$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: Azm+X+Qanir8Xa33e5ICvYbp5dx9ovIiJEGdFoqx/l0= Subject key identifier: 6C:64:3F:60:01:73:6B:4A:58:21:9A:EA:DC:C3:02:38:D7:9B:A3:AB Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 028C Signing time: Sun 19 May 2024 03:41:05 +0000 Manifest this update: Sun 19 May 2024 03:41:04 +0000 Manifest next update: Sun 26 May 2024 03:41:04 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: E5GPA6CuRA/g7aDZuq6dOpvu8GJfqbJMaMkBAKIUoVw=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: RBsZfQ0KicBrU4yaM84xnMz+5ewzEgbPfvc8Ksv4tmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: May 19 03:41:04 2024 GMT Not After : May 26 03:41:04 2024 GMT Subject: CN=664974d0-ebc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:56:36:1f:65:d0:d6:43:fd:3b:37:40:06: 96:be:a5:c4:03:a1:c4:aa:1e:94:2e:c8:fa:2c:1b: 3a:5a:fa:b0:94:89:be:fb:13:11:6b:82:90:dc:2b: 82:68:be:bd:84:03:40:b7:e7:e5:02:ce:3f:c9:b9: 5e:f2:2d:6d:2b:f1:79:c2:fe:e8:c2:f3:c8:95:3c: 32:19:e0:f0:85:33:43:61:d3:02:c9:3c:01:ad:19: 70:64:3a:c8:fe:b5:7e:29:e6:91:98:b9:f0:91:5c: 56:ba:8c:20:e6:49:67:dd:78:72:a7:f4:2b:98:72: 98:3f:20:7a:2e:c0:b0:10:39:27:79:e5:f1:47:ac: 28:b3:50:81:51:0c:c8:74:57:61:a2:76:97:1e:fd: 9f:09:59:9a:28:95:3c:d5:f2:01:ff:2e:c2:69:a8: c2:1d:3f:69:df:0e:c0:94:ab:d2:e5:f8:88:c6:fd: 41:91:b6:d9:8e:51:d7:04:9f:ae:86:84:98:8c:77: 49:5c:52:f1:8a:b4:0a:1a:1d:9a:32:87:1e:19:38: 15:35:17:47:0d:f8:30:e8:f6:a9:3b:c1:91:69:12: 26:f2:28:ba:e3:06:63:63:76:1b:1f:82:8e:d7:8e: 01:d4:8b:6d:ec:11:2a:03:c3:14:4e:29:7c:88:94: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:64:3F:60:01:73:6B:4A:58:21:9A:EA:DC:C3:02:38:D7:9B:A3:AB X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:79:63:fe:82:ae:8a:bc:64:de:6b:ad:0b:17:78:17:4b:f8: e6:37:dc:e2:06:eb:0a:90:45:bc:6c:a9:a0:96:d5:0b:4d:a6: 95:fb:3d:fd:cb:3e:3f:f8:e3:a4:5f:04:22:d5:26:8b:e2:90: 67:32:c6:0c:87:d5:b7:27:71:4e:f4:9f:60:5f:76:80:3f:0d: 60:e4:97:33:7f:f7:bd:0e:23:4c:e1:e3:6c:43:a9:e4:81:8f: de:94:40:e1:7a:2d:41:97:e9:a2:d0:84:e5:e1:6b:23:78:b1: 94:98:23:2a:e1:4a:1f:e2:3a:52:f4:8b:cf:97:c9:c8:f3:6f: 41:d7:e7:64:a0:8f:e1:16:6a:da:b5:53:73:21:f0:83:8e:2b: 89:ab:90:a2:cd:c1:dc:b4:70:c8:4c:21:0b:d5:92:af:82:9e: ab:a1:80:19:53:c6:54:5d:e4:1d:da:1d:58:f3:e9:3a:3b:2c: 5c:11:7b:b7:02:4b:26:8f:62:9a:75:13:6c:47:af:9c:4b:af: f9:a0:73:7c:76:53:ed:1e:05:06:77:73:f3:7c:c2:d2:a1:92: a0:71:7b:17:eb:75:68:e0:55:d0:59:0a:8d:cf:1d:1d:02:fe: 61:6d:79:a5:69:2d:e1:3e:6f:96:3c:b5:98:ac:21:75:fb:b6: 4f:5f:7c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjQwNTE5MDM0MTA0WhcNMjQwNTI2MDM0MTA0WjAYMRYwFAYD VQQDEw02NjQ5NzRkMC1lYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gZWNh9l0NZD/Ts3QAaWvqXEA6HEqh6ULsj6LBs6WvqwlIm++xMRa4KQ3CuC aL69hANAt+flAs4/yble8i1tK/F5wv7owvPIlTwyGeDwhTNDYdMCyTwBrRlwZDrI /rV+KeaRmLnwkVxWuowg5kln3Xhyp/QrmHKYPyB6LsCwEDkneeXxR6wos1CBUQzI dFdhonaXHv2fCVmaKJU81fIB/y7CaajCHT9p3w7AlKvS5fiIxv1BkbbZjlHXBJ+u hoSYjHdJXFLxirQKGh2aMoceGTgVNRdHDfgw6PapO8GRaRIm8ii64wZjY3YbH4KO 144B1Itt7BEqA8MUTil8iJQD7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxkP2AB c2tKWCGa6tzDAjjXm6OrMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFeWP+gq6KvGTea60LF3gXS/jmN9ziBusKkEW8bKmgltULTaaV+z39 yz4/+OOkXwQi1SaL4pBnMsYMh9W3J3FO9J9gX3aAPw1g5Jczf/e9DiNM4eNsQ6nk gY/elEDhei1Bl+mi0ITl4WsjeLGUmCMq4Uof4jpS9IvPl8nI829B1+dkoI/hFmra tVNzIfCDjiuJq5CizcHctHDITCEL1ZKvgp6roYAZU8ZUXeQd2h1Y8+k6OyxcEXu3 Aksmj2KadRNsR6+cS6/5oHN8dlPtHgUGd3PzfMLSoZKgcXsX63Vo4FXQWQqNzx0d Av5hbXmlaS3hPm+WPLWYrCF1+7ZPX3wE -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org