$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: hWTkhf6tWmWy+zhrNX7ieQaymwM32MZz/xd1j220wK8= Subject key identifier: C8:C3:BA:D9:69:D4:5F:7A:E7:D4:9A:ED:09:3D:76:00:29:C2:78:C5 Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0DE9 Signing time: Sat 18 May 2024 18:28:06 +0000 Manifest this update: Sat 18 May 2024 18:28:05 +0000 Manifest next update: Sat 25 May 2024 18:28:05 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: Dik4nowx/tNbXaEJ2r6XhxwIaSXcasvQo+rfdtAxIvk=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: DdiXy8+32tf/iVcw8XMbOe06PWpXsluYWlOEAuHOtIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: May 18 18:28:05 2024 GMT Not After : May 25 18:28:05 2024 GMT Subject: CN=6648f336-a34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f7:3c:c6:db:6e:24:8a:32:04:fc:55:71:92: 67:13:de:77:c1:cb:4f:b3:6e:c0:2e:62:d2:f0:c8: 00:b5:73:d4:03:f7:0b:69:fc:8e:d4:cf:72:5b:ab: 1c:60:0d:15:1c:b8:5e:ea:75:5b:8c:a8:55:b7:96: e4:69:20:4d:ed:5d:56:1f:f8:fb:fd:6d:9a:ae:c0: 28:57:50:3d:80:fa:8b:b0:14:76:5a:71:4d:c8:42: 59:de:37:05:ea:f9:e5:73:bd:03:50:fe:12:31:29: df:84:18:04:b0:a3:c5:0f:af:c0:25:09:f1:58:31: a1:4d:95:62:77:16:70:1e:f6:49:a6:8f:85:70:5a: 9c:4c:99:5e:b2:44:87:67:94:0b:6b:a7:a5:8b:28: 7c:f1:99:3c:93:b0:07:00:ea:53:7d:65:e9:5c:99: a4:9e:59:08:eb:3a:e4:2b:d8:9f:21:7c:c5:1c:2c: d4:c8:ec:16:d9:0c:33:a8:ff:f5:59:3f:9d:e5:4c: 14:13:9b:35:35:00:cd:d0:11:bb:d6:17:39:9c:b5: 7c:6d:8c:be:a9:16:1d:75:7f:86:63:a0:94:49:ce: 04:de:5c:ef:ed:57:3f:ec:c5:5c:84:09:a2:aa:fb: 73:17:2f:02:fa:82:52:e2:9c:5d:fe:20:46:85:47: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:BA:D9:69:D4:5F:7A:E7:D4:9A:ED:09:3D:76:00:29:C2:78:C5 X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f1:a9:79:7a:c0:26:a0:0e:9d:3b:9a:3d:d7:ca:7b:66:77: b6:e2:50:72:7f:05:32:52:2f:00:fa:89:be:2b:3c:29:9a:70: 0a:62:99:d6:22:27:9e:ef:59:3c:d0:8e:e8:8e:68:cf:07:23: 12:e1:67:f2:da:33:80:c6:62:87:fa:d0:51:e4:d5:fc:76:47: 75:18:22:63:2c:65:c6:67:25:8e:e5:4e:84:b0:1d:da:42:06: 85:b9:84:a7:73:a4:61:56:24:6e:34:ef:cb:df:c4:cf:f6:ee: a7:a8:ea:ce:b8:d6:43:7a:0e:81:f0:86:fe:33:4d:d2:b1:fa: f9:ca:cf:17:59:3e:45:34:48:da:07:ab:97:c5:8f:30:a9:d4: b6:c6:84:9d:24:e2:1a:2b:dc:37:e8:fd:5e:44:b4:ba:41:30: 5b:1d:2b:6d:ae:21:20:74:1c:68:4c:dc:37:ff:60:02:30:d3: 55:c4:23:29:68:4b:95:73:0b:6a:b1:69:24:64:a2:6a:f5:bd: 38:8a:a1:ca:03:68:ea:15:cb:b9:bc:74:f8:9a:21:76:29:f3: 5b:6d:cc:38:70:22:7e:93:a6:02:7b:71:8c:3b:2d:2c:c7:da: a3:8f:0d:53:bd:85:ef:f2:bb:51:7a:5c:3c:90:e3:d7:4f:03: 06:86:18:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjQwNTE4MTgyODA1WhcNMjQwNTI1MTgyODA1WjAYMRYwFAYD VQQDEw02NjQ4ZjMzNi1hMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/c8xttuJIoyBPxVcZJnE953wctPs27ALmLS8MgAtXPUA/cLafyO1M9yW6sc YA0VHLhe6nVbjKhVt5bkaSBN7V1WH/j7/W2arsAoV1A9gPqLsBR2WnFNyEJZ3jcF 6vnlc70DUP4SMSnfhBgEsKPFD6/AJQnxWDGhTZVidxZwHvZJpo+FcFqcTJleskSH Z5QLa6eliyh88Zk8k7AHAOpTfWXpXJmknlkI6zrkK9ifIXzFHCzUyOwW2QwzqP/1 WT+d5UwUE5s1NQDN0BG71hc5nLV8bYy+qRYddX+GY6CUSc4E3lzv7Vc/7MVchAmi qvtzFy8C+oJS4pxd/iBGhUcbrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjDutlp 1F9659Sa7Qk9dgApwnjFMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo8al5esAmoA6dO5o918p7Zne24lByfwUyUi8A+om+KzwpmnAKYpnW Iiee71k80I7ojmjPByMS4Wfy2jOAxmKH+tBR5NX8dkd1GCJjLGXGZyWO5U6EsB3a QgaFuYSnc6RhViRuNO/L38TP9u6nqOrOuNZDeg6B8Ib+M03Ssfr5ys8XWT5FNEja B6uXxY8wqdS2xoSdJOIaK9w36P1eRLS6QTBbHSttriEgdBxoTNw3/2ACMNNVxCMp aEuVcwtqsWkkZKJq9b04iqHKA2jqFcu5vHT4miF2KfNbbcw4cCJ+k6YCe3GMOy0s x9qjjw1TvYXv8rtRelw8kOPXTwMGhhgQ -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org