$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: Y9FV7vs825RA3LtTWBjZMY/xgeBjPbEobJxg6Ow+Row= Subject key identifier: 64:D6:04:5E:B4:C3:94:4C:C5:DD:F1:02:90:BD:61:4C:5A:7A:F8:98 Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 0214 Signing time: Tue 07 May 2024 04:07:09 +0000 Manifest this update: Tue 07 May 2024 04:07:08 +0000 Manifest next update: Tue 14 May 2024 04:07:08 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: r4J0TvDInqhMg0bWOhWe/5p9ZqYWzw9EJYIFiEofb1k=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: Y0xU0sF/YnU5X2Wjw8sN3PDglph7zaRxBU1JVkINP7k=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: E3gDAkKJ2VLLNW3fqfi+UMppLgBJC54lp9rLDOblL1M=) 4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: 2v9nZEXKE2n7zN/qeQ9UGMLEIjdnl9icDJiQyK5zYRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: May 7 04:07:08 2024 GMT Not After : May 14 04:07:08 2024 GMT Subject: CN=6639a8ed-f0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:f6:46:8f:75:ed:e1:80:f4:2f:50:8b:82: 51:ee:c1:1f:53:36:8f:3e:e4:2d:77:83:43:a8:4c: 37:d1:df:05:9b:61:b8:57:de:3b:37:e9:2a:04:94: 9f:2b:9d:06:46:78:1e:c6:f9:7c:56:29:d0:a2:88: 42:38:36:53:32:07:66:85:68:75:88:e5:ef:76:2c: f5:46:a5:a4:bb:2a:a7:e8:09:0a:4a:44:6c:cc:1d: f4:8e:16:d3:0b:7e:bb:63:70:20:03:87:99:55:f9: aa:2b:da:21:9f:7d:a7:54:35:ae:3f:e5:6d:07:22: 16:2d:be:3e:0f:4e:10:fe:42:01:95:cd:cb:36:53: de:21:f9:8b:3c:f4:61:6c:2f:49:2a:b1:4b:b1:34: 1b:7d:10:42:f8:cc:fa:3e:a6:d2:af:3b:a1:72:03: 37:bf:8e:fd:cc:34:ba:1b:ee:6d:e8:a2:93:d8:4b: f5:f8:27:68:55:b5:d7:67:b2:72:98:89:fe:9f:89: b7:b1:e5:b7:aa:32:1b:8e:4a:4c:35:7c:2b:3d:ae: b1:3d:63:4c:36:bf:f7:c4:dc:b1:24:f9:3b:a2:8b: 01:ed:66:ed:79:96:83:29:2d:78:0c:1e:96:2c:83: 2b:82:e1:56:61:d3:6f:49:44:46:e7:1e:bd:ea:3c: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D6:04:5E:B4:C3:94:4C:C5:DD:F1:02:90:BD:61:4C:5A:7A:F8:98 X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f3:c4:cc:da:b7:65:ec:b1:9d:6c:10:d1:71:25:80:74:a0: e2:1b:5a:08:55:d1:20:57:80:a7:dd:3e:51:ad:bb:7b:bc:32: 3e:90:09:20:bb:be:0b:d6:c0:e7:3e:44:30:19:41:5c:bf:74: f5:5c:9c:30:82:db:8f:21:20:24:0e:45:a4:86:f0:9f:8c:cc: 48:23:f7:58:56:60:36:38:59:40:77:b0:82:b9:1b:11:7f:8b: 22:05:6a:00:1e:08:59:01:42:8b:37:45:a8:38:3e:4a:eb:32: c7:df:f0:e6:64:28:15:79:78:85:25:0d:ee:20:b2:d6:34:4c: b8:82:84:64:b6:9b:a9:d2:f6:91:3d:c3:12:cc:e1:4d:d3:67: b1:cb:3c:27:98:40:95:8f:b3:e7:f6:72:0b:ea:6c:38:ed:ac: 6e:b0:92:43:77:01:bc:fd:46:ba:73:d5:ea:10:f4:b2:d4:57: a3:32:6c:58:88:7a:16:e8:dc:5a:34:52:10:89:d7:e8:d2:b7: 3f:ce:dd:9b:24:c3:04:f2:17:2b:0a:04:f8:75:b6:09:54:f8: 61:b6:c0:0f:18:bb:0e:f1:60:aa:2f:f3:31:01:aa:e6:85:07: 89:81:cf:04:e7:be:0d:4c:3e:03:2a:5b:c4:2d:75:2c:90:a8: 8a:bd:e1:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjQwNTA3MDQwNzA4WhcNMjQwNTE0MDQwNzA4WjAYMRYwFAYD VQQDEw02NjM5YThlZC1mMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRv2Ro917eGA9C9Qi4JR7sEfUzaPPuQtd4NDqEw30d8Fm2G4V947N+kqBJSf K50GRngexvl8VinQoohCODZTMgdmhWh1iOXvdiz1RqWkuyqn6AkKSkRszB30jhbT C367Y3AgA4eZVfmqK9ohn32nVDWuP+VtByIWLb4+D04Q/kIBlc3LNlPeIfmLPPRh bC9JKrFLsTQbfRBC+Mz6PqbSrzuhcgM3v479zDS6G+5t6KKT2Ev1+CdoVbXXZ7Jy mIn+n4m3seW3qjIbjkpMNXwrPa6xPWNMNr/3xNyxJPk7oosB7WbteZaDKS14DB6W LIMrguFWYdNvSURG5x696jwwmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTWBF60 w5RMxd3xApC9YUxaeviYMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR88TM2rdl7LGdbBDRcSWAdKDiG1oIVdEgV4Cn3T5Rrbt7vDI+kAkg u74L1sDnPkQwGUFcv3T1XJwwgtuPISAkDkWkhvCfjMxII/dYVmA2OFlAd7CCuRsR f4siBWoAHghZAUKLN0WoOD5K6zLH3/DmZCgVeXiFJQ3uILLWNEy4goRktpup0vaR PcMSzOFN02exyzwnmECVj7Pn9nIL6mw47axusJJDdwG8/Ua6c9XqEPSy1FejMmxY iHoW6NxaNFIQidfo0rc/zt2bJMME8hcrCgT4dbYJVPhhtsAPGLsO8WCqL/MxAarm hQeJgc8E574NTD4DKlvELXUskKiKveHB -----END CERTIFICATE-----Generated at Tue May 7 05:39:50 2024 by rpki-client on console-fra.rpki-client.org