$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: 92Hh2/84YNAS82+AAidNWgAX+fINWd5M4LDbgUAwOT8= Subject key identifier: A1:84:F8:15:20:37:45:D9:D9:48:FC:62:B1:1C:0A:E5:6B:86:D8:B5 Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0C17 Signing time: Sat 18 May 2024 15:51:33 +0000 Manifest this update: Sat 18 May 2024 15:51:33 +0000 Manifest next update: Sat 25 May 2024 15:51:33 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: zW6SLhUEXQD0GiMQfGmM2r6twZKzt3ceGEUGoDzTOec=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: u9XcFMNOWRiuzju3cAHSa9N+UCOwcEj6Zwrcz9GckRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: May 18 15:51:33 2024 GMT Not After : May 25 15:51:33 2024 GMT Subject: CN=6648ce85-b2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:ae:d0:ec:aa:3c:4b:1e:22:5f:06:16:0e: ee:5f:d8:82:b9:26:d9:72:75:5f:81:64:f9:c1:a5: 94:19:e3:ca:76:ba:a0:dd:91:cc:a8:7c:0f:14:f4: a3:31:46:78:48:76:bd:8b:4c:dd:a6:b2:97:4f:94: 0c:83:0c:3c:02:3d:a8:12:fd:dc:c9:f1:b0:a9:f7: b4:f7:dc:d5:dc:b9:89:f2:84:86:a6:66:5a:ef:7f: 5b:10:8d:c0:e0:73:19:62:ae:e2:88:9c:1a:29:c5: a4:c8:1d:d5:ba:50:5c:74:2b:c5:02:98:23:36:01: 07:c8:5b:9a:cc:b0:7e:bc:cc:a4:b7:16:70:05:20: 9d:cd:eb:a3:de:9e:26:30:37:45:27:b0:bc:1c:a9: b3:27:7d:fa:de:fb:94:e6:21:22:c9:21:c0:7c:54: 1e:b3:51:c5:15:70:aa:3e:e1:e1:45:d8:d5:fa:1b: 0f:88:b6:8e:d2:e3:0c:83:0a:e3:67:e6:97:0c:73: d0:bb:3b:57:7c:62:86:2b:46:0f:d2:71:fb:2c:69: 15:ee:2a:1f:e2:25:83:b6:c9:2d:53:ee:67:57:a1: 24:81:e6:9f:e9:6f:5b:ce:d8:06:81:81:d3:80:18: fa:54:f1:2d:87:d3:db:51:0d:4d:f9:88:13:17:7e: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:84:F8:15:20:37:45:D9:D9:48:FC:62:B1:1C:0A:E5:6B:86:D8:B5 X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6f:0b:ab:45:f0:e7:0d:f6:cb:f2:1e:56:3e:62:07:16:1c: 86:3f:73:bc:95:d2:aa:94:a3:75:ab:ba:f3:d0:59:b0:1d:35: 39:ea:af:1d:8e:77:74:1b:9c:b9:79:3c:33:21:51:7c:bb:8a: f3:e3:d9:4f:89:90:59:7d:58:91:6e:1e:d8:de:44:09:a5:cb: 99:ea:99:63:84:1a:be:3c:11:27:b5:21:46:0d:0e:a3:0f:8a: 3a:c1:ee:4c:40:27:ab:9c:97:46:99:2e:b6:43:df:42:34:9b: 04:2e:b6:85:3f:d6:94:b4:0a:8e:05:8b:25:9b:af:44:46:35: 93:cd:e9:d0:44:5d:d8:54:f4:4a:70:f0:b4:d4:cb:a8:21:a3: 5c:6d:97:73:d3:f0:1e:5b:bf:a6:51:5b:04:a1:6e:5d:03:a7: cf:a7:3c:b8:35:04:09:1c:c7:6b:1b:a4:38:60:ce:cf:39:6e: 99:d7:16:14:ff:92:17:14:c1:65:f3:7b:36:42:ab:38:a0:3e: d9:ed:46:01:d6:a8:36:49:72:55:44:ee:65:ca:b5:29:f5:bd: 1b:7b:28:51:90:c9:ab:a9:4f:99:8d:7a:1e:ed:34:ce:5f:44: f7:b1:2d:ce:f0:91:bf:8e:a4:f3:9d:90:a7:ec:91:fd:ae:df: 15:18:72:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjQwNTE4MTU1MTMzWhcNMjQwNTI1MTU1MTMzWjAYMRYwFAYD VQQDEw02NjQ4Y2U4NS1iMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo+u0OyqPEseIl8GFg7uX9iCuSbZcnVfgWT5waWUGePKdrqg3ZHMqHwPFPSj MUZ4SHa9i0zdprKXT5QMgww8Aj2oEv3cyfGwqfe099zV3LmJ8oSGpmZa739bEI3A 4HMZYq7iiJwaKcWkyB3VulBcdCvFApgjNgEHyFuazLB+vMyktxZwBSCdzeuj3p4m MDdFJ7C8HKmzJ3363vuU5iEiySHAfFQes1HFFXCqPuHhRdjV+hsPiLaO0uMMgwrj Z+aXDHPQuztXfGKGK0YP0nH7LGkV7iof4iWDtsktU+5nV6Ekgeaf6W9bztgGgYHT gBj6VPEth9PbUQ1N+YgTF34BcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGE+BUg N0XZ2Uj8YrEcCuVrhti1MB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/bwurRfDnDfbL8h5WPmIHFhyGP3O8ldKqlKN1q7rz0FmwHTU56q8d jnd0G5y5eTwzIVF8u4rz49lPiZBZfViRbh7Y3kQJpcuZ6pljhBq+PBEntSFGDQ6j D4o6we5MQCernJdGmS62Q99CNJsELraFP9aUtAqOBYslm69ERjWTzenQRF3YVPRK cPC01MuoIaNcbZdz0/AeW7+mUVsEoW5dA6fPpzy4NQQJHMdrG6Q4YM7POW6Z1xYU /5IXFMFl83s2Qqs4oD7Z7UYB1qg2SXJVRO5lyrUp9b0beyhRkMmrqU+ZjXoe7TTO X0T3sS3O8JG/jqTznZCn7JH9rt8VGHLM -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org