$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: jAOzQuGhludjBEASXJ5sGOadbOM/An68c59PC6KQSIk= Subject key identifier: F3:9F:A2:B6:19:E0:4E:F6:D5:F5:4C:E8:19:0A:CD:35:69:6E:81:05 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 26 Signing time: Wed 29 May 2024 09:15:43 +0000 Manifest this update: Wed 29 May 2024 09:15:43 +0000 Manifest next update: Wed 05 Jun 2024 09:15:42 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: IvatiHDaGWWIn7dWG+okyJBa6VciMqvzCkI+NOpazDY=) 2: 64A2B982E67211EEB3DACC2AC4F9AE02.roa (hash: zvHQyTu53eFJCdrGA//zWaSAxwwl5TIllUByTjwQKYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 09:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: May 29 09:15:43 2024 GMT Not After : Jun 5 09:15:42 2024 GMT Subject: CN=6656f23f-38f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:fb:28:69:8d:d2:35:01:b2:3f:95:ab:cf: 02:c3:b8:14:0a:69:b7:a4:58:79:60:81:a7:79:31: 14:d4:f5:23:86:b8:f4:e0:3f:65:a0:ef:a2:05:9b: 88:b9:55:80:2b:19:33:4e:14:fd:56:2c:dd:20:3b: 76:ce:2b:b7:5b:2d:fd:70:51:c0:8a:cf:7c:1a:66: 7d:56:f7:95:7a:d2:3a:7a:9f:75:ba:ad:b4:e2:d2: 5f:bd:b9:60:97:20:1f:65:95:94:b0:73:1a:fb:01: 20:47:6c:a2:f8:c9:5f:cd:c5:04:bd:00:7d:1e:23: e3:2a:96:19:11:e0:97:1a:df:1c:72:73:00:42:d9: 9e:d8:91:86:a2:b6:bc:b4:c8:0d:31:d9:ae:55:88: fc:05:5c:de:cc:80:3e:3e:74:3f:85:ce:37:c4:f0: 1f:8b:55:72:5f:4f:53:fd:ba:1a:6b:9e:60:71:8b: 70:50:8d:a2:45:f0:7b:46:0c:59:38:de:05:5b:32: 65:5d:99:8a:26:d7:2c:31:21:af:c2:5f:a5:6f:95: 79:b6:83:31:0e:bc:27:fc:63:af:80:67:f3:8d:50: 30:c9:dc:16:c6:81:b2:a3:39:ce:13:f0:d4:05:2f: c4:40:0f:ad:da:cf:82:ee:2f:8c:c2:12:6e:55:36: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9F:A2:B6:19:E0:4E:F6:D5:F5:4C:E8:19:0A:CD:35:69:6E:81:05 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:07:0c:ae:9e:3b:a9:02:f7:04:01:c5:88:1a:1c:02:0e:4e: f6:3c:16:63:fa:8b:35:87:37:dc:18:4a:cb:ce:c5:45:b4:29: 8d:d6:0a:82:f3:12:1f:73:c9:1e:f8:22:8b:b3:bc:23:62:b8: b2:8d:bc:c8:ca:03:86:bd:ca:99:a1:ee:be:79:25:74:6e:d4: 5a:b4:fa:db:6b:14:10:77:73:b1:26:10:23:de:e2:5e:df:22: 2d:d0:01:07:42:a4:9c:77:1c:35:9c:7e:6a:99:b4:cf:93:ce: cd:fa:cb:f6:7d:14:88:84:ec:9c:66:5a:bb:7f:03:84:0f:69: a1:e9:e1:98:28:07:44:c9:fa:c3:2f:ef:b3:47:5d:05:f7:43: 24:58:71:1c:e0:f3:cd:5e:1a:bf:8e:c1:42:c2:a7:e1:40:4b: 3d:24:d2:82:2b:06:5e:c4:f9:2d:7a:2c:3e:a0:36:dc:a3:e9: ff:73:f5:7a:81:cd:43:41:2c:e0:e5:6b:d0:cf:43:27:99:fa: f1:c3:bb:fc:43:09:54:df:05:43:15:2f:cf:c4:88:67:fa:95: 1f:6a:64:2b:82:d1:83:d8:b1:e3:ae:8f:04:a7:dc:98:99:76: 2c:61:6c:9f:d8:ae:67:89:0c:33:8f:e6:c9:3d:07:41:0e:a8: 2d:a9:b1:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTVERjExMC8GA1UEBRMoNzVEMzE5Njk1NjlCNUMwREYwREE1M0IzRDkzMTM2NjMz NDcyMTA4MjAeFw0yNDA1MjkwOTE1NDNaFw0yNDA2MDUwOTE1NDJaMBgxFjAUBgNV BAMTDTY2NTZmMjNmLTM4ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+4vsoaY3SNQGyP5WrzwLDuBQKabekWHlggad5MRTU9SOGuPTgP2Wg76IFm4i5 VYArGTNOFP1WLN0gO3bOK7dbLf1wUcCKz3waZn1W95V60jp6n3W6rbTi0l+9uWCX IB9llZSwcxr7ASBHbKL4yV/NxQS9AH0eI+MqlhkR4Jca3xxycwBC2Z7YkYaitry0 yA0x2a5ViPwFXN7MgD4+dD+FzjfE8B+LVXJfT1P9uhprnmBxi3BQjaJF8HtGDFk4 3gVbMmVdmYom1ywxIa/CX6VvlXm2gzEOvCf8Y6+AZ/ONUDDJ3BbGgbKjOc4T8NQF L8RAD63az4LuL4zCEm5VNocVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU85+ithng TvbV9UzoGQrNNWlugQUwHwYDVR0jBBgwFoAUddMZaVabXA3w2lOz2TE2YzRyEIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNURGL0NCRUZDRDlDRTY3 MTExRUVCN0JDQkUyOUM0RjlBRTAyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGRNWmFWYWJYQTN3MmxPejJURTJZelJ5RUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NURGL0NCRUZDRDlDRTY3MTExRUVCN0JDQkUyOUM0RjlBRTAyL2RkTVphVmFiWEEz dzJsT3oyVEUyWXpSeUVJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYHDK6eO6kC9wQBxYgaHAIOTvY8FmP6izWHN9wYSsvOxUW0KY3WCoLz Eh9zyR74IouzvCNiuLKNvMjKA4a9ypmh7r55JXRu1Fq0+ttrFBB3c7EmECPe4l7f Ii3QAQdCpJx3HDWcfmqZtM+Tzs36y/Z9FIiE7JxmWrt/A4QPaaHp4ZgoB0TJ+sMv 77NHXQX3QyRYcRzg881eGr+OwULCp+FASz0k0oIrBl7E+S16LD6gNtyj6f9z9XqB zUNBLODla9DPQyeZ+vHDu/xDCVTfBUMVL8/EiGf6lR9qZCuC0YPYseOujwSn3JiZ dixhbJ/YrmeJDDOP5sk9B0EOqC2psX0= -----END CERTIFICATE-----Generated at Wed May 29 11:18:10 2024 by rpki-client on console-fra.rpki-client.org