$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: CirDJP/N4hIrm7pCg7BavZHqPTsifY0jLx9nqO38JLY= Subject key identifier: 22:70:B7:6F:B1:A1:71:D1:60:BA:E6:A1:19:BF:93:BB:FB:2B:A6:23 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 02D7 Signing time: Fri 31 May 2024 04:00:01 +0000 Manifest this update: Fri 31 May 2024 04:00:01 +0000 Manifest next update: Fri 07 Jun 2024 04:00:01 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: wST3lexMXXahm1zZgBjQXiX/bl60S3znOBDwTlBVblA=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: RNcRlm2wXA2LTmrbU4YLnCSJL/XH7jtpKjrey/Lilq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: May 31 04:00:01 2024 GMT Not After : Jun 7 04:00:01 2024 GMT Subject: CN=66594b41-0460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:63:d5:e6:e6:dc:cf:67:e6:4b:ef:e6:2d: 28:56:06:9e:5a:48:35:56:16:61:c7:1d:89:ec:eb: 11:08:83:9a:22:52:a5:48:c4:97:a6:7f:5d:ec:22: 37:0c:9c:4a:f8:f8:aa:29:5e:91:c9:de:e6:0f:b8: 99:6b:d9:e6:91:4b:e7:37:e2:2f:f6:c2:a2:f1:5b: e2:f7:84:e2:6c:d5:33:12:42:1f:5c:28:a2:5f:be: c0:15:b8:cd:ad:2e:99:1e:ef:1c:ea:8a:58:d5:3c: fd:74:2e:ec:5c:cf:57:a7:81:50:eb:1a:67:26:79: c2:0f:67:44:8e:98:d7:b8:7e:d4:f1:b5:1c:ae:a3: b9:d6:e9:36:b2:e2:2b:85:66:70:65:c0:f4:33:53: 10:c6:99:6e:11:51:ea:6b:06:c0:33:95:38:8b:41: b0:9c:5c:29:f2:90:21:d5:78:96:41:3c:2a:dc:9f: ea:95:57:6b:2f:a3:1b:a8:b0:f1:d1:47:da:34:83: 8b:ac:22:46:da:2d:41:9e:b8:0c:22:5b:d7:92:39: 8c:70:88:88:f1:25:b4:90:51:d8:a5:53:3e:64:a3: 3a:5d:59:ee:f7:5e:2b:11:10:4f:34:02:f4:42:9e: b9:43:8f:85:d5:97:d6:40:82:ea:93:ac:d4:18:03: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:70:B7:6F:B1:A1:71:D1:60:BA:E6:A1:19:BF:93:BB:FB:2B:A6:23 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:53:f2:11:0b:6b:b4:32:c2:fb:16:89:da:f5:bb:89:89:1c: fc:9e:9a:52:53:dd:01:85:22:00:72:01:40:46:d4:23:0c:9d: d7:c8:b5:3e:c4:97:03:4c:81:ee:96:ca:67:1f:2b:64:10:d7: c8:d8:dc:14:f1:b5:ce:51:2f:75:ca:0b:97:fb:47:c1:84:58: 97:c3:cf:7e:ac:e0:0d:88:79:44:33:ba:ba:0d:d5:ef:25:db: 15:d0:cd:c4:94:34:7d:7a:77:cb:c2:68:25:9c:04:24:b7:6b: af:1f:e2:e5:1a:a3:ba:8c:20:c2:02:8c:a7:16:81:3c:db:b9: c8:9b:0e:4e:08:46:7c:1d:dc:94:8a:c6:35:46:74:c6:f6:61: b4:48:3a:a4:f3:22:43:35:75:8c:e1:c5:b2:8f:f3:b0:dc:c3: ca:13:f0:c1:ff:ed:8e:e0:5e:b1:31:5e:c0:a9:e7:0a:96:b0: 19:a1:6a:7f:af:11:b3:89:0a:48:7c:99:d4:69:d8:fc:c0:88: f3:15:1c:f9:cd:5a:61:02:fb:c7:d8:8d:4a:ae:f3:1c:60:e2: 9c:b4:52:d9:06:02:48:d2:55:4e:a4:80:5c:84:25:c4:9d:f8: 6a:c4:2a:f9:17:18:96:c6:5d:73:5a:6d:ef:b0:fc:da:f5:c8: d0:b2:0a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjQwNTMxMDQwMDAxWhcNMjQwNjA3MDQwMDAxWjAYMRYwFAYD VQQDEw02NjU5NGI0MS0wNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yRj1ebm3M9n5kvv5i0oVgaeWkg1VhZhxx2J7OsRCIOaIlKlSMSXpn9d7CI3 DJxK+PiqKV6Ryd7mD7iZa9nmkUvnN+Iv9sKi8Vvi94TibNUzEkIfXCiiX77AFbjN rS6ZHu8c6opY1Tz9dC7sXM9Xp4FQ6xpnJnnCD2dEjpjXuH7U8bUcrqO51uk2suIr hWZwZcD0M1MQxpluEVHqawbAM5U4i0GwnFwp8pAh1XiWQTwq3J/qlVdrL6MbqLDx 0UfaNIOLrCJG2i1BnrgMIlvXkjmMcIiI8SW0kFHYpVM+ZKM6XVnu914rERBPNAL0 Qp65Q4+F1ZfWQILqk6zUGAPCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJwt2+x oXHRYLrmoRm/k7v7K6YjMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0U/IRC2u0MsL7Fona9buJiRz8nppSU90BhSIAcgFARtQjDJ3XyLU+ xJcDTIHulspnHytkENfI2NwU8bXOUS91yguX+0fBhFiXw89+rOANiHlEM7q6DdXv JdsV0M3ElDR9enfLwmglnAQkt2uvH+LlGqO6jCDCAoynFoE827nImw5OCEZ8HdyU isY1RnTG9mG0SDqk8yJDNXWM4cWyj/Ow3MPKE/DB/+2O4F6xMV7AqecKlrAZoWp/ rxGziQpIfJnUadj8wIjzFRz5zVphAvvH2I1KrvMcYOKctFLZBgJI0lVOpIBchCXE nfhqxCr5FxiWxl1zWm3vsPza9cjQsgp9 -----END CERTIFICATE-----Generated at Fri May 31 04:53:55 2024 by rpki-client on console-fra.rpki-client.org