$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json) Hash identifier: +w3w5QOdBD6WXFwFDFeSlu2papjg1xEtBi9BPm/dNbs= Subject key identifier: 5A:90:4F:03:20:74:9A:5B:18:2F:5D:DD:BE:13:BA:BA:F3:4B:26:FE Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft Manifest number: 0A6F Signing time: Sat 18 May 2024 20:17:36 +0000 Manifest this update: Sat 18 May 2024 20:17:36 +0000 Manifest next update: Sat 25 May 2024 20:17:36 +0000 Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: h/jGSJ+UUQks0ypWfcHk5Kt+7KMGvGJphN4qZA6/csw=) 2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: ZETQhfk0Fp5f1qtcEW8kFkPD0k4F7OEMuFNGP6BOOho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Validity Not Before: May 18 20:17:36 2024 GMT Not After : May 25 20:17:36 2024 GMT Subject: CN=66490ce0-ed2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:52:15:c9:12:3e:ba:d5:41:72:49:19:d1:dd: 0f:86:be:cf:3d:be:66:f7:38:9a:96:30:a3:84:6a: 04:c6:1b:c9:aa:19:03:1b:e2:91:83:58:6c:36:82: f4:28:7f:d4:71:7d:ca:7f:99:2f:6c:9e:6a:25:f0: 3f:e4:e1:9d:b7:46:4e:7d:c6:3f:a0:9e:34:6b:7a: 06:2d:9b:7a:26:8a:c0:52:9b:41:3e:42:55:eb:8e: 97:66:ab:f7:a1:c4:e1:12:50:22:0d:dc:20:6a:b4: db:fb:9c:2e:be:7f:d6:44:0e:ff:fd:8f:87:58:33: 5f:93:cf:99:4b:d8:11:23:de:40:28:18:fd:dc:97: e8:04:ad:07:02:aa:1a:bc:13:f1:4f:fd:e3:07:70: 48:9c:e9:27:a0:e6:f4:78:98:b0:37:75:8c:f3:65: d0:94:a4:95:84:40:0f:94:55:8e:6f:5b:cd:0c:47: fa:4b:7a:c4:d0:50:27:ee:71:75:08:7a:c2:b3:81: d8:33:2d:4f:2b:2c:64:d8:53:65:63:ed:85:f3:e9: 32:61:91:e0:d5:1c:77:7d:38:63:52:a7:c6:3d:d3: ac:aa:5a:c1:90:1f:a9:45:ee:02:ea:a8:3d:e1:fe: 0f:ac:69:1a:73:44:bb:1b:19:16:b5:65:89:72:28: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:90:4F:03:20:74:9A:5B:18:2F:5D:DD:BE:13:BA:BA:F3:4B:26:FE X509v3 Authority Key Identifier: keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:84:0d:75:93:bf:56:b9:17:14:bf:1a:6f:6f:af:5c:ec:a8: 24:6e:4e:56:96:75:e0:fe:b0:cd:ca:56:1f:03:22:7c:be:03: 39:e8:4d:70:4c:41:35:8b:61:dd:f9:9e:1e:e5:48:36:1f:64: 23:1a:b1:14:9a:90:b1:7d:f6:22:fd:31:90:12:03:a6:39:12: 83:8e:c4:80:8d:f7:86:06:bf:a0:e7:4a:2f:9a:70:94:69:f4: 37:0b:eb:e7:d6:38:90:d9:08:6d:ab:e3:de:aa:c2:fc:09:db: db:82:3a:98:fd:c8:0d:34:89:0f:e0:04:a6:89:aa:48:ec:bb: 55:77:07:b8:6e:5e:64:be:d3:73:89:c1:d5:0b:55:45:6f:67: 5c:c7:39:46:28:bb:44:1d:57:e3:c3:e2:e4:b2:8e:20:7e:32: 33:38:45:7a:9c:ff:d6:cb:c4:b1:15:ee:06:0a:27:2d:7f:9e: dd:82:94:72:88:4b:94:8e:42:c6:55:30:72:3e:cf:ff:c1:25: 2e:f0:15:5a:0a:87:db:4c:3f:4d:49:f8:33:1a:c6:d2:ef:d8: c0:8c:3d:c4:15:f7:98:f5:97:d0:9d:d1:c6:9a:d5:95:f9:0b: 77:b6:39:91:e3:4a:8a:45:9f:f0:d6:d4:4e:8d:9c:6c:3f:33: d1:5e:56:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VCRkQxMTAvBgNVBAUTKEIxNDBBRjA0OTE5QjQ1MTM4MjVBNkVBNTdFMUFCOUU1 NDM3OUUzQzgwHhcNMjQwNTE4MjAxNzM2WhcNMjQwNTI1MjAxNzM2WjAYMRYwFAYD VQQDEw02NjQ5MGNlMC1lZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVIVyRI+utVBckkZ0d0Phr7PPb5m9zialjCjhGoExhvJqhkDG+KRg1hsNoL0 KH/UcX3Kf5kvbJ5qJfA/5OGdt0ZOfcY/oJ40a3oGLZt6JorAUptBPkJV646XZqv3 ocThElAiDdwgarTb+5wuvn/WRA7//Y+HWDNfk8+ZS9gRI95AKBj93JfoBK0HAqoa vBPxT/3jB3BInOknoOb0eJiwN3WM82XQlKSVhEAPlFWOb1vNDEf6S3rE0FAn7nF1 CHrCs4HYMy1PKyxk2FNlY+2F8+kyYZHg1Rx3fThjUqfGPdOsqlrBkB+pRe4C6qg9 4f4PrGkac0S7GxkWtWWJcihLsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqQTwMg dJpbGC9d3b4TurrzSyb+MB8GA1UdIwQYMBaAFLFArwSRm0UTglpupX4aueVDeePI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUJGRC9GN0NFNjI5QTNB OEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJST0NXbTZsZmhxNTVVTjU0 OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQ3ZCSkdiUlJPQ1dtNmxmaHE1NVVONTQ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUJGRC9GN0NFNjI5QTNBOEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJS T0NXbTZsZmhxNTVVTjU0OGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADhA11k79WuRcUvxpvb69c7Kgkbk5WlnXg/rDNylYfAyJ8vgM56E1w TEE1i2Hd+Z4e5Ug2H2QjGrEUmpCxffYi/TGQEgOmORKDjsSAjfeGBr+g50ovmnCU afQ3C+vn1jiQ2Qhtq+PeqsL8CdvbgjqY/cgNNIkP4ASmiapI7LtVdwe4bl5kvtNz icHVC1VFb2dcxzlGKLtEHVfjw+Lkso4gfjIzOEV6nP/Wy8SxFe4GCictf57dgpRy iEuUjkLGVTByPs//wSUu8BVaCofbTD9NSfgzGsbS79jAjD3EFfeY9ZfQndHGmtWV +Qt3tjmR40qKRZ/w1tROjZxsPzPRXlba -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org