$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: x6T9sKdQyyrUnmQDGDkNuM3LCTTclz+RwYOWo0cAKec= Subject key identifier: 18:EB:4A:0D:AB:96:8F:B8:CA:27:35:28:66:05:BA:E2:C5:ED:88:D6 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 018A Signing time: Fri 03 May 2024 05:17:51 +0000 Manifest this update: Fri 03 May 2024 05:17:51 +0000 Manifest next update: Fri 10 May 2024 05:17:51 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: mFNAGw9WOMoO4s4YaUva1RdeGdT6A+629wHROlQzPTk=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: dkCYBmAm0OsNXUn60urmLpPiFKakWVNsJOBeAK9VAVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 04:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: May 3 05:17:51 2024 GMT Not After : May 10 05:17:51 2024 GMT Subject: CN=6634737f-48a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:dd:99:84:8e:f0:f6:97:26:8c:ee:5e:84: 37:d4:3a:63:9f:41:e2:81:1e:e1:9b:27:13:9b:0c: 12:c4:9f:5f:05:ec:c1:59:f8:38:2b:04:23:18:80: 69:20:28:96:48:6b:c0:67:6c:2b:68:14:9d:d1:a0: 5f:1e:92:04:9d:75:e1:06:ed:ae:b7:0a:4b:6a:a1: 44:30:79:e3:2a:ca:34:44:9e:25:ba:5f:10:20:0b: 1a:55:5c:56:b0:c5:a6:b3:09:a1:0a:c1:c2:ec:ed: 09:29:94:52:80:c6:89:3a:b3:7f:18:8a:85:09:d2: 71:5e:b1:61:d5:30:64:03:9b:c2:74:cc:0f:12:86: 7a:9d:0e:4e:b4:3a:c0:49:2e:55:31:9f:da:82:8e: eb:fe:56:c3:23:bd:99:bb:ac:9b:c8:7e:ef:d4:cb: da:09:b2:d1:d8:8f:f7:d5:74:c6:25:32:71:6c:10: 51:35:e8:c7:90:d2:d3:5c:fc:54:5e:74:e7:77:ba: 51:76:92:61:15:f0:5a:4e:5b:6d:f5:20:3c:b4:62: a6:e5:1a:cb:52:e9:34:a8:e7:33:10:d6:7d:83:59: 42:32:d1:d3:6d:b0:cb:d0:70:e2:79:27:3f:9e:22: cb:d5:7b:5f:fc:5b:89:5f:37:b0:90:ef:b2:5d:14: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EB:4A:0D:AB:96:8F:B8:CA:27:35:28:66:05:BA:E2:C5:ED:88:D6 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:20:5e:a4:8e:e3:f8:81:e5:5b:e3:31:50:08:dc:f7:27:49: e4:ef:83:c9:76:ec:0c:da:40:7d:b9:2d:90:61:b2:73:7d:78: 3c:05:41:9f:bf:43:a5:c8:6b:8d:b2:8e:58:89:a3:57:41:94: 62:de:c9:d2:b6:58:5b:18:f3:e3:1f:6e:66:fe:ea:0b:f5:db: a0:ab:93:60:39:c0:87:6f:e2:d7:2b:8d:3a:12:76:df:e3:df: 18:12:78:d6:d8:fe:05:fe:f5:9a:74:fb:90:fc:cb:9f:93:7d: 0a:93:11:3c:21:a2:43:ba:fe:8e:ed:9a:3d:e5:18:78:77:6e: 14:2a:89:27:93:44:4f:36:9e:6f:e8:bd:f7:f6:13:90:94:bd: b3:75:a9:3e:35:91:79:ec:a9:4f:d4:ff:1f:2d:d9:4f:9b:83: 1b:16:e2:90:21:54:19:2c:c5:de:76:e6:5e:a8:e1:dc:c1:28: b8:7f:fc:a8:64:a4:31:5a:cc:7f:f8:37:69:b3:59:5d:13:dd: 49:b4:af:ae:78:80:e6:c4:11:89:f5:20:03:eb:44:d9:7d:5b: d2:4b:43:ca:b3:76:55:f0:53:48:73:b6:82:c2:e1:f7:93:f5: ae:11:fe:5d:4b:92:3e:7f:9f:f3:4b:d3:7c:bf:a0:9f:25:a5: 87:0a:dd:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjQwNTAzMDUxNzUxWhcNMjQwNTEwMDUxNzUxWjAYMRYwFAYD VQQDEw02NjM0NzM3Zi00OGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycvdmYSO8PaXJozuXoQ31Dpjn0HigR7hmycTmwwSxJ9fBezBWfg4KwQjGIBp ICiWSGvAZ2wraBSd0aBfHpIEnXXhBu2utwpLaqFEMHnjKso0RJ4lul8QIAsaVVxW sMWmswmhCsHC7O0JKZRSgMaJOrN/GIqFCdJxXrFh1TBkA5vCdMwPEoZ6nQ5OtDrA SS5VMZ/ago7r/lbDI72Zu6ybyH7v1MvaCbLR2I/31XTGJTJxbBBRNejHkNLTXPxU XnTnd7pRdpJhFfBaTltt9SA8tGKm5RrLUuk0qOczENZ9g1lCMtHTbbDL0HDieSc/ niLL1Xtf/FuJXzewkO+yXRREjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjrSg2r lo+4yic1KGYFuuLF7YjWMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuIF6kjuP4geVb4zFQCNz3J0nk74PJduwM2kB9uS2QYbJzfXg8BUGf v0OlyGuNso5YiaNXQZRi3snStlhbGPPjH25m/uoL9dugq5NgOcCHb+LXK406Enbf 498YEnjW2P4F/vWadPuQ/Mufk30KkxE8IaJDuv6O7Zo95Rh4d24UKoknk0RPNp5v 6L339hOQlL2zdak+NZF57KlP1P8fLdlPm4MbFuKQIVQZLMXeduZeqOHcwSi4f/yo ZKQxWsx/+Ddps1ldE91JtK+ueIDmxBGJ9SAD60TZfVvSS0PKs3ZV8FNIc7aCwuH3 k/WuEf5dS5I+f5/zS9N8v6CfJaWHCt3E -----END CERTIFICATE-----Generated at Fri May 3 06:28:38 2024 by rpki-client on console-fra.rpki-client.org