$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: zH5t7V04pUhiFRL43aI7rQfkRaxHzcU0wsIJYTmlEqE= Subject key identifier: 19:AB:DC:C3:57:BA:9E:E3:7C:5F:89:8A:FE:F3:3A:53:6D:F1:DA:18 Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: E8 Signing time: Sun 05 May 2024 05:55:25 +0000 Manifest this update: Sun 05 May 2024 05:55:24 +0000 Manifest next update: Sun 12 May 2024 05:55:24 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: cPqzjxfPfMo+73OVFbsvhDWa/gpuR0SoRsJjsLHgGV0=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: 2Op07hi0gck3bTcEY5wlvO1s8jP0w84WuRoBbdBbkUY=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: EyCl4wSC8mnS7IzmQgRitKZA5qj4kxNuNm5MRr5BJu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 05:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: May 5 05:55:24 2024 GMT Not After : May 12 05:55:24 2024 GMT Subject: CN=66371f4c-4d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:41:73:03:6b:34:64:a7:11:bf:0b:02:4a: c1:74:4c:e6:bb:20:e6:d3:61:c5:43:2a:af:7f:bc: 44:7c:3d:a7:c3:fb:df:4f:c5:cb:73:4b:5f:11:4a: c4:ef:07:ae:0f:56:1c:0b:be:ea:9e:34:d1:e1:4c: 14:e0:c3:e8:b0:c5:ee:89:3d:44:83:75:99:79:a0: 3d:e3:46:9e:5d:bd:a2:e3:ea:8c:1f:d9:9c:93:96: 90:32:b0:cf:d9:bb:ea:4e:a9:0b:a6:3b:91:18:ef: 88:df:29:1a:1e:09:12:76:5b:2d:7d:bc:43:64:d6: e2:39:5f:b7:59:a9:c2:18:bc:82:a8:5e:40:6f:c2: 19:a6:4a:68:2c:10:c8:7b:7e:08:33:ef:d8:da:f9: 14:d5:85:6c:4c:3d:66:57:ff:4a:24:0c:81:07:62: c0:0b:0b:b6:c0:ee:f6:86:d5:36:a8:e4:1d:86:70: 51:75:65:82:bf:9d:c6:4d:60:15:c1:1b:6d:6a:c2: 66:d4:60:71:e0:28:6d:65:35:ba:fb:ed:43:68:52: 7d:ff:0f:c1:fa:c7:1e:82:d1:a3:98:a2:7e:dd:9f: 7f:c8:ab:28:98:a9:26:ab:4a:8c:71:74:29:b5:92: 08:c7:fc:ee:be:8c:78:a8:41:b4:1b:ec:66:4c:6b: 6a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AB:DC:C3:57:BA:9E:E3:7C:5F:89:8A:FE:F3:3A:53:6D:F1:DA:18 X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a4:b7:26:dc:fb:a1:89:f0:44:29:db:b3:25:00:ba:1f:ae: d0:83:ec:3f:3f:3f:2a:52:f2:80:ef:62:79:df:c0:f2:cb:c1: 13:6a:4a:25:68:c0:e2:73:4b:08:83:8c:9b:96:bc:e5:4d:97: a2:b4:7c:e8:f1:76:c4:4a:dd:de:07:ee:3f:1d:a0:4a:b7:4a: 08:14:e8:f9:e3:02:4b:0d:21:54:f9:8c:50:ab:64:55:2b:b3: ca:44:6a:9d:b7:6a:00:21:7d:c2:d2:9c:a3:7b:73:00:3e:21: 03:ec:81:69:e4:ac:77:10:98:49:6c:2e:e9:7c:17:5d:30:1b: 60:61:66:e1:95:8d:21:21:28:a3:72:89:3c:2e:19:2a:69:59: ef:24:04:db:fc:5e:85:31:d4:e8:0c:db:1e:3a:14:01:0c:3c: 31:54:4a:a2:95:3d:f4:cf:7c:5e:6f:1f:fb:64:a5:56:ca:ba: fc:67:4d:35:4f:96:4e:e6:83:ab:52:c6:74:fa:f5:f5:d1:d3: bd:0e:47:0b:ed:ba:3c:6c:78:c8:16:99:60:4f:2b:d0:3c:ca: e1:f5:77:a8:39:b2:a4:c8:42:ac:ca:e5:56:ff:a7:0e:71:86: 85:25:7e:b2:1b:38:8d:19:e4:66:a5:07:1f:f4:a6:41:9e:20: c8:ac:ff:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjQwNTA1MDU1NTI0WhcNMjQwNTEyMDU1NTI0WjAYMRYwFAYD VQQDEw02NjM3MWY0Yy00ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMdBcwNrNGSnEb8LAkrBdEzmuyDm02HFQyqvf7xEfD2nw/vfT8XLc0tfEUrE 7weuD1YcC77qnjTR4UwU4MPosMXuiT1Eg3WZeaA940aeXb2i4+qMH9mck5aQMrDP 2bvqTqkLpjuRGO+I3ykaHgkSdlstfbxDZNbiOV+3WanCGLyCqF5Ab8IZpkpoLBDI e34IM+/Y2vkU1YVsTD1mV/9KJAyBB2LACwu2wO72htU2qOQdhnBRdWWCv53GTWAV wRttasJm1GBx4ChtZTW6++1DaFJ9/w/B+scegtGjmKJ+3Z9/yKsomKkmq0qMcXQp tZIIx/zuvox4qEG0G+xmTGtqbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmr3MNX up7jfF+Jiv7zOlNt8doYMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4pLcm3PuhifBEKduzJQC6H67Qg+w/Pz8qUvKA72J538Dyy8ETakol aMDic0sIg4yblrzlTZeitHzo8XbESt3eB+4/HaBKt0oIFOj54wJLDSFU+YxQq2RV K7PKRGqdt2oAIX3C0pyje3MAPiED7IFp5Kx3EJhJbC7pfBddMBtgYWbhlY0hISij cok8LhkqaVnvJATb/F6FMdToDNseOhQBDDwxVEqilT30z3xebx/7ZKVWyrr8Z001 T5ZO5oOrUsZ0+vX10dO9DkcL7bo8bHjIFplgTyvQPMrh9XeoObKkyEKsyuVW/6cO cYaFJX6yGziNGeRmpQcf9KZBniDIrP8s -----END CERTIFICATE-----Generated at Sun May 5 08:39:00 2024 by rpki-client on console-fra.rpki-client.org