$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: RUV2o8SLdKGcPciuS0jalwavMCQN6jtAd3303cL8Sp4= Subject key identifier: 9A:94:A8:86:7F:75:58:1F:C0:A7:E3:96:01:8D:85:EA:33:59:EE:4D Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 1789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 177D Signing time: Sun 28 Apr 2024 17:00:47 +0000 Manifest this update: Sun 28 Apr 2024 17:00:47 +0000 Manifest next update: Sun 05 May 2024 17:00:47 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: cgq5hnQkoGpkoHiIAlvZfJySA1/QSELu3zJi4H22rDI=) 2: 65F89850A96711E79BECEA42C4F9AE02.roa (hash: PZ7XnBrJz/a7vzH5LB2fdLCKyMtJ6Vj9A+2dGf6LXe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6025 (0x1789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: Apr 28 17:00:47 2024 GMT Not After : May 5 17:00:47 2024 GMT Subject: CN=662e80bf-21c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:42:cb:3e:31:f5:7a:fd:67:2a:2a:10:91: 24:8b:a1:62:98:b1:36:54:e8:ff:7b:59:d7:4e:10: 26:01:33:06:2b:52:08:a2:4f:f5:57:e3:fb:ba:af: da:ef:c7:66:2a:d2:4e:b6:5b:a1:58:23:c2:e4:a3: 4f:41:5f:3b:57:90:7c:7c:86:51:4c:dd:61:82:8e: 98:a4:32:ae:c4:18:e9:c6:a8:34:57:be:a4:72:a7: c8:f6:70:b3:8e:ec:7b:d1:a6:de:11:0e:31:8f:b3: 04:99:32:ba:ed:e9:78:f8:68:80:e5:27:ac:72:e5: d0:8f:69:55:d8:c2:b1:ed:7f:69:69:59:a7:f3:ee: ce:ef:86:09:0c:5a:2c:af:f9:00:73:75:b1:71:6e: ae:ff:00:fa:ec:f7:ab:f0:5e:72:c9:4a:0c:12:ef: 6b:1e:3d:79:04:74:ec:80:ca:bc:a0:77:c3:ba:c7: bc:af:58:7c:73:39:15:21:a2:01:00:e9:06:32:54: f4:41:cf:84:7f:e0:90:49:1f:c3:c9:db:1a:7c:a1: ca:58:42:89:a0:07:8d:d2:53:db:f9:91:9c:d7:2e: 31:60:c9:3f:23:e7:13:f0:85:f4:c2:77:34:5f:37: 8d:1e:d4:06:39:0c:99:79:97:87:8c:d3:42:a8:13: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:94:A8:86:7F:75:58:1F:C0:A7:E3:96:01:8D:85:EA:33:59:EE:4D X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e9:30:74:61:b8:ec:68:04:88:98:ae:1d:be:dc:db:7a:e5: 22:2e:4d:b8:66:a9:23:98:8d:4c:b9:0d:49:dc:24:a0:a8:87: d0:12:25:2b:85:31:96:b4:b4:3a:5f:05:15:b7:3e:c9:bf:ad: ca:c7:7c:dc:e6:c4:55:f8:c5:12:b3:86:e0:3b:74:46:2e:a3: 26:c6:df:d7:19:68:3b:43:e6:2c:42:9e:79:5a:09:be:c4:29: 8d:24:2f:ee:85:1c:18:1c:d1:96:50:bd:98:9c:36:6c:57:de: 15:1f:7f:de:0a:ea:07:82:cd:ed:5c:17:85:71:f6:2e:e7:46: 3c:1e:6f:f0:bd:28:96:d0:ab:76:56:6e:ea:88:a7:f7:4b:46: 25:50:45:bb:0e:f1:db:87:19:d9:c4:bc:ee:39:f8:3b:ca:4c: c2:32:5a:4b:f5:6e:f4:cd:d2:67:1e:f7:0e:89:4d:5a:a6:dc: 23:d6:d1:55:1a:1d:ac:6f:8e:01:d4:71:01:b5:a5:fb:24:03: 0f:3e:00:84:9c:af:1a:6d:7c:85:93:fd:3b:0f:3f:ed:6f:3f: 79:fe:25:3b:6d:bf:ea:3e:1f:02:e0:f5:29:11:66:20:8b:a4: cb:37:15:20:31:48:bb:39:77:c7:ab:83:22:12:99:54:92:6c: 78:68:b0:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjQwNDI4MTcwMDQ3WhcNMjQwNTA1MTcwMDQ3WjAYMRYwFAYD VQQDEw02NjJlODBiZi0yMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFtCyz4x9Xr9ZyoqEJEki6FimLE2VOj/e1nXThAmATMGK1IIok/1V+P7uq/a 78dmKtJOtluhWCPC5KNPQV87V5B8fIZRTN1hgo6YpDKuxBjpxqg0V76kcqfI9nCz jux70abeEQ4xj7MEmTK67el4+GiA5SescuXQj2lV2MKx7X9paVmn8+7O74YJDFos r/kAc3WxcW6u/wD67Per8F5yyUoMEu9rHj15BHTsgMq8oHfDuse8r1h8czkVIaIB AOkGMlT0Qc+Ef+CQSR/DydsafKHKWEKJoAeN0lPb+ZGc1y4xYMk/I+cT8IX0wnc0 XzeNHtQGOQyZeZeHjNNCqBPDYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqUqIZ/ dVgfwKfjlgGNheozWe5NMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA6TB0YbjsaASImK4dvtzbeuUiLk24ZqkjmI1MuQ1J3CSgqIfQEiUr hTGWtLQ6XwUVtz7Jv63Kx3zc5sRV+MUSs4bgO3RGLqMmxt/XGWg7Q+YsQp55Wgm+ xCmNJC/uhRwYHNGWUL2YnDZsV94VH3/eCuoHgs3tXBeFcfYu50Y8Hm/wvSiW0Kt2 Vm7qiKf3S0YlUEW7DvHbhxnZxLzuOfg7ykzCMlpL9W70zdJnHvcOiU1aptwj1tFV Gh2sb44B1HEBtaX7JAMPPgCEnK8abXyFk/07Dz/tbz95/iU7bb/qPh8C4PUpEWYg i6TLNxUgMUi7OXfHq4MiEplUkmx4aLCK -----END CERTIFICATE-----Generated at Sun Apr 28 19:00:54 2024 by rpki-client on console-fra.rpki-client.org