxGTfTL42iZxV6v0+h0sLCaxnDgqTnmFf5vV//J7nSxXw0Q15uCYugQM1P U2CplkeOlrpCYM4gSMqQg3emt+FmJLsEkesldhbRyemZ5Xurz4FiNQy+cUmCeHPY dbtEqpzmrJF+0pum52A8uVNbLSuqU+nVSwLXrET2fnOM/JjTq01Gzsjs6F0Fw+7W inYfWlh9RKg6S3xyOWoXlrB9wLl+/b71ffAY4WEXZ/BjnHpazABBmISrgnm5ZFlY Rt1K6FD7keHpTSlfkIbRMUpnU52bnMvsT2skpTLx8vAIvKrD9joH3E84rlyik8Sc y3zkq41PZNUmVDJZo/dcrxh1KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLTDpIx yyRrxUsiZBZG9PuG/uk/MB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArAYGcHLwiNiRjK+AZN1c4s+ElAuvdk72NFjwAH+VwYkGqZgIR1kF8 ziabFodgXu7rnNH9s+wASQ4qOxKIePxMCVCe+8pAzm33gPo9zgn8xiYsO8ooiAdh hccBXzYSX87CQzNfXT6aYtVojR9qU2tCKKrW1/G94GC3SrdEgsWC7vIQJv59ZU39 JzpcyYSRsh6xPAis4XwOyV5bFQT/bM79zQuDIN8Vj11hAa70ie5krAjM1KJNNuPe ST+9eRI5hVkZhsZT64dRvg76BwARXqcb49MuR4dxYwxxZAc6gyaVHC00x68+iT9J wAoBvWMKUlpqCBZgC3HfYX/my1RkNYyn -----END CERTIFICATE-----Generated at Sun May 5 04:34:57 2024 by rpki-client on console-fra.rpki-client.org