$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: aNN1HnRkitx3kNVcRjvwmIz1wke5JW4w2+bIVmYk1GI= Subject key identifier: 03:7F:E5:5F:94:44:2C:DE:E7:AE:1C:57:CB:9B:0D:EE:FC:C5:08:3B Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 077F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 33C4 Signing time: Thu 16 May 2024 16:29:17 +0000 Manifest this update: Thu 16 May 2024 16:29:16 +0000 Manifest next update: Thu 23 May 2024 16:29:16 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: VOeVz9VI4hyKXOPLPU9a4vmrQgFqIHy73/nAoetLbHQ=) 2: 8595A74A373C11ECA3E8C51BC4F9AE02.roa (hash: dPIqo4SfnF0pTBWcFiAb5cvG3ZeCwMdprc83SWH640M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: May 16 16:29:16 2024 GMT Not After : May 23 16:29:16 2024 GMT Subject: CN=6646345d-3ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:06:77:cf:a0:39:b3:fa:19:b8:84:eb:5e: f9:19:18:85:eb:2b:12:03:59:8f:c2:0f:25:9b:77: 33:2c:ab:dd:f5:e2:31:d5:2d:f7:24:f8:01:1c:84: 79:9a:0c:42:14:ae:a9:db:f9:c6:cd:1a:b3:f6:f9: 03:67:b4:d9:01:aa:03:68:aa:62:33:38:99:52:bb: 6e:7d:ae:cf:60:b7:01:47:2a:89:c7:6a:9a:b3:5c: 97:ea:29:57:0a:4c:ea:cf:8f:b5:c2:85:29:34:36: 65:fb:dd:bf:b8:3e:ff:05:27:72:61:7c:f5:1d:37: 98:8f:de:d4:b7:ad:79:ad:2a:ed:12:b5:a0:9d:e4: 9a:01:fc:5e:f4:dd:55:d5:14:ab:04:7a:2e:5e:94: 3b:0e:30:c7:1f:46:74:f9:a6:97:a6:f0:80:f2:8b: 32:7a:9b:95:90:b9:a6:ca:a4:c7:4b:05:ba:84:e0: 59:c2:38:a5:b4:bb:23:0d:21:22:98:ff:b5:b2:c6: ae:6a:67:13:3e:69:4f:62:4a:a4:77:de:73:3a:4c: 86:41:3f:3c:d6:11:5a:cc:4e:ba:60:28:d2:f4:0e: 69:4d:5c:2a:8a:ff:c5:83:f3:d3:71:a2:8a:fc:15: 08:de:18:7d:69:6c:f7:d0:77:b8:79:c8:77:15:7b: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:E5:5F:94:44:2C:DE:E7:AE:1C:57:CB:9B:0D:EE:FC:C5:08:3B X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5b:ee:42:b4:48:e7:b6:6b:29:48:4a:58:a7:c9:60:0f:65: 6a:5a:41:12:ca:82:ed:e1:42:8b:94:1e:49:85:49:39:b3:b9: 4c:e6:b5:44:bb:8c:20:eb:37:eb:aa:3d:c8:7f:dc:51:df:12: 5b:ae:40:d8:41:db:1c:66:99:46:ba:a0:36:9f:27:9a:17:fb: 3e:3f:71:71:5a:b5:15:14:c2:8d:41:79:7e:31:62:22:2c:c4: fe:f2:b8:d0:33:bb:1f:f6:4c:40:82:bd:b7:41:1f:fd:f0:29: 90:46:97:65:1d:03:1a:f7:4b:ed:ed:f7:f7:2f:1b:84:80:0f: 75:f7:32:35:0e:35:3f:4e:30:32:03:74:ca:ea:92:ab:16:c0: 12:c5:d5:7e:c6:d0:eb:fa:44:de:9c:09:db:1f:63:3b:83:c6: 96:c5:de:6d:bb:a4:81:57:e9:b3:75:f9:fb:d3:15:9f:49:c4: d4:ee:ee:d8:44:6e:99:1b:4e:a0:87:67:30:fc:3d:7f:66:67: 05:15:c4:bc:9c:07:d1:6c:f7:93:a5:56:90:5a:73:78:f3:56: d8:14:4e:2c:43:07:9b:3d:24:cc:26:08:bb:d8:dc:52:db:a2: 9e:ad:23:9c:8e:d2:1b:e6:e3:cf:e1:c6:15:13:1c:c9:17:bc: 59:44:36:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjQwNTE2MTYyOTE2WhcNMjQwNTIzMTYyOTE2WjAYMRYwFAYD VQQDEw02NjQ2MzQ1ZC0zZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GgGd8+gObP6GbiE6175GRiF6ysSA1mPwg8lm3czLKvd9eIx1S33JPgBHIR5 mgxCFK6p2/nGzRqz9vkDZ7TZAaoDaKpiMziZUrtufa7PYLcBRyqJx2qas1yX6ilX Ckzqz4+1woUpNDZl+92/uD7/BSdyYXz1HTeYj97Ut615rSrtErWgneSaAfxe9N1V 1RSrBHouXpQ7DjDHH0Z0+aaXpvCA8osyepuVkLmmyqTHSwW6hOBZwjiltLsjDSEi mP+1ssauamcTPmlPYkqkd95zOkyGQT881hFazE66YCjS9A5pTVwqiv/Fg/PTcaKK /BUI3hh9aWz30He4ech3FXt/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN/5V+U RCze564cV8ubDe78xQg7MB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfW+5CtEjntmspSEpYp8lgD2VqWkESyoLt4UKLlB5JhUk5s7lM5rVE u4wg6zfrqj3If9xR3xJbrkDYQdscZplGuqA2nyeaF/s+P3FxWrUVFMKNQXl+MWIi LMT+8rjQM7sf9kxAgr23QR/98CmQRpdlHQMa90vt7ff3LxuEgA919zI1DjU/TjAy A3TK6pKrFsASxdV+xtDr+kTenAnbH2M7g8aWxd5tu6SBV+mzdfn70xWfScTU7u7Y RG6ZG06gh2cw/D1/ZmcFFcS8nAfRbPeTpVaQWnN481bYFE4sQwebPSTMJgi72NxS 26KerSOcjtIb5uPP4cYVExzJF7xZRDbr -----END CERTIFICATE-----Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org