$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: Zn5G08zYP6S9hp+Hl0Hd6/T79GJBpq63U9KT3x1A8q8= Subject key identifier: 0B:55:58:D1:1D:66:F5:07:6E:C1:E6:CE:2C:4A:9F:DC:39:63:04:50 Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 03EA Signing time: Sun 19 May 2024 02:15:32 +0000 Manifest this update: Sun 19 May 2024 02:15:32 +0000 Manifest next update: Sun 26 May 2024 02:15:32 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: c47EoA/3f5sZ88JVPTAgU5fjs+9wNibWwHRz3+HKM0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Validity Not Before: May 19 02:15:32 2024 GMT Not After : May 26 02:15:32 2024 GMT Subject: CN=664960c4-2236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:4f:a6:4c:55:cb:66:1f:ef:5f:6e:ce:63: 9f:e7:80:6f:ba:45:c2:31:a4:e1:14:04:d8:82:6e: 5d:ce:3d:93:a2:d5:73:67:a4:c8:ec:ba:97:56:e8: bd:7b:a0:09:81:a3:71:11:e6:0f:ee:a8:8a:a4:cd: 37:19:f8:18:5a:e1:ad:d9:57:21:f9:bc:1f:24:6f: 5e:f0:63:e4:ff:36:85:9c:77:ea:ad:8e:52:d1:d2: 4a:7f:04:fb:97:63:8f:55:54:4c:f6:60:3e:c2:83: b4:50:af:62:f6:d2:be:8b:94:b5:41:f2:e7:0e:9b: 92:90:46:21:64:53:ad:16:bf:d5:37:08:0e:c4:58: 51:e4:ac:97:d2:02:ff:72:c7:8b:46:39:82:47:e0: c2:4d:f5:b6:a2:52:99:dd:1a:70:2d:ab:1d:b4:9c: b7:6c:50:c7:0c:7f:6e:3c:e5:4f:13:52:25:98:01: d3:b9:4f:fb:ce:9a:67:92:fd:39:17:48:9f:f3:3e: b8:12:ed:9b:58:28:1d:7c:e4:1d:c6:8f:14:89:06: 3d:27:53:aa:ad:90:96:ff:30:0b:35:9a:94:33:a4: ed:a9:51:90:fd:03:d8:88:76:2a:4e:df:51:29:71: e3:f8:93:40:aa:8c:8b:d9:1a:35:b1:12:16:7b:25: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:55:58:D1:1D:66:F5:07:6E:C1:E6:CE:2C:4A:9F:DC:39:63:04:50 X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:23:50:9e:5f:97:b1:d0:e5:e5:db:9b:6f:9e:bf:4b:95:5d: 88:4f:b8:bc:d0:da:8b:75:7d:3d:39:f4:f7:af:94:da:f8:74: 0e:7c:8a:0e:11:87:91:b0:1a:05:46:02:b9:51:9c:4b:43:ab: ac:58:d9:0d:20:c8:46:13:e6:10:0c:18:71:25:e8:ee:ea:91: c9:7b:8d:3d:be:b3:74:8f:13:40:1a:ed:64:eb:0b:ee:90:74: 16:86:9c:36:78:7c:45:df:74:9f:ae:6e:1e:8e:52:1a:28:ef: 52:4c:ae:73:c4:a8:20:85:ca:60:f0:27:c3:72:b6:16:84:5f: b8:4d:3c:a7:21:67:ce:18:86:d2:75:2d:48:b8:7b:00:dc:f2: 30:14:ae:c7:23:3f:b5:fe:7a:77:ca:d2:49:68:aa:8a:7b:29: 4c:8e:ef:4d:c6:94:00:94:4d:d8:ff:ef:f8:64:56:23:a7:3b: f3:21:a5:a0:21:f5:e8:51:34:d7:b8:10:c0:a8:cf:44:cf:4c: c1:73:25:69:d5:fe:62:f6:07:5a:32:3f:d3:64:f3:37:cd:fc: da:97:d2:16:26:b3:ed:06:8e:bb:c8:ec:d4:53:e9:b9:1e:99: e2:dc:61:96:fc:3e:2b:a5:cb:c2:9c:61:82:af:d9:80:76:bf: a0:13:d0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjQwNTE5MDIxNTMyWhcNMjQwNTI2MDIxNTMyWjAYMRYwFAYD VQQDEw02NjQ5NjBjNC0yMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdZPpkxVy2Yf719uzmOf54BvukXCMaThFATYgm5dzj2TotVzZ6TI7LqXVui9 e6AJgaNxEeYP7qiKpM03GfgYWuGt2Vch+bwfJG9e8GPk/zaFnHfqrY5S0dJKfwT7 l2OPVVRM9mA+woO0UK9i9tK+i5S1QfLnDpuSkEYhZFOtFr/VNwgOxFhR5KyX0gL/ cseLRjmCR+DCTfW2olKZ3RpwLasdtJy3bFDHDH9uPOVPE1IlmAHTuU/7zppnkv05 F0if8z64Eu2bWCgdfOQdxo8UiQY9J1OqrZCW/zALNZqUM6TtqVGQ/QPYiHYqTt9R KXHj+JNAqoyL2Ro1sRIWeyUelwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtVWNEd ZvUHbsHmzixKn9w5YwRQMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxI1CeX5ex0OXl25tvnr9LlV2IT7i80NqLdX09OfT3r5Ta+HQOfIoO EYeRsBoFRgK5UZxLQ6usWNkNIMhGE+YQDBhxJeju6pHJe409vrN0jxNAGu1k6wvu kHQWhpw2eHxF33Sfrm4ejlIaKO9STK5zxKgghcpg8CfDcrYWhF+4TTynIWfOGIbS dS1IuHsA3PIwFK7HIz+1/np3ytJJaKqKeylMju9NxpQAlE3Y/+/4ZFYjpzvzIaWg IfXoUTTXuBDAqM9Ez0zBcyVp1f5i9gdaMj/TZPM3zfzal9IWJrPtBo67yOzUU+m5 Hpni3GGW/D4rpcvCnGGCr9mAdr+gE9CG -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org