$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json) Hash identifier: RVfwe78YvDvdkGNxxjc6tW7gs0ZtZFEPmeE+MxmQT3o= Subject key identifier: 21:3F:92:05:60:C3:1A:64:2F:AC:1F:2C:42:E1:B5:AA:7A:FE:72:B6 Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft Manifest number: 0ABD Signing time: Sat 04 May 2024 20:19:05 +0000 Manifest this update: Sat 04 May 2024 20:19:04 +0000 Manifest next update: Sat 11 May 2024 20:19:04 +0000 Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: 1WIl30R8OGl3znjk1dVcnyDW2KyzKugXt/xxQTqLMHY=) 2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: uV9ovSGC0wHvpQKaTEXkbnE4a7P7iDDKlXRSZRT22dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Validity Not Before: May 4 20:19:04 2024 GMT Not After : May 11 20:19:04 2024 GMT Subject: CN=66369839-9d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:1f:73:58:c6:fe:76:fa:58:00:57:20:17: d9:0f:c2:77:a2:ec:80:52:4b:f4:19:64:db:3a:7e: 2c:e4:b8:77:cb:3f:b4:c4:46:ad:33:c5:8d:2a:4a: 2a:f0:46:0a:f9:f8:1a:62:92:f3:49:7f:35:e5:57: 60:e1:f6:92:91:4a:a7:e2:32:a1:66:bf:91:e9:82: 61:bf:e3:42:d5:db:e5:c7:18:0f:d5:90:4e:23:9f: 6a:a9:e3:4d:b4:3f:2f:d4:56:a3:db:0a:13:27:95: 2d:72:9e:67:9c:25:55:8e:25:f4:49:91:bf:32:f5: 6e:73:35:ea:2f:20:1a:84:d5:8a:bc:af:31:91:31: 40:e0:c0:a4:36:b0:5e:b2:55:e8:10:27:b7:6e:55: 46:93:a5:0a:09:74:96:67:d1:fe:39:fc:5e:e3:f7: 0e:e0:84:c0:2e:7e:95:0d:c1:a2:d9:a5:b8:82:39: 1f:01:f2:5a:55:2b:83:90:95:26:8f:1b:fd:e1:5e: d8:ed:1a:2c:7f:c8:b7:9f:99:f8:3f:af:2e:2e:e3: 80:73:06:3f:eb:a2:f0:00:eb:75:b2:4d:14:45:3b: 00:49:ed:c1:ee:8a:30:e6:e1:6d:6e:6f:a7:ed:6c: 9f:42:e3:de:5d:52:32:9c:9a:3c:bf:a5:ec:f4:d6: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3F:92:05:60:C3:1A:64:2F:AC:1F:2C:42:E1:B5:AA:7A:FE:72:B6 X509v3 Authority Key Identifier: keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bb:4c:8f:06:0d:10:f5:96:8c:88:b3:3c:11:29:82:00:21: 1c:99:17:4f:dd:a8:06:9e:ba:34:99:92:0a:1c:f1:f2:f6:67: f4:55:50:76:9c:36:17:ef:6a:6f:71:61:16:4d:c9:49:b7:e0: d4:de:9a:0e:38:19:fe:f7:c9:02:42:8f:ab:d5:e9:9b:a5:1d: 6e:b8:45:29:ce:a8:37:9c:64:90:73:06:68:d4:1f:66:b7:87: ee:3c:1e:e8:ba:07:64:34:6b:c5:29:6a:91:a9:f4:fb:75:fa: c8:8d:32:7b:5d:bc:b5:74:f6:da:22:7d:cf:a2:da:fc:0e:c8: b7:89:08:d7:2d:c6:be:b2:b3:51:93:22:91:08:25:31:aa:ba: d6:d2:a2:8d:67:09:f8:ce:67:38:59:ac:71:67:c7:1f:f3:e9: 91:30:40:b7:00:a1:44:04:20:01:00:eb:14:88:87:fe:20:f8: 83:0b:58:a0:45:95:02:9b:0f:6c:a3:6c:74:04:d3:0b:ea:a8: 9b:eb:c9:cb:6b:d4:b4:67:65:23:11:92:87:54:d3:22:d3:ed: bd:2d:2b:58:e4:33:fd:d1:b9:40:52:fe:fe:9b:4f:cd:9b:ea: d9:32:15:a4:83:91:13:61:27:6e:3d:1b:ca:e1:62:cc:82:c1: 87:5f:4f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF QTQ3NDUzNDYwHhcNMjQwNTA0MjAxOTA0WhcNMjQwNTExMjAxOTA0WjAYMRYwFAYD VQQDEw02NjM2OTgzOS05ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bIfc1jG/nb6WABXIBfZD8J3ouyAUkv0GWTbOn4s5Lh3yz+0xEatM8WNKkoq 8EYK+fgaYpLzSX815Vdg4faSkUqn4jKhZr+R6YJhv+NC1dvlxxgP1ZBOI59qqeNN tD8v1Faj2woTJ5Utcp5nnCVVjiX0SZG/MvVuczXqLyAahNWKvK8xkTFA4MCkNrBe slXoECe3blVGk6UKCXSWZ9H+Ofxe4/cO4ITALn6VDcGi2aW4gjkfAfJaVSuDkJUm jxv94V7Y7Rosf8i3n5n4P68uLuOAcwY/66LwAOt1sk0URTsASe3B7oow5uFtbm+n 7WyfQuPeXVIynJo8v6Xs9NYnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCE/kgVg wxpkL6wfLELhtap6/nK2MB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvu0yPBg0Q9ZaMiLM8ESmCACEcmRdP3agGnro0mZIKHPHy9mf0VVB2 nDYX72pvcWEWTclJt+DU3poOOBn+98kCQo+r1embpR1uuEUpzqg3nGSQcwZo1B9m t4fuPB7ougdkNGvFKWqRqfT7dfrIjTJ7Xby1dPbaIn3Potr8Dsi3iQjXLca+srNR kyKRCCUxqrrW0qKNZwn4zmc4WaxxZ8cf8+mRMEC3AKFEBCABAOsUiIf+IPiDC1ig RZUCmw9so2x0BNML6qib68nLa9S0Z2UjEZKHVNMi0+29LStY5DP90blAUv7+m0/N m+rZMhWkg5ETYSduPRvK4WLMgsGHX08w -----END CERTIFICATE-----Generated at Sat May 4 21:32:57 2024 by rpki-client on console-fra.rpki-client.org