$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json) Hash identifier: gyv6/4pTf2Z4wN9++Z2NCgOwLcLLQByh3hW9oshji6Q= Subject key identifier: C5:48:A1:3D:E1:2B:AB:0F:2B:40:4B:A1:46:70:0E:2D:F1:B7:D3:2A Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft Manifest number: 68 Signing time: Sun 19 May 2024 02:04:56 +0000 Manifest this update: Sun 19 May 2024 02:04:55 +0000 Manifest next update: Sun 26 May 2024 02:04:55 +0000 Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: rCMyZvbhUZdHzaQQRzVPhIMRlu9Vry7WNT+wzzD85Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: May 19 02:04:55 2024 GMT Not After : May 26 02:04:55 2024 GMT Subject: CN=66495e48-186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:ea:ea:d4:f8:46:68:49:41:26:eb:da:97: 39:c0:a2:d1:9c:88:97:53:73:e1:d8:74:b5:e9:ed: f3:8d:14:d7:8a:4b:9e:2e:f6:7d:5d:37:f0:10:25: 2f:6a:16:dd:71:28:e4:45:51:00:29:c5:71:40:3a: 10:9d:4a:15:06:f9:cc:b8:cd:e5:90:93:7b:de:2c: ae:46:e2:f8:e9:63:d6:7f:df:d2:ad:34:4b:a1:a7: 58:3d:e7:b9:47:57:3a:94:07:14:2c:f0:9f:3c:4f: 47:95:ee:4d:ad:e4:31:12:21:a3:e1:7a:d0:cc:cb: 4f:54:a4:34:51:2b:f1:d6:91:41:eb:77:ea:e3:14: 3c:57:2c:f7:1b:1a:bc:4a:80:3a:e7:66:9f:35:32: 1d:bb:c1:b8:e7:2c:b8:78:77:90:34:df:90:07:a5: 26:f7:db:59:0e:78:43:78:5a:2b:e1:33:3f:0b:8e: e6:e7:06:5a:6c:20:f4:fc:4c:c2:55:fe:ba:00:a3: 4f:e8:76:52:a0:ba:ff:a0:48:71:09:5d:44:12:9a: 26:b4:38:bc:15:02:d3:d1:80:ed:06:e8:4d:8b:da: af:59:dc:6a:03:c2:f8:ba:26:4e:78:08:8b:2f:43: 94:1e:5a:f0:31:99:82:5d:24:af:c6:b1:14:59:ab: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:48:A1:3D:E1:2B:AB:0F:2B:40:4B:A1:46:70:0E:2D:F1:B7:D3:2A X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:cf:29:e9:8c:db:5f:ef:dc:ea:79:14:10:90:8e:8b:70:5a: c0:7e:35:8a:07:42:6c:12:07:97:ea:31:25:1b:42:9a:5c:a8: 2f:65:ac:c7:8f:61:34:0c:a8:46:15:b5:9d:48:c6:ac:59:87: d4:dc:9f:4b:64:d6:27:4a:ea:fa:e3:79:0f:c4:0e:bd:5b:bf: 93:3c:d8:95:13:2b:d0:f5:10:68:c5:cc:af:69:09:08:33:fb: 39:16:32:60:12:6f:ec:2f:40:38:83:5f:bc:ca:54:83:4d:02: ce:66:ba:83:d9:2e:1e:4e:4e:49:f2:9d:04:49:5c:21:cc:6c: 70:1b:3c:27:fa:33:ea:51:b8:4c:f8:ab:a1:a6:d3:8d:50:d4: 13:b1:07:44:65:20:1e:ba:9a:11:f7:e2:72:db:43:38:54:47: dd:b0:fe:e3:6b:81:b2:8b:54:f7:74:1c:40:65:2a:dd:c0:36: 48:e5:a7:6c:fe:75:41:b7:87:ea:42:f5:56:57:da:ba:fb:8e: 59:14:fb:75:44:c6:08:ce:98:9d:4f:d2:72:60:e0:8d:ed:03: f1:22:fb:8a:81:df:3f:30:b1:e2:75:52:65:8d:4d:b8:99:bd: b0:15:fa:73:c6:36:4d:22:50:43:75:f6:43:cc:31:42:76:5a: 97:b7:b0:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTRCNzExMC8GA1UEBRMoRTM0QjRGODBEOUUzRjcwMEJDQUM0QzUyQzVBQjIzRUI1 QjdFREZCQjAeFw0yNDA1MTkwMjA0NTVaFw0yNDA1MjYwMjA0NTVaMBgxFjAUBgNV BAMTDTY2NDk1ZTQ4LTE4NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJWOrq1PhGaElBJuvalznAotGciJdTc+HYdLXp7fONFNeKS54u9n1dN/AQJS9q Ft1xKORFUQApxXFAOhCdShUG+cy4zeWQk3veLK5G4vjpY9Z/39KtNEuhp1g957lH VzqUBxQs8J88T0eV7k2t5DESIaPhetDMy09UpDRRK/HWkUHrd+rjFDxXLPcbGrxK gDrnZp81Mh27wbjnLLh4d5A035AHpSb321kOeEN4WivhMz8LjubnBlpsIPT8TMJV /roAo0/odlKguv+gSHEJXUQSmia0OLwVAtPRgO0G6E2L2q9Z3GoDwvi6Jk54CIsv Q5QeWvAxmYJdJK/GsRRZq3RnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxUihPeEr qw8rQEuhRnAOLfG30yowHwYDVR0jBBgwFoAU40tPgNnj9wC8rExSxasj61t+37sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFNEI3Lzk2RTY2NzVBNzg0 RTExRUVCMTlBRDM0REM0RjlBRTAyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNDB0UGdObmo5d0M4ckV4U3hhc2o2MXQtMzdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF NEI3Lzk2RTY2NzVBNzg0RTExRUVCMTlBRDM0REM0RjlBRTAyLzQwdFBnTm5qOXdD OHJFeFN4YXNqNjF0LTM3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTPKemM21/v3Op5FBCQjotwWsB+NYoHQmwSB5fqMSUbQppcqC9lrMeP YTQMqEYVtZ1IxqxZh9Tcn0tk1idK6vrjeQ/EDr1bv5M82JUTK9D1EGjFzK9pCQgz +zkWMmASb+wvQDiDX7zKVINNAs5muoPZLh5OTknynQRJXCHMbHAbPCf6M+pRuEz4 q6Gm041Q1BOxB0RlIB66mhH34nLbQzhUR92w/uNrgbKLVPd0HEBlKt3ANkjlp2z+ dUG3h+pC9VZX2rr7jlkU+3VExgjOmJ1P0nJg4I3tA/Ei+4qB3z8wseJ1UmWNTbiZ vbAV+nPGNk0iUEN19kPMMUJ2Wpe3sC4= -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org