$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json) Hash identifier: 9lfBU4djHOypsa0ND3Xbh0QV2SXg8Zd5tz2WKbfnuGA= Subject key identifier: 34:23:A8:9A:28:7D:0A:B5:4A:11:42:0F:09:50:0E:45:91:95:9D:E9 Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 19D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft Manifest number: 198C Signing time: Tue 30 Apr 2024 16:57:07 +0000 Manifest this update: Tue 30 Apr 2024 16:57:07 +0000 Manifest next update: Tue 07 May 2024 16:57:07 +0000 Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: gWc/HNMNB75xcIYYrSOV2+w0iHyfc5n8BE7G5qIYWxY=) 2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: jydEv4NneB7Sx0FI1skcD0suh5/17vxrfrRhEQ0JaqY=) 3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: uAi5hk9bT6OpTbwWwY5GVK1G5kvFxxOzsk2pWZ48nYI=) 4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: +QlUC0glkpkPjA7w7I6khloOS3EPNSs60LtlxtxV3uU=) 5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: UAirDrULY6myyNx1vMq3KsBU3lZ7343RMeFE+Epfgj4=) 6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: +kw+0Dd+hCJOF0NUg0Cg9CE8CUioX2H2bzk5xcJylVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6610 (0x19d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Apr 30 16:57:07 2024 GMT Not After : May 7 16:57:07 2024 GMT Subject: CN=663122e3-bc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:2f:c8:e7:39:a2:07:29:43:55:c7:53:1e: bf:61:41:2e:7e:69:4d:6c:0e:a9:36:6a:32:b1:3d: e8:be:74:f2:88:b7:2c:4b:23:86:7b:75:a1:58:8a: e2:ff:eb:ef:bb:f5:86:b7:a1:3a:71:f0:30:9c:9d: e7:fa:bf:06:f9:d5:ec:ee:cc:83:bf:43:8d:c3:08: ed:b8:4b:19:f6:96:2d:b1:98:9d:8b:5b:98:e3:65: 53:1b:cf:7f:1e:b3:3c:fa:42:35:f6:25:45:cd:0c: 6b:da:ed:fb:20:e5:a2:b6:48:87:31:23:af:f7:f0: 2a:41:db:b2:f0:31:c6:30:70:a9:78:9f:3b:54:b0: 2d:73:a3:a5:b4:86:67:26:7e:0e:d3:f1:d6:06:04: 1b:3f:7c:e7:9a:26:33:32:31:f5:45:d1:6a:e6:56: 06:d6:e4:14:0f:f5:0f:c7:0d:38:37:3e:d5:40:b7: 37:11:fd:f6:19:d2:c0:05:04:41:63:94:bd:f2:40: 2c:03:a9:42:0b:58:5c:d2:62:2d:4c:85:19:33:41: 86:f1:c5:f0:0a:40:d6:91:30:de:8f:db:e4:cc:9f: 8c:95:80:f1:a4:2e:34:c6:6e:f1:23:1a:e1:bf:6a: 3c:94:7d:e0:1d:ef:ef:b4:15:95:81:61:ec:ad:e5: d6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:A8:9A:28:7D:0A:B5:4A:11:42:0F:09:50:0E:45:91:95:9D:E9 X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cc:6a:ac:ae:14:db:72:b9:29:5d:7a:f9:4c:07:2b:18:84: 8b:4c:88:00:fd:d1:36:89:45:d0:e2:de:f0:5a:ff:be:49:d7: 25:56:e9:6d:86:04:50:10:f9:30:a0:91:5d:a0:21:81:59:c5: ae:7a:17:98:1a:13:32:86:b7:8d:20:13:ac:53:80:3c:4d:d8: 9d:9d:39:13:02:ae:69:56:7c:cb:fb:e0:f6:92:ae:29:2f:4c: 22:59:83:7f:0a:c4:6d:af:1c:1e:ee:32:42:ab:16:8e:51:c2: 0b:8e:cc:8c:57:5a:7e:e5:9d:25:3b:0a:6e:76:53:7f:14:f8: 93:3d:a0:96:36:d2:eb:1d:22:62:16:e6:fc:92:e8:95:9c:df: 4b:44:37:a9:8b:bf:d3:90:79:83:d7:a2:7d:bf:4c:52:89:1d: 77:d7:d8:3e:e4:30:36:61:ee:7a:87:5c:aa:ca:aa:2d:a8:58: ba:dc:d7:d2:82:c4:e5:7d:0c:02:f8:63:3c:66:51:02:73:0a: 34:9c:1c:5e:81:57:b5:0c:77:6e:2a:f8:23:b4:9f:47:68:ef: 57:e5:f3:06:dc:de:4b:a2:d8:43:94:54:b5:55:98:5c:76:fb: a1:ac:ef:3e:f1:4b:b1:49:ae:11:40:6e:99:0c:0e:6a:00:b9: 03:a4:7a:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjQwNDMwMTY1NzA3WhcNMjQwNTA3MTY1NzA3WjAYMRYwFAYD VQQDEw02NjMxMjJlMy1iYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruUvyOc5ogcpQ1XHUx6/YUEufmlNbA6pNmoysT3ovnTyiLcsSyOGe3WhWIri /+vvu/WGt6E6cfAwnJ3n+r8G+dXs7syDv0ONwwjtuEsZ9pYtsZidi1uY42VTG89/ HrM8+kI19iVFzQxr2u37IOWitkiHMSOv9/AqQduy8DHGMHCpeJ87VLAtc6OltIZn Jn4O0/HWBgQbP3znmiYzMjH1RdFq5lYG1uQUD/UPxw04Nz7VQLc3Ef32GdLABQRB Y5S98kAsA6lCC1hc0mItTIUZM0GG8cXwCkDWkTDej9vkzJ+MlYDxpC40xm7xIxrh v2o8lH3gHe/vtBWVgWHsreXWvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQjqJoo fQq1ShFCDwlQDkWRlZ3pMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1 X0RZMXpVNDFCSXI0ampudTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfzGqsrhTbcrkpXXr5TAcrGISLTIgA/dE2iUXQ4t7wWv++SdclVult hgRQEPkwoJFdoCGBWcWueheYGhMyhreNIBOsU4A8TdidnTkTAq5pVnzL++D2kq4p L0wiWYN/CsRtrxwe7jJCqxaOUcILjsyMV1p+5Z0lOwpudlN/FPiTPaCWNtLrHSJi Fub8kuiVnN9LRDepi7/TkHmD16J9v0xSiR1319g+5DA2Ye56h1yqyqotqFi63NfS gsTlfQwC+GM8ZlECcwo0nBxegVe1DHduKvgjtJ9HaO9X5fMG3N5LothDlFS1VZhc dvuhrO8+8UuxSa4RQG6ZDA5qALkDpHrQ -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:37 2024 by rpki-client on console-fra.rpki-client.org