$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json) Hash identifier: pjgmNKW3zG6Dhb3n64nSGpmt+1VkYjdTqTulhXqJpPo= Subject key identifier: A9:71:1F:2D:E1:0B:F1:6B:02:32:57:C2:10:E0:40:33:99:A5:2C:FD Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft Manifest number: 03B8 Signing time: Fri 17 May 2024 02:38:07 +0000 Manifest this update: Fri 17 May 2024 02:38:07 +0000 Manifest next update: Fri 24 May 2024 02:38:07 +0000 Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: RBmopQgS2WYOCaOpqQFMXXp20HBPjFNzOm/9ncPDq+0=) 2: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: xKAp7QQZzvPcKaqeA8FNrW0vD6RfKP6sFaIFenq6yOk=) 3: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: ikrTe3JlBPJvvS7QA2MhzwcmLIASncvk8dd3dvu0eIo=) 4: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: S7MlN7EcdljIgirwT85s0UeMI1msMXz2OWeTrTt7MZs=) 5: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: Rzh0A53RJhQ7nkX8l0r1eEVHybEfvcunuAZy12At2jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: May 17 02:38:07 2024 GMT Not After : May 24 02:38:07 2024 GMT Subject: CN=6646c30f-99fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:62:16:56:02:90:4b:39:1c:5a:de:56:d3: 58:20:5c:e3:2b:d3:99:6f:61:6b:77:4f:96:04:0e: b6:c0:57:81:85:25:c1:91:4a:e5:ed:a7:02:91:6d: 69:43:32:1e:5d:6e:24:6c:f0:dc:9d:2d:f5:7f:1b: e6:11:9f:61:84:9e:33:bc:5c:fc:4e:e4:b6:b5:5a: 65:f2:8e:72:2a:72:ae:92:8f:c4:10:b8:98:08:b2: fa:0a:2e:74:1a:f2:54:d3:ca:89:76:cb:f1:d8:3e: cd:8d:c9:b3:a3:5d:1a:d1:0a:a6:34:a1:5a:13:6e: 5b:05:19:a5:52:63:c6:93:5a:55:e3:07:fe:a5:59: 0c:f7:55:83:4b:8f:fa:64:b6:c8:4d:7e:b5:f0:d3: 66:e1:65:87:51:a2:f2:77:02:6a:ae:41:67:a3:62: fb:35:4a:d3:9e:aa:cd:cd:4a:66:4c:9e:87:82:51: 6d:e2:eb:fa:7f:db:13:51:7b:dc:92:5f:7b:a5:22: d1:e5:75:51:2c:11:5c:cc:24:8d:3e:be:02:65:eb: 90:3d:73:36:e7:79:6a:47:80:0b:80:54:a7:fd:b7: 5f:20:65:2f:01:96:ae:3c:31:0a:b1:00:b9:d0:f5: 3e:df:65:53:8a:20:30:47:ae:b8:87:34:c4:fa:b6: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:71:1F:2D:E1:0B:F1:6B:02:32:57:C2:10:E0:40:33:99:A5:2C:FD X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:16:d5:b0:76:cf:8d:99:4d:04:c7:d7:3e:d6:63:70:04:3e: 3c:4c:81:ff:12:63:e0:27:24:78:7f:9a:99:ea:71:66:13:41: 66:24:c3:05:6d:03:08:a1:15:a0:d1:5b:99:84:8e:1f:24:fd: 69:8e:64:1b:00:0c:85:96:a5:0b:08:63:4b:17:23:3e:c4:54: fc:ad:a2:62:54:d6:ac:ab:74:3a:dc:a5:ef:db:4b:b2:b7:22: 5e:88:4b:af:49:bb:76:34:aa:11:38:11:36:6e:e8:8a:e8:9a: 5f:27:27:fc:46:88:84:55:02:25:6a:14:0c:99:0c:95:a2:e5: 96:03:95:8e:11:f9:8e:67:1d:4b:8c:06:92:83:6f:0a:49:f4: 22:e1:96:01:3a:f4:e2:ab:89:04:8f:c5:3f:74:dc:cf:d6:17: 6e:d8:75:7d:09:b0:b8:42:c3:26:ae:fb:1a:87:c3:49:c4:e2: 8a:ed:ad:6d:bb:b2:07:4d:54:31:3b:88:dd:6f:b7:df:1c:ad: 4a:17:8a:39:20:f6:b7:d5:dd:28:e9:c2:b8:b0:78:54:c9:d9: 25:12:96:f5:24:49:c3:8f:4c:14:b1:74:1a:e6:77:d6:4e:8f: 0a:b0:49:a0:69:9f:40:b9:73:b4:db:ea:da:3d:3f:6e:91:f5: bd:0f:ae:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjQwNTE3MDIzODA3WhcNMjQwNTI0MDIzODA3WjAYMRYwFAYD VQQDEw02NjQ2YzMwZi05OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVFiFlYCkEs5HFreVtNYIFzjK9OZb2Frd0+WBA62wFeBhSXBkUrl7acCkW1p QzIeXW4kbPDcnS31fxvmEZ9hhJ4zvFz8TuS2tVpl8o5yKnKuko/EELiYCLL6Ci50 GvJU08qJdsvx2D7Njcmzo10a0QqmNKFaE25bBRmlUmPGk1pV4wf+pVkM91WDS4/6 ZLbITX618NNm4WWHUaLydwJqrkFno2L7NUrTnqrNzUpmTJ6HglFt4uv6f9sTUXvc kl97pSLR5XVRLBFczCSNPr4CZeuQPXM253lqR4ALgFSn/bdfIGUvAZauPDEKsQC5 0PU+32VTiiAwR664hzTE+rbgRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlxHy3h C/FrAjJXwhDgQDOZpSz9MB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0NGRi85QTVFQzE2QzQ2RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpY S1BKUHF0akxHbDhaQUhGZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsFtWwds+NmU0Ex9c+1mNwBD48TIH/EmPgJyR4f5qZ6nFmE0FmJMMF bQMIoRWg0VuZhI4fJP1pjmQbAAyFlqULCGNLFyM+xFT8raJiVNasq3Q63KXv20uy tyJeiEuvSbt2NKoROBE2buiK6JpfJyf8RoiEVQIlahQMmQyVouWWA5WOEfmOZx1L jAaSg28KSfQi4ZYBOvTiq4kEj8U/dNzP1hdu2HV9CbC4QsMmrvsah8NJxOKK7a1t u7IHTVQxO4jdb7ffHK1KF4o5IPa31d0o6cK4sHhUydklEpb1JEnDj0wUsXQa5nfW To8KsEmgaZ9AuXO02+raPT9ukfW9D646 -----END CERTIFICATE-----Generated at Fri May 17 03:16:59 2024 by rpki-client on console-fra.rpki-client.org