$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json) Hash identifier: RwgZA24/yDYB8ynjMgqRFNl8eE23G2NunHFrv7InouQ= Subject key identifier: F2:A6:16:9E:07:1A:0F:5E:27:FF:9F:F0:1E:A6:3E:3A:72:52:76:18 Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft Manifest number: D5 Signing time: Sun 19 May 2024 06:09:50 +0000 Manifest this update: Sun 19 May 2024 06:09:49 +0000 Manifest next update: Sun 26 May 2024 06:09:49 +0000 Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: buOMLlB+IyQKM8Nz4I8Mf1j7XP+3B1CvUxWz/hWLYiU=) 2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: zaoKS/Y1Ph1TfzBJvxVJTzMA+iBbcn26uLQGnZGKNrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Validity Not Before: May 19 06:09:49 2024 GMT Not After : May 26 06:09:49 2024 GMT Subject: CN=664997ae-0cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:6a:c7:04:cb:7d:7c:d6:c9:84:22:28:5d: 5f:0c:a4:4c:a5:d8:8d:5c:53:72:ec:b5:e0:76:ca: 49:98:d7:3c:07:da:0d:0f:db:5e:c8:81:75:03:ca: db:ba:29:36:3d:6d:34:cd:da:52:83:14:ca:69:58: f6:bd:d1:0f:9f:d5:a5:d6:0f:a8:75:24:0b:15:a6: 02:45:56:e7:a8:ed:4e:d5:fa:7b:5f:f4:41:6e:a1: ab:4b:b5:ca:85:e4:0c:5b:75:ee:88:30:da:33:e4: 79:4e:80:ac:da:d8:5e:ed:b0:25:d8:39:0f:da:24: 95:75:31:d2:4a:15:46:ba:b0:69:13:f2:a0:3f:34: a4:45:ed:1c:29:b5:ba:f0:ac:38:8b:88:dc:02:db: 58:d5:b5:6e:2c:ad:2a:a0:65:a9:b7:e0:8e:73:34: 9e:42:ea:2e:72:a5:9e:b1:e3:da:6d:de:ca:17:43: fa:3e:50:48:e5:67:e7:d6:8a:32:5a:8b:c3:59:2d: f5:97:e2:22:43:fd:d5:00:cd:50:4c:e5:c7:76:da: 78:f1:fe:0e:f2:f8:b9:cd:ce:26:15:f5:35:35:75: f2:ae:43:af:3c:5e:35:95:c1:25:4d:1d:c3:e4:0e: b1:87:29:c9:8c:6b:a3:55:98:d8:53:ca:f5:b8:94: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:16:9E:07:1A:0F:5E:27:FF:9F:F0:1E:A6:3E:3A:72:52:76:18 X509v3 Authority Key Identifier: keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:22:75:b7:0d:6c:75:01:c3:39:ef:de:d4:39:90:06:3c:8e: a3:87:7a:c4:1c:60:e7:2e:7b:fc:b1:93:dc:74:45:a2:53:63: 32:61:7c:e8:5f:fe:d8:c8:51:a0:21:64:ac:38:b8:89:f4:25: b2:c6:5f:79:6b:11:70:a4:9d:a8:c2:3d:7d:63:da:67:0c:b6: b6:2e:7c:fe:8c:11:f6:10:a9:eb:8d:4e:fc:76:9c:41:63:6a: 3d:ff:f7:4f:1c:4a:74:4c:a9:f5:bd:bb:d2:9f:d7:05:e8:51: 22:81:09:21:e7:ef:d0:0f:2a:c9:81:d4:fa:e3:2e:f4:3f:8b: 9a:a5:01:2c:43:5d:45:d1:6f:14:30:19:d0:fd:f4:5d:7d:d7: bf:9e:51:80:eb:14:d6:6e:b8:20:c9:40:30:43:b1:88:ee:3f: cc:a2:08:b4:93:48:d2:44:6e:95:5c:a9:c5:7a:9d:f0:1c:24: 06:6e:b8:f9:77:71:ce:64:f7:50:38:d0:79:98:33:42:5c:5e: 51:60:4b:7c:4a:6a:04:d4:73:84:dc:2b:f6:20:45:d3:a2:41: 42:55:41:be:96:fe:c2:29:1a:01:bc:43:d5:06:bc:d4:47:88: ef:6a:f6:64:50:10:ff:b4:51:aa:60:e7:b8:b2:df:e2:32:f0: 88:97:1a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY3NkYxMTAvBgNVBAUTKEVCQkExNDNCMjg2NjM3MThDRDhDN0RBM0Y2MzEwMDlB OTgwNEVFNUYwHhcNMjQwNTE5MDYwOTQ5WhcNMjQwNTI2MDYwOTQ5WjAYMRYwFAYD VQQDEw02NjQ5OTdhZS0wY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTNqxwTLfXzWyYQiKF1fDKRMpdiNXFNy7LXgdspJmNc8B9oND9teyIF1A8rb uik2PW00zdpSgxTKaVj2vdEPn9Wl1g+odSQLFaYCRVbnqO1O1fp7X/RBbqGrS7XK heQMW3XuiDDaM+R5ToCs2the7bAl2DkP2iSVdTHSShVGurBpE/KgPzSkRe0cKbW6 8Kw4i4jcAttY1bVuLK0qoGWpt+COczSeQuoucqWesePabd7KF0P6PlBI5Wfn1ooy WovDWS31l+IiQ/3VAM1QTOXHdtp48f4O8vi5zc4mFfU1NXXyrkOvPF41lcElTR3D 5A6xhynJjGujVZjYU8r1uJS2pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKmFp4H Gg9eJ/+f8B6mPjpyUnYYMB8GA1UdIwQYMBaAFOu6FDsoZjcYzYx9o/YxAJqYBO5f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njc2Ri9GRTQ5RkFDMkQz QTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54ak5qSDJqOWpFQW1wZ0U3 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3b1VPeWhtTnhqTmpIMmo5akVBbXBnRTdsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njc2Ri9GRTQ5RkFDMkQzQTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54 ak5qSDJqOWpFQW1wZ0U3bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUInW3DWx1AcM5797UOZAGPI6jh3rEHGDnLnv8sZPcdEWiU2MyYXzo X/7YyFGgIWSsOLiJ9CWyxl95axFwpJ2owj19Y9pnDLa2Lnz+jBH2EKnrjU78dpxB Y2o9//dPHEp0TKn1vbvSn9cF6FEigQkh5+/QDyrJgdT64y70P4uapQEsQ11F0W8U MBnQ/fRdfde/nlGA6xTWbrggyUAwQ7GI7j/Mogi0k0jSRG6VXKnFep3wHCQGbrj5 d3HOZPdQONB5mDNCXF5RYEt8SmoE1HOE3Cv2IEXTokFCVUG+lv7CKRoBvEPVBrzU R4jvavZkUBD/tFGqYOe4st/iMvCIlxrn -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org