$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft File: sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json) Hash identifier: trjQrGhguISdQYBItM4DppjZRF39Y5P04gjFgxeOczI= Subject key identifier: 02:00:0A:FD:1D:12:0C:2F:A3:AF:86:27:6E:65:9F:D5:3B:FF:72:02 Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 Certificate issuer: /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft Manifest number: 3B Signing time: Fri 31 May 2024 09:11:14 +0000 Manifest this update: Fri 31 May 2024 09:11:14 +0000 Manifest next update: Fri 07 Jun 2024 09:11:14 +0000 Files and hashes: 1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: Al+JtWbvkch8dE5WcqVNlFtw/0Lav0pSN/xWt0syPQ4=) 2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: /MLADSDyrYh4WjhEpbY8uFkX9A/Z4Cg2n7bDkF7OVSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Validity Not Before: May 31 09:11:14 2024 GMT Not After : Jun 7 09:11:14 2024 GMT Subject: CN=66599432-3d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8b:25:4c:db:4e:88:ad:7e:98:29:97:45:e6: 7d:bd:f5:b7:66:38:a0:cd:45:40:15:ac:26:2d:53: 36:30:6a:5f:02:1c:6a:24:69:8d:e1:8f:bb:23:05: 52:9e:ae:b5:76:9d:9c:42:4e:0b:13:26:15:f7:68: f1:05:2e:2f:6e:7b:63:bc:27:7f:01:f7:eb:8c:85: 0e:61:16:3f:10:85:fb:60:c4:1a:6a:5a:11:81:a7: 15:0a:32:94:f5:94:f4:ad:99:aa:f1:96:c7:69:55: ea:51:b5:3e:d5:55:70:e8:46:16:89:58:3b:da:de: 21:9a:47:d6:c8:38:51:a5:79:cd:45:03:ec:af:a0: 73:0a:da:da:61:88:e5:be:17:7c:c0:e0:9c:27:a1: 3a:e6:98:36:37:37:bf:c9:e3:4c:49:d1:95:b5:49: 62:0a:3e:2a:61:92:4d:e9:43:23:2a:ef:9e:5e:5e: 73:a1:85:60:b2:69:6d:0e:66:80:e1:45:33:b9:f6: a6:92:49:b1:a9:fe:5d:75:d0:92:4d:de:66:01:e8: 11:30:3c:87:2f:37:0f:d0:05:00:d0:52:ac:81:9c: 76:13:cc:2e:25:13:01:a4:48:a2:65:79:59:93:9a: 24:bf:82:b5:c6:1b:ff:03:66:f5:61:23:56:20:d8: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:0A:FD:1D:12:0C:2F:A3:AF:86:27:6E:65:9F:D5:3B:FF:72:02 X509v3 Authority Key Identifier: keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a4:2c:66:0c:3a:d8:04:2d:04:e1:39:f3:4f:ca:7f:5f:0c: e4:2a:f4:ca:f2:09:bb:7e:ba:7c:29:9f:16:3a:1a:c2:cb:68: 58:fb:67:ca:fa:e5:34:1a:6b:03:c0:ea:8f:7c:e5:dc:32:13: 37:91:11:7d:81:63:97:cd:02:da:47:d2:f2:8c:94:5a:64:ae: 64:7c:07:e9:f8:28:08:41:01:57:af:29:74:94:1e:be:e4:61: 4a:86:b3:c5:6d:76:e7:65:71:b7:fa:ec:36:6c:ff:8c:44:43: c4:38:d9:ee:22:f5:24:06:8f:2b:eb:64:04:58:34:0b:05:56: 31:78:81:3f:ef:9e:12:33:56:5c:0a:18:8a:f1:1a:cc:a2:29: 8a:af:e6:1f:cc:d9:9e:96:cd:41:62:8c:ae:d6:06:21:41:53: ab:cc:51:80:87:b3:40:90:e0:ec:49:d8:66:77:59:fc:3c:f9: 2d:f4:ab:6f:f5:2f:8f:94:dd:02:75:5d:a8:31:76:ae:08:19: 06:ec:8d:91:72:48:7d:95:e7:fe:1e:6f:47:8e:6b:94:76:52: 45:61:36:fd:15:92:85:ac:23:d8:26:1a:2b:d9:74:25:96:89: 2b:80:eb:f4:45:3c:31:17:fc:a9:e8:7b:c8:6a:3f:cd:11:03: ee:57:8f:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzIwMzExMC8GA1UEBRMoQjE1MkE3OUYxQkU5NzgzM0MyQTZGQ0Q2RjQ5RjlEQkZE ODQzQzk4MzAeFw0yNDA1MzEwOTExMTRaFw0yNDA2MDcwOTExMTRaMBgxFjAUBgNV BAMTDTY2NTk5NDMyLTNkNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2iyVM206IrX6YKZdF5n299bdmOKDNRUAVrCYtUzYwal8CHGokaY3hj7sjBVKe rrV2nZxCTgsTJhX3aPEFLi9ue2O8J38B9+uMhQ5hFj8QhftgxBpqWhGBpxUKMpT1 lPStmarxlsdpVepRtT7VVXDoRhaJWDva3iGaR9bIOFGlec1FA+yvoHMK2tphiOW+ F3zA4JwnoTrmmDY3N7/J40xJ0ZW1SWIKPiphkk3pQyMq755eXnOhhWCyaW0OZoDh RTO59qaSSbGp/l110JJN3mYB6BEwPIcvNw/QBQDQUqyBnHYTzC4lEwGkSKJleVmT miS/grXGG/8DZvVhI1Yg2HVvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAgAK/R0S DC+jr4YnbmWf1Tv/cgIwHwYDVR0jBBgwFoAUsVKnnxvpeDPCpvzW9J+dv9hDyYMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDMjAzL0M1OTgxMkY4QzU4 NjExRUU5MTE2NkI4M0M0RjlBRTAyL3NWS25ueHZwZURQQ3B2elc5Si1kdjloRHlZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1ZLbm54dnBlRFBDcHZ6VzlKLWR2OWhEeVlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD MjAzL0M1OTgxMkY4QzU4NjExRUU5MTE2NkI4M0M0RjlBRTAyL3NWS25ueHZwZURQ Q3B2elc5Si1kdjloRHlZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6kLGYMOtgELQThOfNPyn9fDOQq9MryCbt+unwpnxY6GsLLaFj7Z8r6 5TQaawPA6o985dwyEzeREX2BY5fNAtpH0vKMlFpkrmR8B+n4KAhBAVevKXSUHr7k YUqGs8Vtdudlcbf67DZs/4xEQ8Q42e4i9SQGjyvrZARYNAsFVjF4gT/vnhIzVlwK GIrxGsyiKYqv5h/M2Z6WzUFijK7WBiFBU6vMUYCHs0CQ4OxJ2GZ3Wfw8+S30q2/1 L4+U3QJ1Xagxdq4IGQbsjZFySH2V5/4eb0eOa5R2UkVhNv0VkoWsI9gmGivZdCWW iSuA6/RFPDEX/Knoe8hqP80RA+5Xjxo= -----END CERTIFICATE-----Generated at Fri May 31 10:42:50 2024 by rpki-client on console-fra.rpki-client.org