$ rpki-client -vvf rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft File: 36eHBr7lUhobW1FFcB5ZTzxdIJY.mft (raw, json) Hash identifier: 2lkdrIqohNyvjTR+VgRx4S16U+c/zcJu8irNnd4osjA= Subject key identifier: C8:3A:87:6B:12:24:B7:33:B7:23:34:1A:E5:5B:DE:36:47:32:58:2F Authority key identifier: DF:A7:87:06:BE:E5:52:1A:1B:5B:51:45:70:1E:59:4F:3C:5D:20:96 Certificate issuer: /CN=A914198D/serialNumber=DFA78706BEE5521A1B5B5145701E594F3C5D2096 Certificate serial: 17FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft Manifest number: 17F0 Signing time: Mon 06 May 2024 17:03:27 +0000 Manifest this update: Mon 06 May 2024 17:03:26 +0000 Manifest next update: Mon 13 May 2024 17:03:26 +0000 Files and hashes: 1: 36eHBr7lUhobW1FFcB5ZTzxdIJY.crl (hash: F1JakskIdfo2xHsjIlhhoTAyRMnpLq8ckjMwxWLH/Tw=) 2: EF1C408E00D011E984290942C4F9AE02.roa (hash: 0PAnzUInV03UZR5iN2dpuaK0+fI0pu22WXuMDgJpFwU=) 3: 86E59A2A92D511E7A23CEC7DC4F9AE02.roa (hash: WXJao2gsWrnx2NQP0EgrwNB/OMx3i5uACixQKSoC0WE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.crl rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6142 (0x17fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914198D/serialNumber=DFA78706BEE5521A1B5B5145701E594F3C5D2096 Validity Not Before: May 6 17:03:26 2024 GMT Not After : May 13 17:03:26 2024 GMT Subject: CN=66390d5e-e27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:d1:de:ae:e1:f6:5f:e1:88:d8:39:15:04: fe:03:d4:e5:b8:b1:f8:e9:05:f9:da:78:7f:6b:ea: 3c:51:2e:ab:1e:29:52:2e:bb:a6:71:f9:f7:35:6c: ce:02:92:59:92:00:a3:a9:1d:5c:d5:d4:51:77:0d: f4:4d:bb:37:84:f1:2d:7a:f6:73:e2:db:61:47:86: 41:ab:96:b4:1f:9d:f8:09:09:1e:08:83:9e:8c:39: 76:7e:e4:4c:b0:61:0f:da:10:0b:e0:c5:73:98:77: 00:8c:99:3e:2a:33:af:21:c0:19:9c:82:d4:d1:2c: 15:95:e4:5f:dc:93:6d:e4:35:40:a0:3a:de:c1:65: ac:1b:28:25:fd:41:7b:31:2b:ad:2e:7e:e3:e6:0c: 28:b1:f4:66:89:00:14:f9:30:58:2d:30:ed:1d:f6: cd:dc:55:1f:14:c2:8b:09:0c:23:59:63:19:e1:b8: f4:df:15:12:c7:28:43:0c:37:23:f7:9c:4e:95:cc: 11:67:67:a3:5b:ad:f9:64:7a:69:1f:0b:bf:72:64: aa:cf:58:42:9d:39:01:07:1e:b1:b1:2c:63:d0:7e: 98:77:a0:51:a2:89:60:10:48:5a:8b:71:cf:7f:4f: 46:c5:19:37:a6:c8:a2:d7:09:7d:55:46:c3:11:b0: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:87:6B:12:24:B7:33:B7:23:34:1A:E5:5B:DE:36:47:32:58:2F X509v3 Authority Key Identifier: keyid:DF:A7:87:06:BE:E5:52:1A:1B:5B:51:45:70:1E:59:4F:3C:5D:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e1:ff:bd:a8:06:9a:b8:86:8b:2d:a8:55:d2:be:89:9e:1c: 0e:fa:94:1e:3f:f9:53:70:1f:4c:9e:ef:dd:ce:e2:a9:ad:c4: f0:fd:bf:8b:ee:ec:c9:8e:58:e9:c4:65:76:b2:b8:fe:2a:0b: d5:b1:58:32:36:83:af:d7:f9:0b:9d:78:c5:2b:9a:a0:b4:18: 13:cc:77:de:05:24:ac:ee:05:dd:ed:17:e7:a4:8d:16:08:63: 18:2b:87:b6:6d:0e:81:5b:3e:ef:20:3b:72:3a:56:19:bd:e4: b6:07:b5:ff:5b:d0:73:45:a7:9e:7b:2e:e0:d9:3f:3a:a5:3b: 58:61:0f:88:69:f4:54:f0:e9:e8:f1:64:8f:dd:29:73:26:bb: c0:67:ab:9c:6a:37:08:9e:ed:ff:a8:42:5c:29:a5:77:e2:aa: 59:37:98:73:db:91:3e:cd:a7:1c:34:10:cc:0e:2b:ae:67:2a: d9:a6:ec:c4:b2:e1:3a:13:fd:af:46:61:e6:5e:24:39:be:2f: 03:0e:f7:b3:ac:5b:68:d2:3c:4a:9a:89:6a:3c:35:5c:1d:07: 99:84:95:2d:22:7f:ae:07:78:19:93:63:cf:ba:7c:a1:20:23: 35:6b:d6:7c:be:6f:e5:6d:52:3e:7f:d4:89:97:fa:e9:53:b6: d4:ee:cb:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5OEQxMTAvBgNVBAUTKERGQTc4NzA2QkVFNTUyMUExQjVCNTE0NTcwMUU1OTRG M0M1RDIwOTYwHhcNMjQwNTA2MTcwMzI2WhcNMjQwNTEzMTcwMzI2WjAYMRYwFAYD VQQDEw02NjM5MGQ1ZS1lMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVzR3q7h9l/hiNg5FQT+A9TluLH46QX52nh/a+o8US6rHilSLrumcfn3NWzO ApJZkgCjqR1c1dRRdw30Tbs3hPEtevZz4tthR4ZBq5a0H534CQkeCIOejDl2fuRM sGEP2hAL4MVzmHcAjJk+KjOvIcAZnILU0SwVleRf3JNt5DVAoDrewWWsGygl/UF7 MSutLn7j5gwosfRmiQAU+TBYLTDtHfbN3FUfFMKLCQwjWWMZ4bj03xUSxyhDDDcj 95xOlcwRZ2ejW635ZHppHwu/cmSqz1hCnTkBBx6xsSxj0H6Yd6BRoolgEEhai3HP f09GxRk3psii1wl9VUbDEbDVeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMg6h2sS JLcztyM0GuVb3jZHMlgvMB8GA1UdIwQYMBaAFN+nhwa+5VIaG1tRRXAeWU88XSCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk4RC9BQTVCOUJDQzky RDQxMUU3QUY1MjQ4N0RDNEY5QUUwMi8zNmVIQnI3bFVob2JXMUZGY0I1WlR6eGRJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2ZUhCcjdsVWhvYlcxRkZjQjVaVHp4ZElKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk4RC9BQTVCOUJDQzkyRDQxMUU3QUY1MjQ4N0RDNEY5QUUwMi8zNmVIQnI3bFVo b2JXMUZGY0I1WlR6eGRJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn4f+9qAaauIaLLahV0r6JnhwO+pQeP/lTcB9Mnu/dzuKprcTw/b+L 7uzJjljpxGV2srj+KgvVsVgyNoOv1/kLnXjFK5qgtBgTzHfeBSSs7gXd7RfnpI0W CGMYK4e2bQ6BWz7vIDtyOlYZveS2B7X/W9BzRaeeey7g2T86pTtYYQ+IafRU8Ono 8WSP3SlzJrvAZ6ucajcInu3/qEJcKaV34qpZN5hz25E+zaccNBDMDiuuZyrZpuzE suE6E/2vRmHmXiQ5vi8DDvezrFto0jxKmolqPDVcHQeZhJUtIn+uB3gZk2PPunyh ICM1a9Z8vm/lbVI+f9SJl/rpU7bU7ssZ -----END CERTIFICATE-----Generated at Mon May 6 17:35:36 2024 by rpki-client on console-fra.rpki-client.org