$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: 1o07eFk4oKvVUMlgdDOO71OfOQfAL5Wm8mea3jwzoAA= Subject key identifier: 9A:07:61:AA:2D:33:B9:F5:B5:18:3D:BA:D8:3C:E9:57:61:8D:95:0D Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 79 Signing time: Sun 19 May 2024 07:22:34 +0000 Manifest this update: Sun 19 May 2024 07:22:33 +0000 Manifest next update: Sun 26 May 2024 07:22:33 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: YX1UJqmkWGr6NK1ElFwbcbQ0HhDJEBGbOgg/LW3cjmE=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: 8a5ZRm1LVNAdcWEKWLEP5piw+TuPFpxK+Y4aTH1OyA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: May 19 07:22:33 2024 GMT Not After : May 26 07:22:33 2024 GMT Subject: CN=6649a8ba-37d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:bf:f0:eb:61:ea:ae:d1:9b:92:a0:55:ec: e5:e0:95:c6:c1:82:4f:20:6d:2b:da:1c:fa:e4:2e: 18:62:4a:87:68:ab:af:c9:34:06:2b:09:1e:00:41: 5f:90:64:73:d4:a8:47:79:88:47:cf:b8:69:4b:77: 1e:76:b7:79:d5:e8:1d:af:ff:5e:b9:b7:c5:07:9f: b0:f9:72:33:d9:d0:36:55:40:4f:49:ec:97:0c:0d: c9:4b:d1:aa:9f:a8:97:07:ea:3d:83:c3:23:62:24: cf:51:08:3b:aa:0f:a9:bf:86:c4:d6:ad:f0:f0:50: 7d:45:04:62:58:ac:ba:ef:68:62:60:fe:08:9b:90: 08:04:08:32:89:7a:d5:9d:7e:18:36:22:ea:1b:07: d4:6f:1a:ca:03:e0:08:84:1e:d8:93:57:2b:50:b2: 0d:23:4d:65:04:82:c3:b8:e6:2e:c9:7a:fb:c1:3c: 75:25:66:ba:d6:6c:7b:f3:58:80:5e:de:ac:5c:2e: 00:85:b5:5a:29:a5:15:dd:03:83:44:51:aa:d3:1c: 55:94:41:34:4b:20:17:ab:3e:16:9a:c3:0e:5a:df: 00:2e:02:9f:82:ef:40:94:17:fd:a0:66:a5:e0:ef: b8:37:89:0e:55:22:1b:ec:ed:b0:fd:21:f4:03:d2: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:07:61:AA:2D:33:B9:F5:B5:18:3D:BA:D8:3C:E9:57:61:8D:95:0D X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:08:6e:dd:6a:45:93:55:61:67:53:3a:33:19:6a:40:3d:99: c6:2d:83:63:5d:fd:c8:f4:0c:16:68:68:ca:8b:b8:cf:0c:fd: 68:ed:22:38:c9:f6:09:16:68:90:73:7e:f4:c3:3e:7a:4a:af: ef:ad:72:f9:d0:46:f9:fa:6c:7e:f2:eb:ed:f6:f1:37:c6:b0: 4a:7e:2f:66:e1:54:d0:ea:20:68:ab:f6:46:4e:db:fb:b4:51: 39:ca:fb:06:b1:b0:87:ef:81:38:35:21:e2:20:d8:4b:c2:7e: 5b:d1:50:57:00:78:72:6e:fd:11:58:73:ac:81:a1:b4:4d:7c: 56:ec:e8:6c:f4:ca:39:b5:8b:64:4d:73:01:b8:cd:0b:42:f7: 3f:b2:3b:5e:0a:62:f8:96:f1:05:eb:f0:c0:de:f4:2b:fe:29: 4e:e3:27:0c:84:04:fe:09:a1:02:97:4b:12:52:b6:a1:f1:99: 0b:f0:0d:ef:1b:bd:65:2f:2d:f8:70:0b:c1:1c:58:43:10:ea: 4f:bb:a8:5c:d7:a7:eb:35:d4:b5:87:28:96:e3:29:d2:7e:44: f5:f0:e5:42:34:8e:6f:e3:18:69:09:b0:d7:0a:b8:88:bb:29: 5c:4a:44:58:ae:c3:71:6d:f8:31:24:b9:f9:74:9f:c9:61:6d: 54:f4:45:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDdDNDExMC8GA1UEBRMoNDlEQjYxRkYwM0M1NTE2Nzk1Q0Y3ODUwOUVBMzdBMDYw RjQ1NDdCRjAeFw0yNDA1MTkwNzIyMzNaFw0yNDA1MjYwNzIyMzNaMBgxFjAUBgNV BAMTDTY2NDlhOGJhLTM3ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQi7/w62HqrtGbkqBV7OXglcbBgk8gbSvaHPrkLhhiSodoq6/JNAYrCR4AQV+Q ZHPUqEd5iEfPuGlLdx52t3nV6B2v/165t8UHn7D5cjPZ0DZVQE9J7JcMDclL0aqf qJcH6j2DwyNiJM9RCDuqD6m/hsTWrfDwUH1FBGJYrLrvaGJg/gibkAgECDKJetWd fhg2IuobB9RvGsoD4AiEHtiTVytQsg0jTWUEgsO45i7JevvBPHUlZrrWbHvzWIBe 3qxcLgCFtVoppRXdA4NEUarTHFWUQTRLIBerPhaaww5a3wAuAp+C70CUF/2gZqXg 77g3iQ5VIhvs7bD9IfQD0va3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmgdhqi0z ufW1GD262DzpV2GNlQ0wHwYDVR0jBBgwFoAUSdth/wPFUWeVz3hQnqN6Bg9FR78w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0N0M0LzU5NUJFODJDNjM1 QjExRUU4ODRDQUQ0RkM0RjlBRTAyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2R0aF93UEZVV2VWejNoUW5xTjZCZzlGUjc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 N0M0LzU5NUJFODJDNjM1QjExRUU4ODRDQUQ0RkM0RjlBRTAyL1NkdGhfd1BGVVdl VnozaFFucU42Qmc5RlI3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADUIbt1qRZNVYWdTOjMZakA9mcYtg2Nd/cj0DBZoaMqLuM8M/WjtIjjJ 9gkWaJBzfvTDPnpKr++tcvnQRvn6bH7y6+328TfGsEp+L2bhVNDqIGir9kZO2/u0 UTnK+waxsIfvgTg1IeIg2EvCflvRUFcAeHJu/RFYc6yBobRNfFbs6Gz0yjm1i2RN cwG4zQtC9z+yO14KYviW8QXr8MDe9Cv+KU7jJwyEBP4JoQKXSxJStqHxmQvwDe8b vWUvLfhwC8EcWEMQ6k+7qFzXp+s11LWHKJbjKdJ+RPXw5UI0jm/jGGkJsNcKuIi7 KVxKRFiuw3Ft+DEkufl0n8lhbVT0Rbk= -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org