$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json) Hash identifier: paiBYxvX0Apmx7Uco+zp+iA9FWMKPvH+9rFZibOswjU= Subject key identifier: 50:D7:37:D7:92:16:F1:08:2B:35:42:B5:E3:5A:6A:C5:8D:39:5F:DF Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft Manifest number: 041B Signing time: Sun 19 May 2024 02:04:45 +0000 Manifest this update: Sun 19 May 2024 02:04:44 +0000 Manifest next update: Sun 26 May 2024 02:04:44 +0000 Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: JLvIiBrS93GyzGIw458pE3ysswLxI5gPVuV7ksE5qiM=) 2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: xuNPoQW5Sclu5fxPt+X51lXN3IhBBm070ZX1wE64d00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Validity Not Before: May 19 02:04:44 2024 GMT Not After : May 26 02:04:44 2024 GMT Subject: CN=66495e3d-e8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fd:ef:37:9d:7f:44:14:77:18:de:99:9e:61: e9:fe:10:5b:6e:d1:ba:17:0d:10:58:89:46:00:d6: eb:b2:28:c8:e8:eb:68:fe:28:eb:b3:f2:d6:b0:86: 83:23:9b:fa:06:25:47:ee:3a:ea:45:12:b4:f0:2d: 07:39:33:37:08:1c:3c:46:6d:a1:cc:ef:f0:d5:30: a7:e4:00:a6:ab:c1:8a:fd:73:8c:6d:ad:d0:bc:ca: b2:47:4f:0e:0e:c7:20:ad:a2:70:fb:10:14:df:ae: 36:27:80:ef:fd:0b:b4:e0:ee:e5:34:4a:bf:a3:1c: 07:3f:04:03:60:96:df:6a:b5:78:13:f6:bd:cd:35: e2:db:8d:8a:fd:6e:93:68:d9:e6:71:e2:5c:0d:7a: 1c:28:19:47:6f:5a:78:8c:48:66:6f:5e:40:60:42: 31:f6:24:5d:7c:b0:17:74:fd:62:67:a2:6d:10:ee: 70:b3:15:1e:2e:ba:a1:84:d4:23:7d:77:7e:a0:18: 5d:4b:52:f4:af:34:c8:8f:7e:53:6c:65:e0:66:2f: 89:3b:00:42:71:97:2a:11:24:dc:26:52:86:8e:36: 26:7f:24:1b:40:d4:11:bf:8f:84:50:a2:1f:15:85: 3c:d5:3d:72:37:43:44:a8:72:a1:fd:62:32:3c:c2: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D7:37:D7:92:16:F1:08:2B:35:42:B5:E3:5A:6A:C5:8D:39:5F:DF X509v3 Authority Key Identifier: keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fc:07:6a:33:28:52:8d:91:e6:73:6c:26:b1:6a:3e:5f:50: 72:11:17:00:c5:6c:b0:39:cc:35:a8:27:ee:d0:a8:53:87:c4: b8:af:c2:44:22:65:52:e0:6f:3e:37:27:15:22:b0:e5:9c:d2: ff:02:bc:0a:c0:44:4b:47:2c:0d:60:1f:3e:3b:73:4b:b7:f6: c5:16:4d:0c:82:59:d3:7d:e7:16:25:15:12:73:f0:fb:ac:29: 68:b0:b0:e9:57:83:54:9c:f1:de:fe:52:a4:c8:d5:87:ae:9f: 1d:16:1c:23:4a:53:14:dc:4c:74:11:f4:d9:fe:ba:0e:31:22: 7a:60:fa:a5:b1:a4:da:3b:6e:84:99:13:92:d4:64:3d:dc:a8: 42:45:14:1d:0a:c3:27:5f:b0:34:46:96:3e:60:99:23:14:fe: 4f:25:fc:37:7b:06:45:53:e6:fa:b5:ab:34:e7:47:48:6c:0b: 98:df:fe:dd:5e:28:57:75:d4:11:fc:07:fd:67:8f:cc:63:77: 9c:62:c7:83:ed:17:24:aa:e4:f7:49:db:31:39:bb:57:eb:4b: d0:b3:9c:73:04:94:a0:ed:ec:ef:1e:f6:04:fb:58:fa:58:94: c2:75:e8:60:d8:1a:18:79:81:17:5f:7a:22:df:6e:ae:02:49: 10:9b:43:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE NTA1MzMyMTAwHhcNMjQwNTE5MDIwNDQ0WhcNMjQwNTI2MDIwNDQ0WjAYMRYwFAYD VQQDEw02NjQ5NWUzZC1lOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/3vN51/RBR3GN6ZnmHp/hBbbtG6Fw0QWIlGANbrsijI6Oto/ijrs/LWsIaD I5v6BiVH7jrqRRK08C0HOTM3CBw8Rm2hzO/w1TCn5ACmq8GK/XOMba3QvMqyR08O DscgraJw+xAU3642J4Dv/Qu04O7lNEq/oxwHPwQDYJbfarV4E/a9zTXi242K/W6T aNnmceJcDXocKBlHb1p4jEhmb15AYEIx9iRdfLAXdP1iZ6JtEO5wsxUeLrqhhNQj fXd+oBhdS1L0rzTIj35TbGXgZi+JOwBCcZcqESTcJlKGjjYmfyQbQNQRv4+EUKIf FYU81T1yN0NEqHKh/WIyPMJeXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDXN9eS FvEIKzVCteNaasWNOV/fMB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2 VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB/AdqMyhSjZHmc2wmsWo+X1ByERcAxWywOcw1qCfu0KhTh8S4r8JE ImVS4G8+NycVIrDlnNL/ArwKwERLRywNYB8+O3NLt/bFFk0MglnTfecWJRUSc/D7 rClosLDpV4NUnPHe/lKkyNWHrp8dFhwjSlMU3Ex0EfTZ/roOMSJ6YPqlsaTaO26E mROS1GQ93KhCRRQdCsMnX7A0RpY+YJkjFP5PJfw3ewZFU+b6tas050dIbAuY3/7d XihXddQR/Af9Z4/MY3ecYseD7RckquT3SdsxObtX60vQs5xzBJSg7ezvHvYE+1j6 WJTCdehg2BoYeYEXX3oi326uAkkQm0PY -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org