$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: mg6tngXoWBZFLlb2XnmNqz8GBVnxJeXTWadNH3wai64= Subject key identifier: 00:10:A8:62:72:0E:39:93:FB:2D:AF:A2:C3:B8:3B:CF:C2:16:AE:9A Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 035D Signing time: Sat 27 Apr 2024 02:49:16 +0000 Manifest this update: Sat 27 Apr 2024 02:49:15 +0000 Manifest next update: Sat 04 May 2024 02:49:15 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: nljPC7JnfFLjnD3k/PWmQLEL9focQY4zr4c12Kpb/3s=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: WMHGc4TE8FcpYDxTVs4AE1cGDwpusyjJzjDGheMW978=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: Apr 27 02:49:15 2024 GMT Not After : May 4 02:49:15 2024 GMT Subject: CN=662c67ac-de4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:e7:02:9c:3a:c3:e3:1f:14:bb:d4:75:f0: 39:b8:cc:e4:a6:73:0c:f9:cf:35:f3:93:8b:f5:6c: 36:a3:c7:b2:4e:9f:64:fe:47:de:57:55:a1:55:1f: 48:f3:af:ff:c2:2c:df:d8:0f:40:29:ef:e5:48:ca: 21:1d:4e:a2:38:cb:e0:f8:a6:e0:51:c7:b2:c4:7a: b7:7f:da:de:30:8a:ca:7e:66:1d:16:ac:47:e0:c4: f0:fc:b6:d4:1d:75:09:e1:b1:1e:34:9c:68:c4:a3: 55:23:c5:f7:91:e7:78:6d:11:1f:e7:f6:13:ec:0c: 81:12:ae:1a:11:e2:d8:d2:92:be:1e:b1:ff:ed:7d: b9:85:06:77:6f:79:f6:dd:cb:ca:88:4d:8f:e5:9e: ec:7f:97:4e:42:f0:aa:1b:3a:6e:68:c6:2e:6f:67: 42:55:f9:34:92:72:02:fa:91:06:fa:04:02:f6:34: 8e:8d:55:39:67:11:bb:a7:f0:43:38:7b:12:b4:ab: ff:f7:6f:35:67:cd:b9:82:82:dd:a3:7e:c5:85:70: f1:56:6d:30:ca:fe:0e:b7:e8:0d:8e:8b:2f:a0:e7: 2d:33:33:ec:35:ef:7a:ea:bc:75:82:2a:eb:c0:d7: 66:94:86:ca:57:36:3d:63:c3:74:66:b0:a5:2f:f7: 0b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:10:A8:62:72:0E:39:93:FB:2D:AF:A2:C3:B8:3B:CF:C2:16:AE:9A X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:58:b0:69:16:cb:07:82:fe:24:83:46:66:47:9c:3d:d0:68: 4f:9b:91:05:bc:dc:c8:61:98:2d:3b:f4:9d:df:5e:69:45:ed: 43:48:74:80:93:97:6a:f3:10:18:45:dc:aa:f7:30:4a:27:17: 19:36:5d:f4:76:62:62:00:2f:59:23:20:08:49:bd:bf:dd:8c: 42:e8:79:6c:b0:5c:0f:45:44:a1:84:83:0b:a7:9b:4a:6f:31: eb:85:e8:ad:aa:20:43:e2:5b:0c:9e:fd:68:ca:c7:5d:15:84: aa:df:ed:01:51:0d:7a:8f:dc:1a:ad:9e:2c:d5:67:53:ac:9a: c5:b4:0a:b6:8a:71:c6:0c:56:99:20:19:47:a7:d9:b3:a6:a4: 94:24:db:4e:2d:cf:87:39:67:dc:0f:44:d0:4b:a3:a9:cf:aa: 67:aa:0b:7a:3d:b4:a4:74:42:5e:8c:c2:bc:e7:c8:c6:cf:75: f6:f2:60:46:fc:60:f7:de:1f:f6:df:04:ff:a8:cc:dc:ab:9b: a0:ce:1b:18:c4:87:4e:00:53:04:8b:c6:b7:c8:e7:da:2e:7d: 1f:2b:fc:cf:24:93:c8:ca:7f:27:8b:30:e3:c0:67:e5:0b:f9: 1f:ca:ba:a3:4e:79:6d:43:88:95:5d:8f:a1:36:e8:a7:ed:31: ac:36:f9:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjQwNDI3MDI0OTE1WhcNMjQwNTA0MDI0OTE1WjAYMRYwFAYD VQQDEw02NjJjNjdhYy1kZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6LnApw6w+MfFLvUdfA5uMzkpnMM+c8185OL9Ww2o8eyTp9k/kfeV1WhVR9I 86//wizf2A9AKe/lSMohHU6iOMvg+KbgUceyxHq3f9reMIrKfmYdFqxH4MTw/LbU HXUJ4bEeNJxoxKNVI8X3ked4bREf5/YT7AyBEq4aEeLY0pK+HrH/7X25hQZ3b3n2 3cvKiE2P5Z7sf5dOQvCqGzpuaMYub2dCVfk0knIC+pEG+gQC9jSOjVU5ZxG7p/BD OHsStKv/9281Z825goLdo37FhXDxVm0wyv4Ot+gNjosvoOctMzPsNe966rx1girr wNdmlIbKVzY9Y8N0ZrClL/cL8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAQqGJy DjmT+y2vosO4O8/CFq6aMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYWLBpFssHgv4kg0ZmR5w90GhPm5EFvNzIYZgtO/Sd315pRe1DSHSA k5dq8xAYRdyq9zBKJxcZNl30dmJiAC9ZIyAISb2/3YxC6HlssFwPRUShhIMLp5tK bzHrheitqiBD4lsMnv1oysddFYSq3+0BUQ16j9warZ4s1WdTrJrFtAq2inHGDFaZ IBlHp9mzpqSUJNtOLc+HOWfcD0TQS6Opz6pnqgt6PbSkdEJejMK858jGz3X28mBG /GD33h/23wT/qMzcq5ugzhsYxIdOAFMEi8a3yOfaLn0fK/zPJJPIyn8nizDjwGfl C/kfyrqjTnltQ4iVXY+hNuin7TGsNvl1 -----END CERTIFICATE-----Generated at Sun Apr 28 15:50:04 2024 by rpki-client on console-fra.rpki-client.org