$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: Fx8RL51ObrP3AkTFPKvWC+cuxyMA/8sSIcHZ3g85mSo= Subject key identifier: A9:96:04:18:F6:9E:7F:C3:CD:EE:96:19:53:E1:39:41:EA:DC:15:44 Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0A49 Signing time: Sun 28 Apr 2024 20:29:15 +0000 Manifest this update: Sun 28 Apr 2024 20:29:14 +0000 Manifest next update: Sun 05 May 2024 20:29:14 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: KTlo1O39kOw8aeU3yCbv8iHct5YkXDjNwhDDwd3rh0U=) 2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: g+xqKZFsnL+TO7xSR+PQGoS0YyQWuNz86DpXuBDB8s4=) 3: DE437646F8A911EB98242219C4F9AE02.roa (hash: omQtqSddlCkWWiLSp9GMYtV66m4WmeS8whg5yysD99c=) 4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: zu2QIibL8QZhnECTmI8ip0GGGoCl+/y5ToV7KXXOOtM=) 5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: 12zCL9VA2dm6feubL/xTZWfaPSOpA7NXqBN7mKSCVoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 18:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: Apr 28 20:29:14 2024 GMT Not After : May 5 20:29:14 2024 GMT Subject: CN=662eb19a-111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:16:de:38:1a:e1:0a:2d:62:1e:ee:fb:82:b4: 82:88:06:93:3d:72:a3:f9:8d:6f:9c:ef:a3:5a:d8: 32:0e:4d:cd:cf:ae:dc:cb:0f:71:64:8f:79:a6:21: f1:c0:4d:27:cb:ed:c6:42:af:34:69:b8:0d:f0:1b: d9:4c:d0:62:5f:74:a9:f2:65:72:b8:18:23:09:2a: 28:94:7e:55:94:6c:49:85:a2:9a:56:49:2e:62:78: 89:c7:8c:0d:ed:d9:e2:4b:f9:30:34:6e:f7:ef:36: 06:27:f4:d5:26:8d:48:51:b4:0b:59:a4:93:60:66: c7:01:22:79:e1:eb:2a:ba:30:7e:63:c8:50:12:e9: 20:6f:45:b1:4e:4a:c1:f7:f0:bf:b5:e8:09:75:00: ba:de:84:8d:87:e5:6a:4d:17:ce:f9:2a:03:42:a4: 85:38:03:3e:40:01:cd:ac:24:d2:f1:a6:8a:47:3f: c1:cd:94:5f:8c:eb:e3:20:44:72:2d:f1:73:bd:2c: 4d:2a:71:c1:2a:2d:5a:cf:4b:91:d4:62:3a:d9:14: ff:d5:ec:a0:07:c2:78:25:16:13:09:d4:72:07:26: c9:de:04:fb:e4:fd:19:f9:0f:8f:61:c9:50:a0:a2: 2f:f3:3d:73:0b:e4:48:b9:d0:02:3a:5f:e3:4b:8b: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:96:04:18:F6:9E:7F:C3:CD:EE:96:19:53:E1:39:41:EA:DC:15:44 X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:3a:92:c2:65:ae:8c:79:98:95:29:c8:76:b7:d3:86:d3: f2:83:9e:0a:a9:d2:49:9b:cc:ad:48:b9:0b:09:9f:db:9e:39: cc:f2:3d:1b:3e:01:df:28:43:ca:d2:0f:7e:45:0b:60:a2:f4: 2b:9f:e5:84:e5:80:f1:6d:70:f7:54:4b:b7:a0:62:b7:66:53: 10:0e:47:44:d9:e7:45:68:21:2c:55:72:4b:3d:21:72:68:c8: fe:a9:ad:46:b2:7f:c3:7b:41:ba:6c:b5:dd:5e:45:2c:4c:9d: 2c:c6:8f:2e:d9:f7:2d:2a:c2:cf:66:17:33:36:e5:39:41:c4: 5b:67:79:66:ec:f6:09:fe:5a:6a:6d:a0:33:32:88:45:af:8f: 36:f0:8e:64:55:0d:b1:ef:cf:93:46:50:65:f8:8e:b2:96:89: 2f:83:6b:85:53:11:ef:36:3d:f9:8f:6b:54:8e:f8:49:cd:12: 05:bf:d2:fa:a4:47:cb:89:da:e4:43:7b:7e:67:89:aa:b7:9f: 6c:93:7b:a3:da:35:61:01:22:6c:36:43:87:06:f7:9d:ae:a1: bc:ee:f2:77:4c:4a:88:fc:f7:e3:a0:09:87:04:20:90:2d:8c: 67:af:27:67:c5:01:fd:14:3c:21:c2:bc:90:96:0e:7c:f9:36: 93:86:ac:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjQwNDI4MjAyOTE0WhcNMjQwNTA1MjAyOTE0WjAYMRYwFAYD VQQDEw02NjJlYjE5YS0xMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RbeOBrhCi1iHu77grSCiAaTPXKj+Y1vnO+jWtgyDk3Nz67cyw9xZI95piHx wE0ny+3GQq80abgN8BvZTNBiX3Sp8mVyuBgjCSoolH5VlGxJhaKaVkkuYniJx4wN 7dniS/kwNG737zYGJ/TVJo1IUbQLWaSTYGbHASJ54esqujB+Y8hQEukgb0WxTkrB 9/C/tegJdQC63oSNh+VqTRfO+SoDQqSFOAM+QAHNrCTS8aaKRz/BzZRfjOvjIERy LfFzvSxNKnHBKi1az0uR1GI62RT/1eygB8J4JRYTCdRyBybJ3gT75P0Z+Q+PYclQ oKIv8z1zC+RIudACOl/jS4uZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmWBBj2 nn/Dze6WGVPhOUHq3BVEMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH/jqSwmWujHmYlSnIdrfThtPyg54KqdJJm8ytSLkLCZ/bnjnM8j0b PgHfKEPK0g9+RQtgovQrn+WE5YDxbXD3VEu3oGK3ZlMQDkdE2edFaCEsVXJLPSFy aMj+qa1Gsn/De0G6bLXdXkUsTJ0sxo8u2fctKsLPZhczNuU5QcRbZ3lm7PYJ/lpq baAzMohFr4828I5kVQ2x78+TRlBl+I6ylokvg2uFUxHvNj35j2tUjvhJzRIFv9L6 pEfLidrkQ3t+Z4mqt59sk3uj2jVhASJsNkOHBvedrqG87vJ3TEqI/PfjoAmHBCCQ LYxnrydnxQH9FDwhwryQlg58+TaThqyI -----END CERTIFICATE-----Generated at Sun Apr 28 21:21:18 2024 by rpki-client on console-fra.rpki-client.org