$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: szJnqfm+cghPndid6K5ju7118Nk4qq+Mdg7/J04KB8Q= Subject key identifier: 29:0B:8C:E6:70:8E:19:27:34:A4:3F:BF:83:51:DD:F3:1D:7F:84:39 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 0FCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 0FB8 Signing time: Thu 02 May 2024 18:08:08 +0000 Manifest this update: Thu 02 May 2024 18:08:08 +0000 Manifest next update: Thu 09 May 2024 18:08:08 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: shZmdh1gHQFyoCv+LLQ8esEJ/I+4xMDfghktHqYU6OE=) 2: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: o4IiEMeA6RrIyI4EIGSr0hvBNlyD3kRf/X6yW/XL/pk=) 3: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: gqFP1IUKKDRvNeAUOIr33aKVzsawxI23lvIfLsK890s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4047 (0xfcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: May 2 18:08:08 2024 GMT Not After : May 9 18:08:08 2024 GMT Subject: CN=6633d688-1468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:94:1f:fb:f4:56:96:cd:46:88:95:ae:fe: 97:ae:81:e4:4d:ce:54:71:4a:d7:bb:59:60:0c:a3: 58:75:20:ce:ed:08:d8:3f:e4:e1:ef:7a:5a:aa:8f: 0a:79:84:2a:cf:dc:82:f4:fe:51:79:4b:07:69:b6: 7c:c0:f2:be:6b:14:76:83:fb:ae:1c:d6:5a:bd:ab: c5:77:e2:43:5e:3d:ec:36:e5:d2:34:00:0e:3d:d3: 03:22:41:75:62:73:31:80:ab:3a:9d:b8:3c:dc:5d: 84:a2:14:d7:3a:61:30:e2:f0:70:e5:61:7b:6d:dd: 16:d3:d7:91:07:59:1a:04:2c:d3:fb:b7:2e:e8:cf: 0e:4a:0d:22:5c:25:11:f6:25:30:ca:0a:23:03:e1: af:61:9a:af:3b:69:b3:2f:62:0d:eb:eb:ce:ae:6b: d2:40:22:78:a0:4f:7e:b2:5e:c5:62:7b:cd:4f:ac: c5:81:d2:2f:78:6d:d3:7d:68:25:a0:20:8b:5d:33: 36:d7:21:25:74:8d:2f:65:e9:90:69:e1:dc:ad:49: 1f:3c:2e:c0:56:bc:c5:c5:1c:a0:11:bd:b6:f6:7a: 56:06:7f:82:ac:31:59:91:9b:82:eb:18:05:ba:19: c3:bd:12:7b:1a:e0:4e:f2:87:3b:b2:30:bc:f7:c4: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0B:8C:E6:70:8E:19:27:34:A4:3F:BF:83:51:DD:F3:1D:7F:84:39 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:06:4f:1c:9a:31:0f:42:44:06:b3:8f:c7:ed:46:4e:6e: db:46:05:fc:73:67:46:a7:38:d8:78:2a:f4:e9:de:47:f4:1c: cf:a1:0f:25:d2:86:b6:37:5f:66:4d:7f:d1:9c:55:3f:20:6a: 32:ee:c8:d4:f5:00:3a:9e:3c:11:b3:0a:ce:1f:f6:73:5d:da: 26:e6:9d:20:5a:cc:98:6e:4e:b2:e4:ca:22:ce:db:b8:40:44: 68:09:a6:f3:7e:9f:e8:a3:18:f6:03:89:f4:14:c0:9c:7d:11: 32:99:69:6c:2d:07:b0:03:ef:ea:27:5d:bb:03:c0:6e:37:03: 40:e9:0d:51:2a:e7:9f:33:19:1e:16:51:94:f1:64:0e:c0:b8: 60:cd:8b:58:22:16:88:03:04:a1:38:7a:20:fe:6d:c8:23:79: 80:83:5b:64:d6:cd:14:d3:6e:42:b2:c9:19:e4:9c:1b:0e:0c: 3e:41:9d:59:87:c7:f0:31:5a:3c:01:81:4b:f7:3e:87:a5:e3: 4a:30:4c:e9:14:02:c6:85:d9:85:ad:4e:fa:98:2b:65:01:61: 22:68:d4:d3:c6:07:5a:db:46:0c:f2:3b:f8:73:ce:59:41:2b: 20:56:aa:c2:33:a2:19:32:2b:1e:0e:46:6e:5e:50:e9:2a:45: 96:d3:07:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjQwNTAyMTgwODA4WhcNMjQwNTA5MTgwODA4WjAYMRYwFAYD VQQDEw02NjMzZDY4OC0xNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrCUH/v0VpbNRoiVrv6XroHkTc5UcUrXu1lgDKNYdSDO7QjYP+Th73paqo8K eYQqz9yC9P5ReUsHabZ8wPK+axR2g/uuHNZavavFd+JDXj3sNuXSNAAOPdMDIkF1 YnMxgKs6nbg83F2EohTXOmEw4vBw5WF7bd0W09eRB1kaBCzT+7cu6M8OSg0iXCUR 9iUwygojA+GvYZqvO2mzL2IN6+vOrmvSQCJ4oE9+sl7FYnvNT6zFgdIveG3TfWgl oCCLXTM21yEldI0vZemQaeHcrUkfPC7AVrzFxRygEb229npWBn+CrDFZkZuC6xgF uhnDvRJ7GuBO8oc7sjC898RCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkLjOZw jhknNKQ/v4NR3fMdf4Q5MB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ngZPHJoxD0JEBrOPx+1GTm7bRgX8c2dGpzjYeCr06d5H9BzPoQ8l 0oa2N19mTX/RnFU/IGoy7sjU9QA6njwRswrOH/ZzXdom5p0gWsyYbk6y5Moiztu4 QERoCabzfp/ooxj2A4n0FMCcfREymWlsLQewA+/qJ127A8BuNwNA6Q1RKuefMxke FlGU8WQOwLhgzYtYIhaIAwShOHog/m3II3mAg1tk1s0U025CsskZ5JwbDgw+QZ1Z h8fwMVo8AYFL9z6HpeNKMEzpFALGhdmFrU76mCtlAWEiaNTTxgda20YM8jv4c85Z QSsgVqrCM6IZMiseDkZuXlDpKkWW0wdY -----END CERTIFICATE-----Generated at Thu May 2 20:50:20 2024 by rpki-client on console-fra.rpki-client.org