$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: sE1pyjoBk06aYeb1CKvuGRTJi2ROtokR2NGTmIcroVk= Subject key identifier: 6F:43:46:CB:0E:CA:8E:9F:78:AC:32:15:7F:1C:6E:3D:DC:11:33:5E Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 340D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 33E7 Signing time: Sat 18 May 2024 14:42:38 +0000 Manifest this update: Sat 18 May 2024 14:42:38 +0000 Manifest next update: Sat 25 May 2024 14:42:38 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: oVQYUiNWd75gGE6WGU3TOtC4/OCRDW1YtTyQGoWSeCY=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: qa+h98xnu0pOkTl75i0fUf1iCAz6RVgLKMfsfto/CHo=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 01SWNlZpWR4PN3GNnx1+fY/bEvurrrkg5tZqKJ6gwJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13325 (0x340d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: May 18 14:42:38 2024 GMT Not After : May 25 14:42:38 2024 GMT Subject: CN=6648be5e-fec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:24:5f:ce:6f:8f:3c:4f:eb:2f:65:f1:15: d4:8a:3f:61:a2:cf:ec:ac:ca:e0:ab:b2:0d:5b:c1: 08:5e:00:5f:e1:b6:8f:72:c4:93:85:dd:f7:49:23: b1:25:d3:ec:00:9c:03:ac:ec:c9:e0:8c:dc:d8:58: ab:0f:df:52:97:29:d6:46:ec:b6:9a:3b:17:70:b9: c1:77:a3:c8:83:dc:18:6e:00:1e:55:04:b8:35:50: d7:ff:6d:9e:cc:06:f0:af:ff:ec:3b:48:ce:f7:2c: 79:9f:f1:77:fb:e9:ab:3e:fc:14:87:c1:8f:7b:ce: 37:3f:3f:36:87:5f:eb:81:da:1e:14:c6:19:5d:7e: 2c:6c:b9:d4:41:06:8c:01:5e:23:76:e3:c5:ff:53: 84:e2:ff:f7:df:97:43:99:9b:84:cb:f0:c8:f5:e0: 15:66:ce:86:9f:f5:55:95:81:a8:2c:a3:43:6c:12: b1:61:ac:61:9c:45:19:39:a0:03:d6:98:ef:f6:e8: 52:55:96:af:eb:38:1a:e7:c6:cf:75:a5:86:7c:14: cc:6c:b0:7f:0d:ee:c3:2a:72:9f:1e:f0:e7:49:63: e6:4b:bd:d7:11:d1:3b:53:7f:5d:ce:eb:ec:88:52: 34:7a:9c:16:a8:38:64:38:00:3f:85:1a:47:90:4f: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:43:46:CB:0E:CA:8E:9F:78:AC:32:15:7F:1C:6E:3D:DC:11:33:5E X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6c:33:c9:56:cc:f0:7e:69:5d:b2:56:cb:7e:1d:8b:43:11: b8:60:04:e4:b6:68:8b:7c:88:ef:ad:73:18:cd:b1:1d:a7:85: 31:00:61:79:c7:b7:76:07:7a:c3:ab:96:4d:bc:ef:bd:bb:b1: ab:d9:57:41:37:b8:21:a3:46:0d:0c:d9:1f:29:71:76:ba:42: a3:95:ec:e7:53:b5:3c:78:0d:87:8d:bc:07:18:03:f5:81:1a: 49:16:a0:fe:c3:87:fe:63:7d:d3:b0:fb:5b:99:9b:27:17:57: 89:6c:47:24:f4:6c:8e:0c:72:7b:e7:3c:15:58:69:d2:ab:b4: 72:c3:48:b6:b6:e9:51:4e:71:34:42:f1:77:d4:93:05:09:c7: b1:b4:74:ec:68:8f:f4:e5:38:ae:60:a1:f8:8e:22:ba:64:98: 58:27:b1:20:19:5c:2f:14:a7:c7:80:70:46:8a:01:2a:02:7a: ff:79:c3:e3:99:f0:b1:f5:0b:76:09:0d:5b:c7:fc:70:ff:75: 61:48:5e:64:de:3d:b2:86:2c:97:16:39:ec:9c:02:77:10:c4: 83:06:70:df:6b:ed:af:3b:4b:70:81:ab:38:fa:2e:63:c1:21: 96:a6:c0:96:ac:ba:a2:45:0d:14:6a:05:9d:d8:34:6b:59:86: a6:7e:b0:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjQwNTE4MTQ0MjM4WhcNMjQwNTI1MTQ0MjM4WjAYMRYwFAYD VQQDEw02NjQ4YmU1ZS1mZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBAkX85vjzxP6y9l8RXUij9hos/srMrgq7INW8EIXgBf4baPcsSThd33SSOx JdPsAJwDrOzJ4Izc2FirD99SlynWRuy2mjsXcLnBd6PIg9wYbgAeVQS4NVDX/22e zAbwr//sO0jO9yx5n/F3++mrPvwUh8GPe843Pz82h1/rgdoeFMYZXX4sbLnUQQaM AV4jduPF/1OE4v/335dDmZuEy/DI9eAVZs6Gn/VVlYGoLKNDbBKxYaxhnEUZOaAD 1pjv9uhSVZav6zga58bPdaWGfBTMbLB/De7DKnKfHvDnSWPmS73XEdE7U39dzuvs iFI0epwWqDhkOAA/hRpHkE9wnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9DRssO yo6feKwyFX8cbj3cETNeMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0bDPJVszwfmldslbLfh2LQxG4YATktmiLfIjvrXMYzbEdp4UxAGF5 x7d2B3rDq5ZNvO+9u7Gr2VdBN7gho0YNDNkfKXF2ukKjleznU7U8eA2HjbwHGAP1 gRpJFqD+w4f+Y33TsPtbmZsnF1eJbEck9GyODHJ75zwVWGnSq7Ryw0i2tulRTnE0 QvF31JMFCcextHTsaI/05TiuYKH4jiK6ZJhYJ7EgGVwvFKfHgHBGigEqAnr/ecPj mfCx9Qt2CQ1bx/xw/3VhSF5k3j2yhiyXFjnsnAJ3EMSDBnDfa+2vO0twgas4+i5j wSGWpsCWrLqiRQ0UagWd2DRrWYamfrDy -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org