$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json) Hash identifier: jUNy3KwrOOi2D3t4kxLCp5wL+yGrSURAHY85raukShk= Subject key identifier: E5:B6:38:AB:4B:DF:76:F0:C9:35:41:62:85:82:3D:05:FD:DA:2E:48 Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft Manifest number: 0A45 Signing time: Sat 18 May 2024 20:26:54 +0000 Manifest this update: Sat 18 May 2024 20:26:53 +0000 Manifest next update: Sat 25 May 2024 20:26:53 +0000 Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: vBBsCVy2WUoTpxDIFtKkzDXnsnJNPJaFPhUwwoC9fPQ=) 2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: w61W+nCijTD4DUuaZsDj1z3Nw3QZ2ZeANbtzBR4toqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Validity Not Before: May 18 20:26:53 2024 GMT Not After : May 25 20:26:53 2024 GMT Subject: CN=66490f0e-3dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:bd:23:f5:97:1a:a1:ab:33:0d:a9:90:c8: bb:db:dd:a8:b2:de:bf:cc:69:ac:fd:47:51:86:69: 0c:48:06:62:eb:7d:33:b4:38:21:23:77:43:7d:f5: 61:df:d7:f2:d4:57:c6:fa:24:9d:56:7a:60:41:22: 0e:8e:bf:2d:8b:59:7b:21:2d:78:63:66:89:1c:a4: af:43:3e:35:b2:56:56:fb:11:2f:25:a1:b0:67:ca: 15:01:5d:0e:72:f5:f7:ad:83:d7:2f:02:bd:bf:d0: 41:07:d1:de:ed:0a:fd:11:b3:da:54:38:75:a6:0e: 81:2a:11:03:3f:e3:2d:73:18:b4:18:88:96:ea:4c: 8b:8d:b0:2a:23:6c:33:69:6a:3b:3d:c6:94:da:75: 28:4e:de:97:a3:ae:74:82:95:9f:47:41:23:a4:d5: e2:10:d2:e6:9a:dc:3f:df:b4:1b:cf:74:0a:e9:ab: 33:0f:52:3d:19:7d:da:ac:3c:b9:c3:eb:b5:89:b5: ab:b4:3a:ed:1f:f7:00:2c:28:b1:ae:0a:0f:e7:50: 2e:f0:ca:f8:52:bd:6e:a4:00:99:83:33:23:9e:85: d5:47:30:51:d0:23:34:dc:7d:71:e4:ac:51:ea:05: b6:4e:9a:4f:45:3b:45:42:b4:85:a9:4c:21:d2:4f: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B6:38:AB:4B:DF:76:F0:C9:35:41:62:85:82:3D:05:FD:DA:2E:48 X509v3 Authority Key Identifier: keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:91:fd:ff:64:67:19:4c:21:01:52:98:9d:3a:74:a0:91:ec: 6f:f9:cc:11:21:f4:43:7b:52:10:ae:33:e2:13:54:b0:ce:10: 75:a5:bc:9a:62:a1:00:ad:5e:11:5d:25:76:46:a7:55:ab:1f: 27:f0:2c:d8:8e:bd:34:c1:60:27:a9:23:fc:ed:7c:3e:e5:17: 2e:8a:6b:da:b6:c5:67:fb:6b:95:19:c1:d7:80:83:54:e0:60: d2:8b:d2:2f:89:c9:de:93:db:3e:f0:0c:81:57:54:e0:c3:7c: d9:26:3b:23:f4:10:9c:06:1a:a9:44:1e:74:81:5b:4d:36:61: ac:91:32:e3:94:78:5a:1f:b5:6f:19:72:9d:d5:a8:37:9b:70: 6e:1f:d7:91:5c:07:c6:15:fd:6e:4e:be:72:be:1d:77:49:0c: b1:5e:09:92:df:c7:0e:e9:ab:b9:fd:3a:ac:cb:c7:cd:91:c3: 5f:74:0a:7a:00:a9:10:04:fc:95:65:9b:a2:19:f5:e0:c5:fd: 7a:fd:f3:c6:d6:b6:7b:6a:67:e2:0d:e3:d8:4a:35:f9:08:6f: 8e:71:9c:a4:1b:4c:7c:a8:03:50:76:33:ae:59:8d:1a:00:d6: b7:43:28:0b:b8:b9:3f:eb:18:d7:c0:32:2f:88:66:cf:fe:9e: 5a:41:83:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC NkQwNjkzRDEwHhcNMjQwNTE4MjAyNjUzWhcNMjQwNTI1MjAyNjUzWjAYMRYwFAYD VQQDEw02NjQ5MGYwZS0zZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNi9I/WXGqGrMw2pkMi7292ost6/zGms/UdRhmkMSAZi630ztDghI3dDffVh 39fy1FfG+iSdVnpgQSIOjr8ti1l7IS14Y2aJHKSvQz41slZW+xEvJaGwZ8oVAV0O cvX3rYPXLwK9v9BBB9He7Qr9EbPaVDh1pg6BKhEDP+Mtcxi0GIiW6kyLjbAqI2wz aWo7PcaU2nUoTt6Xo650gpWfR0EjpNXiENLmmtw/37Qbz3QK6aszD1I9GX3arDy5 w+u1ibWrtDrtH/cALCixrgoP51Au8Mr4Ur1upACZgzMjnoXVRzBR0CM03H1x5KxR 6gW2TppPRTtFQrSFqUwh0k8bywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOW2OKtL 33bwyTVBYoWCPQX92i5IMB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC WEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDkf3/ZGcZTCEBUpidOnSgkexv+cwRIfRDe1IQrjPiE1SwzhB1pbya YqEArV4RXSV2RqdVqx8n8CzYjr00wWAnqSP87Xw+5RcuimvatsVn+2uVGcHXgINU 4GDSi9Ivicnek9s+8AyBV1Tgw3zZJjsj9BCcBhqpRB50gVtNNmGskTLjlHhaH7Vv GXKd1ag3m3BuH9eRXAfGFf1uTr5yvh13SQyxXgmS38cO6au5/Tqsy8fNkcNfdAp6 AKkQBPyVZZuiGfXgxf16/fPG1rZ7amfiDePYSjX5CG+OcZykG0x8qANQdjOuWY0a ANa3QygLuLk/6xjXwDIviGbP/p5aQYNX -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org