$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: CkrpsGH6jD6q2dHT7jXrQbdNjaGIO0brx8Bn0rErmuc= Subject key identifier: 74:41:21:F3:EA:00:9C:0D:05:F8:41:A0:C5:66:EA:7C:21:0B:08:59 Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 33C7 Signing time: Sat 18 May 2024 16:21:40 +0000 Manifest this update: Sat 18 May 2024 16:21:39 +0000 Manifest next update: Sat 25 May 2024 16:21:39 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: Bv2JDYYPh1exJV94UUYpkwi8e+yN7ftbBN4lYy3gVOs=) 2: 8595A74A373C11ECA3E8C51BC4F9AE02.roa (hash: dPIqo4SfnF0pTBWcFiAb5cvG3ZeCwMdprc83SWH640M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: May 18 16:21:39 2024 GMT Not After : May 25 16:21:39 2024 GMT Subject: CN=6648d594-b557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:c4:94:19:68:92:94:4c:31:67:cf:c5:90: 5c:3b:96:24:47:d0:12:6a:ce:52:16:c6:35:18:64: e8:10:d2:f8:8d:bc:8a:47:62:d2:d6:37:95:d2:11: c3:b2:00:9f:e3:5d:9f:6e:a7:cf:47:1d:09:b9:63: 98:1d:11:01:20:72:6c:08:81:8c:c1:2f:69:a2:d1: 48:33:2f:ec:16:ce:e8:c1:ef:dc:95:e0:82:a1:c2: 9d:35:17:e7:9c:c0:54:5c:51:0c:0e:8b:12:00:4c: a9:cf:a7:2f:eb:39:37:e4:46:40:6f:a7:92:b2:c3: ff:00:c8:ff:96:cc:74:0e:b6:d9:b9:bb:02:7d:31: 02:d2:63:e8:10:13:45:1e:78:a2:7e:04:ac:92:a6: 5e:84:da:95:5b:c6:41:88:8e:7a:af:cd:b8:7e:1a: 4e:2e:fc:df:a7:6a:de:8c:bb:59:11:3e:72:c6:d6: a8:ed:cb:ae:19:12:78:11:c3:03:8e:4e:77:81:1c: 3f:0c:0f:9b:a6:a3:8d:4d:d6:18:c5:01:be:df:90: e0:6f:e7:0b:29:f8:86:c2:f1:fb:ea:4a:2c:cf:17: e8:ac:45:ba:38:e0:89:57:1d:db:e3:ca:5e:14:51: 0b:28:7a:cd:64:cb:99:d2:91:60:4e:38:9a:c0:f1: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:21:F3:EA:00:9C:0D:05:F8:41:A0:C5:66:EA:7C:21:0B:08:59 X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:53:32:f8:09:a1:c4:84:2d:24:ee:ab:7d:18:dd:9a:71:b6: 13:42:11:78:79:af:7d:eb:7a:cb:1f:49:db:93:5b:d5:7e:86: ee:7b:c8:5d:de:a4:6e:4b:03:07:a9:67:b0:bf:ad:80:6b:5e: 45:57:4a:00:5e:fd:76:ec:51:53:b4:c7:fb:cd:cd:2d:be:31: 59:b9:30:e8:ef:c6:6f:00:af:a1:83:dd:16:30:66:37:92:f2: b5:98:6f:45:45:57:0e:cb:ca:64:4a:a2:37:12:5f:9b:c8:95: 32:24:a5:ae:dd:33:1c:e3:ef:11:4d:98:49:d9:d1:54:76:62: 17:00:d6:70:8f:05:34:9e:cc:96:8c:25:26:fb:c6:7c:2e:5c: 2d:a5:0e:26:74:c1:ba:c1:3d:3a:f0:ea:ab:43:6f:30:78:dc: bd:b2:3f:9f:83:33:8e:39:04:10:1c:a6:90:7b:40:b5:0c:f3: 41:e8:68:34:a2:50:a5:b3:de:c2:77:4e:e9:fc:ac:24:fc:e6: ba:10:12:67:ef:61:60:3a:be:fc:67:90:fe:27:a7:b6:22:9a: 40:b9:97:61:92:fa:e0:ff:fa:2d:6b:03:7c:aa:1a:aa:3b:a0: f6:bd:c7:9a:d2:58:0c:de:e0:10:7b:4b:1f:02:2f:34:34:56: de:2b:ad:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjQwNTE4MTYyMTM5WhcNMjQwNTI1MTYyMTM5WjAYMRYwFAYD VQQDEw02NjQ4ZDU5NC1iNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys/ElBlokpRMMWfPxZBcO5YkR9ASas5SFsY1GGToENL4jbyKR2LS1jeV0hHD sgCf412fbqfPRx0JuWOYHREBIHJsCIGMwS9potFIMy/sFs7owe/cleCCocKdNRfn nMBUXFEMDosSAEypz6cv6zk35EZAb6eSssP/AMj/lsx0DrbZubsCfTEC0mPoEBNF HniifgSskqZehNqVW8ZBiI56r824fhpOLvzfp2rejLtZET5yxtao7cuuGRJ4EcMD jk53gRw/DA+bpqONTdYYxQG+35Dgb+cLKfiGwvH76koszxforEW6OOCJVx3b48pe FFELKHrNZMuZ0pFgTjiawPF9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRBIfPq AJwNBfhBoMVm6nwhCwhZMB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkUzL4CaHEhC0k7qt9GN2acbYTQhF4ea9963rLH0nbk1vVfobue8hd 3qRuSwMHqWewv62Aa15FV0oAXv127FFTtMf7zc0tvjFZuTDo78ZvAK+hg90WMGY3 kvK1mG9FRVcOy8pkSqI3El+byJUyJKWu3TMc4+8RTZhJ2dFUdmIXANZwjwU0nsyW jCUm+8Z8LlwtpQ4mdMG6wT068OqrQ28weNy9sj+fgzOOOQQQHKaQe0C1DPNB6Gg0 olCls97Cd07p/Kwk/Oa6EBJn72FgOr78Z5D+J6e2IppAuZdhkvrg//otawN8qhqq O6D2vcea0lgM3uAQe0sfAi80NFbeK62t -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org