$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft File: V1ikE1VlgvhZjh9F_GM3maex0Qc.mft (raw, json) Hash identifier: T0lDUzSxSCbQWbO6O2Sk39oL4401Del7VaCxBuMkI3E= Subject key identifier: 85:A8:FE:44:D9:3C:24:30:AC:4B:F4:62:17:6D:00:F9:90:E7:5F:A8 Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 Certificate issuer: /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Certificate serial: 0FD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft Manifest number: 0FCF Signing time: Mon 06 May 2024 18:08:07 +0000 Manifest this update: Mon 06 May 2024 18:08:07 +0000 Manifest next update: Mon 13 May 2024 18:08:07 +0000 Files and hashes: 1: V1ikE1VlgvhZjh9F_GM3maex0Qc.crl (hash: x1dGP5lSolnMnsr0Usqnf2L06SUJ/GeJxum8T3WCGg0=) 2: 8FA6DAE02C5B11E99B8B114EC4F9AE02.roa (hash: C8JsnhtWjYarCU9m/K8bGYnqYfArGmox1aAnINCcEgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Validity Not Before: May 6 18:08:07 2024 GMT Not After : May 13 18:08:07 2024 GMT Subject: CN=66391c87-ca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:ba:70:43:6b:98:58:a7:0d:90:a5:c2:30: ea:35:af:84:f3:0a:35:0a:28:02:ba:db:15:a7:47: e0:2c:d5:8a:82:85:71:c9:42:3f:65:91:83:7c:2a: 9f:47:ad:f0:7b:0a:d4:31:31:89:81:f1:d9:72:43: d1:d6:f3:1f:f3:8d:87:4c:a7:62:ac:54:0f:5c:6c: 69:3f:8e:9b:65:f0:e7:e0:9d:1e:0a:76:02:14:8e: b0:d6:f6:e1:bb:73:1f:f0:3b:a6:97:cc:50:a3:33: 00:52:99:a6:43:77:25:0f:b1:76:8e:6a:47:8a:5b: 7f:c5:8b:51:5a:47:27:9a:85:ad:b5:e7:58:1a:be: 4e:37:d6:e5:12:8d:7b:a7:cd:bc:d5:85:5b:b2:cd: 37:d2:97:35:27:01:16:f2:80:99:11:9f:98:10:ec: 26:00:43:1e:d3:76:e7:bd:30:cd:f5:b0:77:01:21: 89:99:a3:a8:63:10:9f:01:b9:a9:9c:d2:66:4e:5b: f3:99:80:00:72:9f:b0:e2:d0:47:3e:e8:bc:9d:88: cf:25:72:05:8b:3d:91:bc:ed:b6:71:0f:89:d8:e4: 91:5a:a1:e4:72:f7:bb:30:f0:c5:8f:88:fd:4c:02: 7f:1c:53:d2:b2:1e:25:c9:07:03:1c:a9:d7:96:c9: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A8:FE:44:D9:3C:24:30:AC:4B:F4:62:17:6D:00:F9:90:E7:5F:A8 X509v3 Authority Key Identifier: keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:ff:e7:cd:c3:00:ae:b2:28:d7:4e:d8:a1:6f:9f:2c:26:a3: 25:c0:4a:bd:2d:4f:fe:26:99:b2:7e:14:3c:72:c1:47:ad:df: 17:3a:c9:64:67:62:9e:6b:43:06:24:d6:3b:37:b3:45:7f:78: b6:aa:95:7f:91:40:2d:76:d9:77:8e:45:c7:02:19:01:1f:81: 8e:6b:ae:ba:78:9d:e9:bf:4e:1a:0f:cf:1b:4e:7f:e4:38:52: 6f:3d:33:39:ef:8b:e7:50:83:07:e9:9a:11:7e:a0:eb:f0:6a: 4e:79:20:ac:98:6d:9b:cc:0c:93:ed:a5:8c:1c:ad:91:1a:43: d9:85:56:76:d2:0a:29:8f:66:c6:b8:e6:f2:ad:e0:99:91:f0: f2:5f:4b:a0:16:72:a8:de:c9:fe:69:06:e5:fa:b3:df:4c:35: a7:c9:a6:94:80:de:de:92:b0:90:89:eb:90:3e:95:f1:3d:49: b6:7d:3a:67:44:25:7f:84:ac:2e:88:00:4c:3a:88:19:9a:13: b8:60:07:8b:3d:6d:cf:8b:fe:95:8d:1f:c4:ec:21:27:d3:55: 14:25:58:27:4c:5b:62:c9:d7:ed:64:16:d9:32:b2:5b:14:82: 0e:26:84:5f:4d:ee:6d:38:22:f5:f4:c9:0a:be:fe:c8:d5:64: 70:93:f5:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNUIxMTAvBgNVBAUTKDU3NThBNDEzNTU2NTgyRjg1OThFMUY0NUZDNjMzNzk5 QTdCMUQxMDcwHhcNMjQwNTA2MTgwODA3WhcNMjQwNTEzMTgwODA3WjAYMRYwFAYD VQQDEw02NjM5MWM4Ny1jYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1C6cENrmFinDZClwjDqNa+E8wo1CigCutsVp0fgLNWKgoVxyUI/ZZGDfCqf R63wewrUMTGJgfHZckPR1vMf842HTKdirFQPXGxpP46bZfDn4J0eCnYCFI6w1vbh u3Mf8Duml8xQozMAUpmmQ3clD7F2jmpHilt/xYtRWkcnmoWttedYGr5ON9blEo17 p8281YVbss030pc1JwEW8oCZEZ+YEOwmAEMe03bnvTDN9bB3ASGJmaOoYxCfAbmp nNJmTlvzmYAAcp+w4tBHPui8nYjPJXIFiz2RvO22cQ+J2OSRWqHkcve7MPDFj4j9 TAJ/HFPSsh4lyQcDHKnXlsl4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWo/kTZ PCQwrEv0YhdtAPmQ51+oMB8GA1UdIwQYMBaAFFdYpBNVZYL4WY4fRfxjN5mnsdEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA1Qi9CMzE5NjZDNDJD NUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2aFpqaDlGX0dNM21hZXgw UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YxaWtFMVZsZ3ZoWmpoOUZfR00zbWFleDBRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA1Qi9CMzE5NjZDNDJDNUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2 aFpqaDlGX0dNM21hZXgwUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2/+fNwwCusijXTtihb58sJqMlwEq9LU/+JpmyfhQ8csFHrd8XOslk Z2Kea0MGJNY7N7NFf3i2qpV/kUAtdtl3jkXHAhkBH4GOa666eJ3pv04aD88bTn/k OFJvPTM574vnUIMH6ZoRfqDr8GpOeSCsmG2bzAyT7aWMHK2RGkPZhVZ20gopj2bG uObyreCZkfDyX0ugFnKo3sn+aQbl+rPfTDWnyaaUgN7ekrCQieuQPpXxPUm2fTpn RCV/hKwuiABMOogZmhO4YAeLPW3Pi/6VjR/E7CEn01UUJVgnTFtiydftZBbZMrJb FIIOJoRfTe5tOCL19MkKvv7I1WRwk/Xc -----END CERTIFICATE-----Generated at Mon May 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org