$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft File: rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json) Hash identifier: IqKpKpNe5p+WHt3Q7g/HH3JZZQIhX7isNwGOWsR7uSY= Subject key identifier: 8F:9F:55:1F:ED:0A:6A:E9:FE:73:C3:84:35:20:1A:0B:24:91:3F:FB Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33 Certificate issuer: /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433 Certificate serial: 0E2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft Manifest number: 0E23 Signing time: Sat 18 May 2024 18:26:28 +0000 Manifest this update: Sat 18 May 2024 18:26:28 +0000 Manifest next update: Sat 25 May 2024 18:26:28 +0000 Files and hashes: 1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: o3l6pS6ZJ1isimE6r44X+rOfqc4Q4SI8lc+Gawdgkdw=) 2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: +5h350Entxop10VDTkTCS9JuaJOuqYNRDCA3VkMIaEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3627 (0xe2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433 Validity Not Before: May 18 18:26:28 2024 GMT Not After : May 25 18:26:28 2024 GMT Subject: CN=6648f2d4-a76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:2e:31:af:9c:54:45:63:cc:b0:6e:7c:70: a1:9d:48:18:ec:10:30:7f:32:98:54:97:53:41:2e: 18:fe:2d:33:f7:7f:5e:c9:60:0f:e1:d4:82:e9:61: ba:e3:1c:ce:3d:79:f1:17:be:0f:06:8d:bb:76:a6: ba:5d:fd:68:30:2f:c7:5b:24:59:26:74:a0:d6:92: b3:ee:8e:ba:10:c6:9b:12:b9:5c:d2:59:7b:0a:12: 94:a9:34:c4:7f:1f:19:92:89:56:58:20:7a:73:7f: df:fa:c4:a8:b7:1c:b6:8c:f9:0b:14:20:eb:0f:10: 29:cf:e3:99:fc:d6:b5:41:01:49:52:3d:c6:71:4c: 4f:ea:fe:f4:3d:8e:6f:a2:b0:34:3c:90:c4:50:9e: e9:44:ad:cc:a2:74:c2:fc:e3:ec:3d:2a:b6:8a:6a: 98:91:e0:32:0f:4a:7e:9e:c5:5d:fe:af:eb:e9:b4: e3:f1:05:a6:91:bf:0b:3f:ef:65:8c:6c:23:df:7d: a2:ad:96:d3:61:80:c8:d2:fd:58:34:39:b6:2f:6b: 31:de:22:fc:76:90:e7:07:6f:57:d6:39:64:c6:8d: 67:59:5c:12:b4:cc:d1:e9:a6:e9:1b:b0:ee:b6:c7: 7b:b4:ff:57:2d:e7:36:b5:05:2f:8c:69:d6:19:82: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9F:55:1F:ED:0A:6A:E9:FE:73:C3:84:35:20:1A:0B:24:91:3F:FB X509v3 Authority Key Identifier: keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:68:5b:8a:4d:49:4a:c8:37:16:06:62:12:35:f9:7e:8a:d5: a3:2a:ef:ef:d9:91:9e:0e:1b:d6:c1:72:55:ae:67:b1:a5:46: c1:e1:9b:c5:e3:e3:22:66:c6:d4:d6:58:c9:cb:dd:6d:e9:19: 08:b1:20:fd:6c:84:f3:f4:32:50:1e:55:49:c2:fd:59:13:35: 25:5b:39:0f:82:15:66:3f:7b:c8:84:d2:cc:3d:81:3c:3f:03: 66:e1:ee:04:75:36:0d:44:92:5d:f2:be:3b:04:8c:aa:2e:4b: 5a:29:59:77:ba:ed:82:6d:39:b2:f7:6e:4a:d0:14:5f:da:a5: 1a:fe:92:8b:22:4c:fd:a5:49:c9:5e:05:3a:ed:25:97:73:53: f7:d7:08:fd:fe:70:15:54:08:27:f3:cd:39:3d:bf:10:51:65: 49:d2:79:90:9a:0c:db:1f:34:ba:a7:43:b2:60:26:4d:20:71: af:f0:60:63:22:75:08:af:37:68:f1:59:d4:82:3c:c2:25:3e: c5:87:f5:5d:f9:6e:2d:e3:3c:3e:26:a5:82:15:40:84:09:b8: 2e:a0:59:49:ab:40:6d:37:18:98:a6:8b:8b:c9:cf:15:8d:f5: 0c:d5:17:89:6f:a1:47:48:ae:cb:04:2c:05:47:90:7d:3e:a3: 43:38:b8:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyNEQxMTAvBgNVBAUTKEFFREI5RjdFMzg1RkE2NDQzNkQzODRCQ0I3QjkyRTA5 NDY5NTU0MzMwHhcNMjQwNTE4MTgyNjI4WhcNMjQwNTI1MTgyNjI4WjAYMRYwFAYD VQQDEw02NjQ4ZjJkNC1hNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kMuMa+cVEVjzLBufHChnUgY7BAwfzKYVJdTQS4Y/i0z939eyWAP4dSC6WG6 4xzOPXnxF74PBo27dqa6Xf1oMC/HWyRZJnSg1pKz7o66EMabErlc0ll7ChKUqTTE fx8ZkolWWCB6c3/f+sSotxy2jPkLFCDrDxApz+OZ/Na1QQFJUj3GcUxP6v70PY5v orA0PJDEUJ7pRK3MonTC/OPsPSq2imqYkeAyD0p+nsVd/q/r6bTj8QWmkb8LP+9l jGwj332irZbTYYDI0v1YNDm2L2sx3iL8dpDnB29X1jlkxo1nWVwStMzR6abpG7Du tsd7tP9XLec2tQUvjGnWGYL/AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+fVR/t Cmrp/nPDhDUgGgskkT/7MB8GA1UdIwQYMBaAFK7bn344X6ZENtOEvLe5LglGlVQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDI0RC83NTExMDlBQTgw NUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBrUTIwNFM4dDdrdUNVYVZW RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J0dWZmamhmcGtRMjA0Uzh0N2t1Q1VhVlZETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDI0RC83NTExMDlBQTgwNUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBr UTIwNFM4dDdrdUNVYVZWRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuaFuKTUlKyDcWBmISNfl+itWjKu/v2ZGeDhvWwXJVrmexpUbB4ZvF 4+MiZsbU1ljJy91t6RkIsSD9bITz9DJQHlVJwv1ZEzUlWzkPghVmP3vIhNLMPYE8 PwNm4e4EdTYNRJJd8r47BIyqLktaKVl3uu2CbTmy925K0BRf2qUa/pKLIkz9pUnJ XgU67SWXc1P31wj9/nAVVAgn8805Pb8QUWVJ0nmQmgzbHzS6p0OyYCZNIHGv8GBj InUIrzdo8VnUgjzCJT7Fh/Vd+W4t4zw+JqWCFUCECbguoFlJq0BtNxiYpouLyc8V jfUM1ReJb6FHSK7LBCwFR5B9PqNDOLiT -----END CERTIFICATE-----Generated at Sat May 18 19:15:23 2024 by rpki-client on console-ams.rpki-client.org