$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: Ceefw+U+HsoPZ1ulKjS8ZCm9+006LpENNIKtTgccoPQ= Subject key identifier: EE:DE:EA:CB:51:D9:16:4D:A5:2C:21:66:39:72:45:36:67:6D:69:C7 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 12D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 12BC Signing time: Sat 18 May 2024 17:36:41 +0000 Manifest this update: Sat 18 May 2024 17:36:41 +0000 Manifest next update: Sat 25 May 2024 17:36:41 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: 4ssxAgd1d6PWKign0FeqcenGQ40BRDjViJX1qgWYbPs=) 2: 4338FC5CFB5611EBB7032080C4F9AE02.roa (hash: yTrOtmywvW48OIc6HGH9ZHXytNnFplJFX28JD2SXZzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4817 (0x12d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: May 18 17:36:41 2024 GMT Not After : May 25 17:36:41 2024 GMT Subject: CN=6648e729-336d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:2e:6c:a7:a6:d0:12:69:c6:bc:dd:d9:6a: 73:47:28:04:46:a8:cc:c2:53:62:a1:3f:98:61:ff: 28:a0:32:dc:73:35:d6:52:bb:31:74:09:36:18:bd: 85:ff:4a:bc:56:29:79:0e:e2:d5:a6:5b:f7:4a:c4: 57:15:af:73:14:9c:f7:3b:f9:0f:c0:c4:aa:58:c8: 80:34:d6:84:99:80:bc:34:67:c7:17:66:b9:c9:06: 21:51:cb:f3:94:df:a4:bd:23:90:08:f3:b9:af:1d: 14:e3:f4:ed:52:ec:5e:f0:1a:5f:84:a5:7f:13:c5: f3:f5:3e:b7:60:c4:18:6d:4d:1e:99:08:15:bd:15: d1:bb:95:10:eb:48:62:23:69:22:06:c2:51:4c:11: cc:89:26:0a:5a:87:18:0f:39:51:63:d5:5e:85:62: de:af:a9:45:07:92:80:b8:50:86:1d:8a:2d:e3:8e: de:61:f0:42:a6:d5:20:30:64:24:71:2d:9b:4b:50: 92:90:e3:d0:52:33:ed:3a:37:55:3d:18:5d:48:cd: 1e:93:c7:e8:0d:b3:f4:e6:e2:37:a0:bc:e8:34:36: 96:a3:90:fa:67:40:7f:9a:67:79:d6:06:92:73:4d: b0:cf:10:4b:7e:1b:d8:2f:2a:64:d1:bd:62:dd:2e: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DE:EA:CB:51:D9:16:4D:A5:2C:21:66:39:72:45:36:67:6D:69:C7 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f4:1c:db:5b:6f:f0:f0:52:0d:8e:f8:00:83:c2:94:6b:a1: f8:fe:55:7c:d4:6e:5c:85:6b:47:7d:d2:37:71:83:42:38:0a: 5c:56:57:04:ab:c3:36:b0:2c:9a:01:c7:5d:90:69:85:63:e1: 81:78:27:93:2a:36:c2:b5:35:8e:64:0e:24:16:38:e5:2a:f2: 2c:1c:09:a7:f1:70:db:94:e3:65:db:18:4b:6f:e5:92:28:49: 2f:d7:c9:73:03:36:2d:92:7a:76:45:14:f8:70:91:81:e7:9c: c4:06:c6:1f:43:6a:81:09:b3:e4:78:28:ba:11:30:47:5a:65: 53:bb:27:e2:47:c9:cc:1d:10:ec:19:8e:7b:80:ed:91:78:e3: 81:af:4f:5d:ae:d0:80:52:2f:a0:3e:fe:97:9d:f2:3a:dd:cc: f4:23:69:15:b7:aa:e5:97:9a:b7:4d:57:e6:b3:92:e9:8d:1a: c9:be:84:40:b9:4a:43:7f:c8:25:c7:f4:1d:2a:cd:ca:2b:51: 55:23:9e:5a:48:0b:82:fe:81:a3:4c:58:5c:af:47:99:63:7d: c6:6d:c0:66:a7:2a:8c:e3:42:d7:a5:7d:3a:45:08:29:c4:c4: f0:e5:20:cb:b1:4a:c7:9f:b7:7d:93:9c:a5:93:02:d9:b9:14: 02:fd:a4:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjQwNTE4MTczNjQxWhcNMjQwNTI1MTczNjQxWjAYMRYwFAYD VQQDEw02NjQ4ZTcyOS0zMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjAubKem0BJpxrzd2WpzRygERqjMwlNioT+YYf8ooDLcczXWUrsxdAk2GL2F /0q8Vil5DuLVplv3SsRXFa9zFJz3O/kPwMSqWMiANNaEmYC8NGfHF2a5yQYhUcvz lN+kvSOQCPO5rx0U4/TtUuxe8BpfhKV/E8Xz9T63YMQYbU0emQgVvRXRu5UQ60hi I2kiBsJRTBHMiSYKWocYDzlRY9VehWLer6lFB5KAuFCGHYot447eYfBCptUgMGQk cS2bS1CSkOPQUjPtOjdVPRhdSM0ek8foDbP05uI3oLzoNDaWo5D6Z0B/mmd51gaS c02wzxBLfhvYLypk0b1i3S6fHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7e6stR 2RZNpSwhZjlyRTZnbWnHMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy9BzbW2/w8FINjvgAg8KUa6H4/lV81G5chWtHfdI3cYNCOApcVlcE q8M2sCyaAcddkGmFY+GBeCeTKjbCtTWOZA4kFjjlKvIsHAmn8XDblONl2xhLb+WS KEkv18lzAzYtknp2RRT4cJGB55zEBsYfQ2qBCbPkeCi6ETBHWmVTuyfiR8nMHRDs GY57gO2ReOOBr09drtCAUi+gPv6XnfI63cz0I2kVt6rll5q3TVfms5LpjRrJvoRA uUpDf8glx/QdKs3KK1FVI55aSAuC/oGjTFhcr0eZY33GbcBmpyqM40LXpX06RQgp xMTw5SDLsUrHn7d9k5ylkwLZuRQC/aQG -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org