$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json) Hash identifier: cZn6ESChSTxyZVZZx3FJJzAzlOJV6MF3w5hDCCM/mZU= Subject key identifier: 30:D0:E2:BC:8C:40:F6:BA:24:64:1C:53:7F:F7:56:18:43:44:B3:62 Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft Manifest number: 0C89 Signing time: Sat 18 May 2024 18:53:00 +0000 Manifest this update: Sat 18 May 2024 18:52:59 +0000 Manifest next update: Sat 25 May 2024 18:52:59 +0000 Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: O4J3VDEN+gS2tNrsDKR3F+Zo8QC2ylq4OO4OJVw5gu8=) 2: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: P80+uWRXwvIn4L5xncnAVkiDcuvOM72wP1XIN0RCgfo=) 3: A5B98912C77D11EB9DF68B6AC4F9AE02.roa (hash: 05zuRjf75fXjXAeo4t4GpINbZ90yUo1Y+dwQD0T3Pic=) 4: 25FE5A80EA4B11EC9ADD4880C4F9AE02.roa (hash: Tzm4qp5O30nPfExQ3FdwQ1VuUd6UMJOU0kqrYrw7PDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Validity Not Before: May 18 18:52:59 2024 GMT Not After : May 25 18:52:59 2024 GMT Subject: CN=6648f90c-d1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:aa:52:6e:fe:b3:dc:80:3b:1b:71:94:2b: 70:87:44:04:14:44:d7:8a:60:09:c2:00:96:ba:48: e1:fd:a3:52:92:15:44:e5:b4:0e:3d:8b:95:10:24: a4:dc:6e:20:f3:8e:6a:a6:8e:04:e9:d5:78:d2:6b: 9e:51:e3:bb:1a:fd:85:34:f3:1f:5c:20:bb:5e:62: b6:79:e9:a5:f9:cd:c7:a6:17:ac:0b:5b:8a:5c:42: 15:c1:bb:43:65:5e:e5:99:bc:29:6b:cc:d5:ab:41: cb:7d:b7:f5:fd:1a:ca:db:1f:b6:a3:d3:3c:6c:72: 03:06:aa:b1:10:c8:e4:7f:25:d0:b2:e5:a6:be:d2: 44:e3:9b:8d:d3:9d:6c:6b:00:a7:6e:c4:84:12:65: 8c:55:6b:40:b8:c6:ba:28:e5:92:8a:3d:ca:2f:99: 5b:56:63:79:7a:38:b2:a9:30:02:3e:36:88:ef:5d: 79:43:b1:0e:af:06:d1:c3:9e:60:d2:1f:db:08:dc: 00:31:08:8c:fd:0d:16:26:9a:13:b2:30:0f:59:02: d4:b7:b5:52:5f:77:aa:04:5b:06:e2:c4:e2:88:d3: 0c:93:23:c8:95:f3:5f:c5:cb:e0:a4:7d:69:cb:aa: 9b:e0:ab:5b:d1:3c:2d:76:a8:4f:f2:f2:19:9b:2c: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:E2:BC:8C:40:F6:BA:24:64:1C:53:7F:F7:56:18:43:44:B3:62 X509v3 Authority Key Identifier: keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:c5:48:f1:db:1e:63:0f:3d:5e:51:a2:c7:0e:3a:bf:48: 11:ce:aa:eb:9d:d6:a7:d4:f3:55:49:f0:21:8f:6d:27:f4:f8: 52:26:1a:19:85:28:13:51:4c:53:70:c0:29:5c:51:1f:d7:51: dc:0a:6a:61:96:76:d2:25:74:d8:1b:d1:fa:40:58:ea:73:8e: 44:91:09:9c:f7:39:78:28:1f:a8:dd:cf:6b:c9:32:ee:d7:87: 19:12:25:19:b9:65:e3:cf:2d:b6:f9:5f:68:87:dd:d8:59:d1: af:39:dc:34:65:43:ce:4f:72:ad:84:b0:1f:50:fe:22:ea:51: 6a:a5:ff:13:cb:dd:f6:88:ec:75:b4:f5:5b:f9:25:0a:be:51: ce:64:a9:40:b8:d4:fb:a1:a1:fd:de:98:2a:f1:21:83:84:71: c7:03:58:7b:65:a1:d7:81:ba:be:67:c5:74:bb:eb:5c:83:e7: 71:3d:fb:46:3d:77:9c:dc:d7:3a:5d:68:b0:7a:a3:5e:65:dd: 40:6e:a1:a9:a7:d3:71:45:ab:68:d8:78:e3:77:f6:b7:89:e5: 30:5d:20:a9:bf:c0:54:f7:8d:87:30:0a:2c:e1:fe:7b:76:f6: 19:e5:2c:91:3e:43:de:08:ab:8d:dc:b1:0a:12:c5:61:4e:c8: f7:23:68:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzMEExMTAvBgNVBAUTKEVCODExQjE0ODhCMjBGMTI2NjRFNjQ4QTgyNjI0QTMw NTA2ODlGMjUwHhcNMjQwNTE4MTg1MjU5WhcNMjQwNTI1MTg1MjU5WjAYMRYwFAYD VQQDEw02NjQ4ZjkwYy1kMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04GqUm7+s9yAOxtxlCtwh0QEFETXimAJwgCWukjh/aNSkhVE5bQOPYuVECSk 3G4g845qpo4E6dV40mueUeO7Gv2FNPMfXCC7XmK2eeml+c3HphesC1uKXEIVwbtD ZV7lmbwpa8zVq0HLfbf1/RrK2x+2o9M8bHIDBqqxEMjkfyXQsuWmvtJE45uN051s awCnbsSEEmWMVWtAuMa6KOWSij3KL5lbVmN5ejiyqTACPjaI7115Q7EOrwbRw55g 0h/bCNwAMQiM/Q0WJpoTsjAPWQLUt7VSX3eqBFsG4sTiiNMMkyPIlfNfxcvgpH1p y6qb4Ktb0TwtdqhP8vIZmywnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDQ4ryM QPa6JGQcU3/3VhhDRLNiMB8GA1UdIwQYMBaAFOuBGxSIsg8SZk5kioJiSjBQaJ8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDMwQS9CODU0MjRGOEQ0 OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4Sm1UbVNLZ21KS01GQm9u eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RWJGSWl5RHhKbVRtU0tnbUpLTUZCb255VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDMwQS9CODU0MjRGOEQ0OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4 Sm1UbVNLZ21KS01GQm9ueVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf1MVI8dseYw89XlGixw46v0gRzqrrndan1PNVSfAhj20n9PhSJhoZ hSgTUUxTcMApXFEf11HcCmphlnbSJXTYG9H6QFjqc45EkQmc9zl4KB+o3c9ryTLu 14cZEiUZuWXjzy22+V9oh93YWdGvOdw0ZUPOT3KthLAfUP4i6lFqpf8Ty932iOx1 tPVb+SUKvlHOZKlAuNT7oaH93pgq8SGDhHHHA1h7ZaHXgbq+Z8V0u+tcg+dxPftG PXec3Nc6XWiweqNeZd1AbqGpp9NxRato2Hjjd/a3ieUwXSCpv8BU942HMAos4f57 dvYZ5SyRPkPeCKuN3LEKEsVhTsj3I2g+ -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org