$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: NJUjwGYGofa+J9ln/HkVF7BTVTcSKxXVcT+ncRtjWHY= Subject key identifier: F5:8B:9E:DD:F8:BE:8F:00:63:90:C0:30:4B:BF:06:67:03:1B:C4:BB Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 15A0 Signing time: Thu 02 May 2024 18:28:21 +0000 Manifest this update: Thu 02 May 2024 18:28:21 +0000 Manifest next update: Thu 09 May 2024 18:28:21 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: hsIUBTdvpwNsL2y4mtnq5otBs8TBX3y7g//Wdcqo9a4=) 2: 4CEAFBC829C311ED8D2F0870C4F9AE02.roa (hash: F3wtYNT10j2sdrda5cVxOLVDb60MIDg4+cSDX4cOdc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: May 2 18:28:21 2024 GMT Not After : May 9 18:28:21 2024 GMT Subject: CN=6633db45-d39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:15:cf:68:f4:2b:77:01:04:75:e2:70:48: 11:da:f7:eb:14:38:9d:ca:bc:57:7b:9c:f0:ef:1b: b9:8f:d4:38:34:a2:eb:52:20:ca:a8:a1:fc:59:7f: 72:53:85:ad:16:0c:31:21:f3:81:a8:a5:40:5b:8e: 48:cb:f2:a8:a2:24:c5:43:54:82:bf:c5:70:f4:42: d9:0b:3f:fa:89:e7:fe:fe:da:99:77:8d:26:1b:6f: 88:0c:8b:fa:a2:77:1c:62:f4:30:b0:d6:18:8a:d5: 12:66:fb:f1:64:bc:e7:bd:f0:48:e5:b7:bf:be:93: b5:5b:1f:a9:1b:aa:f8:22:5a:15:27:e4:8c:c4:a6: 43:a6:07:38:84:14:f6:83:04:5f:63:c5:60:ca:b3: 9f:38:09:1b:a1:79:c8:83:97:b3:f6:cd:04:97:d7: 47:99:ea:05:68:76:e8:10:cd:d4:2e:6b:19:be:73: 97:46:35:84:9f:f3:71:14:05:6c:ee:cb:28:5a:5d: 96:9d:40:c3:07:e0:ba:e7:47:d5:77:5e:bf:30:98: 04:34:39:4c:70:82:f7:1c:b2:da:f7:36:fd:32:86: 61:92:7f:17:0e:84:55:3b:81:7a:2c:b0:c0:32:f6: 8f:17:45:8f:67:d0:a4:06:fd:5e:9b:a6:2e:6a:7d: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8B:9E:DD:F8:BE:8F:00:63:90:C0:30:4B:BF:06:67:03:1B:C4:BB X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:36:e8:94:e1:86:d9:2e:3c:ee:65:53:d8:2b:80:19:c8:5b: 8e:eb:16:07:79:7d:83:13:ec:47:7c:84:3e:bc:2c:87:b9:15: 6a:af:d8:fa:cd:c8:2d:d4:a4:86:be:3b:5f:9d:1c:4c:ee:cb: 09:b8:bf:4f:9f:a8:bc:1d:cd:55:05:7c:fc:d7:67:a9:95:08: a0:85:70:a3:2b:f2:62:e3:25:91:31:ec:9c:1f:58:84:8e:48: 68:9d:12:3f:ae:fd:f5:7a:b1:c7:cb:6a:a6:23:00:6c:0e:b3: 51:78:27:ba:6c:75:4c:99:51:e6:8b:a3:d3:83:94:c8:9c:ec: c7:8a:20:91:4e:99:ce:11:e2:42:bd:a4:12:0c:e6:9a:fd:4b: 4e:d1:08:55:0b:96:60:99:01:a5:99:a5:3b:2d:31:54:0c:0c: 44:45:db:d6:d2:6c:1f:b7:d7:be:5e:7e:48:ee:e8:50:50:88: b9:00:2a:f8:82:b6:70:a1:7a:67:ae:c7:ad:e5:a3:e0:19:8d: 24:f1:4c:ed:3f:e4:31:21:ac:9b:4b:37:c0:73:5c:6c:82:1c: a8:30:66:a9:4b:f1:4f:d1:21:9a:e7:95:9a:70:6d:fb:53:32: 91:91:78:e0:a3:4d:b4:ee:3c:66:2c:d9:cc:89:51:ea:c8:23: f4:9e:a7:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjQwNTAyMTgyODIxWhcNMjQwNTA5MTgyODIxWjAYMRYwFAYD VQQDEw02NjMzZGI0NS1kMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucIVz2j0K3cBBHXicEgR2vfrFDidyrxXe5zw7xu5j9Q4NKLrUiDKqKH8WX9y U4WtFgwxIfOBqKVAW45Iy/KooiTFQ1SCv8Vw9ELZCz/6ief+/tqZd40mG2+IDIv6 onccYvQwsNYYitUSZvvxZLznvfBI5be/vpO1Wx+pG6r4IloVJ+SMxKZDpgc4hBT2 gwRfY8VgyrOfOAkboXnIg5ez9s0El9dHmeoFaHboEM3ULmsZvnOXRjWEn/NxFAVs 7ssoWl2WnUDDB+C650fVd16/MJgENDlMcIL3HLLa9zb9MoZhkn8XDoRVO4F6LLDA MvaPF0WPZ9CkBv1em6Yuan2eUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWLnt34 vo8AY5DAMEu/BmcDG8S7MB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdNuiU4YbZLjzuZVPYK4AZyFuO6xYHeX2DE+xHfIQ+vCyHuRVqr9j6 zcgt1KSGvjtfnRxM7ssJuL9Pn6i8Hc1VBXz812eplQighXCjK/Ji4yWRMeycH1iE jkhonRI/rv31erHHy2qmIwBsDrNReCe6bHVMmVHmi6PTg5TInOzHiiCRTpnOEeJC vaQSDOaa/UtO0QhVC5ZgmQGlmaU7LTFUDAxERdvW0mwft9e+Xn5I7uhQUIi5ACr4 grZwoXpnrset5aPgGY0k8UztP+QxIaybSzfAc1xsghyoMGapS/FP0SGa55WacG37 UzKRkXjgo0207jxmLNnMiVHqyCP0nqfa -----END CERTIFICATE-----Generated at Thu May 2 20:50:19 2024 by rpki-client on console-fra.rpki-client.org