$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: +uJeqPlWdZjdQlLT8OCDT0PAuZnZDGcFiNYYl/aSfxY= Subject key identifier: 4B:4E:05:47:61:99:21:A7:E2:58:93:E3:EC:74:40:E5:C4:BD:E8:7D Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 0752 Signing time: Sat 18 May 2024 22:21:44 +0000 Manifest this update: Sat 18 May 2024 22:21:43 +0000 Manifest next update: Sat 25 May 2024 22:21:43 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: 3mW+3H2GP15bAKT9W5s7a6EjEZYP9NbYUH4U3c3I9DE=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: pjchJ6cFRSOrYYA+BU/yT4PSr0ftFhi06QMViMdoOGo=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: QHVhADIvelk+RcB2dDEApwkg1zDr9XWT50JUlNL3d6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: May 18 22:21:43 2024 GMT Not After : May 25 22:21:43 2024 GMT Subject: CN=664929f8-9fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:70:63:82:17:f5:68:3f:c2:d8:d9:70:f9:e0: 42:16:3d:fe:08:47:c8:21:c5:e3:2b:98:f5:ce:ad: a8:8c:80:51:2a:42:c8:9e:7f:87:e5:1b:b5:58:44: 7b:d6:26:cd:64:64:5f:7e:6b:a6:b3:0b:b3:60:6a: 62:8e:5e:7d:c8:39:15:e4:d9:bb:54:2f:b7:33:b3: 70:2b:a2:f1:76:91:0d:99:71:e9:d0:1e:91:70:c7: 97:15:db:57:cd:16:7f:dd:14:c7:55:c4:73:0f:a3: 75:50:54:e3:1b:a3:11:f9:00:cb:b3:bd:cc:29:eb: 08:12:20:17:ae:b3:bb:b9:a7:d4:79:cb:05:74:a8: 31:7d:98:06:38:35:70:9e:b5:39:a6:e1:e3:5c:57: d1:67:c1:73:95:1f:0b:ed:67:3f:3b:65:01:1e:ad: 45:38:51:17:9b:3b:25:c3:5f:06:4e:d8:f4:0a:d6: c5:51:67:85:ca:3e:eb:96:52:e8:1f:fb:b3:19:13: 7b:4b:09:d9:d5:41:b6:ff:0b:b4:2d:96:6a:c1:b1: 78:df:8c:0c:24:a1:80:c9:eb:a3:90:6c:ce:e1:d3: 2c:e0:9b:31:51:da:1f:eb:e7:4f:44:cd:c8:ef:a5: da:c1:a7:9b:b5:4a:a2:d5:17:8d:f5:d9:ca:cb:8b: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:05:47:61:99:21:A7:E2:58:93:E3:EC:74:40:E5:C4:BD:E8:7D X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:54:9e:32:f4:30:08:bf:94:94:76:f1:80:f2:ac:e4:95:f2: 24:58:c0:8c:b3:74:9e:bf:50:b5:e4:54:3a:2e:35:cc:13:55: 63:1f:60:5c:99:91:33:9b:8d:80:d9:3f:28:3d:83:c5:c8:cc: c2:2d:1a:35:40:26:c9:90:27:4d:5b:c8:de:34:02:37:d2:35: 24:67:55:7d:f3:9c:69:a5:5d:b6:30:8a:f2:b2:f7:e4:92:3b: dd:98:33:92:a9:b6:63:35:66:b5:2a:1b:72:4b:7f:f2:5a:20: 56:88:e7:cf:58:1f:f2:19:40:e1:bc:e0:d9:71:35:e5:f4:f1: e2:b5:74:91:41:91:76:67:72:9f:2d:26:32:8c:36:15:a4:6e: 67:5c:39:40:6d:6d:fe:bc:dc:29:45:60:47:83:f5:ed:b8:2d: d9:a8:0d:f6:5e:43:c7:20:08:19:72:d1:b0:52:da:a9:5e:0b: b1:2b:58:c1:8d:bf:6f:09:a2:4a:c5:04:09:e5:34:4d:5f:f9: b4:45:f6:06:91:0c:a5:4f:d7:54:89:90:56:9b:ce:58:bd:77: 8c:fc:cb:f7:63:9e:8a:3b:72:f4:02:88:35:0a:f8:39:a1:bb: 1a:b6:7c:54:8c:32:89:52:3f:6a:c4:b8:e1:ef:f4:44:7c:6e: 50:23:ce:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjQwNTE4MjIyMTQzWhcNMjQwNTI1MjIyMTQzWjAYMRYwFAYD VQQDEw02NjQ5MjlmOC05ZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XBjghf1aD/C2Nlw+eBCFj3+CEfIIcXjK5j1zq2ojIBRKkLInn+H5Ru1WER7 1ibNZGRffmumswuzYGpijl59yDkV5Nm7VC+3M7NwK6LxdpENmXHp0B6RcMeXFdtX zRZ/3RTHVcRzD6N1UFTjG6MR+QDLs73MKesIEiAXrrO7uafUecsFdKgxfZgGODVw nrU5puHjXFfRZ8FzlR8L7Wc/O2UBHq1FOFEXmzslw18GTtj0CtbFUWeFyj7rllLo H/uzGRN7SwnZ1UG2/wu0LZZqwbF434wMJKGAyeujkGzO4dMs4JsxUdof6+dPRM3I 76XawaebtUqi1ReN9dnKy4vLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtOBUdh mSGn4liT4+x0QOXEveh9MB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVVJ4y9DAIv5SUdvGA8qzklfIkWMCMs3Sev1C15FQ6LjXME1VjH2Bc mZEzm42A2T8oPYPFyMzCLRo1QCbJkCdNW8jeNAI30jUkZ1V985xppV22MIrysvfk kjvdmDOSqbZjNWa1KhtyS3/yWiBWiOfPWB/yGUDhvODZcTXl9PHitXSRQZF2Z3Kf LSYyjDYVpG5nXDlAbW3+vNwpRWBHg/XtuC3ZqA32XkPHIAgZctGwUtqpXguxK1jB jb9vCaJKxQQJ5TRNX/m0RfYGkQylT9dUiZBWm85YvXeM/Mv3Y56KO3L0Aog1Cvg5 obsatnxUjDKJUj9qxLjh7/REfG5QI86m -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org