$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: yWMy/0oxJ+GMj2gq49WjCmco/OUz9gBe9ASpO/WwKkE= Subject key identifier: FC:14:31:10:D2:E3:10:84:D0:5F:34:86:4A:5F:1E:BC:14:8C:C2:31 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 6D Signing time: Sun 19 May 2024 07:36:08 +0000 Manifest this update: Sun 19 May 2024 07:36:07 +0000 Manifest next update: Sun 26 May 2024 07:36:07 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: dMgeDz+LDCvEV10FKq0kTKhnq49k8gbsQJaQ5SOJOMI=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: 3p7ly5DgK06g5Itb3JqDJm6lSd8+J9I+r2qgE/cByRw=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ldqul+qAxqsBC6fKklS2tZ7mlukVmXd+N/vvwcM9Q8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: May 19 07:36:07 2024 GMT Not After : May 26 07:36:07 2024 GMT Subject: CN=6649abe8-f148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:65:fe:3a:2d:0c:14:e7:ff:52:7c:8f:ae: 15:57:af:65:27:77:c0:3a:d0:dd:51:ee:2a:a5:db: 71:de:93:5c:5d:a5:44:a5:ed:65:5f:39:bd:d2:f2: b2:a6:bc:1c:f1:27:91:df:41:ca:e3:10:65:1b:a9: 9c:ce:65:48:1b:ec:e7:22:70:64:ba:be:6b:8f:f9: 2a:ad:33:1b:3a:0c:cf:cf:4b:1f:3c:c2:41:8d:4e: 31:79:23:59:24:eb:3a:e9:53:03:a5:ef:6a:b6:d1: d9:0d:4a:77:a8:a9:ff:23:ed:9f:02:2d:6c:d5:26: c1:5e:24:de:f0:c8:30:60:3c:23:82:f9:55:eb:9e: 8d:64:c9:47:c4:90:58:a2:ff:3f:d1:8c:1d:14:67: 0b:2f:f3:3a:19:59:44:d4:70:95:1a:03:61:0c:f3: 59:7d:5c:b8:aa:bf:ab:b8:3c:33:21:23:01:5f:33: 9b:1b:23:f0:18:7a:a1:ca:2f:80:09:50:8d:5a:29: 1d:84:93:1e:18:7f:d8:8c:7a:83:a6:a7:65:ba:bf: 0a:ef:7c:45:f8:a1:0d:84:5a:0f:a3:f9:d6:20:96: cc:52:53:78:d1:31:76:b6:0a:8e:b7:51:75:d6:4a: 81:64:3e:fc:cd:c8:b8:47:a3:83:50:79:00:c3:81: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:14:31:10:D2:E3:10:84:D0:5F:34:86:4A:5F:1E:BC:14:8C:C2:31 X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:62:a9:31:bc:a3:a0:6e:84:17:aa:2f:50:03:3b:a5:2d:ee: 4c:1b:73:12:62:0d:bc:8c:5b:04:61:28:1a:b4:18:c4:6d:40: ef:e6:3e:7c:f7:c5:5d:3b:dc:e0:53:78:05:c4:ac:ca:6f:36: 67:05:cb:6d:18:80:21:aa:38:22:53:b7:06:02:c7:b2:86:4b: 84:9d:07:2b:44:4d:3f:9b:6f:ac:e8:29:97:d1:91:be:d6:e1: 40:d9:3c:7f:cb:0a:c8:39:55:47:5a:ce:66:e3:09:14:2b:11: c8:7c:d0:63:40:d8:d9:06:f8:c4:4f:26:17:fc:5f:35:f5:14: 1c:2b:9d:cc:73:98:32:5d:fb:d8:06:93:65:de:91:6c:02:77: e1:26:84:00:9c:a5:6c:b2:d7:6b:e5:89:0f:39:2c:13:ba:1c: 82:c3:1b:93:5d:3d:ab:69:c0:d1:9d:e0:1c:25:ef:41:2a:83: 9c:ab:a1:02:c7:2e:c5:5f:d1:72:91:67:9b:bf:20:08:b9:2c: 67:41:8c:32:1a:4f:93:1b:18:26:54:c9:40:8c:75:5d:7f:47: 71:68:9a:18:c0:8e:f0:0d:f6:a6:e3:45:a7:4a:32:36:60:4e: 63:20:4c:22:53:cf:a2:da:a2:3e:70:4b:c9:16:38:64:a8:a2: 3d:48:f0:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTY3ODExMC8GA1UEBRMoMDA4RjVEMDZGMEZFRkM0MEZEODMwQjI2Q0Q3NjYwQTM4 MzExMEM5MTAeFw0yNDA1MTkwNzM2MDdaFw0yNDA1MjYwNzM2MDdaMBgxFjAUBgNV BAMTDTY2NDlhYmU4LWYxNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDABGX+Oi0MFOf/UnyPrhVXr2Und8A60N1R7iql23Hek1xdpUSl7WVfOb3S8rKm vBzxJ5HfQcrjEGUbqZzOZUgb7OcicGS6vmuP+SqtMxs6DM/PSx88wkGNTjF5I1kk 6zrpUwOl72q20dkNSneoqf8j7Z8CLWzVJsFeJN7wyDBgPCOC+VXrno1kyUfEkFii /z/RjB0UZwsv8zoZWUTUcJUaA2EM81l9XLiqv6u4PDMhIwFfM5sbI/AYeqHKL4AJ UI1aKR2Ekx4Yf9iMeoOmp2W6vwrvfEX4oQ2EWg+j+dYglsxSU3jRMXa2Co63UXXW SoFkPvzNyLhHo4NQeQDDgRudAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/BQxENLj EITQXzSGSl8evBSMwjEwHwYDVR0jBBgwFoAUAI9dBvD+/ED9gwsmzXZgo4MRDJEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNjc4LzdBRUVEODYyNzkx QTExRUVBQ0ExQUQyQkM0RjlBRTAyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRK RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUk5ZEJ2RC1fRUQ5Z3dzbXpYWmdvNE1SREpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF Njc4LzdBRUVEODYyNzkxQTExRUVBQ0ExQUQyQkM0RjlBRTAyL0FJOWRCdkQtX0VE OWd3c216WFpnbzRNUkRKRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKViqTG8o6BuhBeqL1ADO6Ut7kwbcxJiDbyMWwRhKBq0GMRtQO/mPnz3 xV073OBTeAXErMpvNmcFy20YgCGqOCJTtwYCx7KGS4SdBytETT+bb6zoKZfRkb7W 4UDZPH/LCsg5VUdazmbjCRQrEch80GNA2NkG+MRPJhf8XzX1FBwrncxzmDJd+9gG k2XekWwCd+EmhACcpWyy12vliQ85LBO6HILDG5NdPatpwNGd4Bwl70Eqg5yroQLH LsVf0XKRZ5u/IAi5LGdBjDIaT5MbGCZUyUCMdV1/R3FomhjAjvAN9qbjRadKMjZg TmMgTCJTz6Laoj5wS8kWOGSooj1I8Ao= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org