$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: QSQc/FI6HXrddCU3sGqdLyTGYIAnFhQkgyw11+VvUOI= Subject key identifier: 38:83:00:35:91:9D:7A:2D:21:60:91:6D:57:0A:66:22:9C:7B:F0:65 Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 037B Signing time: Sun 19 May 2024 02:45:17 +0000 Manifest this update: Sun 19 May 2024 02:45:17 +0000 Manifest next update: Sun 26 May 2024 02:45:17 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: VCpEavZTbGV3YwebMJFdTs0icTL06CbWUvAWYFdL84o=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 2L+wP6XVinYULhFDrWrb4o+II6pXymrOTPqGqgIPbT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: May 19 02:45:17 2024 GMT Not After : May 26 02:45:17 2024 GMT Subject: CN=664967bd-c56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:30:d5:e4:89:24:0e:e0:69:5a:df:c9:c2: 0c:14:af:17:32:16:5b:b4:1c:59:bc:47:a7:e2:fa: 68:5c:5f:d5:ee:00:d4:26:f5:9e:e6:07:57:01:a9: 61:01:31:e6:22:4a:25:88:d4:fd:85:a6:f3:fe:85: 3d:9f:2f:2b:44:40:53:21:d2:55:7a:ce:ad:9b:66: 78:d8:a1:9a:45:22:ac:e3:68:db:d0:9b:f6:91:9d: f7:d6:d5:79:ed:8a:a9:ab:db:a3:aa:ed:60:1b:32: de:90:62:3c:1e:6e:34:42:5a:9a:72:5d:e6:f4:21: 5a:f9:35:a6:8f:19:fb:47:54:a3:b7:d4:cc:06:fb: 57:cb:1a:db:6a:58:fc:9c:99:ef:4b:33:46:00:f0: 3f:7b:0b:ca:fc:1c:6b:58:9f:74:b8:26:40:93:f6: 16:bb:4a:ba:0b:99:0d:32:a1:8e:2d:23:4e:b6:64: 84:b4:93:a1:f1:33:0e:34:7f:4d:1e:d0:49:81:b3: c7:dd:74:3e:cf:02:1b:ac:ab:36:f5:b5:47:68:bb: 0a:99:14:bd:53:41:49:60:7b:f7:80:7c:c4:47:02: fc:78:24:da:77:73:ae:0d:5f:f5:16:43:3d:db:18: 75:8d:c1:9c:76:74:b2:12:56:8f:24:22:72:2c:8b: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:83:00:35:91:9D:7A:2D:21:60:91:6D:57:0A:66:22:9C:7B:F0:65 X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:fe:ea:c9:2a:c8:0b:67:28:ad:d0:8a:cc:10:97:aa:bb:8d: 44:fd:cf:de:08:ae:c4:76:09:61:33:8c:f7:18:7f:f4:67:12: b7:ab:7d:24:2b:38:48:6f:f7:4f:fe:1b:eb:2a:3a:ad:4b:40: 3b:58:ad:75:31:6d:d6:12:17:77:67:72:ee:2e:05:8c:05:97: 09:14:bf:ce:0e:8e:b2:2c:af:54:9a:31:93:05:29:42:f8:ff: cd:28:2f:47:a2:c9:d5:cf:d1:e8:09:ff:b0:c8:9c:08:e8:57: b6:65:36:e7:60:7a:75:1d:89:6d:87:1c:af:0d:ff:9b:f9:74: ac:68:a0:2b:34:7c:28:e8:d1:74:97:b1:0a:cf:87:1c:2e:e9: 8d:65:96:c2:ba:64:dc:21:f6:a6:77:ea:67:aa:db:cf:30:f9: 11:4e:91:d8:4c:38:03:25:14:9a:75:14:7e:73:95:7b:70:bd: 0d:df:1e:f2:03:c0:9d:42:a3:80:ed:22:25:4f:13:ef:5e:83: 9e:88:d1:59:77:fa:6a:c0:3f:f5:58:de:8b:f0:09:ee:b6:fc: 75:c3:6a:c3:3b:3e:7e:4f:09:4b:44:a1:8c:58:cf:3f:53:54: a7:95:07:ce:5e:98:3b:6b:c3:41:6d:93:9e:cd:80:fa:7e:ff: fc:4e:b8:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjQwNTE5MDI0NTE3WhcNMjQwNTI2MDI0NTE3WjAYMRYwFAYD VQQDEw02NjQ5NjdiZC1jNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WUw1eSJJA7gaVrfycIMFK8XMhZbtBxZvEen4vpoXF/V7gDUJvWe5gdXAalh ATHmIkoliNT9habz/oU9ny8rREBTIdJVes6tm2Z42KGaRSKs42jb0Jv2kZ331tV5 7Yqpq9ujqu1gGzLekGI8Hm40Qlqacl3m9CFa+TWmjxn7R1Sjt9TMBvtXyxrbalj8 nJnvSzNGAPA/ewvK/BxrWJ90uCZAk/YWu0q6C5kNMqGOLSNOtmSEtJOh8TMONH9N HtBJgbPH3XQ+zwIbrKs29bVHaLsKmRS9U0FJYHv3gHzERwL8eCTad3OuDV/1FkM9 2xh1jcGcdnSyElaPJCJyLItOAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiDADWR nXotIWCRbVcKZiKce/BlMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj/urJKsgLZyit0IrMEJequ41E/c/eCK7EdglhM4z3GH/0ZxK3q30k KzhIb/dP/hvrKjqtS0A7WK11MW3WEhd3Z3LuLgWMBZcJFL/ODo6yLK9UmjGTBSlC +P/NKC9HosnVz9HoCf+wyJwI6Fe2ZTbnYHp1HYlthxyvDf+b+XSsaKArNHwo6NF0 l7EKz4ccLumNZZbCumTcIfamd+pnqtvPMPkRTpHYTDgDJRSadRR+c5V7cL0N3x7y A8CdQqOA7SIlTxPvXoOeiNFZd/pqwD/1WN6L8Anutvx1w2rDOz5+TwlLRKGMWM8/ U1SnlQfOXpg7a8NBbZOezYD6fv/8Trhu -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org