$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: EzxmEjZBUKFGqtkhTKxesJvvcc8trwA7+merJffEzpE= Subject key identifier: B9:70:76:BD:95:00:FB:4C:FA:94:1A:DE:A2:A8:22:1C:55:24:B9:90 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 12 Signing time: Sun 19 May 2024 08:48:15 +0000 Manifest this update: Sun 19 May 2024 08:48:14 +0000 Manifest next update: Sun 26 May 2024 08:48:14 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: UzHdnVH4E+4zfdqs9D2rpHVCOFTrYKbfZmh7e8x1rRk=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: BiLzgqh1b2wzfZ0A9uXIsrplPF10Zq40y4XUi97+Tqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: May 19 08:48:14 2024 GMT Not After : May 26 08:48:14 2024 GMT Subject: CN=6649bcce-2782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:c8:f6:f6:7b:4c:d6:3f:4e:73:f7:8c:b0: 45:f6:14:a1:96:bd:39:31:69:e9:c4:f2:32:7e:42: 64:f7:1e:96:d9:ea:0e:39:eb:ee:28:6c:19:69:c3: 6d:4b:63:10:0b:23:7d:2e:73:f3:a6:70:55:fd:6f: 9c:74:c9:b0:52:28:05:d7:5b:29:88:ef:ea:c9:21: fa:b0:8b:1f:fb:e7:41:13:e8:40:69:db:26:c9:5a: 8a:f8:8b:52:2e:49:c0:81:76:a8:6d:2b:a5:7b:a3: 34:01:57:cc:82:a0:2f:94:5c:1b:74:0d:3d:bc:4f: ad:45:32:25:31:50:9b:9c:2e:0e:d2:fd:97:b0:64: 59:8c:b8:92:f3:ad:69:15:21:59:d5:ae:5a:d1:3a: 4b:a5:27:1c:65:b0:61:f1:f9:5e:44:91:99:f9:78: a3:a5:ea:2a:b1:60:4c:d4:cd:5b:c0:b1:0b:73:5c: a1:2c:3d:c3:22:97:41:5d:e9:f1:9e:86:71:bf:9f: c0:ff:a0:d3:c6:8f:45:e0:64:75:a5:b2:eb:6f:a3: 00:00:aa:51:fe:a7:d8:14:ff:10:42:0b:7c:98:a7: b3:72:eb:ac:fa:4b:f7:51:a7:15:ac:24:a4:9c:cf: c5:95:72:7f:6a:12:00:96:f2:2e:a6:31:28:0e:5d: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:70:76:BD:95:00:FB:4C:FA:94:1A:DE:A2:A8:22:1C:55:24:B9:90 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4c:8a:da:32:fd:87:74:76:8a:3e:b2:5b:ce:ab:4d:a1:0d: a6:98:a4:1b:f2:85:46:1b:49:68:a5:aa:48:12:47:e8:cf:f3: aa:da:5a:41:5d:50:30:6e:6c:25:e4:5a:2b:1b:1d:a7:fb:19: 02:75:1b:33:db:12:e5:06:fa:48:7b:ad:c9:43:c3:db:be:d9: dd:7c:82:11:e8:52:c0:35:9c:61:23:f9:59:d5:eb:b8:8e:4a: ba:a9:f5:dc:6d:c1:d5:2b:51:ba:9b:3d:9b:6d:02:bf:d6:32: 8e:72:80:b8:63:a1:3e:0f:56:7a:d6:1a:c3:d3:42:b8:24:7f: f2:6c:26:85:ab:40:90:f7:02:16:6f:e7:cc:72:10:d1:54:c7: 49:ed:ec:69:47:f6:5d:a1:6f:b1:22:c7:91:2e:8f:d4:7b:10: d0:b4:3c:7b:e8:87:77:73:3f:94:4c:84:f9:40:6f:75:02:de: 08:8b:c9:cf:b8:f1:2e:7c:71:25:a1:53:de:1e:1f:2c:49:58: 7b:71:be:12:8d:f2:ad:bd:da:10:1a:eb:c3:57:b1:ee:2c:3a: c3:a1:50:12:7f:04:12:f1:c5:77:81:e5:a4:af:d6:18:18:19: 41:86:eb:bc:ed:48:27:f3:50:eb:35:fa:9e:0f:25:7f:39:17: 51:32:2a:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTgwQzExMC8GA1UEBRMoRkVCQjQyNzY2NzVBMDQ3NTRBNTM1M0Q1NzA3RTU3OTIx Q0RGNDM5MjAeFw0yNDA1MTkwODQ4MTRaFw0yNDA1MjYwODQ4MTRaMBgxFjAUBgNV BAMTDTY2NDliY2NlLTI3ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTG8j29ntM1j9Oc/eMsEX2FKGWvTkxaenE8jJ+QmT3HpbZ6g456+4obBlpw21L YxALI30uc/OmcFX9b5x0ybBSKAXXWymI7+rJIfqwix/750ET6EBp2ybJWor4i1Iu ScCBdqhtK6V7ozQBV8yCoC+UXBt0DT28T61FMiUxUJucLg7S/ZewZFmMuJLzrWkV IVnVrlrROkulJxxlsGHx+V5EkZn5eKOl6iqxYEzUzVvAsQtzXKEsPcMil0Fd6fGe hnG/n8D/oNPGj0XgZHWlsutvowAAqlH+p9gU/xBCC3yYp7Ny66z6S/dRpxWsJKSc z8WVcn9qEgCW8i6mMSgOXeLHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuXB2vZUA +0z6lBreoqgiHFUkuZAwHwYDVR0jBBgwFoAU/rtCdmdaBHVKU1PVcH5XkhzfQ5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODBDLzlBRDhCNTU0RkJG QTExRUVBRUU1RkUxRUM0RjlBRTAyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3J0Q2RtZGFCSFZLVTFQVmNINVhraHpmUTVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF ODBDLzlBRDhCNTU0RkJGQTExRUVBRUU1RkUxRUM0RjlBRTAyL19ydENkbWRhQkhW S1UxUFZjSDVYa2h6ZlE1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBMitoy/Yd0doo+slvOq02hDaaYpBvyhUYbSWilqkgSR+jP86raWkFd UDBubCXkWisbHaf7GQJ1GzPbEuUG+kh7rclDw9u+2d18ghHoUsA1nGEj+VnV67iO Srqp9dxtwdUrUbqbPZttAr/WMo5ygLhjoT4PVnrWGsPTQrgkf/JsJoWrQJD3AhZv 58xyENFUx0nt7GlH9l2hb7Eix5Euj9R7ENC0PHvoh3dzP5RMhPlAb3UC3giLyc+4 8S58cSWhU94eHyxJWHtxvhKN8q292hAa68NXse4sOsOhUBJ/BBLxxXeB5aSv1hgY GUGG67ztSCfzUOs1+p4PJX85F1EyKpA= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org