$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: yNksK5n7rZOuNALMI3uAMvpLfFj6170aFuZ3g9GyqOM= Subject key identifier: 75:FA:B3:C3:29:0D:EA:0A:38:85:4F:D9:08:21:A7:EB:9E:1D:35:56 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 0FD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 0FC0 Signing time: Sat 18 May 2024 18:03:40 +0000 Manifest this update: Sat 18 May 2024 18:03:40 +0000 Manifest next update: Sat 25 May 2024 18:03:40 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: YY9QhEfAA2TKJdCg2ha18msI2vFAn8/vnPtvtjuflqw=) 2: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: o4IiEMeA6RrIyI4EIGSr0hvBNlyD3kRf/X6yW/XL/pk=) 3: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: gqFP1IUKKDRvNeAUOIr33aKVzsawxI23lvIfLsK890s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4055 (0xfd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: May 18 18:03:40 2024 GMT Not After : May 25 18:03:40 2024 GMT Subject: CN=6648ed7c-3574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:c4:7f:47:c2:03:d4:7b:e4:7d:42:5c:cd: 78:66:76:20:92:d8:c6:5f:2f:78:01:33:e9:89:15: 1a:88:06:a2:fc:1f:42:2f:ef:6e:1f:80:1c:bf:c6: 9d:cf:3f:0e:2e:cb:f0:16:1b:e4:96:d4:c5:76:da: b6:dd:d0:22:62:81:32:e4:d5:60:d3:d4:bc:3f:4a: 4e:d5:f8:df:3e:9b:6b:dd:e3:01:e9:7d:88:57:1c: 58:77:e1:c9:de:18:7b:57:6b:77:3e:bb:f4:66:1c: e5:4f:c6:18:8b:35:2e:fa:cc:21:d2:67:ee:27:78: 3d:c3:94:0b:3b:52:b5:1c:25:e4:60:0b:4a:4f:34: 0a:c3:12:b0:09:f6:78:b5:77:7a:b7:27:e3:3d:41: d2:b3:46:8c:84:e0:bf:ed:d3:59:88:a8:15:4b:03: 43:56:b5:67:49:f1:7a:67:c3:b2:67:60:91:69:f3: b5:14:f9:d4:8d:5e:c6:bd:1c:a8:6c:b1:a9:e6:ec: 32:81:7e:01:3c:5e:41:0f:10:a1:f1:c3:79:d6:ce: a6:05:76:87:d2:72:54:6c:ef:6b:30:80:9b:37:9e: 65:b0:20:09:0a:45:a5:88:44:4b:d2:3c:05:21:71: 0f:26:24:67:18:8b:05:61:76:ae:71:df:19:84:07: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FA:B3:C3:29:0D:EA:0A:38:85:4F:D9:08:21:A7:EB:9E:1D:35:56 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:b9:cc:e0:f6:6f:55:52:a9:3d:99:47:80:2a:ef:a5:87:ad: 03:3e:8f:60:54:6b:7f:64:ee:c3:bb:ec:5c:56:4c:8a:9f:a0: ef:a9:6e:6d:9a:95:c9:c8:03:7a:13:ca:3c:4a:39:76:2c:95: fe:90:3d:c3:89:d1:4e:0b:38:25:6e:bf:0e:18:16:8f:98:ac: 7a:44:58:95:6a:c5:38:90:bb:5b:e0:0e:ca:cc:de:c7:c2:00: 1b:7c:b6:c4:9d:3d:a0:01:1f:9a:e6:eb:2e:63:3b:af:67:a4: a0:10:97:0d:d7:91:75:b3:df:af:c3:43:24:13:4c:15:ba:53: 1a:e4:ed:95:aa:5c:8f:70:f7:40:95:0d:b3:dd:43:fe:74:d4: 22:e9:21:7c:d7:c8:35:0c:dc:d5:28:bf:ea:7b:46:89:db:65: f1:cc:a8:61:fd:f6:20:eb:92:8e:c3:ee:67:07:5b:6a:2a:00: 6a:89:98:cd:24:51:db:51:ca:c4:cc:65:d0:84:8a:43:88:bd: 08:09:7b:85:f5:e9:b0:40:d6:d4:f3:87:d9:7f:73:a5:ee:58: 1c:e2:6f:37:eb:7e:b0:63:b3:ee:c1:ac:b5:2d:d8:3d:9a:f8: 56:95:19:15:05:77:a3:23:64:eb:03:82:f5:f1:73:ad:26:31: b1:d7:fa:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjQwNTE4MTgwMzQwWhcNMjQwNTI1MTgwMzQwWjAYMRYwFAYD VQQDEw02NjQ4ZWQ3Yy0zNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA127Ef0fCA9R75H1CXM14ZnYgktjGXy94ATPpiRUaiAai/B9CL+9uH4Acv8ad zz8OLsvwFhvkltTFdtq23dAiYoEy5NVg09S8P0pO1fjfPptr3eMB6X2IVxxYd+HJ 3hh7V2t3Prv0ZhzlT8YYizUu+swh0mfuJ3g9w5QLO1K1HCXkYAtKTzQKwxKwCfZ4 tXd6tyfjPUHSs0aMhOC/7dNZiKgVSwNDVrVnSfF6Z8OyZ2CRafO1FPnUjV7GvRyo bLGp5uwygX4BPF5BDxCh8cN51s6mBXaH0nJUbO9rMICbN55lsCAJCkWliERL0jwF IXEPJiRnGIsFYXaucd8ZhAd2fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX6s8Mp DeoKOIVP2Qghp+ueHTVWMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpuczg9m9VUqk9mUeAKu+lh60DPo9gVGt/ZO7Du+xcVkyKn6DvqW5t mpXJyAN6E8o8Sjl2LJX+kD3DidFOCzglbr8OGBaPmKx6RFiVasU4kLtb4A7KzN7H wgAbfLbEnT2gAR+a5usuYzuvZ6SgEJcN15F1s9+vw0MkE0wVulMa5O2VqlyPcPdA lQ2z3UP+dNQi6SF818g1DNzVKL/qe0aJ22XxzKhh/fYg65KOw+5nB1tqKgBqiZjN JFHbUcrEzGXQhIpDiL0ICXuF9emwQNbU84fZf3Ol7lgc4m83636wY7Puway1Ldg9 mvhWlRkVBXejI2TrA4L18XOtJjGx1/rC -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org