$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: +50+O/lAGYn0jzCPsPNlKUgrOsBjs7Ij6mmXDpeglmA= Subject key identifier: 65:FC:20:28:67:E3:CC:F3:52:E9:07:34:C9:E7:49:93:D3:C3:12:DF Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 0382 Signing time: Sat 01 Jun 2024 03:49:25 +0000 Manifest this update: Sat 01 Jun 2024 03:49:25 +0000 Manifest next update: Sat 08 Jun 2024 03:49:25 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: e81o/VAvbUTCZBlmASj3pNf7cnFcMFSxCBZ60a1DVEY=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 2L+wP6XVinYULhFDrWrb4o+II6pXymrOTPqGqgIPbT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Jun 1 03:49:25 2024 GMT Not After : Jun 8 03:49:25 2024 GMT Subject: CN=665a9a45-e1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:35:62:96:21:7e:62:0b:fb:6c:07:6e:64:2a: d8:76:97:62:ae:45:64:2a:33:65:67:46:45:f5:d9: 29:5a:ac:45:35:75:c2:e1:bf:92:f1:18:bb:b5:54: 4b:52:81:d2:c9:55:5c:50:85:3e:1f:2b:d8:b5:83: 7a:47:01:71:38:e7:70:18:38:5f:ef:73:21:e1:b8: 6f:2b:8a:03:58:e4:91:ba:41:0b:19:d9:11:b2:12: 48:fc:56:dd:16:b0:71:0c:76:13:9a:bc:5c:3a:e1: 19:34:05:1e:fc:4a:90:e6:b0:6b:00:03:81:15:b6: 7c:90:d7:09:83:f0:62:23:0c:72:f3:7f:ab:e2:46: 7d:61:1b:79:fb:62:19:df:80:52:33:78:80:29:47: 8a:d2:cc:1d:fc:71:f9:31:ee:e8:e9:b7:7b:91:3e: f6:1b:92:78:b0:3f:84:4e:7d:99:a5:b2:89:50:63: 05:ec:9f:fc:df:7d:0d:22:f8:b8:8b:76:42:e0:df: 2c:26:9b:b6:2f:91:6d:5b:63:54:9f:41:63:57:dd: 01:25:13:01:b0:46:7c:a1:28:9f:c5:a8:6e:28:f2: ca:2d:7e:21:ef:31:17:b2:b8:01:cc:50:3b:21:c7: 20:44:fa:16:fa:db:99:7b:95:7b:30:a4:8e:63:c9: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FC:20:28:67:E3:CC:F3:52:E9:07:34:C9:E7:49:93:D3:C3:12:DF X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:17:fa:8d:58:ec:20:23:31:0e:bf:a9:86:cb:2a:6f:02:81: e3:35:d6:bb:ba:a5:97:35:8d:e9:f4:e7:1b:da:5d:05:66:ce: e8:95:99:4d:2e:03:9d:1d:69:9f:93:db:86:c3:27:ad:30:c1: 20:ad:fd:9d:d4:8c:a4:43:c6:a8:5f:23:9a:93:39:b4:ce:72: f2:60:ac:69:72:75:77:f9:ce:84:77:ac:bd:61:79:7c:46:ae: 8d:be:d7:91:64:5a:ca:13:11:bc:aa:bc:2c:5b:ea:a3:98:ac: 96:e7:d3:eb:23:fe:8e:39:e0:38:00:62:c5:5f:b3:0a:0a:24: f0:2d:3d:62:f0:6e:a4:22:f9:1a:dd:38:ca:eb:1c:5d:02:c5: c3:b9:3d:91:00:11:9c:e4:04:76:b7:4e:1c:85:33:0d:46:b9: 4d:32:9a:88:44:b7:80:16:5b:60:db:02:62:43:61:7e:06:1b: 00:b3:f0:21:12:76:e4:a3:6b:18:04:a6:1d:9d:8a:91:97:ed: 4d:40:46:74:b2:77:04:7e:06:e8:dd:c7:93:aa:6e:94:6e:74: a1:07:61:d2:9a:9e:4e:87:a0:b3:8e:c7:bb:eb:1e:b2:0e:0f: 36:11:1c:41:64:8c:2d:49:45:a5:da:99:e6:fe:46:93:c3:58: 78:40:a2:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjQwNjAxMDM0OTI1WhcNMjQwNjA4MDM0OTI1WjAYMRYwFAYD VQQDEw02NjVhOWE0NS1lMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zViliF+Ygv7bAduZCrYdpdirkVkKjNlZ0ZF9dkpWqxFNXXC4b+S8Ri7tVRL UoHSyVVcUIU+HyvYtYN6RwFxOOdwGDhf73Mh4bhvK4oDWOSRukELGdkRshJI/Fbd FrBxDHYTmrxcOuEZNAUe/EqQ5rBrAAOBFbZ8kNcJg/BiIwxy83+r4kZ9YRt5+2IZ 34BSM3iAKUeK0swd/HH5Me7o6bd7kT72G5J4sD+ETn2ZpbKJUGMF7J/8330NIvi4 i3ZC4N8sJpu2L5FtW2NUn0FjV90BJRMBsEZ8oSifxahuKPLKLX4h7zEXsrgBzFA7 IccgRPoW+tuZe5V7MKSOY8nyjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX8IChn 48zzUukHNMnnSZPTwxLfMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxF/qNWOwgIzEOv6mGyypvAoHjNda7uqWXNY3p9Ocb2l0FZs7olZlN LgOdHWmfk9uGwyetMMEgrf2d1IykQ8aoXyOakzm0znLyYKxpcnV3+c6Ed6y9YXl8 Rq6NvteRZFrKExG8qrwsW+qjmKyW59PrI/6OOeA4AGLFX7MKCiTwLT1i8G6kIvka 3TjK6xxdAsXDuT2RABGc5AR2t04chTMNRrlNMpqIRLeAFltg2wJiQ2F+BhsAs/Ah Enbko2sYBKYdnYqRl+1NQEZ0sncEfgbo3ceTqm6UbnShB2HSmp5Oh6Czjse76x6y Dg82ERxBZIwtSUWl2pnm/kaTw1h4QKIY -----END CERTIFICATE-----Generated at Sat Jun 1 04:58:59 2024 by rpki-client on console-fra.rpki-client.org