$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: rzh/zzoYO1MSmkoyrRHxa7zdIroIjlnRE8JM03UqNyI= Subject key identifier: 68:C2:91:43:20:88:B8:37:FB:60:4B:21:61:C9:5C:D7:98:AA:70:4F Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 15B0 Signing time: Sat 18 May 2024 18:23:54 +0000 Manifest this update: Sat 18 May 2024 18:23:53 +0000 Manifest next update: Sat 25 May 2024 18:23:53 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: FszU3VnY/AVwY5t4q4pz4rdasKPINIFnKOMz3xERt3g=) 2: 4CEAFBC829C311ED8D2F0870C4F9AE02.roa (hash: F3wtYNT10j2sdrda5cVxOLVDb60MIDg4+cSDX4cOdc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: May 18 18:23:53 2024 GMT Not After : May 25 18:23:53 2024 GMT Subject: CN=6648f23a-7bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:d4:28:60:ac:9c:28:0b:39:67:8b:e2:fd: a1:fc:25:4f:36:53:ff:fb:57:56:22:ac:63:0d:ce: 33:70:d7:1d:17:ef:04:18:df:bb:d5:1d:d2:15:0d: 21:81:d5:89:3f:77:4e:ea:c7:a3:cb:82:1c:e4:ec: 84:10:08:37:fc:5b:f0:ee:7b:ee:a2:a2:23:ae:4a: 38:ef:7c:50:f7:57:e3:da:a4:ad:ec:b7:93:55:e8: ce:62:eb:3d:24:88:34:e7:6f:66:5c:69:04:4a:c5: b8:d0:98:0d:9e:a1:76:e5:7f:d6:aa:b3:33:41:86: 7e:bb:03:6a:c1:cc:ac:4a:e0:4e:9d:8a:f3:b6:80: 07:36:25:2b:85:6d:de:46:bc:11:b3:12:fb:27:9c: 73:e9:86:bd:a0:2d:07:9e:54:ff:82:4d:fe:11:e8: 17:de:dc:b9:8e:0b:61:5c:16:44:05:64:98:a8:61: 86:2d:28:71:0b:a0:78:35:da:c4:c3:a9:91:08:66: c7:21:43:f9:de:50:c0:f0:d2:ee:fe:cc:95:52:11: 20:05:42:b6:59:fb:95:e1:42:3f:cf:7f:d8:21:82: 9e:2b:e4:78:35:59:c8:bc:d8:f0:6f:61:7f:f5:f6: a9:2e:a6:ca:96:d4:99:44:cb:a0:e0:41:a5:52:a9: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C2:91:43:20:88:B8:37:FB:60:4B:21:61:C9:5C:D7:98:AA:70:4F X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c9:69:77:51:9b:29:84:06:91:93:9d:5c:9c:73:28:77:cc: 08:43:3a:40:bd:4d:0f:ce:08:83:bc:9f:bc:0d:28:a1:dd:d7: 92:2c:e5:4b:31:d2:94:5c:45:92:81:0a:3e:e1:eb:00:51:c0: 63:0b:37:73:f2:a2:fd:ba:bb:04:cf:04:9c:e0:25:22:2b:22: f6:21:52:20:13:38:4d:fe:b2:50:36:21:e1:73:aa:94:d5:1a: 38:d5:46:57:80:8b:6e:90:cf:09:b1:5d:71:ec:27:11:62:ec: 3b:9d:06:32:fe:54:29:9f:3d:c5:2f:06:ac:5a:51:47:24:b2: e8:07:f4:bb:be:88:39:f2:ed:c0:f0:7a:57:c4:a6:d2:49:ac: 9c:74:e1:bf:08:b4:00:0c:fa:20:b1:8e:a6:b5:80:00:e3:bb: 43:be:e3:86:46:3a:18:fa:93:ec:34:81:33:69:57:0c:dd:ea: 37:6a:7d:9b:01:98:ac:49:90:84:ad:c2:b7:77:56:30:d0:24: 5c:88:8e:46:19:bc:1d:de:86:9e:cd:d6:b0:19:cf:2e:30:9a: 30:e0:91:d3:11:21:ad:71:1f:8f:0f:c1:9a:c3:6f:49:8d:38: 34:be:04:30:51:3b:7e:a3:fc:fe:22:0a:f4:82:0a:05:70:03: 4b:34:60:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjQwNTE4MTgyMzUzWhcNMjQwNTI1MTgyMzUzWjAYMRYwFAYD VQQDEw02NjQ4ZjIzYS03YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V3UKGCsnCgLOWeL4v2h/CVPNlP/+1dWIqxjDc4zcNcdF+8EGN+71R3SFQ0h gdWJP3dO6sejy4Ic5OyEEAg3/Fvw7nvuoqIjrko473xQ91fj2qSt7LeTVejOYus9 JIg0529mXGkESsW40JgNnqF25X/WqrMzQYZ+uwNqwcysSuBOnYrztoAHNiUrhW3e RrwRsxL7J5xz6Ya9oC0HnlT/gk3+EegX3ty5jgthXBZEBWSYqGGGLShxC6B4NdrE w6mRCGbHIUP53lDA8NLu/syVUhEgBUK2WfuV4UI/z3/YIYKeK+R4NVnIvNjwb2F/ 9fapLqbKltSZRMug4EGlUqlSpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjCkUMg iLg3+2BLIWHJXNeYqnBPMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPyWl3UZsphAaRk51cnHMod8wIQzpAvU0PzgiDvJ+8DSih3deSLOVL MdKUXEWSgQo+4esAUcBjCzdz8qL9ursEzwSc4CUiKyL2IVIgEzhN/rJQNiHhc6qU 1Ro41UZXgItukM8JsV1x7CcRYuw7nQYy/lQpnz3FLwasWlFHJLLoB/S7vog58u3A 8HpXxKbSSaycdOG/CLQADPogsY6mtYAA47tDvuOGRjoY+pPsNIEzaVcM3eo3an2b AZisSZCErcK3d1Yw0CRciI5GGbwd3oaezdawGc8uMJow4JHTESGtcR+PD8Gaw29J jTg0vgQwUTt+o/z+Igr0ggoFcANLNGDg -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org