$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json) Hash identifier: Mnesl73n82CA4ikY8xmL9lGJEhH4JwPUcXxyv2+jBBE= Subject key identifier: 81:5E:C9:89:CD:BF:59:0D:4F:94:5A:C6:08:F0:B2:2D:65:F6:74:89 Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft Manifest number: 37 Signing time: Sun 19 May 2024 08:20:48 +0000 Manifest this update: Sun 19 May 2024 08:20:48 +0000 Manifest next update: Sun 26 May 2024 08:20:48 +0000 Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: 8E+bq+3YM4DfpK5UyhriT+cV5xMg/7ijB4TXviqpINs=) 2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: svtnxhlF5NWmNNObseS7pAI3bZ45udx6YcRU3jyp4kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Validity Not Before: May 19 08:20:48 2024 GMT Not After : May 26 08:20:48 2024 GMT Subject: CN=6649b660-9390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:d4:d9:8a:6c:d1:02:95:4a:1b:3f:8f:59: af:4f:cd:76:62:18:df:b6:42:96:a9:53:66:94:c7: 09:42:7d:75:47:6d:7f:3b:ce:ea:8b:87:ad:a0:a3: 14:d0:b8:e6:00:9c:d9:54:aa:67:50:48:b4:80:8e: bb:b8:e0:11:76:a2:c4:87:3f:73:ce:d2:1a:c7:c9: f5:54:34:ce:a6:a1:de:51:a3:d4:e2:15:48:60:8c: a8:60:b5:5a:7a:ed:c9:fe:6b:06:31:5e:05:98:b0: 20:ec:5b:e1:41:7c:c1:c6:24:b6:c8:c3:31:58:53: ce:5d:32:13:64:c1:77:d4:ca:a8:7f:d1:eb:10:1f: dc:d0:04:ec:3c:b3:9b:2d:cc:07:fd:1c:5b:50:3c: 0c:7c:c0:41:d4:e8:01:60:b5:1f:ed:58:31:76:3e: 34:72:91:1b:2d:1e:2a:ee:19:5e:62:02:8a:53:df: 6e:fd:76:f1:30:13:ed:f6:db:0d:b0:cf:87:3d:9f: 1e:c0:d0:ba:1b:0e:b6:5b:c2:7b:c7:35:f1:6e:45: 64:1f:ff:06:2b:b1:27:a5:5c:e1:31:df:9a:7b:fc: 3c:88:21:6e:84:4a:fb:c3:f7:bb:2f:a9:58:52:27: c7:15:a1:03:7c:47:9e:ec:7c:b3:3f:26:44:97:90: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5E:C9:89:CD:BF:59:0D:4F:94:5A:C6:08:F0:B2:2D:65:F6:74:89 X509v3 Authority Key Identifier: keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:bd:b2:40:ca:21:ff:a7:54:4c:02:58:f6:c0:2d:65:cd:39: 42:87:e2:4b:b8:c6:44:7b:9f:ed:8f:4a:c0:b3:80:37:27:4c: 46:4c:0a:5f:f7:8b:6c:70:05:e8:33:38:66:35:b2:65:e6:88: 6c:e8:2c:38:f7:24:c6:6d:34:07:8e:e3:cf:8f:75:63:86:5e: c5:9c:08:67:bc:3a:2a:15:03:f1:62:d6:c1:9c:54:e5:b6:ea: 8b:dc:d0:a2:58:a8:4c:df:e6:87:d2:56:2f:18:ce:19:f6:f8: 36:ad:f4:2a:45:56:10:c9:29:ff:f5:31:d1:45:d9:34:e7:dc: 59:88:8a:77:a9:23:6d:d1:ff:8d:bb:ff:6c:8d:58:63:12:ed: 0c:59:66:f7:8c:30:c6:5c:9e:a4:df:b6:59:cc:bc:9f:a8:51: 2c:fb:f6:0a:07:19:43:0a:0c:8c:51:62:01:ef:b1:13:ab:89: f2:f0:52:53:03:e8:c4:b5:17:1e:99:f4:e9:6a:66:a7:7e:a8: 2e:0d:5f:10:c4:b4:61:41:df:85:1c:a4:83:42:b3:0a:59:a4: 83:4c:42:01:0e:90:55:db:00:ca:18:a5:d9:f7:53:bf:0e:39: d8:b0:a8:0c:f3:31:e3:98:74:2d:e0:e4:18:7d:40:e0:fe:d3: 97:aa:b5:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTcxMTExMC8GA1UEBRMoQjU3QjIwN0YwRTFDMUJBODczQTA3OTM1ODJDN0E4MTM0 MDk4Njc0QzAeFw0yNDA1MTkwODIwNDhaFw0yNDA1MjYwODIwNDhaMBgxFjAUBgNV BAMTDTY2NDliNjYwLTkzOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA/dTZimzRApVKGz+PWa9PzXZiGN+2QpapU2aUxwlCfXVHbX87zuqLh62goxTQ uOYAnNlUqmdQSLSAjru44BF2osSHP3PO0hrHyfVUNM6mod5Ro9TiFUhgjKhgtVp6 7cn+awYxXgWYsCDsW+FBfMHGJLbIwzFYU85dMhNkwXfUyqh/0esQH9zQBOw8s5st zAf9HFtQPAx8wEHU6AFgtR/tWDF2PjRykRstHiruGV5iAopT3279dvEwE+322w2w z4c9nx7A0LobDrZbwnvHNfFuRWQf/wYrsSelXOEx35p7/DyIIW6ESvvD97svqVhS J8cVoQN8R57sfLM/JkSXkNYhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgV7Jic2/ WQ1PlFrGCPCyLWX2dIkwHwYDVR0jBBgwFoAUtXsgfw4cG6hzoHk1gseoE0CYZ0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNzExLzlGREQyREEwQzk5 MTExRUU4OTFCQTQxOUM0RjlBRTAyL3RYc2dmdzRjRzZoem9IazFnc2VvRTBDWVow dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdFhzZ2Z3NGNHNmh6b0hrMWdzZW9FMENZWjB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx NzExLzlGREQyREEwQzk5MTExRUU4OTFCQTQxOUM0RjlBRTAyL3RYc2dmdzRjRzZo em9IazFnc2VvRTBDWVowdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKO9skDKIf+nVEwCWPbALWXNOUKH4ku4xkR7n+2PSsCzgDcnTEZMCl/3 i2xwBegzOGY1smXmiGzoLDj3JMZtNAeO48+PdWOGXsWcCGe8OioVA/Fi1sGcVOW2 6ovc0KJYqEzf5ofSVi8Yzhn2+Dat9CpFVhDJKf/1MdFF2TTn3FmIinepI23R/427 /2yNWGMS7QxZZveMMMZcnqTftlnMvJ+oUSz79goHGUMKDIxRYgHvsROrifLwUlMD 6MS1Fx6Z9OlqZqd+qC4NXxDEtGFB34UcpINCswpZpINMQgEOkFXbAMoYpdn3U78O OdiwqAzzMeOYdC3g5Bh9QOD+05eqtdY= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org