$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: Bt5qnSmlWfxjF2Z+DlGzSOPsPCenn4yaHnatAyJ8Mck= Subject key identifier: 8C:A3:AE:27:26:DB:9D:34:3C:7C:37:FA:E1:6F:F7:C8:E5:5D:89:D9 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0B58 Signing time: Sat 04 May 2024 19:49:58 +0000 Manifest this update: Sat 04 May 2024 19:49:57 +0000 Manifest next update: Sat 11 May 2024 19:49:57 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: fsOYyJoR0FgsNUKX99/cnLvsl25EXXOs9qmVD+eqZz4=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: ANLmMk6O9eHYmoUSmiPr17fgz6KI2ZhhF4RXqYVEKY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: May 4 19:49:57 2024 GMT Not After : May 11 19:49:57 2024 GMT Subject: CN=66369166-e694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ba:75:68:36:55:4c:95:fb:47:88:01:2b:59: 37:00:8f:54:fc:c5:ca:b6:ce:28:66:d9:84:66:1a: 77:d3:11:e2:95:4e:f6:3e:03:f1:5a:3c:ba:a7:64: d4:ea:38:f6:9d:2d:11:91:8c:57:ab:bd:34:52:f0: 38:3f:67:d4:77:59:18:06:42:97:26:c4:c2:b9:54: 8e:11:9e:97:a2:5a:7a:92:91:9f:0d:9d:f8:53:b0: c9:b0:29:7a:a8:0d:b7:73:f4:42:72:cc:3f:f3:25: 99:92:43:60:41:36:ac:f6:0d:6f:99:c3:ea:43:95: ae:50:a3:e4:17:7d:3e:96:5f:8e:2b:0b:de:60:44: 86:ed:2c:d8:14:9c:79:d9:f2:89:63:36:4d:f1:7b: 6d:76:e1:80:17:67:2b:90:e4:e0:07:aa:eb:68:54: eb:ff:2c:03:0e:4a:7c:6b:40:88:0a:b0:b5:93:dd: 42:c5:40:7f:59:b5:0a:9b:73:0e:dc:4b:9f:f9:16: bc:e6:3e:61:01:99:3c:52:fa:4c:05:d4:39:d1:f9: 0d:f5:4a:92:3d:aa:64:06:2a:05:89:31:d0:6e:f9: c1:d1:67:43:1b:e8:98:a8:0f:40:c1:2c:86:01:99: 16:8a:e6:00:cf:e4:0a:c1:00:fb:2b:de:a6:94:0f: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:AE:27:26:DB:9D:34:3C:7C:37:FA:E1:6F:F7:C8:E5:5D:89:D9 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a2:d7:57:36:cd:6f:83:8f:da:71:fc:36:34:a7:0e:62:56: 2b:23:81:87:68:1a:b0:eb:be:11:a0:b0:5d:5b:12:e6:e9:dd: ab:46:c7:29:76:b8:2d:8c:d8:13:39:bc:ee:3b:0f:07:b5:d8: 62:90:d5:0c:26:86:f9:ca:10:5e:06:bc:3b:39:3e:e6:dc:00: fd:12:ac:b6:00:6c:36:6e:1d:cc:2d:6b:e2:9d:e9:b9:42:13: 40:0b:d3:ea:36:d5:dd:e7:a4:ba:94:5a:50:17:fa:a0:3b:41: d1:71:61:9c:c7:85:99:14:59:93:96:4a:0a:0b:8d:0c:9d:85: 1c:4a:1c:9b:f2:a5:09:13:7d:18:d2:5f:98:a5:6a:26:3d:0c: 68:2d:96:2f:22:82:ef:ec:63:d7:73:97:6a:96:51:c9:9b:2a: c5:4b:a5:fb:2c:ce:95:a4:b0:f2:37:d4:d5:d7:75:46:77:47: 70:b8:7b:70:e4:4b:a0:29:1c:4b:ca:5e:09:a7:51:46:43:5c: 03:f7:94:2d:06:5e:56:7b:2d:e4:ed:7a:fa:6a:54:89:b2:f1: 92:4f:07:4d:74:38:1c:82:02:78:a6:5a:a5:55:55:fb:cb:ce: 90:fc:ad:30:5d:1d:80:01:06:27:e8:e6:3f:df:3f:d5:0e:4b: d4:1d:ec:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjQwNTA0MTk0OTU3WhcNMjQwNTExMTk0OTU3WjAYMRYwFAYD VQQDEw02NjM2OTE2Ni1lNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rp1aDZVTJX7R4gBK1k3AI9U/MXKts4oZtmEZhp30xHilU72PgPxWjy6p2TU 6jj2nS0RkYxXq700UvA4P2fUd1kYBkKXJsTCuVSOEZ6Xolp6kpGfDZ34U7DJsCl6 qA23c/RCcsw/8yWZkkNgQTas9g1vmcPqQ5WuUKPkF30+ll+OKwveYESG7SzYFJx5 2fKJYzZN8XttduGAF2crkOTgB6rraFTr/ywDDkp8a0CICrC1k91CxUB/WbUKm3MO 3Euf+Ra85j5hAZk8UvpMBdQ50fkN9UqSPapkBioFiTHQbvnB0WdDG+iYqA9AwSyG AZkWiuYAz+QKwQD7K96mlA+XGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyjricm 2500PHw3+uFv98jlXYnZMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJotdXNs1vg4/acfw2NKcOYlYrI4GHaBqw674RoLBdWxLm6d2rRscp drgtjNgTObzuOw8HtdhikNUMJob5yhBeBrw7OT7m3AD9Eqy2AGw2bh3MLWvinem5 QhNAC9PqNtXd56S6lFpQF/qgO0HRcWGcx4WZFFmTlkoKC40MnYUcShyb8qUJE30Y 0l+YpWomPQxoLZYvIoLv7GPXc5dqllHJmyrFS6X7LM6VpLDyN9TV13VGd0dwuHtw 5EugKRxLyl4Jp1FGQ1wD95QtBl5Wey3k7Xr6alSJsvGSTwdNdDgcggJ4plqlVVX7 y86Q/K0wXR2AAQYn6OY/3z/VDkvUHexk -----END CERTIFICATE-----Generated at Sat May 4 20:37:04 2024 by rpki-client on console-fra.rpki-client.org