$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json) Hash identifier: Xr/7cGz6r9Y1MGlz2LPSw6bxjpvztCXHyYd76IV0V8U= Subject key identifier: A2:DA:98:81:F7:58:91:09:0F:8E:FD:4D:FB:BB:8E:FC:E3:4A:BA:73 Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Certificate serial: 06DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft Manifest number: 06D7 Signing time: Sat 18 May 2024 22:55:45 +0000 Manifest this update: Sat 18 May 2024 22:55:44 +0000 Manifest next update: Sat 25 May 2024 22:55:44 +0000 Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: 10W/spxEZMYvw++4rH8M+OYD2JpepoaXleBbtZVLHjc=) 2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: rqs6z6P4PhYp4TGXhgwj4ZGeqaHDaPPgCo1WuJJGsoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Validity Not Before: May 18 22:55:44 2024 GMT Not After : May 25 22:55:44 2024 GMT Subject: CN=664931f1-8129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:5b:a5:8a:5d:d7:1b:16:d9:f1:fc:ff:26: 88:e3:40:ae:fc:25:99:82:34:12:d3:2a:68:f2:2f: 5b:a3:aa:75:71:64:1f:c8:2f:ca:90:0c:b4:f9:f7: d9:4d:96:87:e4:ab:f0:26:44:67:37:5d:43:3a:b9: 7f:98:96:fe:7f:76:dd:fc:87:f1:f6:c1:06:3c:ca: 84:b7:99:9d:ea:bf:da:7c:f2:64:21:b3:7f:b4:48: 49:a3:47:6c:f7:34:b8:ca:39:55:39:c6:25:ef:2c: 37:ca:f3:ee:3d:a4:ff:13:f2:16:ed:d5:ed:71:92: 3b:c5:56:6d:ba:ee:0b:c5:69:d2:79:29:ad:b1:78: 2c:8b:1c:54:0c:15:09:88:1b:7c:da:fb:00:b6:0a: 9c:b4:34:df:a7:79:d4:94:ce:90:93:fe:f5:c7:86: ed:0a:7e:f5:72:5e:b7:ee:c5:4c:2a:ea:c0:34:df: 0f:27:97:30:25:8b:13:3d:e0:cc:28:b6:3c:14:e1: a8:57:de:82:9f:30:39:ef:7b:9b:32:01:21:9f:1b: 43:98:c4:16:7a:4e:b4:8b:d9:f2:67:82:da:77:7a: a2:b6:de:f7:a0:8f:e9:c4:29:c2:9f:4a:75:38:8d: 93:8e:a5:d4:c8:0e:51:43:e1:00:d8:60:ec:46:02: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:98:81:F7:58:91:09:0F:8E:FD:4D:FB:BB:8E:FC:E3:4A:BA:73 X509v3 Authority Key Identifier: keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6a:80:da:28:82:50:19:cb:e6:87:a9:86:44:a2:f0:c7:1f: 78:a1:48:bc:16:49:6d:4f:16:8a:02:a1:07:ee:1e:95:1b:59: 46:f1:0a:9f:c7:cf:df:d4:59:6d:0e:cb:a9:ad:2e:4c:a8:00: 07:3e:a7:18:69:d4:c1:a1:23:ee:73:84:1e:33:e3:66:b7:8f: 2a:ac:84:e3:12:df:a2:cc:a7:a9:d8:9d:6b:31:ba:13:ab:ad: 52:42:e1:4c:e0:f8:d4:d5:e9:c1:80:9a:4c:d3:fc:3f:2c:1e: 6d:75:00:42:ac:25:39:33:f5:eb:80:2d:1f:74:7c:6b:91:fd: 53:a4:08:b5:24:d6:ce:96:b6:ad:05:83:79:7a:60:95:b9:51: 35:b3:1b:55:30:75:3a:a0:21:d7:0f:87:d9:12:0d:62:ac:82: 09:0c:a8:1b:a7:e4:3c:0d:bd:74:43:5e:8b:71:ae:83:a5:2b: cb:71:c3:c6:83:6b:80:05:81:32:0d:03:6c:39:3b:ac:cc:3c: 30:f2:1d:8d:56:09:04:be:3a:2b:0b:1d:b8:27:3b:07:f1:79: c5:c7:53:3c:60:11:3d:cc:de:d9:7a:9b:59:cb:16:13:ee:33: dd:0e:ad:5d:27:85:49:e7:0f:b5:44:5f:87:f2:16:d8:6b:d5: 5c:ff:5c:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG MUI0NjQ1MzEwHhcNMjQwNTE4MjI1NTQ0WhcNMjQwNTI1MjI1NTQ0WjAYMRYwFAYD VQQDEw02NjQ5MzFmMS04MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQlbpYpd1xsW2fH8/yaI40Cu/CWZgjQS0ypo8i9bo6p1cWQfyC/KkAy0+ffZ TZaH5KvwJkRnN11DOrl/mJb+f3bd/Ifx9sEGPMqEt5md6r/afPJkIbN/tEhJo0ds 9zS4yjlVOcYl7yw3yvPuPaT/E/IW7dXtcZI7xVZtuu4LxWnSeSmtsXgsixxUDBUJ iBt82vsAtgqctDTfp3nUlM6Qk/71x4btCn71cl637sVMKurANN8PJ5cwJYsTPeDM KLY8FOGoV96CnzA573ubMgEhnxtDmMQWek60i9nyZ4Lad3qitt73oI/pxCnCn0p1 OI2TjqXUyA5RQ+EA2GDsRgJa1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLamIH3 WJEJD479Tfu7jvzjSrpzMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4 NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6 X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOaoDaKIJQGcvmh6mGRKLwxx94oUi8FkltTxaKAqEH7h6VG1lG8Qqf x8/f1FltDsuprS5MqAAHPqcYadTBoSPuc4QeM+Nmt48qrITjEt+izKep2J1rMboT q61SQuFM4PjU1enBgJpM0/w/LB5tdQBCrCU5M/XrgC0fdHxrkf1TpAi1JNbOlrat BYN5emCVuVE1sxtVMHU6oCHXD4fZEg1irIIJDKgbp+Q8Db10Q16Lca6DpSvLccPG g2uABYEyDQNsOTuszDww8h2NVgkEvjorCx24JzsH8XnFx1M8YBE9zN7ZeptZyxYT 7jPdDq1dJ4VJ5w+1RF+H8hbYa9Vc/1zF -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org