$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: zS0OUVjruuw8OdaLbgG3wMe0K+v1cyM1zRbKDAcF6uk= Subject key identifier: FA:65:48:28:50:30:0E:B5:7A:AE:B8:18:7C:D0:23:69:43:0C:C0:23 Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 0515 Signing time: Sun 19 May 2024 01:05:27 +0000 Manifest this update: Sun 19 May 2024 01:05:26 +0000 Manifest next update: Sun 26 May 2024 01:05:26 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: BhnmJ5BF6W9BklEvRSMTLUcTDH8YaZIViUSX2UvKIfQ=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: OAimnt8ZZgQlJ7vQdOdcaTxcOwaW1n4H+FyHEmWqyl0=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: 7sFZvjQNTjQXVsm4KlLbxGcb+EV8i8lYv+qJuHTAdPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: May 19 01:05:26 2024 GMT Not After : May 26 01:05:26 2024 GMT Subject: CN=66495057-e9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:cd:bf:f9:3d:da:a3:3c:9f:c4:74:79:51: a2:13:4a:f8:f5:2b:df:32:22:55:b6:8c:89:81:4a: 23:a3:ec:79:8e:69:1b:3c:b8:09:63:a4:da:2a:2a: f2:18:90:a0:0e:63:7d:3b:33:58:da:d5:c2:d7:01: b0:99:ef:9a:6d:4e:0c:4a:9a:80:0b:a2:32:2e:2c: 72:10:8c:4e:ab:ab:bd:63:a5:62:03:2a:57:26:45: 16:90:c0:75:e3:df:3d:5f:90:03:72:e3:5c:d8:0b: f7:b5:4c:d2:ed:17:a7:30:94:11:fd:6f:9b:6f:c7: 24:2e:f2:71:8f:e2:bd:cd:e0:42:30:15:94:c0:29: 69:d5:9c:ad:31:b7:17:df:6a:4d:2c:7e:19:af:91: eb:3c:b8:fb:d3:9d:4f:9b:e0:9f:21:b7:ae:1f:a5: e8:1e:06:4b:fe:f4:04:07:8c:74:e2:fc:c4:a7:42: 76:5f:19:71:c5:06:fa:0a:02:34:16:9a:d5:20:7a: e1:e3:42:51:7a:6d:92:21:54:18:22:d3:c5:8b:4f: bd:51:0d:ca:d4:b0:b7:96:9e:fb:9a:6e:1e:82:b2: e3:33:11:1e:ad:86:75:71:19:6d:c1:d2:9e:7d:03: 1c:5a:6f:53:9a:d8:1b:26:3c:ea:20:d6:09:f5:92: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:65:48:28:50:30:0E:B5:7A:AE:B8:18:7C:D0:23:69:43:0C:C0:23 X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:35:61:1c:d2:97:25:c9:88:38:d3:76:92:6d:dc:10:53:d3: f5:5e:6d:f4:dc:e7:89:ae:3d:e8:be:28:49:30:90:71:4f:ce: 21:08:ca:7b:ae:06:15:f9:05:b1:b4:d4:ad:b7:45:fc:0c:01: 48:1a:47:f9:13:66:dc:22:45:9f:8d:62:6a:7b:d4:65:8c:36: 86:5a:92:22:27:46:66:a9:f5:ed:f3:c8:3c:45:41:9d:cc:cd: b6:86:ad:37:f0:14:24:44:72:c9:74:f2:26:2c:1c:ef:14:45: a7:01:e7:de:a3:ab:4f:7c:ae:be:b9:13:2f:98:13:a8:d9:e4: a3:ca:b5:3d:14:f9:89:07:d6:d3:c4:61:ad:84:db:26:ee:8e: f6:b4:5f:d0:b4:e9:84:fc:a2:72:f0:83:b2:15:a5:54:71:8f: 5c:58:f7:e7:7f:55:99:b2:f1:14:07:ec:6b:f1:58:7c:48:36: ca:3f:1f:d1:c1:f3:47:77:d5:6a:b6:d4:5d:d1:3e:b6:d1:94: 7a:6d:2a:51:a9:b7:d7:6b:8a:08:06:a4:45:c1:de:8d:6c:b8: ca:df:87:19:4a:a1:a2:36:92:52:ae:ea:1f:fb:e5:7e:34:e8: 68:5d:73:95:5c:50:1b:a8:02:7a:76:4d:53:18:75:c5:1a:df: 80:c8:4c:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjQwNTE5MDEwNTI2WhcNMjQwNTI2MDEwNTI2WjAYMRYwFAYD VQQDEw02NjQ5NTA1Ny1lOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA057Nv/k92qM8n8R0eVGiE0r49SvfMiJVtoyJgUojo+x5jmkbPLgJY6TaKiry GJCgDmN9OzNY2tXC1wGwme+abU4MSpqAC6IyLixyEIxOq6u9Y6ViAypXJkUWkMB1 4989X5ADcuNc2Av3tUzS7RenMJQR/W+bb8ckLvJxj+K9zeBCMBWUwClp1ZytMbcX 32pNLH4Zr5HrPLj7051Pm+CfIbeuH6XoHgZL/vQEB4x04vzEp0J2XxlxxQb6CgI0 FprVIHrh40JRem2SIVQYItPFi0+9UQ3K1LC3lp77mm4egrLjMxEerYZ1cRltwdKe fQMcWm9TmtgbJjzqINYJ9ZISAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPplSChQ MA61eq64GHzQI2lDDMAjMB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzNWEc0pclyYg403aSbdwQU9P1Xm303OeJrj3ovihJMJBxT84hCMp7 rgYV+QWxtNStt0X8DAFIGkf5E2bcIkWfjWJqe9RljDaGWpIiJ0ZmqfXt88g8RUGd zM22hq038BQkRHLJdPImLBzvFEWnAefeo6tPfK6+uRMvmBOo2eSjyrU9FPmJB9bT xGGthNsm7o72tF/QtOmE/KJy8IOyFaVUcY9cWPfnf1WZsvEUB+xr8Vh8SDbKPx/R wfNHd9VqttRd0T620ZR6bSpRqbfXa4oIBqRFwd6NbLjK34cZSqGiNpJSruof++V+ NOhoXXOVXFAbqAJ6dk1TGHXFGt+AyEwe -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org