$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: 5AoSaU1GYLHlXl7SC4n1aWglcde0ZB3EyjV80PeaMXE= Subject key identifier: 95:99:8D:4C:FD:61:23:20:A6:93:B3:72:98:AD:F7:44:F3:F6:E5:58 Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: D5 Signing time: Sun 05 May 2024 06:10:15 +0000 Manifest this update: Sun 05 May 2024 06:10:15 +0000 Manifest next update: Sun 12 May 2024 06:10:15 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: BNSyO8tGkv99UIgnRu5z7GZV335Q5dfKkS+ChCBwNP0=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: ZzGWfShy+q0K03Ilr3Gj1zQvQhciFYMihkhjni/eMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: May 5 06:10:15 2024 GMT Not After : May 12 06:10:15 2024 GMT Subject: CN=663722c7-c0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:a4:8b:77:2d:06:4b:d7:df:5f:23:32:f0: 4b:93:ff:e7:4c:c8:df:63:14:ae:f9:6d:d5:d5:ea: 19:bb:20:44:b6:c0:8b:35:51:07:30:89:ec:87:8b: 3e:ed:e3:64:d0:7d:e3:fa:a6:e9:f7:67:73:0b:59: b7:89:dc:2f:51:5e:87:15:0e:a3:05:72:b4:8b:23: 49:ce:9a:c3:0c:e7:69:11:24:78:d5:ec:bf:f1:12: 15:02:8f:01:95:b0:ce:e2:6a:a5:ee:11:41:8a:5f: 85:f7:85:7b:d4:8e:be:f4:f2:40:5b:d1:08:16:54: 51:73:30:9d:42:3d:19:7a:e1:9a:b8:4f:7d:34:49: 96:82:1b:33:0a:41:23:a4:dc:3b:2d:bc:f1:25:99: 8f:f7:16:de:5e:60:51:30:4f:71:d1:8b:54:db:e1: 4f:8b:15:18:20:84:a5:54:a5:a4:c0:36:d2:d5:01: d1:d9:b1:46:76:a5:8e:98:a2:cc:e4:07:83:44:92: 33:38:46:eb:95:5b:6c:eb:c7:bd:1e:d1:4c:8c:5e: 49:64:98:cf:ef:ee:d2:a5:55:23:aa:32:cb:6a:f1: 34:31:ae:ec:99:6b:00:c7:5b:79:2f:3d:c5:46:39: 99:4a:a7:2f:d2:5d:a6:14:4c:96:91:a4:ed:6b:09: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:8D:4C:FD:61:23:20:A6:93:B3:72:98:AD:F7:44:F3:F6:E5:58 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:32:a0:3c:fb:2e:f2:36:be:32:b1:79:6e:79:86:87:4a:9b: 79:92:dd:35:12:06:61:db:2b:6e:80:76:17:5e:a9:c9:14:76: b6:87:f2:ad:f4:d7:d3:e2:4a:fc:e1:bf:33:89:be:5e:91:43: d8:66:e3:f4:b3:3d:f8:fb:8d:ca:29:f2:cd:0a:fe:b4:37:ac: 35:0e:86:ca:51:91:ba:12:43:52:74:ac:e1:2a:22:db:3a:3d: 05:59:ea:b7:02:59:97:35:db:b0:a2:40:74:76:d4:d2:28:3e: 2d:5b:74:59:f1:a8:a0:45:07:e7:1d:a1:3d:80:eb:72:4d:0b: 08:97:81:a1:85:fb:57:61:0f:f8:64:3f:56:67:69:fc:7c:43: fa:ed:02:7e:77:8c:e4:04:ca:e8:8b:9e:e2:93:7e:80:b0:81: 06:64:f0:b1:74:9a:16:4a:cc:e2:dd:02:c3:50:59:40:70:18: cf:0b:fb:3a:ae:bc:0e:fb:72:8b:c4:0e:8b:85:05:43:bc:64: a8:25:3f:16:d7:9e:f4:62:f1:24:e6:cc:09:e8:a9:96:2a:f8: 71:e7:b7:1c:e8:ed:78:16:1c:97:b4:88:bf:50:e4:e6:93:a1: 45:71:cb:44:3a:62:ff:42:44:f1:02:d0:f6:eb:f7:89:88:9a: 3e:3c:a6:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjQwNTA1MDYxMDE1WhcNMjQwNTEyMDYxMDE1WjAYMRYwFAYD VQQDEw02NjM3MjJjNy1jMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocyki3ctBkvX318jMvBLk//nTMjfYxSu+W3V1eoZuyBEtsCLNVEHMInsh4s+ 7eNk0H3j+qbp92dzC1m3idwvUV6HFQ6jBXK0iyNJzprDDOdpESR41ey/8RIVAo8B lbDO4mql7hFBil+F94V71I6+9PJAW9EIFlRRczCdQj0ZeuGauE99NEmWghszCkEj pNw7LbzxJZmP9xbeXmBRME9x0YtU2+FPixUYIISlVKWkwDbS1QHR2bFGdqWOmKLM 5AeDRJIzOEbrlVts68e9HtFMjF5JZJjP7+7SpVUjqjLLavE0Ma7smWsAx1t5Lz3F RjmZSqcv0l2mFEyWkaTtawkDSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWZjUz9 YSMgppOzcpit90Tz9uVYMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFMqA8+y7yNr4ysXlueYaHSpt5kt01EgZh2ytugHYXXqnJFHa2h/Kt 9NfT4kr84b8zib5ekUPYZuP0sz34+43KKfLNCv60N6w1DobKUZG6EkNSdKzhKiLb Oj0FWeq3AlmXNduwokB0dtTSKD4tW3RZ8aigRQfnHaE9gOtyTQsIl4GhhftXYQ/4 ZD9WZ2n8fEP67QJ+d4zkBMroi57ik36AsIEGZPCxdJoWSszi3QLDUFlAcBjPC/s6 rrwO+3KLxA6LhQVDvGSoJT8W1570YvEk5swJ6KmWKvhx57cc6O14FhyXtIi/UOTm k6FFcctEOmL/QkTxAtD26/eJiJo+PKbi -----END CERTIFICATE-----Generated at Sun May 5 08:38:58 2024 by rpki-client on console-fra.rpki-client.org