$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: niM6nHzExf2dDfSdTSUvFbVWEGZG+Jya3/pIyqaspqY= Subject key identifier: 85:2C:C2:89:93:74:D3:7A:D0:1F:D9:03:F1:89:54:FD:5E:E4:6A:29 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 06EE Signing time: Tue 30 Apr 2024 23:04:23 +0000 Manifest this update: Tue 30 Apr 2024 23:04:22 +0000 Manifest next update: Tue 07 May 2024 23:04:22 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: bs3SMwr5S0T7p9YqkqjbZU8CZ3lVrBGJqdWAT/31MlQ=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: drCFY4ToNIs7h2RZDJgyt7haVpl4pOaDR/k2ylBb2Ho=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: iMoO9qwaJ2o0soAAKCNKSWnnak06VE2US5vHDAVzY0w=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 9ctznKJoMOUNcTnvk2g+oe1adILJNeuJJ1mcQo/4tUI=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: qHZWORtb/dKZux4SCtl7C4A9J7kmXh4Y7nL9DWqarAM=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 3wANlA4sHia2AY4hIvFyq0yEmoVbLKrSyE1vk2c14vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Apr 30 23:04:22 2024 GMT Not After : May 7 23:04:22 2024 GMT Subject: CN=663178f7-8f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:f4:2d:4c:f9:df:1c:7c:7a:0b:69:81:ba: b9:27:22:9d:04:ca:d1:9e:ce:6f:96:57:c2:8c:72: bb:8f:d5:a8:3c:53:5d:98:12:bf:bd:0b:0c:f6:f2: e9:c0:6a:e8:8b:95:66:79:32:e5:ba:93:8a:9f:90: 80:b3:c4:1e:99:f7:24:bf:b0:c0:0b:21:60:3e:60: 9a:fe:ed:44:ad:f1:9e:73:e3:cd:58:18:d0:43:40: e1:25:bf:d2:f5:13:86:c6:89:15:ab:6e:28:7a:b6: 92:45:bf:82:7d:86:f7:09:96:08:83:67:da:91:ad: a1:5a:c2:0b:dd:30:e6:19:f5:88:ff:6f:4f:e3:9b: 95:dc:bd:b6:f0:63:8c:9f:bc:28:22:9d:e9:e8:2e: 30:b7:22:e5:02:52:8e:34:6d:2b:c0:ab:3d:5b:ca: 32:1a:b3:90:22:ea:2e:cb:fb:b8:b3:ad:3d:3f:6f: 1b:f9:67:cf:d1:d4:6f:6d:5a:a1:3c:0c:cd:25:11: f2:77:58:a8:13:17:cb:f8:96:5e:9d:cc:fe:6a:f2: fd:8a:9e:52:d0:cf:13:e5:4f:0c:13:83:06:4f:3e: ce:de:9d:ea:30:ea:e8:17:4f:2e:03:d5:e7:60:f4: c3:2d:02:29:fb:aa:2e:02:4d:8b:af:43:07:a6:fc: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:C2:89:93:74:D3:7A:D0:1F:D9:03:F1:89:54:FD:5E:E4:6A:29 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:53:53:01:6c:44:94:86:dd:43:13:73:a5:72:2e:9f:69:fc: 50:a4:88:b5:bb:b0:e6:57:26:c9:d6:96:1d:46:f1:9c:c3:55: a1:a3:25:6a:7c:5e:75:59:3f:80:9b:ac:6c:c0:c6:a2:a2:2c: ca:0c:06:30:eb:35:52:14:24:26:9e:e1:d9:84:9f:7e:81:26: d1:be:57:a0:2b:5d:41:f1:0f:b9:08:7f:56:9a:d0:8b:af:b2: a5:eb:ab:90:0f:62:4f:b8:55:0c:26:48:ac:7a:01:a4:7e:38: ad:02:ec:9c:0d:cb:b1:db:e8:99:f5:1f:04:81:b3:ca:4f:b3: a3:d1:03:e3:2e:39:98:23:58:12:a8:a0:09:46:56:47:aa:c1: 27:52:e1:c5:8a:d5:ef:5b:49:60:14:02:58:05:0a:f3:08:e6: 15:74:2b:9a:dd:31:77:33:c4:d8:67:46:0e:27:6d:fd:e9:7c: 89:44:a9:79:d5:1f:bc:06:21:39:d7:3e:87:f5:c1:d7:d9:11: 0f:6f:67:61:fa:74:54:c7:3c:58:50:2c:7d:e5:88:5b:51:1d: 48:dc:f5:64:fa:24:db:95:13:81:c8:fc:e8:37:6f:18:42:a2: 6f:25:df:74:aa:18:32:26:d6:5f:0f:22:27:16:9b:7d:bb:a8: a4:fd:93:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjQwNDMwMjMwNDIyWhcNMjQwNTA3MjMwNDIyWjAYMRYwFAYD VQQDEw02NjMxNzhmNy04ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmf0LUz53xx8egtpgbq5JyKdBMrRns5vllfCjHK7j9WoPFNdmBK/vQsM9vLp wGroi5VmeTLlupOKn5CAs8Qemfckv7DACyFgPmCa/u1ErfGec+PNWBjQQ0DhJb/S 9ROGxokVq24oeraSRb+CfYb3CZYIg2faka2hWsIL3TDmGfWI/29P45uV3L228GOM n7woIp3p6C4wtyLlAlKONG0rwKs9W8oyGrOQIuouy/u4s609P28b+WfP0dRvbVqh PAzNJRHyd1ioExfL+JZencz+avL9ip5S0M8T5U8ME4MGTz7O3p3qMOroF08uA9Xn YPTDLQIp+6ouAk2Lr0MHpvw4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUswomT dNN60B/ZA/GJVP1e5GopMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0U1MBbESUht1DE3Olci6fafxQpIi1u7DmVybJ1pYdRvGcw1WhoyVq fF51WT+Am6xswMaioizKDAYw6zVSFCQmnuHZhJ9+gSbRvlegK11B8Q+5CH9WmtCL r7Kl66uQD2JPuFUMJkisegGkfjitAuycDcux2+iZ9R8EgbPKT7Oj0QPjLjmYI1gS qKAJRlZHqsEnUuHFitXvW0lgFAJYBQrzCOYVdCua3TF3M8TYZ0YOJ2396XyJRKl5 1R+8BiE51z6H9cHX2REPb2dh+nRUxzxYUCx95YhbUR1I3PVk+iTblROByPzoN28Y QqJvJd90qhgyJtZfDyInFpt9u6ik/ZOT -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:13 2024 by rpki-client on console-fra.rpki-client.org