$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft File: ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json) Hash identifier: hPHUGwYVXmRYjwC65o/9Wt1uZYoCwIl6e/aoW2WRv3w= Subject key identifier: 65:43:2B:A7:81:D0:CF:93:17:F2:F8:90:87:26:10:EB:22:D6:FF:54 Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C Certificate issuer: /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft Manifest number: 18 Signing time: Sun 19 May 2024 08:41:52 +0000 Manifest this update: Sun 19 May 2024 08:41:51 +0000 Manifest next update: Sun 26 May 2024 08:41:51 +0000 Files and hashes: 1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: WRyRnAhpwu9fIjnJnEqgdQvLA4SI90qMUre419fXQYc=) 2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: St0Nfe2F2dQzltMPivJaPsXHEdMGkKnojTPQWotC9ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Validity Not Before: May 19 08:41:51 2024 GMT Not After : May 26 08:41:51 2024 GMT Subject: CN=6649bb50-3a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:ec:c4:3a:9c:4f:76:ad:9c:36:9c:ad:75: 68:4a:05:9e:04:66:fc:88:06:f7:80:3f:7f:df:a9: 43:77:27:70:62:0c:01:08:f9:ff:7c:81:22:78:5c: 20:59:d7:f3:d7:b0:0c:57:27:5d:ae:c3:60:ce:3c: 28:96:ba:9a:5c:0d:dd:6a:dd:b4:62:57:d5:7d:cf: 5a:8a:cd:c1:0c:63:80:92:94:13:82:95:23:a0:ea: 17:fc:a4:38:4a:01:c7:43:1d:77:45:23:61:35:4d: 58:a1:e0:f4:c8:c4:4e:e0:c7:a9:66:57:9c:a9:26: f3:38:c4:3b:40:73:21:0a:71:6c:01:fb:65:a6:ca: cc:7f:50:39:7f:c8:01:ca:e9:4d:45:52:59:3f:73: 19:70:28:73:74:9c:f6:8c:1a:75:31:0b:37:82:63: 05:cf:98:64:d3:59:8e:db:84:0b:60:c6:c1:ba:44: 9e:1c:b9:23:df:69:f4:c1:5d:9c:83:1f:09:88:b8: 94:af:23:35:f7:c5:bc:a9:e1:b8:7d:b1:0e:f8:3e: 1d:df:9f:8c:e1:bd:9b:32:80:de:c1:28:ca:9a:eb: 6f:99:56:c6:9d:6e:67:aa:b7:06:15:fd:48:f8:4d: b3:e3:c9:82:f0:06:bc:61:6e:33:68:b9:33:ca:55: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:43:2B:A7:81:D0:CF:93:17:F2:F8:90:87:26:10:EB:22:D6:FF:54 X509v3 Authority Key Identifier: keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:29:1b:bf:0d:50:2b:56:b9:7b:cd:55:2e:a5:86:31:88:26: 8d:33:5e:dc:b8:44:2c:7d:10:f9:4c:e6:fd:c6:4c:84:92:3f: 07:46:b6:37:b8:6c:46:fc:14:36:90:1d:9c:c2:74:08:e1:e8: b3:62:8c:01:34:44:b7:44:4d:8c:de:2a:ea:72:da:69:02:a3: 95:5a:6f:15:16:ab:f5:af:66:4d:d0:93:b7:f9:9a:88:a9:20: c8:16:2f:f9:21:2f:bc:d5:02:30:7e:e7:b5:16:4f:ed:92:95: 7c:c0:bd:54:29:c5:68:d0:dc:32:d5:82:2f:57:06:a7:81:48: 79:89:ab:ba:15:6d:73:54:b4:e9:1e:04:04:7e:7a:fb:f7:af: 11:69:7f:9c:0d:fe:c9:02:95:f8:0d:1a:11:12:58:39:07:2e: 1a:ba:28:a6:0d:d5:fe:18:ac:ce:fa:bd:79:d6:27:bb:cd:b8: c0:ea:90:c7:e7:a9:90:1a:3e:b7:6a:ec:25:65:23:6e:5c:78: 43:fe:01:58:a8:26:7e:0c:0a:b9:6c:1d:36:ce:8c:69:72:86: f2:5a:70:c5:89:1e:02:eb:93:05:bf:91:5f:6d:ae:3d:1f:a0: 4a:f5:2d:7c:e6:71:ad:ab:a9:9a:76:6f:b1:7e:58:00:0f:a7: 49:1f:76:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTg1RTExMC8GA1UEBRMoNzJEMUY2NzlDOTZEMjA1QzJENDcxQzk0QTgwREVGNjBE OTExMjYxQzAeFw0yNDA1MTkwODQxNTFaFw0yNDA1MjYwODQxNTFaMBgxFjAUBgNV BAMTDTY2NDliYjUwLTNhMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAE+zEOpxPdq2cNpytdWhKBZ4EZvyIBveAP3/fqUN3J3BiDAEI+f98gSJ4XCBZ 1/PXsAxXJ12uw2DOPCiWuppcDd1q3bRiV9V9z1qKzcEMY4CSlBOClSOg6hf8pDhK AcdDHXdFI2E1TVih4PTIxE7gx6lmV5ypJvM4xDtAcyEKcWwB+2Wmysx/UDl/yAHK 6U1FUlk/cxlwKHN0nPaMGnUxCzeCYwXPmGTTWY7bhAtgxsG6RJ4cuSPfafTBXZyD HwmIuJSvIzX3xbyp4bh9sQ74Ph3fn4zhvZsygN7BKMqa62+ZVsadbmeqtwYV/Uj4 TbPjyYLwBrxhbjNouTPKVX8JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZUMrp4HQ z5MX8viQhyYQ6yLW/1QwHwYDVR0jBBgwFoAUctH2ecltIFwtRxyUqA3vYNkRJhww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFODVFLzVCQzEyNjdBRUZG MzExRUU5NzdDQUMzMUM0RjlBRTAyL2N0SDJlY2x0SUZ3dFJ4eVVxQTN2WU5rUkpo dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY3RIMmVjbHRJRnd0Unh5VXFBM3ZZTmtSSmh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF ODVFLzVCQzEyNjdBRUZGMzExRUU5NzdDQUMzMUM0RjlBRTAyL2N0SDJlY2x0SUZ3 dFJ4eVVxQTN2WU5rUkpody5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACUpG78NUCtWuXvNVS6lhjGIJo0zXty4RCx9EPlM5v3GTISSPwdGtje4 bEb8FDaQHZzCdAjh6LNijAE0RLdETYzeKupy2mkCo5VabxUWq/WvZk3Qk7f5moip IMgWL/khL7zVAjB+57UWT+2SlXzAvVQpxWjQ3DLVgi9XBqeBSHmJq7oVbXNUtOke BAR+evv3rxFpf5wN/skClfgNGhESWDkHLhq6KKYN1f4YrM76vXnWJ7vNuMDqkMfn qZAaPrdq7CVlI25ceEP+AVioJn4MCrlsHTbOjGlyhvJacMWJHgLrkwW/kV9trj0f oEr1LXzmca2rqZp2b7F+WAAPp0kfdvY= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org