$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: xq9UsdMIUchAqLfs0Q5z5ujnTLKH75hd5Y7jPPo1Nmo= Subject key identifier: CE:F3:4A:64:3E:92:A9:08:B9:1C:2D:4F:31:70:02:5E:D2:22:58:4E Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 0399 Signing time: Fri 31 May 2024 03:12:13 +0000 Manifest this update: Fri 31 May 2024 03:12:12 +0000 Manifest next update: Fri 07 Jun 2024 03:12:12 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: 5/WJeWzB9nciwKJEU38w15X/26atsbjTwU1k2ylGXRw=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: iQ99oaJoUMmUEfG2aL4OGWIm2qF8D+Ap84p8hOw/XXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: May 31 03:12:12 2024 GMT Not After : Jun 7 03:12:12 2024 GMT Subject: CN=6659400d-dabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:16:70:cc:88:ce:cb:8f:5d:e5:d6:9f:ae: 51:71:66:6e:a1:41:38:b6:27:11:7e:c7:68:ac:70: c7:fa:57:70:ec:ba:35:9b:a8:f1:b0:23:a4:a6:60: d9:b8:05:1c:c5:60:ae:47:85:f2:14:ee:b8:fd:99: 12:89:7e:e1:31:be:95:5f:76:45:56:c5:5b:8e:33: 1f:b8:3d:5e:0a:dc:0d:2c:a4:06:41:8a:4c:ec:87: 32:72:99:24:c8:2c:19:2c:14:d4:d0:b9:c4:74:e7: b2:97:f8:2f:35:72:8d:7c:75:53:8e:29:fe:00:3c: 8e:34:f8:fd:de:1a:c2:4b:15:c3:17:22:5f:0f:73: 44:73:4c:f9:5c:30:ee:08:f9:11:ce:d9:ce:f8:23: c9:22:dc:15:75:b0:87:7b:54:38:2e:5a:53:a3:87: fb:1f:ad:3a:38:e6:67:4e:36:23:58:6f:c6:dd:e3: 5f:fb:93:b2:57:8e:fb:55:a2:f4:a9:c9:f0:1c:37: 48:22:fe:12:ad:08:f7:78:8d:de:c5:bf:ce:aa:52: 5d:9d:1c:bb:c4:39:6e:11:59:0c:e9:b8:d7:43:b3: 9d:27:fc:49:94:39:7a:24:18:ac:96:9c:a9:23:59: 69:66:13:af:cc:92:3a:b7:cc:13:57:be:29:a0:9f: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F3:4A:64:3E:92:A9:08:B9:1C:2D:4F:31:70:02:5E:D2:22:58:4E X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ba:8e:83:72:7c:a1:00:d9:e8:04:d4:1c:64:d4:19:6d:e4: 86:4f:16:f0:52:61:8b:42:d6:28:76:50:7d:b5:df:95:8d:eb: 88:63:aa:1f:c4:4c:07:f3:4b:8e:5f:dc:39:8b:78:7f:1a:d6: 3c:e1:b5:c8:ca:ea:87:5c:eb:db:52:32:a7:c0:1e:de:47:b3: 12:12:8f:59:14:1e:57:47:0d:97:53:1c:1a:c9:fd:d2:36:58: b7:bc:0b:96:99:f1:8a:e7:17:ee:2c:40:dd:d6:3b:57:22:7e: 10:24:40:f8:02:0d:aa:24:e5:3d:1c:47:59:b4:35:25:2f:1c: 66:69:46:42:85:ca:6c:3f:b3:c7:01:5d:8f:2f:85:c5:8e:ec: b7:96:9f:31:d7:9f:dc:b9:77:78:35:50:91:8c:2e:a9:3d:a1: 62:d3:5a:27:5a:ae:a7:79:95:fa:28:a9:9a:c7:a4:a1:4a:74: a6:a0:2e:2e:79:d0:53:b6:40:ea:18:c6:e1:5d:2a:f1:f0:2c: e8:47:52:1e:90:f7:c4:44:36:f1:1a:7f:0a:70:b7:2f:37:ee: 22:9a:c9:0d:fa:64:58:8e:4f:1a:dd:07:8f:44:81:3c:a1:ad: b2:bd:f2:e3:ad:bd:83:d5:f3:b0:e5:e2:17:28:b4:10:39:a4: 9c:44:88:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjQwNTMxMDMxMjEyWhcNMjQwNjA3MDMxMjEyWjAYMRYwFAYD VQQDEw02NjU5NDAwZC1kYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+gWcMyIzsuPXeXWn65RcWZuoUE4ticRfsdorHDH+ldw7Lo1m6jxsCOkpmDZ uAUcxWCuR4XyFO64/ZkSiX7hMb6VX3ZFVsVbjjMfuD1eCtwNLKQGQYpM7Icycpkk yCwZLBTU0LnEdOeyl/gvNXKNfHVTjin+ADyONPj93hrCSxXDFyJfD3NEc0z5XDDu CPkRztnO+CPJItwVdbCHe1Q4LlpTo4f7H606OOZnTjYjWG/G3eNf+5OyV477VaL0 qcnwHDdIIv4SrQj3eI3exb/OqlJdnRy7xDluEVkM6bjXQ7OdJ/xJlDl6JBislpyp I1lpZhOvzJI6t8wTV74poJ9OiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7zSmQ+ kqkIuRwtTzFwAl7SIlhOMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5uo6DcnyhANnoBNQcZNQZbeSGTxbwUmGLQtYodlB9td+VjeuIY6of xEwH80uOX9w5i3h/GtY84bXIyuqHXOvbUjKnwB7eR7MSEo9ZFB5XRw2XUxwayf3S Nli3vAuWmfGK5xfuLEDd1jtXIn4QJED4Ag2qJOU9HEdZtDUlLxxmaUZChcpsP7PH AV2PL4XFjuy3lp8x15/cuXd4NVCRjC6pPaFi01onWq6neZX6KKmax6ShSnSmoC4u edBTtkDqGMbhXSrx8CzoR1IekPfERDbxGn8KcLcvN+4imskN+mRYjk8a3QePRIE8 oa2yvfLjrb2D1fOw5eIXKLQQOaScRIgo -----END CERTIFICATE-----Generated at Fri May 31 04:53:57 2024 by rpki-client on console-fra.rpki-client.org