$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json) Hash identifier: zBuq02+UB53tS1osJi8vRGelSyLTrhacA0RkWPRoPaY= Subject key identifier: 24:50:A9:4E:E2:47:85:62:D4:03:AE:4F:A1:73:59:3F:45:DD:3D:42 Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Certificate serial: 0AD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft Manifest number: 0AC9 Signing time: Thu 30 May 2024 20:31:32 +0000 Manifest this update: Thu 30 May 2024 20:31:31 +0000 Manifest next update: Thu 06 Jun 2024 20:31:31 +0000 Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: KeXEImTGSzuET4+mJGGYiI6cCfqB/aSO4cMKA9xTICo=) 2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: uV9ovSGC0wHvpQKaTEXkbnE4a7P7iDDKlXRSZRT22dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2768 (0xad0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Validity Not Before: May 30 20:31:31 2024 GMT Not After : Jun 6 20:31:31 2024 GMT Subject: CN=6658e223-6c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:6b:de:b4:cf:75:fb:96:7e:e3:85:29:bc: 09:72:33:f5:38:85:d0:3a:71:cb:cf:fe:0c:3a:90: 47:72:75:0d:8d:93:dd:37:59:29:2e:e6:55:2c:0c: f9:87:37:6a:c0:e6:21:a5:00:a2:06:76:75:e0:37: fe:3a:5e:fd:85:12:6b:6d:5f:73:c9:64:f3:56:23: 31:1d:11:b7:eb:6d:9b:da:8f:f3:7e:cc:4b:7c:f5: 1a:36:48:9d:21:2d:a1:54:7f:00:00:cc:cf:8d:d9: c3:07:1b:66:f3:92:f2:37:8a:e1:21:0e:ca:0a:18: 4f:4e:d2:98:ce:77:f3:35:20:a2:af:b4:d6:48:dd: b6:0e:6e:0e:c3:39:1b:25:f1:04:da:d8:91:00:b6: 1c:07:d6:64:26:fd:97:1c:66:c8:81:ec:56:3c:92: 8b:67:01:28:09:77:51:fe:24:c3:24:5e:e8:51:66: b7:58:28:51:bf:cd:ca:03:69:73:da:14:de:f4:0a: 5a:b4:bc:3e:0e:3e:6d:ab:d9:60:61:8f:01:7a:3a: d3:37:78:1c:4d:81:48:18:b7:cc:3d:fd:8f:4f:ff: 68:9b:da:c3:82:20:d6:47:89:1e:d9:62:d6:1f:c1: 80:96:c7:54:29:9e:01:4e:06:ee:99:18:51:66:fc: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:50:A9:4E:E2:47:85:62:D4:03:AE:4F:A1:73:59:3F:45:DD:3D:42 X509v3 Authority Key Identifier: keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:56:40:d7:89:ce:32:66:7a:d2:65:56:13:df:08:73:71:92: e2:79:2e:b0:2c:1e:48:ec:f6:4b:48:db:d3:3b:f0:15:a8:12: 4d:d3:cf:5d:8d:8b:54:a8:21:fa:30:6f:91:c8:e3:72:1d:e4: 86:89:6a:27:4f:1c:c9:a8:09:c8:40:2b:e7:63:60:f9:63:a2: 79:e0:12:40:78:d6:1f:cf:19:67:57:f7:0d:de:5c:6e:42:2b: e1:5d:9c:17:dd:3a:0f:c4:aa:27:62:33:28:d7:c7:29:3e:0a: ea:25:7e:26:77:62:25:8e:0b:3f:33:74:88:18:b1:0f:3d:1b: b6:b4:6e:cc:7d:85:92:60:1e:d6:27:22:ee:ed:b1:12:08:13: f9:d7:f7:c1:b8:cc:17:ae:75:7c:4f:ff:5d:1a:5e:6d:cf:c2: 16:03:31:21:54:d2:15:42:77:f5:29:05:24:b9:0d:83:e1:c5: 74:88:98:15:ee:2c:32:37:0c:68:b4:e9:d2:58:72:d0:2e:92: 60:d7:bd:0b:33:2d:5b:e5:4b:74:42:a1:1f:fc:c1:36:86:90: 7e:a8:c9:cf:df:a8:c6:dd:ac:65:33:bc:3d:ae:0a:f9:c7:a1: 0c:b5:73:b8:10:de:96:4a:db:e8:79:88:bd:37:63:c0:44:8e: 9c:31:cc:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF QTQ3NDUzNDYwHhcNMjQwNTMwMjAzMTMxWhcNMjQwNjA2MjAzMTMxWjAYMRYwFAYD VQQDEw02NjU4ZTIyMy02YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+hr3rTPdfuWfuOFKbwJcjP1OIXQOnHLz/4MOpBHcnUNjZPdN1kpLuZVLAz5 hzdqwOYhpQCiBnZ14Df+Ol79hRJrbV9zyWTzViMxHRG3622b2o/zfsxLfPUaNkid IS2hVH8AAMzPjdnDBxtm85LyN4rhIQ7KChhPTtKYznfzNSCir7TWSN22Dm4Owzkb JfEE2tiRALYcB9ZkJv2XHGbIgexWPJKLZwEoCXdR/iTDJF7oUWa3WChRv83KA2lz 2hTe9ApatLw+Dj5tq9lgYY8BejrTN3gcTYFIGLfMPf2PT/9om9rDgiDWR4ke2WLW H8GAlsdUKZ4BTgbumRhRZvzMpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRQqU7i R4Vi1AOuT6FzWT9F3T1CMB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJVkDXic4yZnrSZVYT3whzcZLieS6wLB5I7PZLSNvTO/AVqBJN089d jYtUqCH6MG+RyONyHeSGiWonTxzJqAnIQCvnY2D5Y6J54BJAeNYfzxlnV/cN3lxu QivhXZwX3ToPxKonYjMo18cpPgrqJX4md2Iljgs/M3SIGLEPPRu2tG7MfYWSYB7W JyLu7bESCBP51/fBuMwXrnV8T/9dGl5tz8IWAzEhVNIVQnf1KQUkuQ2D4cV0iJgV 7iwyNwxotOnSWHLQLpJg170LMy1b5Ut0QqEf/ME2hpB+qMnP36jG3axlM7w9rgr5 x6EMtXO4EN6WStvoeYi9N2PARI6cMcwM -----END CERTIFICATE-----Generated at Thu May 30 21:37:28 2024 by rpki-client on console-fra.rpki-client.org