$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: JcpvmvVKMpIQGn2I74btInqBDq1gHyITiQbxsqLf3Gc= Subject key identifier: 09:2D:E0:66:20:AC:5E:52:20:0A:4B:7B:1F:4C:A6:77:61:D7:89:18 Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 074F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 0748 Signing time: Sat 18 May 2024 22:24:00 +0000 Manifest this update: Sat 18 May 2024 22:24:00 +0000 Manifest next update: Sat 25 May 2024 22:24:00 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: QFS6f3ECmeRCQpZg8uKNhWb42fmPdWUqFdX74uWQTDU=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: e+X2E/kxDiU8pSgU8YKgyDms1vm+liCnTUPi1IAPKOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: May 18 22:24:00 2024 GMT Not After : May 25 22:24:00 2024 GMT Subject: CN=66492a80-98c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:8a:e1:5b:8a:77:bf:e0:e3:e3:1c:86:a0: 96:74:07:67:ee:81:b5:2d:c2:a6:89:bc:1c:b7:dd: ce:e5:8b:67:a4:59:16:03:be:71:5f:23:cf:14:36: b6:b1:ea:d7:0c:9e:18:37:ca:7a:79:c1:2f:8b:bf: 0f:dd:bf:28:7c:10:dd:86:f3:bc:00:65:87:b7:2d: 85:1f:e9:08:2d:a1:75:df:e6:9a:79:e7:c2:8b:e2: 98:25:64:ff:1d:b6:2f:7a:70:28:67:0c:be:a3:bf: a6:29:c8:ee:8c:29:e7:a0:3f:12:fa:06:9f:a6:19: 8e:ac:69:76:70:56:bc:2b:a2:38:48:90:fa:e6:44: 3b:13:c8:48:1b:0a:2f:c7:87:b5:59:74:b8:da:61: 77:8b:74:85:75:27:b4:e8:48:78:ca:fb:93:ff:86: d1:62:d6:30:ed:34:a8:a0:08:1f:e1:1a:b4:99:e2: 39:b7:dd:33:58:c1:1e:1e:6e:33:b1:4b:09:20:c9: 58:97:a5:d8:2c:96:d6:6d:f0:9d:79:74:3c:d1:b6: 8c:c9:26:44:2a:08:6f:0f:21:02:38:fe:21:e8:0d: 8d:22:6a:d4:fb:23:44:ab:d8:f7:ff:8d:35:d9:cf: 72:1b:f7:af:fe:a6:a2:97:0d:7f:14:6c:8b:3a:e3: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2D:E0:66:20:AC:5E:52:20:0A:4B:7B:1F:4C:A6:77:61:D7:89:18 X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:88:eb:82:f4:35:b1:e7:13:b0:11:f2:50:51:52:4e:90:32: 85:92:3c:1a:f4:b0:8a:78:97:22:fa:8c:a1:9f:ad:31:3e:1c: 22:dc:44:7c:f6:6d:99:01:c2:c2:2b:a3:3d:a7:ff:60:e0:32: 64:d8:c0:23:78:55:e5:ec:b0:c9:68:c2:2b:03:ff:dc:e8:9f: e8:5b:a9:49:e7:67:32:50:b5:de:36:c3:ec:d3:58:02:41:56: 6e:69:90:11:7c:d5:17:cd:42:33:46:05:31:52:ce:9e:d7:f5: ea:bd:ca:bb:6e:93:b8:61:89:44:f1:99:a6:73:57:9c:ac:8f: 08:de:99:bf:a8:7f:f8:ad:d6:36:58:38:a0:89:a4:4f:1b:47: a1:0b:b1:52:a5:b2:81:3e:d1:f9:b6:92:b3:c5:c4:d3:2f:09: 67:10:ca:68:72:28:50:98:9f:ba:87:62:c9:9e:34:32:05:b1: 5f:09:ee:25:16:3a:ca:ba:1c:f6:93:6d:8b:18:c7:bd:e0:d8: ad:1a:ca:2c:e5:fc:6d:80:bb:28:38:9b:c3:ef:d9:3e:8b:7b: bc:93:71:b8:26:b1:8b:d1:38:0c:96:6d:2b:c8:28:0d:08:f9: f3:ae:7b:b9:6a:fe:08:6f:a9:26:34:93:7d:3f:55:0b:65:c3: 20:f9:b6:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjQwNTE4MjIyNDAwWhcNMjQwNTI1MjIyNDAwWjAYMRYwFAYD VQQDEw02NjQ5MmE4MC05OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs42K4VuKd7/g4+MchqCWdAdn7oG1LcKmibwct93O5YtnpFkWA75xXyPPFDa2 serXDJ4YN8p6ecEvi78P3b8ofBDdhvO8AGWHty2FH+kILaF13+aaeefCi+KYJWT/ HbYvenAoZwy+o7+mKcjujCnnoD8S+gafphmOrGl2cFa8K6I4SJD65kQ7E8hIGwov x4e1WXS42mF3i3SFdSe06Eh4yvuT/4bRYtYw7TSooAgf4Rq0meI5t90zWMEeHm4z sUsJIMlYl6XYLJbWbfCdeXQ80baMySZEKghvDyECOP4h6A2NImrU+yNEq9j3/401 2c9yG/ev/qailw1/FGyLOuNTqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkt4GYg rF5SIApLex9Mpndh14kYMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApiOuC9DWx5xOwEfJQUVJOkDKFkjwa9LCKeJci+oyhn60xPhwi3ER8 9m2ZAcLCK6M9p/9g4DJk2MAjeFXl7LDJaMIrA//c6J/oW6lJ52cyULXeNsPs01gC QVZuaZARfNUXzUIzRgUxUs6e1/Xqvcq7bpO4YYlE8Zmmc1ecrI8I3pm/qH/4rdY2 WDigiaRPG0ehC7FSpbKBPtH5tpKzxcTTLwlnEMpocihQmJ+6h2LJnjQyBbFfCe4l FjrKuhz2k22LGMe94NitGsos5fxtgLsoOJvD79k+i3u8k3G4JrGL0TgMlm0ryCgN CPnzrnu5av4Ib6kmNJN9P1ULZcMg+bYo -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org