$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: sZiyF5ySZPy8zBXCHB9b9OJ7YDdlsAyyWFQV8gQCf5w= Subject key identifier: BE:AB:20:9A:1B:B8:D9:4B:04:5B:BE:BF:0C:DA:A3:43:37:11:C4:D5 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0BE9 Signing time: Sat 18 May 2024 19:06:18 +0000 Manifest this update: Sat 18 May 2024 19:06:18 +0000 Manifest next update: Sat 25 May 2024 19:06:18 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: dGjoycbOVIdDbu2DPmiZghTpHjnSOINp9fz7lbO1Ml0=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: deD58Mq8q6NtgDApD9PQKblyJ8paeLDH7pnimAn97yk=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: lJUGsid+q5Tbb8CevBMe/tVeDQTPxzcpikP5JaRu0mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: May 18 19:06:18 2024 GMT Not After : May 25 19:06:18 2024 GMT Subject: CN=6648fc2a-e4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f8:f3:78:a9:e0:1b:ee:15:5c:19:d6:5a:be: ac:eb:f1:99:0d:72:1c:b2:2b:ed:7d:3a:1d:02:4c: 85:3f:c5:30:9c:67:06:41:29:aa:0b:8b:4e:32:a7: 64:3e:40:1b:28:1c:59:82:dc:44:17:55:f6:d2:38: ce:63:31:26:01:b3:31:cf:f3:6e:dd:a4:93:44:8a: aa:6e:d8:9f:eb:ab:45:2e:5a:84:65:92:5f:45:03: 57:b3:08:6d:21:b7:a1:c8:b3:8f:de:13:b4:d5:61: 0d:7a:12:53:bb:ef:6e:ca:c5:62:ee:df:40:4e:fe: 74:89:0a:8d:38:01:6b:13:9c:2e:07:c4:73:8d:b2: f9:14:46:dd:65:b2:cd:f3:4f:2c:89:94:70:11:2f: 9e:d3:ec:4e:fb:f8:85:b2:cb:81:4c:bf:c1:42:f1: 12:ab:5c:15:95:9b:8e:73:d0:92:af:2d:0a:10:ef: 68:ff:c4:9c:8c:39:eb:06:0d:cf:75:ab:2d:68:26: ad:5c:2b:e2:05:62:2c:a5:1d:25:a6:72:50:ef:81: 3c:b4:43:dc:5e:02:01:a1:d1:4e:7c:10:66:1f:8e: d0:e5:7c:64:0c:eb:60:a1:95:5b:ca:4f:0c:43:27: 4d:0a:0e:4f:4e:21:7a:88:7a:69:18:a7:9e:a0:1c: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AB:20:9A:1B:B8:D9:4B:04:5B:BE:BF:0C:DA:A3:43:37:11:C4:D5 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:92:71:7b:90:97:d1:88:ba:aa:f2:02:64:20:04:5c:c1:b3: 1c:70:d0:61:12:b1:e0:c6:47:0a:fe:0c:cb:a2:fa:75:51:43: 29:48:24:81:e1:2d:d4:c4:f9:e9:7f:c0:9e:d3:3b:85:87:c7: 92:68:66:e2:8b:a9:ff:d7:b8:89:03:30:6e:28:fd:2d:52:10: 2e:3b:0e:74:76:f1:a2:41:f2:a3:af:fa:c8:e3:98:54:bb:8e: c3:67:a5:1b:60:b7:94:5b:97:d7:2d:53:ca:f4:bd:65:93:b4: 7a:24:92:cf:53:78:00:a3:bc:0a:1b:3e:fe:0c:46:7e:47:54: dd:b9:38:92:0c:3d:87:26:77:52:78:d7:16:0e:89:1d:18:8a: c2:57:e5:d2:7f:65:c4:e3:5d:94:53:4e:5b:d6:40:9c:b4:12: 76:bd:d2:a3:5d:68:c7:12:ba:3a:80:ec:aa:2a:1d:7a:4d:40: 54:a9:bb:31:c4:46:e0:46:bb:30:e2:f3:f8:9b:b6:3e:06:50: ff:74:99:88:38:61:30:d0:09:3a:51:30:16:ca:39:12:e5:90: af:da:e5:15:39:f1:83:96:7e:8f:72:7e:1a:ae:fa:40:6d:70: ac:b3:07:a8:7f:ae:21:eb:75:7f:8d:fd:52:0c:7e:53:ab:b2: eb:26:57:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjQwNTE4MTkwNjE4WhcNMjQwNTI1MTkwNjE4WjAYMRYwFAYD VQQDEw02NjQ4ZmMyYS1lNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PjzeKngG+4VXBnWWr6s6/GZDXIcsivtfTodAkyFP8UwnGcGQSmqC4tOMqdk PkAbKBxZgtxEF1X20jjOYzEmAbMxz/Nu3aSTRIqqbtif66tFLlqEZZJfRQNXswht IbehyLOP3hO01WENehJTu+9uysVi7t9ATv50iQqNOAFrE5wuB8RzjbL5FEbdZbLN 808siZRwES+e0+xO+/iFssuBTL/BQvESq1wVlZuOc9CSry0KEO9o/8ScjDnrBg3P dastaCatXCviBWIspR0lpnJQ74E8tEPcXgIBodFOfBBmH47Q5XxkDOtgoZVbyk8M QydNCg5PTiF6iHppGKeeoBzhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6rIJob uNlLBFu+vwzao0M3EcTVMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdknF7kJfRiLqq8gJkIARcwbMccNBhErHgxkcK/gzLovp1UUMpSCSB 4S3UxPnpf8Ce0zuFh8eSaGbii6n/17iJAzBuKP0tUhAuOw50dvGiQfKjr/rI45hU u47DZ6UbYLeUW5fXLVPK9L1lk7R6JJLPU3gAo7wKGz7+DEZ+R1TduTiSDD2HJndS eNcWDokdGIrCV+XSf2XE412UU05b1kCctBJ2vdKjXWjHEro6gOyqKh16TUBUqbsx xEbgRrsw4vP4m7Y+BlD/dJmIOGEw0Ak6UTAWyjkS5ZCv2uUVOfGDln6Pcn4arvpA bXCssweof64h63V/jf1SDH5Tq7LrJlcY -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org