$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: r9HTIFzrziYnS17n8eCej4rind4RavNE6D7/FrRHo+c= Subject key identifier: 91:B5:4F:65:4A:FE:FB:0C:D9:B1:AD:3F:52:2F:9F:40:EB:B5:F0:BD Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: 34 Signing time: Fri 17 May 2024 08:29:06 +0000 Manifest this update: Fri 17 May 2024 08:29:05 +0000 Manifest next update: Fri 24 May 2024 08:29:05 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: e7+W82dtzxyRhTOHtFhsn1Dk4L0WdwRuhnHJCzyyVsA=) 2: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: /tGBO2MLCus8PNWAAV5edOtrlC7E+7n4ZDxG8UW5xvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: May 17 08:29:05 2024 GMT Not After : May 24 08:29:05 2024 GMT Subject: CN=66471551-b689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:94:e2:d5:1e:06:65:d6:83:e5:d4:0f:86: 96:5e:23:a9:9f:7c:33:83:50:39:83:58:e3:11:76: b9:56:70:f4:d9:4a:d9:53:b0:b9:73:b0:aa:98:51: 0e:84:fe:ea:6e:b6:a8:6e:69:55:9d:a0:ac:cc:92: 49:1f:99:c1:59:1c:5e:d9:80:0c:ce:da:19:af:a4: 20:d4:ef:ca:91:8c:45:f8:e6:ea:ef:a9:1d:74:f3: 51:b2:02:f1:69:15:63:93:c9:a3:21:cd:7f:d4:2a: 8c:c3:c4:87:fd:23:36:06:d8:26:b0:01:5c:6e:96: 87:9c:d8:d5:57:16:35:48:4a:f7:a7:4a:d7:96:95: 19:8a:44:98:ba:f1:b0:6c:46:e0:d2:b9:c2:fb:3d: 29:32:0d:4c:e7:ca:48:84:a9:a2:8e:64:97:9e:c8: c0:02:21:3d:fa:ab:53:34:ef:2b:e3:3b:1c:31:4f: 3a:3f:b1:19:ae:04:f8:d7:a1:44:e5:6d:38:6c:bb: ed:09:44:e2:47:62:88:fb:e2:21:96:2f:f6:7c:15: fb:5d:95:48:86:92:fc:24:82:92:70:cf:f3:4e:3f: 71:11:1b:70:77:9a:0b:19:22:c8:a4:d8:a5:93:b6: 12:3a:e5:0f:e5:69:2b:0b:bc:ce:0d:ee:08:5f:5e: c8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:4F:65:4A:FE:FB:0C:D9:B1:AD:3F:52:2F:9F:40:EB:B5:F0:BD X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a6:59:62:a9:62:ed:70:d5:37:3c:72:a4:d2:97:82:4c:bb: ee:f5:24:37:d8:eb:02:ea:29:4d:74:2c:9c:39:16:92:e0:d0: 00:ca:2c:42:70:3a:b5:68:89:f3:09:fa:d1:a1:68:ec:77:3a: e9:6f:23:52:f0:df:80:3a:dd:60:1f:4a:e2:cb:79:01:49:14: 33:2e:06:58:a3:7b:e4:05:a6:9f:c5:08:05:53:67:27:a4:6b: b5:1c:7a:50:11:00:3b:a4:91:2f:71:df:2a:3f:e3:d9:e5:24: c1:73:bb:cb:ed:3b:bd:c4:91:00:ee:a3:fa:cd:fb:a9:03:55: 78:02:53:ce:1b:ca:42:6f:82:78:e0:17:5f:34:ff:74:42:a7: 90:d5:8e:6c:16:cf:68:20:71:54:0d:5c:d2:92:41:ac:fa:84: b8:ca:c8:09:02:d6:47:19:93:e7:d7:4a:47:6b:8d:5b:ea:42: 42:b5:d4:91:a0:1d:6c:d0:8c:78:59:0b:c1:91:ee:25:5a:28: fb:15:fd:23:50:25:62:d5:b4:d3:dc:7a:c1:3f:d1:e0:61:ea: 7c:7a:da:6a:19:e0:66:80:c3:fd:80:79:d6:e7:f8:06:f7:81: 9a:19:48:0b:38:92:57:08:25:2c:c6:d0:50:30:c8:b0:e7:21: 1a:aa:43:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFEQjExMC8GA1UEBRMoNDQzMTM2MzgxNUJDNUQwQkI3QTQyQjYxRDkyMzBCNERB RTIyQzUzQzAeFw0yNDA1MTcwODI5MDVaFw0yNDA1MjQwODI5MDVaMBgxFjAUBgNV BAMTDTY2NDcxNTUxLWI2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7gJTi1R4GZdaD5dQPhpZeI6mffDODUDmDWOMRdrlWcPTZStlTsLlzsKqYUQ6E /uputqhuaVWdoKzMkkkfmcFZHF7ZgAzO2hmvpCDU78qRjEX45urvqR1081GyAvFp FWOTyaMhzX/UKozDxIf9IzYG2CawAVxuloec2NVXFjVISvenSteWlRmKRJi68bBs RuDSucL7PSkyDUznykiEqaKOZJeeyMACIT36q1M07yvjOxwxTzo/sRmuBPjXoUTl bThsu+0JROJHYoj74iGWL/Z8FftdlUiGkvwkgpJwz/NOP3ERG3B3mgsZIsik2KWT thI65Q/laSsLvM4N7ghfXsjbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkbVPZUr+ +wzZsa0/Ui+fQOu18L0wHwYDVR0jBBgwFoAURDE2OBW8XQu3pCth2SMLTa4ixTww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QURCLzgxRjM4ODg2Qzc4 QzExRUU5N0U0MzgyRkM0RjlBRTAyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhU dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkRFMk9CVzhYUXUzcEN0aDJTTUxUYTRpeFR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QURCLzgxRjM4ODg2Qzc4QzExRUU5N0U0MzgyRkM0RjlBRTAyL1JERTJPQlc4WFF1 M3BDdGgyU01MVGE0aXhUdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6mWWKpYu1w1Tc8cqTSl4JMu+71JDfY6wLqKU10LJw5FpLg0ADKLEJw OrVoifMJ+tGhaOx3OulvI1Lw34A63WAfSuLLeQFJFDMuBlije+QFpp/FCAVTZyek a7UcelARADukkS9x3yo/49nlJMFzu8vtO73EkQDuo/rN+6kDVXgCU84bykJvgnjg F180/3RCp5DVjmwWz2ggcVQNXNKSQaz6hLjKyAkC1kcZk+fXSkdrjVvqQkK11JGg HWzQjHhZC8GR7iVaKPsV/SNQJWLVtNPcesE/0eBh6nx62moZ4GaAw/2Aedbn+Ab3 gZoZSAs4klcIJSzG0FAwyLDnIRqqQyw= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org