$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: Ppxz7KI8vgvRvFs3iGtBSFPc6/uzyfiPgdKPPlwGY/Y= Subject key identifier: 6D:11:BC:BE:F6:2C:25:F7:68:35:DF:79:4F:13:4F:60:74:BE:81:EF Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0A4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0A45 Signing time: Sat 18 May 2024 20:26:14 +0000 Manifest this update: Sat 18 May 2024 20:26:14 +0000 Manifest next update: Sat 25 May 2024 20:26:14 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: f9YqwFAi9kXyr7l+deVuWO9ZDLvJKDjniNvnxjYx8Ls=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: XV/2YtAMQuwWvAtVZQzbXRUZ2i6TAIVPRKA0MGf0zTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2634 (0xa4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: May 18 20:26:14 2024 GMT Not After : May 25 20:26:14 2024 GMT Subject: CN=66490ee6-f6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:c9:cc:fc:d5:98:1e:bd:0b:77:e2:78:24: e3:d3:3f:e7:67:3f:12:ed:85:9e:07:8a:e8:d4:d4: ac:ee:fe:85:c2:83:9c:6f:8e:06:9d:b8:b4:48:92: 48:e6:3b:e7:34:81:b3:27:ac:16:6d:b6:63:70:92: 63:d8:2c:ce:39:6b:d2:92:6c:df:05:10:ca:c5:33: 76:ef:7b:67:97:3f:31:5d:1b:64:54:14:63:8c:db: 09:3c:f3:29:19:86:00:ae:44:76:63:79:60:70:9d: ae:1f:0d:a8:34:2e:99:5f:a7:23:9a:c1:b1:ff:4d: 85:8b:6d:6e:3e:46:06:9b:3f:4d:f4:c0:49:e9:a2: 29:8c:f2:32:63:56:ae:49:f5:78:02:2c:7f:2c:81: 62:bc:e7:2a:62:30:10:f1:59:1d:ec:94:91:94:34: 83:a1:fe:7a:ff:18:10:f6:bb:62:cd:0a:a1:cc:01: d2:a0:63:46:b5:ed:c4:ec:3a:fe:3b:48:fa:4c:68: 21:7c:09:5c:f0:56:04:b6:d1:cb:e7:84:94:d2:9c: ab:49:ce:20:59:58:c2:e3:99:0c:e9:fd:03:c0:a6: 7b:cf:61:dc:03:da:e5:a7:45:df:96:75:0c:85:59: e4:02:18:91:7d:87:4e:a2:f8:69:a2:d7:5c:bf:bd: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:11:BC:BE:F6:2C:25:F7:68:35:DF:79:4F:13:4F:60:74:BE:81:EF X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:04:fe:d2:1c:62:9e:65:76:14:fa:be:40:75:5f:d1:7b:1b: e9:60:fe:8a:56:40:4c:54:fb:69:79:b2:41:f3:dd:2f:05:c9: 1a:6b:42:aa:06:0f:50:d3:16:25:51:7a:00:8c:65:47:19:df: 3d:00:fc:60:e7:0b:15:39:bd:d8:73:a9:15:f7:3c:95:a5:fd: 68:f9:00:c8:58:4b:6c:7f:4c:f8:0e:1b:d1:72:dc:df:91:d4: 52:e4:42:fb:4e:51:a7:33:ba:a4:82:20:a0:7d:97:69:b7:22: 5e:8e:95:e2:d5:bc:61:b5:ff:16:87:c1:25:bc:ce:51:1b:06: 7f:eb:8b:60:85:d4:e2:3c:fe:3b:87:ff:1a:67:19:15:2b:53: be:99:79:53:5e:13:4b:a1:8a:0d:91:08:55:48:0c:17:4e:58: 2c:8a:7e:77:94:96:ca:13:55:98:19:c2:28:f3:ff:58:16:fa: 11:51:43:59:71:72:a9:da:55:62:8b:fb:39:57:1e:94:43:db: 6c:62:83:a0:a1:fe:de:05:70:13:43:f3:88:95:28:c8:65:54: dd:75:18:55:c0:4f:20:cd:c1:5a:13:9d:1c:b0:a3:fd:2b:0a: 37:21:34:9f:c2:aa:fd:fc:81:09:fd:74:09:14:a9:ed:a3:16: 69:f6:4c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjQwNTE4MjAyNjE0WhcNMjQwNTI1MjAyNjE0WjAYMRYwFAYD VQQDEw02NjQ5MGVlNi1mNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo03JzPzVmB69C3fieCTj0z/nZz8S7YWeB4ro1NSs7v6FwoOcb44Gnbi0SJJI 5jvnNIGzJ6wWbbZjcJJj2CzOOWvSkmzfBRDKxTN273tnlz8xXRtkVBRjjNsJPPMp GYYArkR2Y3lgcJ2uHw2oNC6ZX6cjmsGx/02Fi21uPkYGmz9N9MBJ6aIpjPIyY1au SfV4Aix/LIFivOcqYjAQ8Vkd7JSRlDSDof56/xgQ9rtizQqhzAHSoGNGte3E7Dr+ O0j6TGghfAlc8FYEttHL54SU0pyrSc4gWVjC45kM6f0DwKZ7z2HcA9rlp0XflnUM hVnkAhiRfYdOovhpotdcv73JdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0RvL72 LCX3aDXfeU8TT2B0voHvMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgBP7SHGKeZXYU+r5AdV/RexvpYP6KVkBMVPtpebJB890vBckaa0Kq Bg9Q0xYlUXoAjGVHGd89APxg5wsVOb3Yc6kV9zyVpf1o+QDIWEtsf0z4DhvRctzf kdRS5EL7TlGnM7qkgiCgfZdptyJejpXi1bxhtf8Wh8ElvM5RGwZ/64tghdTiPP47 h/8aZxkVK1O+mXlTXhNLoYoNkQhVSAwXTlgsin53lJbKE1WYGcIo8/9YFvoRUUNZ cXKp2lVii/s5Vx6UQ9tsYoOgof7eBXATQ/OIlSjIZVTddRhVwE8gzcFaE50csKP9 Kwo3ITSfwqr9/IEJ/XQJFKntoxZp9kyZ -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org