$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json) Hash identifier: Rnjx61gJTwGq4/OV1WmmSjB8OFi/HvCzQc8BeKsJHd4= Subject key identifier: 35:6D:3E:26:1E:C4:70:3A:B8:B6:07:66:35:1B:FA:90:D5:C9:32:D7 Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft Manifest number: 75 Signing time: Sat 18 May 2024 20:27:54 +0000 Manifest this update: Sat 18 May 2024 20:27:53 +0000 Manifest next update: Sat 25 May 2024 20:27:53 +0000 Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: ihy7XQ/qxJyJDjugtjaWhOieKndgI7xKtCkZoDATTP0=) 2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: nCTIr/V5xZEh3ugXoBfi7Q8QPkS4NVpO4v5sjD/rMzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Validity Not Before: May 18 20:27:53 2024 GMT Not After : May 25 20:27:53 2024 GMT Subject: CN=66490f4a-1534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:a9:15:30:ef:4d:85:51:f0:ef:d1:46:bc: 5e:10:b5:ac:5c:64:e5:2c:f5:2c:08:70:cf:3c:c2: 88:63:86:cd:93:8f:27:11:fa:6c:c5:9b:fc:75:db: 95:7c:21:cd:29:ec:2b:9d:0b:23:23:cf:93:eb:84: 68:4b:c3:e5:84:c2:10:3f:55:37:cd:c7:48:b7:5c: 05:04:37:dc:5e:e5:0c:09:9f:ca:95:47:34:b7:e4: 96:b4:80:24:39:0b:23:04:2a:36:2a:38:f2:30:1f: 1a:91:64:07:62:00:68:75:84:26:16:73:81:77:2f: 24:ed:06:cb:e5:ff:64:6f:00:01:54:ba:fb:d6:a1: 32:3f:75:6d:e4:86:38:07:0c:ee:b2:39:c5:e5:4d: 78:d4:79:06:67:2d:72:39:df:2a:6b:5d:ae:19:79: e6:64:58:ec:61:cf:c3:68:f1:0d:91:a7:fc:9b:ca: 07:ba:c1:b6:a1:c2:b5:55:3c:32:2d:d6:0f:fa:fc: fd:a5:3b:c7:e5:87:7a:45:38:d0:10:2c:a2:55:63: a7:fb:d7:b1:28:5d:8c:73:51:e3:b1:f4:d9:62:d7: 12:05:26:e6:67:00:8b:99:df:89:2c:1a:14:fb:52: 03:92:c3:de:77:e2:61:ed:c3:13:6d:16:48:ef:01: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:3E:26:1E:C4:70:3A:B8:B6:07:66:35:1B:FA:90:D5:C9:32:D7 X509v3 Authority Key Identifier: keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4f:43:14:da:9a:59:4c:a0:95:7a:fa:b6:21:7b:79:ad:a3: c9:1f:f3:28:23:e8:df:e0:9f:34:55:b1:2b:b0:13:15:a0:3e: 5a:a8:74:0b:cb:6b:f8:77:91:a8:0b:81:3b:25:fc:60:94:08: f4:86:57:81:50:5a:37:72:d1:89:c0:e4:69:45:9d:e2:0b:c6: ee:51:e3:99:a0:45:a9:75:cd:d9:3a:41:1e:39:97:6f:18:3f: 70:89:4a:57:b3:7b:50:df:cd:81:4b:ed:a4:0c:fc:34:09:24: f1:62:82:60:00:66:6a:a3:34:89:79:62:25:79:84:df:0e:40: 9c:3c:dd:b4:98:23:14:d0:4b:30:bd:b1:8b:f8:29:e4:1d:fe: 84:21:25:00:b8:a8:41:3c:23:de:74:01:f6:a2:17:84:cd:ab: 7c:b4:f0:97:f7:c8:5e:44:f8:e7:ed:9a:e2:27:0d:75:e3:c3: df:33:1b:7f:0d:d7:4b:d3:b4:56:e6:78:7d:46:65:fb:96:aa: ce:28:92:3e:de:77:cb:5b:52:2e:f0:3f:d9:32:74:33:72:41: 94:cc:35:36:dd:8e:78:13:a3:67:36:97:d2:5c:37:4e:9c:8e: 93:05:76:0c:6b:15:f0:49:54:2f:a3:b9:82:29:89:74:2e:58: d9:69:51:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Q0FCRjExMC8GA1UEBRMoQTRERUVEOTU5M0U1OTEzMDNBOUIwMzk4MDYxRkU4RUY1 MTg2NjVDQTAeFw0yNDA1MTgyMDI3NTNaFw0yNDA1MjUyMDI3NTNaMBgxFjAUBgNV BAMTDTY2NDkwZjRhLTE1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrC6kVMO9NhVHw79FGvF4QtaxcZOUs9SwIcM88wohjhs2TjycR+mzFm/x125V8 Ic0p7CudCyMjz5PrhGhLw+WEwhA/VTfNx0i3XAUEN9xe5QwJn8qVRzS35Ja0gCQ5 CyMEKjYqOPIwHxqRZAdiAGh1hCYWc4F3LyTtBsvl/2RvAAFUuvvWoTI/dW3khjgH DO6yOcXlTXjUeQZnLXI53yprXa4ZeeZkWOxhz8No8Q2Rp/ybyge6wbahwrVVPDIt 1g/6/P2lO8flh3pFONAQLKJVY6f717EoXYxzUeOx9Nli1xIFJuZnAIuZ34ksGhT7 UgOSw9534mHtwxNtFkjvARJ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNW0+Jh7E cDq4tgdmNRv6kNXJMtcwHwYDVR0jBBgwFoAUpN7tlZPlkTA6mwOYBh/o71GGZcow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDQUJGLzE4OTE5NUFDNjgy QTExRUU4QTlFQjgyRkM0RjlBRTAyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcE43dGxaUGxrVEE2bXdPWUJoX283MUdHWmNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD QUJGLzE4OTE5NUFDNjgyQTExRUU4QTlFQjgyRkM0RjlBRTAyL3BON3RsWlBsa1RB Nm13T1lCaF9vNzFHR1pjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNPQxTamllMoJV6+rYhe3mto8kf8ygj6N/gnzRVsSuwExWgPlqodAvL a/h3kagLgTsl/GCUCPSGV4FQWjdy0YnA5GlFneILxu5R45mgRal1zdk6QR45l28Y P3CJSleze1DfzYFL7aQM/DQJJPFigmAAZmqjNIl5YiV5hN8OQJw83bSYIxTQSzC9 sYv4KeQd/oQhJQC4qEE8I950AfaiF4TNq3y08Jf3yF5E+OftmuInDXXjw98zG38N 10vTtFbmeH1GZfuWqs4okj7ed8tbUi7wP9kydDNyQZTMNTbdjngTo2c2l9JcN06c jpMFdgxrFfBJVC+juYIpiXQuWNlpUQw= -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org