$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: kCVpbQPaJ5/rS/N9mBK8s/ShqFCiQRgbEmnSKnZXZ2M= Subject key identifier: C2:29:1F:F4:A9:A6:01:CC:24:4A:E0:1C:E0:45:C7:36:89:19:53:08 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 0564 Signing time: Sun 19 May 2024 00:54:06 +0000 Manifest this update: Sun 19 May 2024 00:54:05 +0000 Manifest next update: Sun 26 May 2024 00:54:05 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: +ZaW1wicn1FQFEc7uokl2MJsqBscjMDXzYhvC0cp+zk=) 2: 4E76D152B51411ECB8632A19C4F9AE02.roa (hash: eZDkBZ8kNuPwvRFfeLq8MzKhhaeziYzaJLRNWYICrUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: May 19 00:54:05 2024 GMT Not After : May 26 00:54:05 2024 GMT Subject: CN=66494dad-7f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:42:37:3f:a5:ba:49:18:24:dd:c0:71:bc:56: 26:64:77:55:dc:62:65:bb:30:a6:ba:f6:0b:9d:24: 3e:10:ec:82:9a:80:5e:ec:fb:27:6c:0f:4b:91:e0: a1:f9:66:64:47:3d:ad:ba:71:01:43:cc:0c:ca:6b: df:79:f9:93:1a:89:b4:43:2b:5e:38:fa:8e:89:ae: db:7b:66:d7:c5:4c:95:85:de:aa:61:86:33:ae:93: 67:75:4a:bf:89:24:33:6f:de:4a:b2:ae:4e:d4:b1: 39:47:60:4e:02:92:55:83:23:ff:48:01:c4:20:ca: c4:72:d2:ea:c2:a2:94:94:87:a7:49:95:c9:91:48: ef:73:f7:4f:e9:a7:47:ce:34:77:3a:94:f1:2d:9e: 11:3e:eb:18:2f:83:96:2f:3f:5e:d9:7c:43:0b:fd: bd:0d:38:53:19:8f:4b:42:e0:ca:e7:fc:64:ec:6c: 4f:d1:b9:db:8d:7a:ce:91:94:d9:1e:58:78:02:e5: 28:62:d7:cd:89:bb:c4:56:ba:57:92:7b:74:0f:75: fa:57:ad:a4:59:a6:88:fc:1a:83:af:77:16:06:2b: 56:95:94:52:29:dc:8c:8e:b1:91:54:6e:9f:73:ff: a8:19:80:fc:a4:a4:0b:d6:fa:ff:36:97:cc:63:7e: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:1F:F4:A9:A6:01:CC:24:4A:E0:1C:E0:45:C7:36:89:19:53:08 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8f:3f:23:4d:01:85:47:fc:d0:03:bc:af:98:0c:36:04:b4: d9:3b:fa:5d:f4:88:29:6d:7a:10:ca:5e:37:0a:56:bf:cd:e2: 8e:88:64:fa:15:62:30:a6:b0:05:1b:be:1b:c4:82:29:d9:3f: 1b:72:86:a4:3d:a2:37:f3:b8:78:12:61:9a:93:5f:c4:47:6a: d6:1a:b9:d3:09:5d:c6:aa:06:aa:9d:62:e8:da:18:f4:0d:a3: 04:87:47:1d:02:e4:f8:6a:4f:8a:e3:b7:44:5b:2f:64:0a:47: d4:f2:53:5f:95:e4:9d:da:34:fe:24:60:6c:05:f6:27:85:94: 97:cf:84:74:f2:5f:b3:35:ec:11:49:8e:8f:d1:69:f1:cc:ba: c1:6a:21:a2:62:d6:85:48:20:29:c6:db:8d:ed:69:70:52:4b: d0:72:87:c1:88:6f:aa:db:aa:35:16:f7:a6:0f:1e:ae:40:38: f9:2e:33:9c:39:a1:3d:0e:f6:8c:2e:ba:ed:da:0d:db:be:91: d7:22:79:92:46:c9:0a:21:c0:ee:ea:f6:68:99:6d:a3:27:2a: 04:08:39:91:24:9b:8c:0f:78:d3:ea:6b:cf:8a:d2:6a:49:87: 46:58:20:7c:61:8c:80:eb:47:dc:c5:7c:55:fa:5e:1c:0f:7d: fe:df:a2:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjQwNTE5MDA1NDA1WhcNMjQwNTI2MDA1NDA1WjAYMRYwFAYD VQQDEw02NjQ5NGRhZC03ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00I3P6W6SRgk3cBxvFYmZHdV3GJluzCmuvYLnSQ+EOyCmoBe7PsnbA9LkeCh +WZkRz2tunEBQ8wMymvfefmTGom0QyteOPqOia7be2bXxUyVhd6qYYYzrpNndUq/ iSQzb95Ksq5O1LE5R2BOApJVgyP/SAHEIMrEctLqwqKUlIenSZXJkUjvc/dP6adH zjR3OpTxLZ4RPusYL4OWLz9e2XxDC/29DThTGY9LQuDK5/xk7GxP0bnbjXrOkZTZ Hlh4AuUoYtfNibvEVrpXknt0D3X6V62kWaaI/BqDr3cWBitWlZRSKdyMjrGRVG6f c/+oGYD8pKQL1vr/NpfMY34MEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIpH/Sp pgHMJErgHOBFxzaJGVMIMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANjz8jTQGFR/zQA7yvmAw2BLTZO/pd9IgpbXoQyl43Cla/zeKOiGT6 FWIwprAFG74bxIIp2T8bcoakPaI387h4EmGak1/ER2rWGrnTCV3GqgaqnWLo2hj0 DaMEh0cdAuT4ak+K47dEWy9kCkfU8lNfleSd2jT+JGBsBfYnhZSXz4R08l+zNewR SY6P0WnxzLrBaiGiYtaFSCApxtuN7WlwUkvQcofBiG+q26o1FvemDx6uQDj5LjOc OaE9DvaMLrrt2g3bvpHXInmSRskKIcDu6vZomW2jJyoECDmRJJuMD3jT6mvPitJq SYdGWCB8YYyA60fcxXxV+l4cD33+36LT -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org