$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: Ee1AyazRHA4oNycURl8FyvYD3d84BLFlGpDIYP7BaoU= Subject key identifier: F6:3D:C4:A2:7B:1F:D7:00:6C:1F:2C:BD:FD:80:79:3A:F8:5D:BA:4B Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 064D Signing time: Sat 18 May 2024 23:42:10 +0000 Manifest this update: Sat 18 May 2024 23:42:09 +0000 Manifest next update: Sat 25 May 2024 23:42:09 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: UZgNaKN+YH11hkfo5RhW2fmbRgbJagcG68mheN4FbQc=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: JpR0rDG4Cs0BP7f4Pwy0G0ZaJiuhalealzbnqlmcZY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: May 18 23:42:09 2024 GMT Not After : May 25 23:42:09 2024 GMT Subject: CN=66493cd2-0e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:ab:a2:6a:80:d9:79:22:7b:62:41:01:b5: d2:63:3d:bd:63:ed:11:2a:04:03:72:1c:37:31:93: 1a:3c:9c:d4:93:03:1b:57:cb:a4:71:59:27:a2:fc: 0c:0d:ae:a5:03:16:bb:a3:83:29:f8:af:89:e7:84: de:3d:26:f1:0d:38:4b:be:62:c1:14:93:67:a9:85: 21:82:6b:ae:86:45:bd:65:8d:fb:81:91:90:f0:c2: 17:14:9c:98:d0:00:87:a8:75:6f:70:e4:55:eb:aa: e3:58:cd:95:c8:49:69:4f:33:fd:13:ec:db:15:6c: a9:60:62:5b:10:64:1f:d4:08:ae:4e:b7:ab:b4:70: 3b:e6:3d:73:cb:6b:80:a7:26:01:20:dc:28:99:a8: 26:9f:70:ad:df:16:09:85:dd:de:bc:c0:19:c0:ed: 82:0c:c4:5f:81:a9:f3:06:e1:e6:d9:6c:f1:76:3c: 4d:9c:9d:76:5d:fd:79:d5:c8:d0:93:88:65:ed:28: 40:fa:c3:18:23:3b:9e:3f:28:c5:2f:2d:58:96:a5: 94:9f:8d:15:3a:46:5d:0d:f0:7a:85:67:d9:1d:4a: eb:96:fd:f3:98:d4:71:ea:79:fb:8f:18:4d:25:e9: 0a:49:55:92:4b:18:b0:cc:b3:0f:0f:43:7e:e0:65: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3D:C4:A2:7B:1F:D7:00:6C:1F:2C:BD:FD:80:79:3A:F8:5D:BA:4B X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:81:ec:f9:be:c2:77:4d:9d:19:af:e9:e7:50:7b:aa:fb:43: 27:97:62:0d:c9:e2:1b:b7:0d:b7:f6:b1:9f:c0:e2:58:b3:e1: 55:f5:80:8b:a5:34:5c:8c:28:d0:73:df:33:1d:6c:2e:95:de: e1:a2:49:f6:99:c5:cb:ee:da:1a:1b:41:0b:49:45:e9:ab:6d: 70:6a:88:02:84:7d:b1:0a:59:08:34:92:6f:5c:b2:92:fe:7a: 9e:75:cd:99:e2:8d:92:a8:0e:e6:d0:34:e0:f1:52:58:6a:ec: 48:96:40:e6:6c:48:d8:a7:54:16:0d:1c:1d:b4:6b:3c:26:a6: f6:3d:62:c0:88:d6:56:87:87:d3:33:e9:27:7d:e4:a7:b0:cd: 8f:94:55:0a:e3:33:47:f7:94:3b:78:32:ac:a4:de:c6:48:48: 53:db:93:56:08:66:62:1f:ef:80:89:54:a3:3b:de:fd:28:dc: 74:82:06:63:3d:02:af:2b:2a:c2:43:6b:49:1b:a4:6f:aa:19: fe:e2:48:0d:a3:26:78:0b:e2:c0:5c:6b:74:dc:04:58:37:85: 13:4c:79:42:ab:32:9f:9f:e6:91:24:d3:73:c4:f3:dc:79:6c: b3:d0:91:06:88:df:21:39:6b:82:2c:10:5d:bd:c8:e2:4f:1d: e1:1c:f5:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjQwNTE4MjM0MjA5WhcNMjQwNTI1MjM0MjA5WjAYMRYwFAYD VQQDEw02NjQ5M2NkMi0wZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQKromqA2Xkie2JBAbXSYz29Y+0RKgQDchw3MZMaPJzUkwMbV8ukcVknovwM Da6lAxa7o4Mp+K+J54TePSbxDThLvmLBFJNnqYUhgmuuhkW9ZY37gZGQ8MIXFJyY 0ACHqHVvcORV66rjWM2VyElpTzP9E+zbFWypYGJbEGQf1AiuTrertHA75j1zy2uA pyYBINwomagmn3Ct3xYJhd3evMAZwO2CDMRfganzBuHm2WzxdjxNnJ12Xf151cjQ k4hl7ShA+sMYIzuePyjFLy1YlqWUn40VOkZdDfB6hWfZHUrrlv3zmNRx6nn7jxhN JekKSVWSSxiwzLMPD0N+4GVuUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY9xKJ7 H9cAbB8svf2AeTr4XbpLMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9gez5vsJ3TZ0Zr+nnUHuq+0Mnl2INyeIbtw239rGfwOJYs+FV9YCL pTRcjCjQc98zHWwuld7hokn2mcXL7toaG0ELSUXpq21waogChH2xClkINJJvXLKS /nqedc2Z4o2SqA7m0DTg8VJYauxIlkDmbEjYp1QWDRwdtGs8Jqb2PWLAiNZWh4fT M+knfeSnsM2PlFUK4zNH95Q7eDKspN7GSEhT25NWCGZiH++AiVSjO979KNx0ggZj PQKvKyrCQ2tJG6Rvqhn+4kgNoyZ4C+LAXGt03ARYN4UTTHlCqzKfn+aRJNNzxPPc eWyz0JEGiN8hOWuCLBBdvcjiTx3hHPWg -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org