$ rpki-client -vvf rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft File: 36eHBr7lUhobW1FFcB5ZTzxdIJY.mft (raw, json) Hash identifier: +JLE+HFOWdrbA0Vj1THB5ObKc/1t6YjMgcVfl1BxORk= Subject key identifier: D4:7C:60:64:4E:FF:CE:8E:4F:81:22:5A:77:11:47:D4:83:8F:17:EE Authority key identifier: DF:A7:87:06:BE:E5:52:1A:1B:5B:51:45:70:1E:59:4F:3C:5D:20:96 Certificate issuer: /CN=A914198D/serialNumber=DFA78706BEE5521A1B5B5145701E594F3C5D2096 Certificate serial: 1804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft Manifest number: 17F6 Signing time: Sat 18 May 2024 16:58:01 +0000 Manifest this update: Sat 18 May 2024 16:58:01 +0000 Manifest next update: Sat 25 May 2024 16:58:01 +0000 Files and hashes: 1: 36eHBr7lUhobW1FFcB5ZTzxdIJY.crl (hash: p26hQ0pORqi2JinFnzUm5ivM4//8Qqh89IuT+k/qKKI=) 2: EF1C408E00D011E984290942C4F9AE02.roa (hash: 0PAnzUInV03UZR5iN2dpuaK0+fI0pu22WXuMDgJpFwU=) 3: 86E59A2A92D511E7A23CEC7DC4F9AE02.roa (hash: WXJao2gsWrnx2NQP0EgrwNB/OMx3i5uACixQKSoC0WE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.crl rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6148 (0x1804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914198D/serialNumber=DFA78706BEE5521A1B5B5145701E594F3C5D2096 Validity Not Before: May 18 16:58:01 2024 GMT Not After : May 25 16:58:01 2024 GMT Subject: CN=6648de19-e8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:eb:75:ec:2e:ed:2d:53:3b:a7:be:b5:94: ce:3b:55:1c:db:b7:47:eb:f4:62:74:09:46:54:05: 05:0a:d0:cd:fc:5a:82:47:c4:f5:d8:26:e2:a4:75: f8:2a:ca:da:0d:b9:2d:75:9b:47:9a:62:c0:4a:15: dc:5c:8c:97:d6:41:72:63:18:df:ce:d3:8d:7e:07: a9:d0:59:5a:96:73:db:37:dd:e6:4f:f1:23:a7:b3: b3:bb:b2:e6:61:33:fe:24:d0:91:09:34:c8:97:09: 36:42:37:30:40:f3:86:93:09:53:de:b9:6f:3b:61: 49:b8:19:36:4a:87:9c:39:06:b5:e9:0f:6c:5a:ba: 95:9e:63:1e:56:87:a1:aa:07:37:21:11:e4:c0:01: 2e:39:6e:2f:f0:74:f4:43:66:51:96:3b:b4:58:8b: 9b:87:91:53:fa:68:5b:e1:c1:45:1d:75:ab:fe:cb: 1f:7b:46:3a:2f:fb:84:9e:09:ed:64:00:34:2a:c4: 15:bf:18:77:db:85:86:5e:63:54:65:89:3a:2d:21: 37:f9:62:6c:ac:50:d8:a5:08:99:3d:10:1c:0a:e0: 99:76:4e:95:0c:66:8e:1a:c7:ba:8a:57:94:16:8c: 0b:fe:ee:22:fd:ab:8d:49:4e:7b:ec:43:50:00:e1: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7C:60:64:4E:FF:CE:8E:4F:81:22:5A:77:11:47:D4:83:8F:17:EE X509v3 Authority Key Identifier: keyid:DF:A7:87:06:BE:E5:52:1A:1B:5B:51:45:70:1E:59:4F:3C:5D:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:23:c5:e4:17:48:cd:f3:9a:e0:bd:a6:b9:5b:9f:9b:2c:ae: 92:4b:91:43:8b:3f:db:af:c8:6d:fd:d3:cb:79:36:8d:e2:3d: 54:62:2e:7c:9a:95:94:87:26:70:bd:2e:ba:a3:f5:e2:61:00: 32:c7:b9:62:b3:84:0d:5a:13:3e:d5:9d:7a:24:82:c2:71:20: e3:d6:a5:44:e7:3f:a2:20:10:e4:7e:cc:91:8d:bd:ea:f5:06: 90:eb:8d:78:d7:15:00:57:a8:7f:71:3c:25:89:79:62:95:78: aa:37:46:2a:7d:e2:3e:49:af:40:05:11:16:91:22:aa:2f:2a: ed:c7:24:37:b8:3a:37:f5:06:8e:37:c9:b2:9e:46:00:7e:54: 73:e7:2e:b1:db:d6:05:5d:2d:41:ed:a7:af:c6:48:4e:30:a5: 83:42:5c:e1:c6:8c:5a:94:8d:ce:34:26:d4:0d:7d:e9:40:b3: 4d:21:d1:f8:08:1a:12:30:b3:50:eb:15:1e:c5:bd:51:fa:0b: ac:7f:a6:7e:b5:b8:84:a2:3e:17:53:a1:23:b1:1b:37:47:2d: a1:d7:ac:1c:e8:77:d1:8d:e7:27:62:2b:de:4a:10:ac:b3:d3: 0b:24:29:5e:e1:91:90:e1:bb:8e:c7:f0:fe:e6:97:70:d7:3d: d1:97:01:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5OEQxMTAvBgNVBAUTKERGQTc4NzA2QkVFNTUyMUExQjVCNTE0NTcwMUU1OTRG M0M1RDIwOTYwHhcNMjQwNTE4MTY1ODAxWhcNMjQwNTI1MTY1ODAxWjAYMRYwFAYD VQQDEw02NjQ4ZGUxOS1lOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz7rdewu7S1TO6e+tZTOO1Uc27dH6/RidAlGVAUFCtDN/FqCR8T12CbipHX4 KsraDbktdZtHmmLAShXcXIyX1kFyYxjfztONfgep0FlalnPbN93mT/Ejp7Ozu7Lm YTP+JNCRCTTIlwk2QjcwQPOGkwlT3rlvO2FJuBk2SoecOQa16Q9sWrqVnmMeVoeh qgc3IRHkwAEuOW4v8HT0Q2ZRlju0WIubh5FT+mhb4cFFHXWr/ssfe0Y6L/uEngnt ZAA0KsQVvxh324WGXmNUZYk6LSE3+WJsrFDYpQiZPRAcCuCZdk6VDGaOGse6ileU FowL/u4i/auNSU577ENQAOGIhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR8YGRO /86OT4EiWncRR9SDjxfuMB8GA1UdIwQYMBaAFN+nhwa+5VIaG1tRRXAeWU88XSCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk4RC9BQTVCOUJDQzky RDQxMUU3QUY1MjQ4N0RDNEY5QUUwMi8zNmVIQnI3bFVob2JXMUZGY0I1WlR6eGRJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2ZUhCcjdsVWhvYlcxRkZjQjVaVHp4ZElKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk4RC9BQTVCOUJDQzkyRDQxMUU3QUY1MjQ4N0RDNEY5QUUwMi8zNmVIQnI3bFVo b2JXMUZGY0I1WlR6eGRJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuI8XkF0jN85rgvaa5W5+bLK6SS5FDiz/br8ht/dPLeTaN4j1UYi58 mpWUhyZwvS66o/XiYQAyx7lis4QNWhM+1Z16JILCcSDj1qVE5z+iIBDkfsyRjb3q 9QaQ64141xUAV6h/cTwliXlilXiqN0YqfeI+Sa9ABREWkSKqLyrtxyQ3uDo39QaO N8mynkYAflRz5y6x29YFXS1B7aevxkhOMKWDQlzhxoxalI3ONCbUDX3pQLNNIdH4 CBoSMLNQ6xUexb1R+gusf6Z+tbiEoj4XU6EjsRs3Ry2h16wc6HfRjecnYiveShCs s9MLJCle4ZGQ4buOx/D+5pdw1z3RlwGc -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org