$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft File: 0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json) Hash identifier: FVEHpoKr4ahfNYC/l9hgFut+fhLi2T3j9pJV6fSl/mc= Subject key identifier: CA:3F:4A:0F:8C:EE:A0:4E:A5:89:5E:93:25:81:01:1C:36:6F:20:45 Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B Certificate issuer: /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft Manifest number: 040B Signing time: Sat 18 May 2024 21:16:48 +0000 Manifest this update: Sat 18 May 2024 21:16:48 +0000 Manifest next update: Sat 25 May 2024 21:16:48 +0000 Files and hashes: 1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: 71jMlPmj7o/vVPQ2QtPOw8/JfLwBarVSDYkLH3X8pFo=) 2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: GNe1dYVb0FXMLRJYiYZC+2IVLRAXBrZcFwZEBywqRfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B Validity Not Before: May 18 21:16:48 2024 GMT Not After : May 25 21:16:48 2024 GMT Subject: CN=66491ac0-ce24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:46:77:b3:15:a4:69:6d:eb:ef:ed:34:a5: 9a:9b:c3:f4:68:82:42:2b:af:12:f8:12:36:d2:bc: ce:53:53:d8:1d:d2:1d:32:23:fa:42:04:84:1c:c5: 06:b1:09:9a:79:b7:da:51:c0:14:d4:b7:f4:7d:f3: 3b:76:cd:a9:10:7a:9f:6c:09:65:d9:4a:67:1d:bf: a4:fb:eb:bc:b6:78:1b:2d:18:55:f0:2c:84:4e:49: ca:bb:31:72:ad:9e:73:54:7a:3a:8e:c8:d5:7a:89: 97:08:5f:28:0d:db:12:54:6e:11:ed:02:57:e9:b4: 01:b9:21:16:9e:63:f7:c4:df:7c:ab:24:93:c7:00: 54:e0:85:b5:f3:02:85:6e:06:17:d1:de:1f:78:32: 13:13:42:db:c9:0f:b3:2e:cf:35:09:75:d9:99:ba: 2a:37:a4:b4:8b:35:78:18:f2:93:55:07:62:3c:17: 26:2b:0f:2f:f5:9e:6e:ad:a0:93:3c:f6:05:13:3c: b7:da:51:5d:ec:84:dc:9a:ff:40:06:b4:b5:31:a4: 75:a1:46:f0:ce:00:3c:1f:0b:1a:48:e0:3a:ee:fc: ac:e7:e1:cb:66:52:b9:99:5b:1b:2e:a6:1d:fb:da: 0b:e0:0e:ca:ae:9f:9c:b2:42:83:6b:2b:4b:55:1d: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:4A:0F:8C:EE:A0:4E:A5:89:5E:93:25:81:01:1C:36:6F:20:45 X509v3 Authority Key Identifier: keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:69:41:fc:9a:93:b0:5b:58:a9:d8:be:c6:35:58:bc:f4:f3: 19:94:f0:ae:0d:4b:e2:1a:3a:33:34:d4:58:c1:6b:70:65:dc: 94:eb:70:50:34:b0:16:d7:9a:aa:e4:47:7f:cd:74:c3:a2:71: 00:bc:4a:14:7e:dd:c0:12:73:43:b3:dd:ce:70:86:5e:bb:58: 6b:bd:30:de:8e:2b:63:b8:ad:7a:18:48:6f:c5:4d:8f:ce:3f: 15:e8:e0:71:74:02:77:ff:28:33:21:b7:30:56:b9:db:18:37: fa:72:ab:f9:0b:f9:16:2e:61:9d:06:e9:a0:0a:74:7c:fe:4b: 6e:b3:73:47:3f:6f:63:33:bd:cf:05:a7:3a:15:b5:3a:d8:03: c3:d9:0d:26:d0:18:a0:5d:4c:63:31:9a:13:e8:35:ba:46:1e: 89:ad:2b:f9:dd:0d:ba:58:6d:96:35:4a:07:d8:22:fe:43:1f: 65:a0:cc:a1:1a:70:84:a7:1b:11:4a:08:ee:62:7d:ce:b1:1c: 99:28:06:e8:3c:18:2c:fd:3e:50:a5:8f:f2:46:1c:b5:2b:f1: d9:0b:f3:da:0b:b4:44:ba:43:f2:25:1a:c8:53:d6:26:81:fc: 2c:3b:f9:53:6b:58:6b:a4:95:f3:42:fb:a5:9b:9b:19:8a:d1: d2:53:f5:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKEQyOTlCQ0EzOUM5OTNEQjgwRDExMzdCOTk5QjIyMTg0 NkFDRjU1NkIwHhcNMjQwNTE4MjExNjQ4WhcNMjQwNTI1MjExNjQ4WjAYMRYwFAYD VQQDEw02NjQ5MWFjMC1jZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwORGd7MVpGlt6+/tNKWam8P0aIJCK68S+BI20rzOU1PYHdIdMiP6QgSEHMUG sQmaebfaUcAU1Lf0ffM7ds2pEHqfbAll2UpnHb+k++u8tngbLRhV8CyETknKuzFy rZ5zVHo6jsjVeomXCF8oDdsSVG4R7QJX6bQBuSEWnmP3xN98qySTxwBU4IW18wKF bgYX0d4feDITE0LbyQ+zLs81CXXZmboqN6S0izV4GPKTVQdiPBcmKw8v9Z5uraCT PPYFEzy32lFd7ITcmv9ABrS1MaR1oUbwzgA8HwsaSOA67vys5+HLZlK5mVsbLqYd +9oL4A7Krp+cskKDaytLVR0l7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo/Sg+M 7qBOpYlekyWBARw2byBFMB8GA1UdIwQYMBaAFNKZvKOcmT24DRE3uZmyIYRqz1Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS85NTI3RTZCNDI2 OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBiZ05FVGU1bWJJaGhHclBW V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBwbThvNXlaUGJnTkVUZTVtYkloaEdyUFZXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS85NTI3RTZCNDI2OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBi Z05FVGU1bWJJaGhHclBWV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5aUH8mpOwW1ip2L7GNVi89PMZlPCuDUviGjozNNRYwWtwZdyU63BQ NLAW15qq5Ed/zXTDonEAvEoUft3AEnNDs93OcIZeu1hrvTDejitjuK16GEhvxU2P zj8V6OBxdAJ3/ygzIbcwVrnbGDf6cqv5C/kWLmGdBumgCnR8/ktus3NHP29jM73P Bac6FbU62APD2Q0m0BigXUxjMZoT6DW6Rh6JrSv53Q26WG2WNUoH2CL+Qx9loMyh GnCEpxsRSgjuYn3OsRyZKAboPBgs/T5QpY/yRhy1K/HZC/PaC7REukPyJRrIU9Ym gfwsO/lTa1hrpJXzQvulm5sZitHSU/V5 -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org