$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: ggpJptSY8MM4tFAQKIoFf3DbOzzmAHCO6fBPtSp1MaM= Subject key identifier: E8:0B:96:C8:CB:13:52:1D:DA:31:F0:33:5D:68:D7:6C:8B:3F:37:3C Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 050E Signing time: Sun 05 May 2024 01:16:42 +0000 Manifest this update: Sun 05 May 2024 01:16:42 +0000 Manifest next update: Sun 12 May 2024 01:16:42 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: AiRgQ1Rti9sD+lAW2owDlHWiWIhn7fGAqxAn3H9q7oU=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: kDKwD/o86ergDXAe0NyatKAKI9UEO3SoFPYlDX2xkxo=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: ea+xnebDiK5/cG8Dnkc9U+weTXeQAajoIL5rsjmuAH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: May 5 01:16:42 2024 GMT Not After : May 12 01:16:42 2024 GMT Subject: CN=6636ddfa-3211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:4a:25:50:14:69:0f:6b:8c:66:09:dd:4b: 76:e9:8d:32:16:21:df:d7:66:2e:5b:86:5b:67:a4: 31:fa:fe:77:fe:8f:4a:7d:48:bf:b4:46:68:66:63: f2:af:52:b2:5b:ce:e7:8a:4d:62:62:45:8c:d9:37: 17:9f:c8:8c:c4:6d:d0:25:de:10:14:14:6f:47:a8: ce:a9:fa:14:4d:1a:e2:c1:83:9b:21:7e:83:e3:d3: 6b:34:d1:84:07:c2:c2:3f:49:7a:04:ce:a3:81:e2: 8b:fe:5f:b2:f0:0e:b1:63:1f:bd:44:63:19:66:c2: 43:2e:2b:13:ee:61:01:86:9b:a5:7a:d6:dc:67:41: e9:23:05:0c:57:fc:d0:7e:a2:69:b1:94:35:3f:81: e1:27:54:9d:43:a6:c6:bc:c1:d3:80:08:13:d3:ea: e2:c9:a7:17:7e:4d:67:a3:cd:9b:81:7a:aa:7e:46: 15:64:40:8a:dd:62:4d:84:c2:b4:fb:78:82:2e:a8: 3b:1a:1d:73:24:76:b9:d9:a6:1b:f7:b0:26:f8:3c: 3b:de:f8:fc:27:dc:53:82:29:04:84:4a:69:22:d6: 91:4c:34:95:70:8c:c7:98:e7:9e:38:ed:76:1b:06: f7:1e:39:cb:63:e6:df:5c:6c:27:a6:0d:dd:49:fe: 5b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0B:96:C8:CB:13:52:1D:DA:31:F0:33:5D:68:D7:6C:8B:3F:37:3C X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ea:58:09:75:4c:c8:95:66:fa:23:6f:86:34:73:b9:59:ca: 88:5e:16:5d:86:f3:e0:4a:d3:54:9e:00:13:ee:6c:90:78:e3: 2e:70:5b:13:63:a6:62:f2:fb:84:1f:5f:e0:88:e5:1a:8d:40: 35:43:8d:e7:dd:1d:52:08:5d:ff:cd:fc:28:61:82:d1:1e:ef: c5:e5:96:20:16:06:18:94:61:ac:e8:e4:7c:19:4d:b6:f0:95: e8:18:02:aa:aa:1e:10:6c:c3:41:0d:30:b3:f9:43:23:75:ad: 35:1b:4f:e6:1e:d4:b8:19:08:d0:c0:f5:ef:4b:5d:79:89:56: 7f:99:a5:1f:e2:b5:de:fb:cd:9e:7f:44:c8:83:4e:44:3f:98: 4d:e0:61:6e:a2:b5:db:4e:3c:db:fd:86:b7:4f:3e:c5:58:5f: 37:fe:f6:c8:49:ee:65:86:48:f6:06:6e:80:67:c7:a4:a2:91: 78:00:c6:07:a1:97:d9:52:32:67:5f:b6:33:4d:d7:ce:1e:07: 10:7a:e7:e6:fe:ee:04:8a:92:d4:b8:63:6b:ad:63:a7:83:81: 85:5f:ec:a1:67:ec:3d:8f:76:5f:73:b3:64:22:d8:a2:21:30: dc:41:f2:45:a9:37:a0:d3:c6:a6:1c:b8:a3:0e:e1:7b:51:e2: 9b:65:0e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjQwNTA1MDExNjQyWhcNMjQwNTEyMDExNjQyWjAYMRYwFAYD VQQDEw02NjM2ZGRmYS0zMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoNKJVAUaQ9rjGYJ3Ut26Y0yFiHf12YuW4ZbZ6Qx+v53/o9KfUi/tEZoZmPy r1KyW87nik1iYkWM2TcXn8iMxG3QJd4QFBRvR6jOqfoUTRriwYObIX6D49NrNNGE B8LCP0l6BM6jgeKL/l+y8A6xYx+9RGMZZsJDLisT7mEBhpuletbcZ0HpIwUMV/zQ fqJpsZQ1P4HhJ1SdQ6bGvMHTgAgT0+riyacXfk1no82bgXqqfkYVZECK3WJNhMK0 +3iCLqg7Gh1zJHa52aYb97Am+Dw73vj8J9xTgikEhEppItaRTDSVcIzHmOeeOO12 Gwb3HjnLY+bfXGwnpg3dSf5b6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgLlsjL E1Id2jHwM11o12yLPzc8MB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM6lgJdUzIlWb6I2+GNHO5WcqIXhZdhvPgStNUngAT7myQeOMucFsT Y6Zi8vuEH1/giOUajUA1Q43n3R1SCF3/zfwoYYLRHu/F5ZYgFgYYlGGs6OR8GU22 8JXoGAKqqh4QbMNBDTCz+UMjda01G0/mHtS4GQjQwPXvS115iVZ/maUf4rXe+82e f0TIg05EP5hN4GFuorXbTjzb/Ya3Tz7FWF83/vbISe5lhkj2Bm6AZ8ekopF4AMYH oZfZUjJnX7YzTdfOHgcQeufm/u4EipLUuGNrrWOng4GFX+yhZ+w9j3Zfc7NkItii ITDcQfJFqTeg08amHLijDuF7UeKbZQ60 -----END CERTIFICATE-----Generated at Sun May 5 02:33:34 2024 by rpki-client on console-fra.rpki-client.org