$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft File: SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json) Hash identifier: WsdIAMxpCdmf80uQ9osOJptkaFuPTr0dQ0tUDF46BW8= Subject key identifier: 13:1A:00:BC:6A:36:92:20:83:B2:11:40:A4:22:59:50:91:49:42:B9 Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A Certificate serial: 0B4E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft Manifest number: 0B48 Signing time: Sat 18 May 2024 17:49:21 +0000 Manifest this update: Sat 18 May 2024 17:49:21 +0000 Manifest next update: Sat 25 May 2024 17:49:21 +0000 Files and hashes: 1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: WXOeCePaANOkdk6J4xN6332PfT3SFbm5cjY/CsQILE4=) 2: AB138380985F11EEBA5D186DC4F9AE02.roa (hash: soYLH9GAT64q0VIUWl7HT/IfbnqFeH7kPZQ2kB3D58o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2894 (0xb4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A Validity Not Before: May 18 17:49:21 2024 GMT Not After : May 25 17:49:21 2024 GMT Subject: CN=6648ea21-004a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:ec:ff:2f:2f:eb:7d:e4:b2:a3:ff:c3:3d: 18:18:41:c3:4a:03:b1:17:6f:69:82:be:6c:6a:4a: b6:27:0b:81:18:4a:36:b4:7c:db:c3:7f:d6:de:93: 45:8a:14:1a:53:b2:41:a1:bc:0c:e6:ba:38:6e:ad: ed:80:92:fa:44:d5:17:5e:36:2b:1b:f1:8c:9d:56: 42:97:83:66:4e:06:3a:5a:0b:f5:36:0d:d8:27:d8: ee:fb:98:ac:c1:c3:4b:86:ea:24:c4:57:21:ef:61: 36:2f:b9:b5:de:45:ec:d8:25:e3:68:49:85:57:74: 22:d1:57:80:c1:4d:76:1b:41:9c:c1:38:ed:dc:5c: b6:54:c2:e0:1a:25:05:97:71:c5:9c:46:8b:7e:7b: 77:80:9f:3e:9a:5a:42:32:db:f4:73:88:fe:d4:16: c1:03:5b:fa:11:0a:e0:80:71:c4:c1:ad:f1:26:aa: 80:85:aa:d3:cc:df:95:00:64:e5:1c:4e:f3:bf:fb: 04:db:35:96:38:8d:34:4a:ec:bf:96:4c:b8:c9:d0: 4e:fe:19:a6:27:3b:71:1e:66:f0:ca:b6:7b:d9:68: 16:a6:64:9f:8f:bd:25:52:5f:c6:93:9c:7d:29:17: 2d:5c:30:9e:57:c7:5a:7d:bd:08:91:bc:0c:3b:64: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1A:00:BC:6A:36:92:20:83:B2:11:40:A4:22:59:50:91:49:42:B9 X509v3 Authority Key Identifier: keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c8:db:39:3e:b8:35:d6:a9:41:18:eb:6f:69:e3:42:92:db: 95:47:ec:5c:d3:62:45:0f:73:1e:d4:d6:60:06:90:42:ac:85: 1f:65:ae:7a:fe:38:f2:d8:7c:6b:f6:9c:79:15:91:f7:34:9d: d0:b3:7a:f6:d8:20:17:af:68:d3:20:fb:9f:82:5a:ef:5b:f5: da:48:74:32:7e:ec:52:4d:6e:9f:d7:19:6c:c4:e9:ff:e3:d3: 1a:d9:de:08:5e:16:bd:05:9b:2e:0e:7d:8a:db:89:0c:ca:d3: 1f:86:71:59:f2:88:e1:52:8a:45:e7:0b:e6:e0:90:26:f5:cb: ac:29:03:40:11:61:65:be:6c:87:85:24:b8:e0:ae:73:9e:64: 53:4b:fa:63:c8:2e:8b:29:02:fd:53:0a:b0:c0:7f:0f:c1:ca: 63:f8:f7:a4:e9:58:a1:93:c1:1b:ef:47:27:33:bf:54:9b:07: 79:91:30:9e:a4:e5:dc:3f:4b:8d:68:8c:88:b7:8f:d3:55:f4: 4f:f0:4c:76:f1:1a:8e:73:cc:c7:df:79:bd:be:e0:4a:2c:ea: 80:bc:0f:9e:f6:61:f2:fa:75:38:9b:d6:6c:55:71:6c:9a:a3: ac:00:04:1e:4c:c6:e3:1d:91:51:ef:a4:7f:f9:0a:1e:e3:77: a2:a6:49:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDQ4NTJFODcyNkMxNDQ4QTEwNDBDQ0ZBMDQzQjgzMTRB QUU0QzRFOUEwHhcNMjQwNTE4MTc0OTIxWhcNMjQwNTI1MTc0OTIxWjAYMRYwFAYD VQQDEw02NjQ4ZWEyMS0wMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApobs/y8v633ksqP/wz0YGEHDSgOxF29pgr5sakq2JwuBGEo2tHzbw3/W3pNF ihQaU7JBobwM5ro4bq3tgJL6RNUXXjYrG/GMnVZCl4NmTgY6Wgv1Ng3YJ9ju+5is wcNLhuokxFch72E2L7m13kXs2CXjaEmFV3Qi0VeAwU12G0GcwTjt3Fy2VMLgGiUF l3HFnEaLfnt3gJ8+mlpCMtv0c4j+1BbBA1v6EQrggHHEwa3xJqqAharTzN+VAGTl HE7zv/sE2zWWOI00Suy/lky4ydBO/hmmJztxHmbwyrZ72WgWpmSfj70lUl/Gk5x9 KRctXDCeV8dafb0IkbwMO2SAQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMaALxq NpIgg7IRQKQiWVCRSUK5MB8GA1UdIwQYMBaAFEhS6HJsFEihBAzPoEO4MUquTE6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9DMUNCMkRGMjEw RDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNLRUVETS1nUTdneFNxNU1U cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1NGTG9jbXdVU0tFRURNLWdRN2d4U3E1TVRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9DMUNCMkRGMjEwRDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNL RUVETS1nUTdneFNxNU1UcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPyNs5Prg11qlBGOtvaeNCktuVR+xc02JFD3Me1NZgBpBCrIUfZa56 /jjy2Hxr9px5FZH3NJ3Qs3r22CAXr2jTIPufglrvW/XaSHQyfuxSTW6f1xlsxOn/ 49Ma2d4IXha9BZsuDn2K24kMytMfhnFZ8ojhUopF5wvm4JAm9cusKQNAEWFlvmyH hSS44K5znmRTS/pjyC6LKQL9UwqwwH8Pwcpj+Pek6Vihk8Eb70cnM79Umwd5kTCe pOXcP0uNaIyIt4/TVfRP8Ex28RqOc8zH33m9vuBKLOqAvA+e9mHy+nU4m9ZsVXFs mqOsAAQeTMbjHZFR76R/+Qoe43eipkmD -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org