$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: nDCHjlf4HzJMMgi9h1/caC1eD+UMVioSKGFrzfT7WJY= Subject key identifier: 7F:C8:A4:BB:83:74:74:12:B8:92:7B:30:3D:C2:1E:67:55:DD:F3:70 Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 036A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 0367 Signing time: Sun 19 May 2024 02:51:48 +0000 Manifest this update: Sun 19 May 2024 02:51:47 +0000 Manifest next update: Sun 26 May 2024 02:51:47 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: cukqf3In0NY7RYzpmuZ3/jNjRa5aKBVOm1qJ3p1Pjn8=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: WMHGc4TE8FcpYDxTVs4AE1cGDwpusyjJzjDGheMW978=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 874 (0x36a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: May 19 02:51:47 2024 GMT Not After : May 26 02:51:47 2024 GMT Subject: CN=66496943-8cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:e8:7b:06:1d:63:8b:ae:27:c3:8b:12:96: 89:59:56:09:03:fe:a1:b4:38:3f:c2:27:77:82:ff: c1:1e:2d:09:8e:f3:f7:b7:25:47:6f:52:e7:5f:3a: 87:9e:02:aa:7c:ee:2f:90:8d:dc:ac:5c:78:21:49: b9:32:52:7b:74:3c:fb:dc:d6:82:59:79:8f:fa:43: 2e:eb:23:93:7b:1f:96:80:71:9b:6f:15:5b:ad:48: 00:d7:96:53:30:29:65:cf:0f:44:f2:2c:21:7d:2e: 83:3a:06:ba:68:f5:76:3d:cd:ae:75:24:28:c6:0d: 0f:be:d5:2f:03:c2:69:36:b1:7b:ee:c4:71:49:52: c1:f5:e7:e5:96:50:fa:7a:81:c8:5f:7d:ff:6a:0c: ed:b3:b7:80:11:6f:6c:c3:72:b0:8a:69:53:4e:22: 7a:3b:f2:9d:70:99:d8:7c:a3:a4:c2:a6:a8:3e:f6: 55:8e:f8:43:97:43:58:b3:6a:f1:f5:4f:0c:b9:dd: bc:04:20:a3:c8:e7:53:62:ed:be:d6:45:ee:df:69: 01:71:1d:df:65:5a:a6:b9:a0:05:b9:bf:50:af:5e: b2:27:ac:89:58:83:58:98:7f:43:45:92:aa:c8:c2: 75:91:ea:d1:61:fc:1e:c4:88:c2:ac:0f:56:7e:f6: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C8:A4:BB:83:74:74:12:B8:92:7B:30:3D:C2:1E:67:55:DD:F3:70 X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ca:e6:c3:9f:7b:00:18:48:8f:81:c5:d2:db:73:65:c4:a1: 32:31:9f:37:a1:7f:08:e9:f2:ca:f1:9b:14:e6:b9:a2:14:bd: d5:c3:74:dc:fb:48:0a:e1:18:b8:d4:18:e9:6f:fe:e9:ed:d6: e1:dc:59:81:d5:4a:01:ab:a5:11:f3:f8:37:b0:66:55:a8:6c: a9:27:cf:13:66:42:32:ff:32:a7:5d:a3:43:0f:b3:4c:5e:d2: ff:69:6a:52:ff:c8:14:70:13:3c:83:97:c8:69:98:66:89:f7: 77:35:cc:1e:ed:36:d7:f1:75:e3:78:a5:26:e4:cd:fa:a9:31: d0:81:09:21:24:ca:d8:48:76:6a:46:23:f6:01:af:e5:9e:68: b3:11:79:a1:34:dc:69:ff:4b:d4:f4:5d:13:3f:a9:2a:08:ef: 41:31:24:6b:18:be:61:c4:6a:7b:69:a5:65:01:48:d4:59:9e: f1:40:25:81:51:9f:89:fd:65:56:00:4c:20:f4:61:bc:88:d1: 3f:90:9d:73:05:30:c0:21:f8:91:25:cd:7b:c7:ee:80:66:1b: a4:e5:c5:c1:d3:9c:e9:a9:bc:84:db:a2:c0:90:4e:84:97:64: a5:92:23:e4:fb:3d:af:2c:2a:50:a4:d6:46:3b:d0:fa:fa:9b: 68:f7:9e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjQwNTE5MDI1MTQ3WhcNMjQwNTI2MDI1MTQ3WjAYMRYwFAYD VQQDEw02NjQ5Njk0My04Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzovoewYdY4uuJ8OLEpaJWVYJA/6htDg/wid3gv/BHi0JjvP3tyVHb1LnXzqH ngKqfO4vkI3crFx4IUm5MlJ7dDz73NaCWXmP+kMu6yOTex+WgHGbbxVbrUgA15ZT MCllzw9E8iwhfS6DOga6aPV2Pc2udSQoxg0PvtUvA8JpNrF77sRxSVLB9eflllD6 eoHIX33/agzts7eAEW9sw3KwimlTTiJ6O/KdcJnYfKOkwqaoPvZVjvhDl0NYs2rx 9U8Mud28BCCjyOdTYu2+1kXu32kBcR3fZVqmuaAFub9Qr16yJ6yJWINYmH9DRZKq yMJ1kerRYfwexIjCrA9WfvZ+WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/IpLuD dHQSuJJ7MD3CHmdV3fNwMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPyubDn3sAGEiPgcXS23NlxKEyMZ83oX8I6fLK8ZsU5rmiFL3Vw3Tc +0gK4Ri41Bjpb/7p7dbh3FmB1UoBq6UR8/g3sGZVqGypJ88TZkIy/zKnXaNDD7NM XtL/aWpS/8gUcBM8g5fIaZhmifd3Ncwe7TbX8XXjeKUm5M36qTHQgQkhJMrYSHZq RiP2Aa/lnmizEXmhNNxp/0vU9F0TP6kqCO9BMSRrGL5hxGp7aaVlAUjUWZ7xQCWB UZ+J/WVWAEwg9GG8iNE/kJ1zBTDAIfiRJc17x+6AZhuk5cXB05zpqbyE26LAkE6E l2SlkiPk+z2vLCpQpNZGO9D6+pto954P -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org