$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: a7ILgLVNiSLwDe1kY9bzl6ftNSG4MtLOXtPPzGYBOso= Subject key identifier: 93:7A:99:E4:61:1C:85:46:35:4D:FC:C5:2F:9D:C1:8F:7F:41:D5:7C Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 212D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 210A Signing time: Sat 18 May 2024 16:14:52 +0000 Manifest this update: Sat 18 May 2024 16:14:51 +0000 Manifest next update: Sat 25 May 2024 16:14:51 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: OlVS24FOlr7Xl6WiRXu8G/6NfFO+Uwr5SUUx4nqFt0s=) 2: C48E0A1C152B11EFAEB3917EC4F9AE02.roa (hash: 0x+BFtxazKOCR+DSsrAJBf1zWaA4QTnOJfG2WGN6BZI=) 3: D280BEF05FC611EE857BE480C4F9AE02.roa (hash: a1dv6aH/7Hg2gN7txusD3768mg8p/SmhFZY1v4Rc9uU=) 4: 02CF9FAC1B1311EE94AC0123C4F9AE02.roa (hash: F9IjzyqIAY2k2Q/OeclMRDclUU4Zwu2jZyKnHQ3RlZQ=) 5: FD2941A0BBC311EEBE58430EC4F9AE02.roa (hash: 9QQjdIzANogkD73MLLjkJxxdii9Tn1xVNrPM5/BTIw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8493 (0x212d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: May 18 16:14:51 2024 GMT Not After : May 25 16:14:51 2024 GMT Subject: CN=6648d3fb-87f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:27:59:17:4d:2d:cf:4c:8f:c0:cf:c0:94: d2:0f:2e:99:db:23:ea:3d:49:f6:fa:27:6e:17:fa: 9c:bf:fa:76:e6:cf:3d:17:18:e7:8a:c9:88:90:75: 74:3a:c6:12:48:23:a9:c0:d0:a2:68:62:5b:ca:b5: 7a:1b:72:d2:2a:51:34:5e:1b:17:07:4e:08:02:b2: f1:39:97:03:af:25:98:af:0f:4b:df:60:b4:7a:4e: f8:16:0b:cb:a7:b0:d6:29:92:ec:03:7a:c4:3f:d7: 29:68:61:60:85:8c:7b:62:81:3b:35:21:d0:05:96: f5:50:4b:11:46:22:ce:d9:b1:4f:38:bd:d3:13:1c: 1c:c9:dd:6e:45:30:3d:f1:16:12:0f:67:50:d4:63: 54:18:ab:51:68:73:a6:8c:df:bd:86:d8:31:d6:d0: 6a:aa:fd:83:1b:55:7d:39:d4:8a:ff:b8:28:f2:ed: e1:f6:3b:4c:08:cb:94:04:a8:ae:07:2d:d1:6b:77: fe:b7:1d:05:ae:e2:4c:c0:60:a8:7d:f1:a6:f5:2e: 2e:e1:72:76:fc:89:3e:4a:c2:cc:02:fd:34:3f:a6: 7e:ca:a3:1a:0d:6b:d0:1b:05:7d:97:35:a4:36:85: 87:34:ba:7c:1b:4a:4f:6c:e2:8f:1f:43:12:5d:24: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:99:E4:61:1C:85:46:35:4D:FC:C5:2F:9D:C1:8F:7F:41:D5:7C X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:dd:6b:eb:41:bd:f3:39:5d:ae:f1:ca:e3:46:8e:30:48:d4: 66:13:56:5a:4d:34:9b:5e:d4:0f:24:6c:07:fb:aa:18:fb:e0: 5c:a2:ae:d1:9a:5d:b7:25:47:10:21:75:d0:a3:1b:81:38:1b: 6d:63:8c:e8:d4:c7:3c:7a:c0:54:4b:53:33:07:22:79:bd:d0: e7:25:bd:fa:37:73:fe:1b:7f:b2:96:74:d2:4f:ca:ba:01:dd: de:12:af:35:59:b8:a4:1a:4f:d7:a2:19:b0:e1:5d:e4:20:60: 12:c0:86:cc:2a:ac:86:16:cd:5b:4d:66:be:7d:42:43:4e:dd: 95:fa:3d:77:b4:1a:d1:9f:9c:8a:60:48:2b:e7:d2:f7:61:27: b2:01:a9:47:6b:68:4b:72:ba:64:30:be:5d:c5:58:c6:6f:7e: ae:d8:b6:f6:06:97:ae:69:19:73:f8:ae:b4:04:c3:66:4f:a1: 40:08:33:17:fb:77:8c:45:1d:c2:73:db:86:94:73:e7:98:c1: 60:d6:15:3e:8c:c4:bb:d2:0d:02:d2:dd:ce:0a:3f:3c:b0:18: d6:2a:1b:6d:0c:4d:e5:b5:b4:fc:89:21:f7:f4:9c:fb:96:37: b6:11:38:9f:ec:3c:fb:b3:24:02:4d:be:45:5c:60:58:d9:5b: dd:fa:ff:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjQwNTE4MTYxNDUxWhcNMjQwNTI1MTYxNDUxWjAYMRYwFAYD VQQDEw02NjQ4ZDNmYi04N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IEnWRdNLc9Mj8DPwJTSDy6Z2yPqPUn2+iduF/qcv/p25s89FxjnismIkHV0 OsYSSCOpwNCiaGJbyrV6G3LSKlE0XhsXB04IArLxOZcDryWYrw9L32C0ek74FgvL p7DWKZLsA3rEP9cpaGFghYx7YoE7NSHQBZb1UEsRRiLO2bFPOL3TExwcyd1uRTA9 8RYSD2dQ1GNUGKtRaHOmjN+9htgx1tBqqv2DG1V9OdSK/7go8u3h9jtMCMuUBKiu By3Ra3f+tx0FruJMwGCoffGm9S4u4XJ2/Ik+SsLMAv00P6Z+yqMaDWvQGwV9lzWk NoWHNLp8G0pPbOKPH0MSXST76wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN6meRh HIVGNU38xS+dwY9/QdV8MB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV3WvrQb3zOV2u8crjRo4wSNRmE1ZaTTSbXtQPJGwH+6oY++Bcoq7R ml23JUcQIXXQoxuBOBttY4zo1Mc8esBUS1MzByJ5vdDnJb36N3P+G3+ylnTST8q6 Ad3eEq81WbikGk/Xohmw4V3kIGASwIbMKqyGFs1bTWa+fUJDTt2V+j13tBrRn5yK YEgr59L3YSeyAalHa2hLcrpkML5dxVjGb36u2Lb2BpeuaRlz+K60BMNmT6FACDMX +3eMRR3Cc9uGlHPnmMFg1hU+jMS70g0C0t3OCj88sBjWKhttDE3ltbT8iSH39Jz7 lje2ETif7Dz7syQCTb5FXGBY2Vvd+v9e -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org