$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: Ik8ilIJBatrb3VU4qYWIMGoCkumhGLVn3gvr9u9etPM= Subject key identifier: 56:01:E5:58:67:B2:F7:BD:FC:E0:77:C0:38:37:C8:A1:F5:01:B6:6A Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0D57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0D50 Signing time: Sat 18 May 2024 18:38:15 +0000 Manifest this update: Sat 18 May 2024 18:38:14 +0000 Manifest next update: Sat 25 May 2024 18:38:14 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: fzHusMytoVXPbU+VpQO2YzaUAyruo7yAKJZSMTVsKWU=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: 8AfCGx2BdVzO1T0aaR/qXOQKjWTAKSjMLiBiuKiZggk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: May 18 18:38:14 2024 GMT Not After : May 25 18:38:14 2024 GMT Subject: CN=6648f596-d0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:01:7f:7e:50:f2:b7:f2:9a:e3:da:94:e8: ec:c9:de:81:01:5c:d0:f1:4c:17:13:f0:df:de:c6: 32:47:9b:17:4f:a8:4e:94:0f:3b:a7:6e:44:b4:91: 7c:39:05:ad:46:67:52:e3:1d:96:61:bd:22:c2:e2: 7f:14:f8:0b:00:4f:06:01:d6:ed:80:aa:57:bc:7d: dd:f2:aa:2f:df:45:12:d1:24:0e:57:22:af:0a:45: 01:8b:be:12:9a:d2:b5:27:e4:c2:3e:c5:e5:17:ba: 58:6e:23:cc:75:f4:49:b7:be:a3:28:af:ce:fa:ee: fd:8e:af:ec:7d:8a:f3:44:aa:60:de:0f:96:7a:75: bd:50:2f:37:5d:cd:cc:bb:d7:b1:7c:e0:54:b3:0f: e3:17:80:43:45:bc:80:9b:f6:30:77:34:94:c4:ce: cc:b4:ca:f1:30:85:b5:69:d8:ef:59:82:67:45:db: eb:8a:ab:f3:2a:3e:26:46:3c:00:64:52:82:8d:ac: 3f:2c:a6:6e:cf:6a:a3:30:56:f4:fe:ad:b0:42:9f: 8a:b6:3e:cd:25:cd:70:fe:87:a2:16:17:33:3b:0c: 93:44:4f:61:9b:29:49:69:7f:59:a4:61:89:f3:bd: 54:4d:36:58:e3:48:88:e0:0b:88:7d:24:e6:b7:df: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:01:E5:58:67:B2:F7:BD:FC:E0:77:C0:38:37:C8:A1:F5:01:B6:6A X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:73:46:a4:ad:71:c8:91:90:a0:4f:6c:84:4e:c9:dc:38:7a: ea:e3:1d:20:a5:80:06:18:b6:0d:03:a0:7e:de:af:a8:db:3f: 29:cd:70:c7:0c:30:68:1f:0d:e6:e9:77:55:d2:64:4e:80:19: 22:2c:d3:10:87:10:e0:4d:e8:d2:54:77:b8:c2:28:57:3a:a2: fc:84:b0:16:fd:a7:3f:41:a3:9a:8f:8c:9d:44:ba:6d:c1:4a: ed:3b:1f:cc:1b:d3:ca:b9:1c:28:9f:2c:3d:9a:d7:fa:dc:5a: 13:52:ea:65:99:07:18:f2:0c:fd:e6:9d:6e:12:89:87:6d:1d: ea:c4:f4:66:74:5d:72:e6:5e:c7:e4:13:9a:27:e0:f6:26:52: 40:b1:5b:f5:0a:a9:ca:8b:2d:89:5d:62:a6:d7:0b:30:9a:bb: bb:a5:6d:e7:93:82:46:2d:e9:0b:fc:44:ce:78:3f:d7:26:17: 78:47:61:1e:0c:06:51:d5:cc:fd:41:5a:e4:f6:2e:54:41:2b: 9d:9f:76:2c:2d:c2:2d:98:ed:51:fe:40:73:31:76:e8:ea:a5: b5:04:9e:09:57:77:3e:40:0b:c2:63:89:ab:72:31:c3:fc:70: cc:d7:a3:f3:70:34:9b:1e:d4:50:69:b1:b8:7a:20:a8:92:5f: a6:e6:5b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjQwNTE4MTgzODE0WhcNMjQwNTI1MTgzODE0WjAYMRYwFAYD VQQDEw02NjQ4ZjU5Ni1kMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokcBf35Q8rfymuPalOjsyd6BAVzQ8UwXE/Df3sYyR5sXT6hOlA87p25EtJF8 OQWtRmdS4x2WYb0iwuJ/FPgLAE8GAdbtgKpXvH3d8qov30US0SQOVyKvCkUBi74S mtK1J+TCPsXlF7pYbiPMdfRJt76jKK/O+u79jq/sfYrzRKpg3g+WenW9UC83Xc3M u9exfOBUsw/jF4BDRbyAm/YwdzSUxM7MtMrxMIW1adjvWYJnRdvriqvzKj4mRjwA ZFKCjaw/LKZuz2qjMFb0/q2wQp+Ktj7NJc1w/oeiFhczOwyTRE9hmylJaX9ZpGGJ 871UTTZY40iI4AuIfSTmt99zIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYB5Vhn sve9/OB3wDg3yKH1AbZqMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkc0akrXHIkZCgT2yETsncOHrq4x0gpYAGGLYNA6B+3q+o2z8pzXDH DDBoHw3m6XdV0mROgBkiLNMQhxDgTejSVHe4wihXOqL8hLAW/ac/QaOaj4ydRLpt wUrtOx/MG9PKuRwonyw9mtf63FoTUuplmQcY8gz95p1uEomHbR3qxPRmdF1y5l7H 5BOaJ+D2JlJAsVv1CqnKiy2JXWKm1wswmru7pW3nk4JGLekL/ETOeD/XJhd4R2Ee DAZR1cz9QVrk9i5UQSudn3YsLcItmO1R/kBzMXbo6qW1BJ4JV3c+QAvCY4mrcjHD /HDM16PzcDSbHtRQabG4eiCokl+m5luo -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org