$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json) Hash identifier: SzAdwweWZKlpk5nD1fJQj/6Cgqk5XxIbphn2fp0QiwI= Subject key identifier: F2:EF:36:23:DD:A5:E8:4A:23:36:E7:1A:5A:CE:B4:FC:17:54:FD:52 Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft Manifest number: 070C Signing time: Sat 18 May 2024 22:38:45 +0000 Manifest this update: Sat 18 May 2024 22:38:44 +0000 Manifest next update: Sat 25 May 2024 22:38:44 +0000 Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: VyKjB0OMGJ2upp0uq4qFvNCSBxcPUaVZK2NmugHZHwY=) 2: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: JFhYsMMnyex24FGUJR1yANnkLrSFJUOiAE+xycKHDJ0=) 3: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: AszckkIo7xo3rKnWp1vwStrZWGfITs2JKvmhphBQlP0=) 4: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: tWgKdiKEkxy7J+w5eCL6fH6x9Y2woWkufKdftPBBbXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: May 18 22:38:44 2024 GMT Not After : May 25 22:38:44 2024 GMT Subject: CN=66492df5-e9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:d8:c6:34:53:97:ac:1e:28:ff:56:e6:08: 4e:5e:ae:d9:ca:b5:2b:8c:a1:82:9a:00:20:43:8e: ed:65:b6:9c:2a:1c:ac:82:2b:73:5a:af:0a:eb:e2: d3:f4:e0:07:db:df:97:a8:ee:5c:a9:57:ab:fe:eb: 50:29:9e:6e:ba:7c:02:ef:1a:03:45:bf:8d:27:34: ff:7a:83:17:9d:98:0c:9f:e8:ac:fb:ae:a2:c0:be: 24:59:3e:9b:2d:94:db:6f:1e:77:e4:c5:b1:62:72: 91:51:7a:82:75:90:ee:94:e7:30:6d:69:fd:e9:bc: b4:62:8b:f0:93:2b:65:44:f9:90:f1:5d:5b:36:b6: aa:da:fa:c9:f5:ea:8f:61:6f:25:7e:0e:fe:bc:02: 41:56:63:27:69:8b:d7:f6:7f:d1:0e:a5:ce:a0:1b: 11:98:49:e6:eb:4a:63:e8:bc:7d:c6:96:9d:2d:a1: 1c:70:b1:dc:31:ec:26:f4:92:a8:1d:9c:67:dd:ec: a9:74:fa:a3:e9:d0:93:24:1a:16:7b:08:37:29:23: aa:3e:f9:18:9f:74:ea:45:5b:f1:29:5d:0b:e7:46: 45:4a:df:c1:9e:a5:da:ef:0e:ab:9d:60:86:21:04: e0:89:76:a6:dd:87:b5:6a:a3:8b:a1:cb:95:85:a6: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:36:23:DD:A5:E8:4A:23:36:E7:1A:5A:CE:B4:FC:17:54:FD:52 X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c2:85:86:35:28:7e:8d:65:f9:e1:91:a5:13:d8:e9:6b:5a: 57:8e:42:f1:ab:05:8b:3b:3b:78:28:ef:52:42:9c:a7:29:ae: 67:db:42:4b:58:49:70:a6:95:32:47:6a:40:b3:f2:50:ea:29: da:3a:4f:b7:89:70:ec:30:df:b4:5a:c4:6d:89:0b:7f:5c:2c: c3:ad:b5:b0:21:ca:25:a8:73:e1:d4:c3:18:3e:34:dd:e6:35: 35:ec:05:6c:3d:7c:3f:9d:59:7e:af:61:6d:04:52:73:76:5c: 94:93:0f:f1:c3:43:5e:96:1c:90:a4:f8:a1:31:0f:7f:fd:55: 0e:55:f5:a9:65:8f:e4:74:f9:56:91:68:8d:7e:72:7e:65:de: d5:21:0a:d7:b0:5e:80:35:60:c2:91:ab:43:72:5a:ad:86:32: 2c:e0:57:9c:2b:53:57:e9:9e:b6:67:99:99:56:d3:a9:5b:15: 71:8b:ae:85:51:c7:af:87:85:c9:db:97:fb:90:6a:ff:36:ea: 5a:dc:f7:1a:b7:33:8b:5d:3d:6e:d5:72:8e:9c:14:48:89:e9: 0a:a9:16:20:65:7c:1e:74:61:b4:a5:6f:0e:1f:cb:3f:8c:f7: 3b:a4:53:8f:1e:7d:7b:df:f7:53:57:d7:46:e3:4a:05:54:18: 56:b8:f1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjQwNTE4MjIzODQ0WhcNMjQwNTI1MjIzODQ0WjAYMRYwFAYD VQQDEw02NjQ5MmRmNS1lOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVbYxjRTl6weKP9W5ghOXq7ZyrUrjKGCmgAgQ47tZbacKhysgitzWq8K6+LT 9OAH29+XqO5cqVer/utQKZ5uunwC7xoDRb+NJzT/eoMXnZgMn+is+66iwL4kWT6b LZTbbx535MWxYnKRUXqCdZDulOcwbWn96by0YovwkytlRPmQ8V1bNraq2vrJ9eqP YW8lfg7+vAJBVmMnaYvX9n/RDqXOoBsRmEnm60pj6Lx9xpadLaEccLHcMewm9JKo HZxn3eypdPqj6dCTJBoWewg3KSOqPvkYn3TqRVvxKV0L50ZFSt/BnqXa7w6rnWCG IQTgiXam3Ye1aqOLocuVhaZs1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLvNiPd pehKIzbnGlrOtPwXVP1SMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUQyQi84QjY3MDBBNkY0MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmww OGZTUVF1Mmo1eWhDR3E1ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWwoWGNSh+jWX54ZGlE9jpa1pXjkLxqwWLOzt4KO9SQpynKa5n20JL WElwppUyR2pAs/JQ6inaOk+3iXDsMN+0WsRtiQt/XCzDrbWwIcolqHPh1MMYPjTd 5jU17AVsPXw/nVl+r2FtBFJzdlyUkw/xw0NelhyQpPihMQ9//VUOVfWpZY/kdPlW kWiNfnJ+Zd7VIQrXsF6ANWDCkatDclqthjIs4FecK1NX6Z62Z5mZVtOpWxVxi66F Ucevh4XJ25f7kGr/Nupa3PcatzOLXT1u1XKOnBRIiekKqRYgZXwedGG0pW8OH8s/ jPc7pFOPHn173/dTV9dG40oFVBhWuPEK -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org