$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: XqSt0HqtQHQxBvi+LeKB32p47678kMz9HhwIQB61K4c= Subject key identifier: 32:01:CD:F0:E1:72:E5:92:DE:BF:C9:A8:D2:66:7C:E7:23:EC:05:48 Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: DF Signing time: Sun 19 May 2024 06:05:16 +0000 Manifest this update: Sun 19 May 2024 06:05:16 +0000 Manifest next update: Sun 26 May 2024 06:05:16 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: w/+Vre2LnVVaYV4a3SkeAiVsBiELWydnF4S5N28j8pA=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: YuiwbgR3zXrhn6atY6Svsl1gSuOdJzz2sPUCmfCfO0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: May 19 06:05:16 2024 GMT Not After : May 26 06:05:16 2024 GMT Subject: CN=6649969c-15ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:c6:c2:32:65:9c:47:83:b5:39:34:bf:c5: ea:4e:37:fc:c2:78:ad:9b:c1:79:99:25:22:3e:91: 34:10:40:95:cb:de:bf:fc:66:3f:d1:6f:c1:df:48: 70:ef:36:9c:8c:66:a9:9c:91:92:a6:f7:7c:04:95: a4:7a:b8:74:b7:f6:58:ec:f4:c4:b2:d6:57:c0:75: e0:d9:fe:27:41:56:08:d6:97:e0:fc:ba:5f:e9:e1: be:68:20:34:da:0d:d8:57:65:cc:27:fc:ca:9e:9c: 40:12:31:df:e7:cb:20:ba:1d:ab:2b:39:9c:37:79: 2b:a8:b5:3e:35:1d:84:38:64:8f:92:05:82:d1:14: 69:09:db:5d:09:2f:65:2e:9e:e7:9f:a2:c5:3b:3e: 73:74:b8:2d:a3:aa:09:98:54:73:25:93:0d:4d:d2: b7:14:86:c7:e7:2e:9b:81:3d:80:14:e5:1f:fd:18: 63:a7:6a:a1:69:96:a1:09:d3:4b:96:be:38:03:fc: dc:e2:66:07:99:f3:a5:8b:32:56:55:00:bb:92:77: 5e:96:72:c2:b6:69:93:e8:94:37:76:35:26:c6:ce: 23:27:7b:5d:65:04:ae:be:5c:82:91:06:8d:4d:0b: 04:b1:30:c4:44:72:d6:31:4c:d7:07:fb:a5:d4:59: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:CD:F0:E1:72:E5:92:DE:BF:C9:A8:D2:66:7C:E7:23:EC:05:48 X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:26:c6:4f:08:fc:4e:eb:9f:47:8b:19:f0:aa:50:42:bc:f5: 61:91:9b:93:b5:b7:64:7c:ae:3b:8e:9a:7c:04:56:81:c2:88: b3:16:7d:f5:60:08:c4:ed:5f:4f:7c:f7:5e:0b:25:d0:9c:29: d3:e7:9a:9e:fd:0b:d0:81:12:02:a9:20:b3:24:bf:cf:5a:de: bf:d8:9d:79:fa:ba:55:ce:84:b2:f2:b7:11:e3:f5:ca:de:15: 28:3a:29:16:a7:28:d4:ab:c8:94:7f:a4:fd:d5:2b:77:bb:ea: 28:28:c0:fe:82:2d:c5:a5:91:eb:5d:44:5a:96:c9:6b:3b:5a: e9:82:21:cf:36:87:84:bd:6e:54:3e:ab:d3:bc:3a:1e:d4:94: 5b:3f:6c:39:de:91:58:65:1a:e3:bc:92:b9:0e:17:a0:41:da: 00:23:de:0c:ae:97:c4:c9:49:96:0e:16:ee:23:2a:f9:f9:b5: 4f:ee:78:56:42:a1:9b:90:f3:ff:1f:5d:c3:b6:00:50:4a:f7: d5:03:19:da:bd:72:5f:da:49:13:71:42:5e:e8:d2:1f:2c:fe: 8b:a2:4f:24:16:ec:67:24:84:a3:77:00:1b:fd:85:58:f9:2e: 9c:14:2b:18:da:ea:1c:55:ad:57:b0:1c:64:f8:bc:62:a4:7c: e2:23:fe:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjQwNTE5MDYwNTE2WhcNMjQwNTI2MDYwNTE2WjAYMRYwFAYD VQQDEw02NjQ5OTY5Yy0xNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ3GwjJlnEeDtTk0v8XqTjf8wnitm8F5mSUiPpE0EECVy96//GY/0W/B30hw 7zacjGapnJGSpvd8BJWkerh0t/ZY7PTEstZXwHXg2f4nQVYI1pfg/Lpf6eG+aCA0 2g3YV2XMJ/zKnpxAEjHf58sguh2rKzmcN3krqLU+NR2EOGSPkgWC0RRpCdtdCS9l Lp7nn6LFOz5zdLgto6oJmFRzJZMNTdK3FIbH5y6bgT2AFOUf/Rhjp2qhaZahCdNL lr44A/zc4mYHmfOlizJWVQC7kndelnLCtmmT6JQ3djUmxs4jJ3tdZQSuvlyCkQaN TQsEsTDERHLWMUzXB/ul1FkifQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIBzfDh cuWS3r/JqNJmfOcj7AVIMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrJsZPCPxO659HixnwqlBCvPVhkZuTtbdkfK47jpp8BFaBwoizFn31 YAjE7V9PfPdeCyXQnCnT55qe/QvQgRICqSCzJL/PWt6/2J15+rpVzoSy8rcR4/XK 3hUoOikWpyjUq8iUf6T91St3u+ooKMD+gi3FpZHrXURalslrO1rpgiHPNoeEvW5U PqvTvDoe1JRbP2w53pFYZRrjvJK5DhegQdoAI94MrpfEyUmWDhbuIyr5+bVP7nhW QqGbkPP/H13DtgBQSvfVAxnavXJf2kkTcUJe6NIfLP6Lok8kFuxnJISjdwAb/YVY +S6cFCsY2uocVa1XsBxk+LxipHziI/46 -----END CERTIFICATE-----Generated at Sun May 19 08:24:59 2024 by rpki-client on console-ams.rpki-client.org