$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: uM2ZlqwZ4UBUOUlx7Ltsinz7qWKqTrfgceWvkMxcPOw= Subject key identifier: 46:EE:19:10:28:A2:E1:9D:E6:B0:BB:0A:73:B0:FF:26:DE:B8:D6:32 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 09B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 09B4 Signing time: Sat 18 May 2024 20:48:56 +0000 Manifest this update: Sat 18 May 2024 20:48:56 +0000 Manifest next update: Sat 25 May 2024 20:48:56 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: 68kK6W0CjGPFZgwtAXNakkNihMQ//XcNbbJIQAmXbpc=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: o3CpPx5HlaikS1syR+TkMDr+suz5m810ICzOqnyhfhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: May 18 20:48:56 2024 GMT Not After : May 25 20:48:56 2024 GMT Subject: CN=66491438-e407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:ff:fb:1d:68:7a:6b:14:bb:7b:10:0c:fd: ab:60:50:80:21:03:47:ac:69:08:41:2f:6c:57:ec: 40:a3:8b:25:5b:cf:ca:ae:af:d8:2a:5b:38:f2:58: c4:77:d2:9d:ec:07:a8:b5:d1:e8:1e:b4:40:7c:a5: 76:0b:b2:cf:8b:42:fb:1c:19:38:bf:50:1e:de:7c: b1:26:19:cf:ff:f0:a4:93:55:c7:66:25:26:92:55: ce:4b:14:16:53:d0:9b:d4:6d:14:eb:b9:d5:6c:dc: 33:83:9a:bc:a8:49:bf:61:85:00:14:62:f7:89:19: 12:3a:f8:f5:48:00:15:b2:fe:d4:7f:50:10:7a:5e: 40:4f:96:3b:e3:11:ee:ca:42:3e:c4:36:2d:4e:d8: 4d:bc:5d:84:46:95:39:68:ec:d6:77:73:ef:aa:74: f4:fb:c3:71:b8:d3:73:84:45:70:68:6a:d0:6b:c0: 05:fb:84:ad:27:99:16:4a:64:13:bc:39:61:fe:87: ce:ca:ea:53:bb:19:6b:b9:68:10:4e:9a:9c:a2:78: 04:90:de:0d:58:0d:70:2c:09:54:5f:d7:bb:46:ca: 82:7d:5a:6f:f3:4f:3e:a1:63:2a:2a:ab:dd:7e:bf: f3:a8:37:89:77:af:35:da:19:da:03:ca:de:e0:7e: 34:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EE:19:10:28:A2:E1:9D:E6:B0:BB:0A:73:B0:FF:26:DE:B8:D6:32 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c4:fb:cb:eb:55:fb:71:44:eb:0d:bf:5b:fe:28:e6:9f:27: 74:1d:bd:b5:cc:2d:66:f0:a5:ce:52:cc:8d:3e:ee:c5:0c:ac: 47:6b:9d:59:fd:72:b2:86:37:c8:81:91:a5:a4:63:39:97:5e: 25:0f:40:df:54:83:e2:ba:47:b7:87:95:71:14:a3:5f:49:49: 1d:ac:34:5a:a6:d1:97:a6:f4:b2:4d:3b:a9:e8:27:ae:fd:70: 2d:7d:d9:5b:7e:29:67:65:d6:bf:28:08:3c:71:21:50:2f:39: 5b:0f:25:17:cd:9c:4c:9f:9e:96:13:8f:f2:47:fb:c0:6b:01: 51:e4:1d:20:b4:a3:41:9a:15:9d:21:4d:78:57:f0:99:d1:92: 3f:c0:7b:ed:8e:b4:88:c4:4e:90:e4:9d:be:77:4c:f5:20:b4: 9a:3d:08:ce:57:7b:c3:24:0c:48:26:6f:d2:65:e4:2d:5d:a9: 09:d7:2e:8a:a6:5d:d5:a0:66:41:54:33:de:1b:ec:b7:f3:53: 70:1b:50:ab:8b:43:d1:ee:a6:7e:1e:85:5a:59:61:34:68:51: 93:0b:7d:ec:17:7f:b3:e4:c4:23:ea:c7:de:5e:1d:e1:45:60: 9a:70:1d:f5:34:ff:d9:f3:0c:d8:65:35:b4:4e:1a:52:99:88: af:7c:18:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjQwNTE4MjA0ODU2WhcNMjQwNTI1MjA0ODU2WjAYMRYwFAYD VQQDEw02NjQ5MTQzOC1lNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthr/+x1oemsUu3sQDP2rYFCAIQNHrGkIQS9sV+xAo4slW8/Krq/YKls48ljE d9Kd7AeotdHoHrRAfKV2C7LPi0L7HBk4v1Ae3nyxJhnP//Ckk1XHZiUmklXOSxQW U9Cb1G0U67nVbNwzg5q8qEm/YYUAFGL3iRkSOvj1SAAVsv7Uf1AQel5AT5Y74xHu ykI+xDYtTthNvF2ERpU5aOzWd3PvqnT0+8NxuNNzhEVwaGrQa8AF+4StJ5kWSmQT vDlh/ofOyupTuxlruWgQTpqcongEkN4NWA1wLAlUX9e7RsqCfVpv808+oWMqKqvd fr/zqDeJd6812hnaA8re4H40rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbuGRAo ouGd5rC7CnOw/ybeuNYyMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLxPvL61X7cUTrDb9b/ijmnyd0Hb21zC1m8KXOUsyNPu7FDKxHa51Z /XKyhjfIgZGlpGM5l14lD0DfVIPiuke3h5VxFKNfSUkdrDRaptGXpvSyTTup6Ceu /XAtfdlbfilnZda/KAg8cSFQLzlbDyUXzZxMn56WE4/yR/vAawFR5B0gtKNBmhWd IU14V/CZ0ZI/wHvtjrSIxE6Q5J2+d0z1ILSaPQjOV3vDJAxIJm/SZeQtXakJ1y6K pl3VoGZBVDPeG+y381NwG1Cri0PR7qZ+HoVaWWE0aFGTC33sF3+z5MQj6sfeXh3h RWCacB31NP/Z8wzYZTW0ThpSmYivfBjR -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org