$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json) Hash identifier: jt9jvnE+YilM1ImPWoPzfKpm5HenCUvElu/TMcgd5as= Subject key identifier: 3A:1F:90:45:E9:C1:9E:CA:6C:31:CC:20:E5:5A:D4:FD:74:0E:7A:13 Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 341E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft Manifest number: 33E4 Signing time: Thu 02 May 2024 14:54:37 +0000 Manifest this update: Thu 02 May 2024 14:54:37 +0000 Manifest next update: Thu 09 May 2024 14:54:37 +0000 Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: CF0wrwxUlIbKB2rSNGB7ypmag4nWBF0rop2hh5j5UP8=) 2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: GV1LKhLIllx4KrGR8UyypNOMyvIy/zUsEqLDzW97JMw=) 3: E652AA52C40911EBA930053BC4F9AE02.roa (hash: tqH9Un2UDszmR8TTYL+adBWN5K2iUpuV7XQkBpHV61Y=) 4: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: VAr1G71yJpcNgKgdCs9VOyqogJorWCSnG9gZgXnP6zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13342 (0x341e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: May 2 14:54:37 2024 GMT Not After : May 9 14:54:37 2024 GMT Subject: CN=6633a92d-baf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:ab:11:0a:f6:79:36:33:90:7d:b4:c2:90: 9b:9d:69:b5:e4:3f:17:f2:ee:97:51:5a:fa:43:ae: 3e:5e:a2:b3:a9:eb:96:f3:9b:33:30:f1:cd:e8:cb: 30:d0:59:7f:72:40:1d:00:2c:6e:3c:56:e2:46:89: 3e:8c:86:51:1b:c8:01:a1:04:8a:de:16:3d:17:ac: ee:14:ee:49:a0:16:f1:4d:10:18:80:29:ec:d3:55: 4e:d1:3f:80:34:19:72:b6:a8:62:52:9a:fe:52:c4: 00:ad:62:fb:a6:08:7e:70:98:35:3d:62:8a:e3:64: 5f:79:a0:9e:42:14:d8:1d:d0:ed:28:05:d2:15:d2: 42:0b:bc:6d:5f:8a:f2:d0:79:c7:4d:7d:c1:3b:18: d8:24:c7:6f:eb:28:09:64:6a:9c:88:27:c3:6c:b7: ce:d2:ec:f3:6d:84:56:4a:9a:25:14:f6:94:56:cf: ef:88:86:bb:b9:c7:5c:23:cf:cf:9f:76:9f:42:5e: 9e:00:86:27:a0:25:4c:dc:99:5f:e1:9f:41:ec:87: fc:57:ab:d2:41:e1:09:35:ea:1d:ce:ad:9b:be:b1: 9d:13:54:26:1a:92:68:e0:e9:37:66:df:18:19:20: 55:d3:5e:3d:66:dd:03:62:be:bf:08:95:0b:97:3c: 46:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1F:90:45:E9:C1:9E:CA:6C:31:CC:20:E5:5A:D4:FD:74:0E:7A:13 X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:70:ff:23:03:eb:27:6b:cc:7d:ab:a0:87:78:38:b8:51:b4: f1:01:dc:db:1b:38:d9:65:26:04:68:fa:ac:b6:29:c4:31:35: fe:c3:04:a7:17:4b:03:be:f1:76:5f:aa:b4:5a:cd:c9:f5:61: 31:3d:3b:8b:db:07:f1:30:a3:5a:78:26:d1:e7:49:9c:aa:75: 0c:d5:cd:6d:af:d0:5d:25:a6:f0:50:06:5d:67:4b:89:19:5d: 71:f1:f5:57:5d:d1:6d:20:84:9d:cb:65:1d:75:4f:a3:72:8b: 84:b8:de:75:57:b8:73:2c:58:8b:ee:62:2e:ef:6d:89:e1:46: ad:b3:4f:0f:48:30:93:e9:ab:ac:a1:ff:15:8a:a2:8d:dc:c5: 83:09:ed:30:4b:bb:6c:29:83:de:32:ca:f1:52:ef:8d:69:f7: 87:44:18:7a:29:57:60:3a:ca:ba:35:8b:cd:1a:8b:f9:40:d8: 77:95:7d:e5:e8:4c:35:8a:37:14:07:13:e3:13:ca:d2:03:80: d8:a6:f4:95:59:c0:03:d6:7d:dc:5c:47:08:02:5d:79:d9:ec: e0:5c:07:de:f2:d7:6b:75:05:f3:11:ab:49:97:1f:3e:44:e9: c2:24:b9:0f:cb:27:60:33:81:72:68:52:4e:e4:8f:56:87:82: 8a:1a:57:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjQwNTAyMTQ1NDM3WhcNMjQwNTA5MTQ1NDM3WjAYMRYwFAYD VQQDEw02NjMzYTkyZC1iYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkSrEQr2eTYzkH20wpCbnWm15D8X8u6XUVr6Q64+XqKzqeuW85szMPHN6Msw 0Fl/ckAdACxuPFbiRok+jIZRG8gBoQSK3hY9F6zuFO5JoBbxTRAYgCns01VO0T+A NBlytqhiUpr+UsQArWL7pgh+cJg1PWKK42RfeaCeQhTYHdDtKAXSFdJCC7xtX4ry 0HnHTX3BOxjYJMdv6ygJZGqciCfDbLfO0uzzbYRWSpolFPaUVs/viIa7ucdcI8/P n3afQl6eAIYnoCVM3Jlf4Z9B7If8V6vSQeEJNeodzq2bvrGdE1QmGpJo4Ok3Zt8Y GSBV0149Zt0DYr6/CJULlzxGewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDofkEXp wZ7KbDHMIOVa1P10DnoTMB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhcP8jA+sna8x9q6CHeDi4UbTxAdzbGzjZZSYEaPqstinEMTX+wwSn F0sDvvF2X6q0Ws3J9WExPTuL2wfxMKNaeCbR50mcqnUM1c1tr9BdJabwUAZdZ0uJ GV1x8fVXXdFtIISdy2UddU+jcouEuN51V7hzLFiL7mIu722J4Uats08PSDCT6aus of8ViqKN3MWDCe0wS7tsKYPeMsrxUu+NafeHRBh6KVdgOsq6NYvNGov5QNh3lX3l 6Ew1ijcUBxPjE8rSA4DYpvSVWcAD1n3cXEcIAl152ezgXAfe8tdrdQXzEatJlx8+ ROnCJLkPyydgM4FyaFJO5I9Wh4KKGlc7 -----END CERTIFICATE-----Generated at Thu May 2 17:43:05 2024 by rpki-client on console-fra.rpki-client.org