$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft File: tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json) Hash identifier: 5bbN4pgHnblP3eTFOcqs7z6hL5iBojDgZqqH6C08o1E= Subject key identifier: E6:1B:12:6C:E9:5D:A5:16:78:60:3E:08:79:84:BD:89:4A:8B:EB:5C Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C Certificate issuer: /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft Manifest number: 38 Signing time: Sun 19 May 2024 08:17:05 +0000 Manifest this update: Sun 19 May 2024 08:17:05 +0000 Manifest next update: Sun 26 May 2024 08:17:05 +0000 Files and hashes: 1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: 7K4FF5/UMhmdUcb13P+8UOddP59MdESWP/vSfKZvPHg=) 2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: uMTQYzxF4IvJXkJz8zftJRl9BijILeVxvfHdSRvRUs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C Validity Not Before: May 19 08:17:05 2024 GMT Not After : May 26 08:17:05 2024 GMT Subject: CN=6649b581-e5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:a2:47:b2:ef:bf:db:9f:af:39:f3:38:9d: e4:db:1f:4d:fd:fb:2e:61:cb:71:4e:88:25:e8:7a: 83:4b:1f:5a:7d:f1:03:c8:e0:48:bc:58:a4:74:03: c8:aa:20:20:6b:88:fd:0f:0e:e0:5c:2d:ca:e7:b2: 79:b7:0c:19:59:7a:e2:75:ca:c2:b1:4b:84:67:f5: 87:c8:92:1a:06:c8:4e:fc:8d:d0:f4:0a:09:a5:68: ee:0d:64:b8:50:d8:d6:06:c8:59:3a:b0:5c:10:6c: 1f:66:ef:1c:b2:92:ca:38:03:41:5b:77:17:b3:2d: 0b:1d:1c:1e:74:43:dd:0e:54:b9:82:08:af:3b:c0: 67:ac:ea:4a:d5:1d:76:45:22:13:8e:d8:2d:04:3d: 79:49:6a:03:32:df:b4:22:55:c0:89:b8:23:0a:ab: e4:2a:ed:85:fe:7d:47:b0:c0:fb:92:26:94:e6:6c: ff:b3:ad:d7:5e:1b:2a:a6:5c:94:16:99:c6:94:c0: 54:58:39:e3:db:40:b6:6d:53:4d:d2:b0:d8:bc:b4: b4:46:62:fa:fd:f8:cf:01:74:5f:cd:b3:d3:83:93: ce:c6:30:40:cb:9e:86:28:d6:c1:ab:17:7e:98:09: 98:24:43:0c:fa:e7:0a:fe:70:30:50:7e:90:9f:ee: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1B:12:6C:E9:5D:A5:16:78:60:3E:08:79:84:BD:89:4A:8B:EB:5C X509v3 Authority Key Identifier: keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:70:b0:e9:08:21:a6:98:18:6b:11:8b:46:ed:3f:a9:eb:02: 6e:aa:47:b0:aa:b5:79:48:eb:07:3d:49:d1:ea:48:eb:62:f5: b1:39:d1:d2:f0:f8:3f:9b:e1:ac:7c:80:f0:75:9d:1e:b0:b0: 12:48:a3:47:47:c1:92:d1:17:42:fd:11:42:13:59:7e:93:9b: a1:45:55:1e:40:01:54:ec:87:1b:1e:b4:b3:3d:2f:40:a2:b0: 03:1f:a6:58:20:57:f0:a3:ad:ec:bf:1b:62:cd:bd:b3:07:2f: 1f:8a:7e:a6:82:df:f5:f3:58:9e:25:53:8a:fc:34:b3:64:48: 73:ea:d0:37:35:f1:da:b0:13:dc:00:0c:22:2e:ca:ea:83:2c: af:11:68:da:ee:b1:93:ce:62:66:ee:8b:38:a3:18:1a:60:4c: cb:fa:20:2e:61:f5:ad:8a:fe:84:71:6e:1a:d5:34:5c:35:86: c8:a8:48:6f:39:eb:19:e8:51:37:e2:7f:61:7b:c3:fc:aa:6b: 8b:59:56:5c:76:76:c3:0f:bf:8c:b2:ec:73:ef:1e:2b:7b:8d: 51:8f:7a:ab:81:90:27:6c:35:8b:b5:04:c1:31:18:e2:f8:e6: 83:a2:a6:da:69:f5:ee:b3:f8:f7:cb:4e:b8:c4:9e:7f:ad:78: e4:e8:f1:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTc5QzExMC8GA1UEBRMoQjUyQzU0RDQ2QTY4QURFQ0MzN0Q1RjZGMjcyMjhDNkRF QTczRTg1QzAeFw0yNDA1MTkwODE3MDVaFw0yNDA1MjYwODE3MDVaMBgxFjAUBgNV BAMTDTY2NDliNTgxLWU1YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtP6JHsu+/25+vOfM4neTbH039+y5hy3FOiCXoeoNLH1p98QPI4Ei8WKR0A8iq ICBriP0PDuBcLcrnsnm3DBlZeuJ1ysKxS4Rn9YfIkhoGyE78jdD0CgmlaO4NZLhQ 2NYGyFk6sFwQbB9m7xyykso4A0FbdxezLQsdHB50Q90OVLmCCK87wGes6krVHXZF IhOO2C0EPXlJagMy37QiVcCJuCMKq+Qq7YX+fUewwPuSJpTmbP+zrddeGyqmXJQW mcaUwFRYOePbQLZtU03SsNi8tLRGYvr9+M8BdF/Ns9ODk87GMEDLnoYo1sGrF36Y CZgkQwz65wr+cDBQfpCf7nRXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5hsSbOld pRZ4YD4IeYS9iUqL61wwHwYDVR0jBBgwFoAUtSxU1GporezDfV9vJyKMbepz6Fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFNzlDLzU4QTgxMThFQzBF MDExRUU5MDAwOTIwOUM0RjlBRTAyL3RTeFUxR3BvcmV6RGZWOXZKeUtNYmVwejZG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdFN4VTFHcG9yZXpEZlY5dkp5S01iZXB6NkZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF NzlDLzU4QTgxMThFQzBFMDExRUU5MDAwOTIwOUM0RjlBRTAyL3RTeFUxR3BvcmV6 RGZWOXZKeUtNYmVwejZGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNwsOkIIaaYGGsRi0btP6nrAm6qR7CqtXlI6wc9SdHqSOti9bE50dLw +D+b4ax8gPB1nR6wsBJIo0dHwZLRF0L9EUITWX6Tm6FFVR5AAVTshxsetLM9L0Ci sAMfplggV/Cjrey/G2LNvbMHLx+KfqaC3/XzWJ4lU4r8NLNkSHPq0Dc18dqwE9wA DCIuyuqDLK8RaNrusZPOYmbuizijGBpgTMv6IC5h9a2K/oRxbhrVNFw1hsioSG85 6xnoUTfif2F7w/yqa4tZVlx2dsMPv4yy7HPvHit7jVGPequBkCdsNYu1BMExGOL4 5oOiptpp9e6z+PfLTrjEnn+teOTo8cc= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org