$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json) Hash identifier: udyTOnUAre53KzNawzXQ1TKF3cQrXxavF0rjsVQPN68= Subject key identifier: F4:A3:19:1B:C6:3A:56:28:6D:88:30:40:D3:80:87:19:FD:62:8D:C9 Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft Manifest number: 0D25 Signing time: Sat 18 May 2024 18:42:41 +0000 Manifest this update: Sat 18 May 2024 18:42:41 +0000 Manifest next update: Sat 25 May 2024 18:42:41 +0000 Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: o+hQLASHSfNzsNXQzMChMi/DEC02VCT9XnL5pIKQdF8=) 2: 2077E380EBDF11EBB7533A15C4F9AE02.roa (hash: jqOAMW9HJB3+EsMXMEksvEVwBulHyM30N8ZptacmPMo=) 3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: +BXNJJgRMpeEdVFjU+gXiu2LeoVUCZ+rAA2rUqqtixk=) 4: EA0E36083C3311EE8B808E55C4F9AE02.roa (hash: aSnQJASyGk29wjcsAvuo1Kq8miD76QY/sE9dAwnieKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Validity Not Before: May 18 18:42:41 2024 GMT Not After : May 25 18:42:41 2024 GMT Subject: CN=6648f6a1-2405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:0e:88:a3:9e:6c:af:fb:a0:cc:f1:59:f8: 99:bb:5a:88:20:f7:3b:be:4d:37:ea:55:29:1c:ac: 2e:d6:d3:6b:2f:65:a8:c3:7b:2a:f5:65:2d:54:11: ef:42:59:af:15:25:45:62:b0:4a:5d:83:d9:42:05: bc:c2:b7:1a:e1:ac:4a:05:75:30:dc:f2:39:5f:76: 82:e6:95:28:5c:5e:e5:da:b4:7f:55:03:64:de:8b: 67:ec:4b:ca:e3:b3:ac:0e:9e:60:8d:cd:1b:3c:86: fb:fe:04:74:96:fb:ee:36:8b:d2:67:dc:9f:44:5a: 04:dd:94:55:ac:9a:47:4a:01:1f:51:b1:c7:cf:a4: df:6c:df:4f:6d:b6:cd:38:21:ae:a1:a1:33:52:74: 03:0f:72:03:43:c5:60:3e:80:d9:67:99:ad:1c:3d: cd:20:cd:c7:fa:fe:42:96:f2:c3:ac:fd:35:9e:6a: 90:3e:f8:62:c7:57:7c:80:e4:82:8c:54:3b:01:38: 8e:5c:d6:8c:2b:15:94:5b:cb:8e:0e:d0:b1:03:2b: 0e:f9:d0:b7:59:83:82:33:4c:da:4f:2d:63:c3:ae: e2:8b:ef:37:9a:24:d0:57:14:fd:fc:c7:5b:c7:45: 66:2f:9e:6b:b8:68:f4:7c:15:fd:a0:37:2f:df:54: ab:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A3:19:1B:C6:3A:56:28:6D:88:30:40:D3:80:87:19:FD:62:8D:C9 X509v3 Authority Key Identifier: keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:fa:5e:8e:6d:30:8d:8d:15:fd:26:d6:ae:d8:0c:8b:ef:66: 2f:0e:91:ec:b3:dd:a0:f2:dc:04:11:65:ec:6e:80:28:cb:c7: 43:a9:4a:21:49:57:f9:98:95:1f:87:6a:93:56:e3:c6:8c:61: 9f:f8:80:6c:32:be:45:41:5e:6a:e7:c3:e9:0f:af:aa:5d:05: b5:05:aa:e1:21:ea:bc:fd:e8:a3:09:84:b3:a0:3d:98:a1:1c: 3d:9f:a7:15:32:e5:5f:41:7e:71:05:11:7f:e4:ff:36:08:da: ce:10:a1:81:a5:75:13:f7:cc:8a:09:16:8c:cd:25:26:f6:7a: e5:3a:32:8d:b6:02:f7:93:3b:0c:e4:4f:a9:85:95:99:3b:80: db:a0:5c:51:2c:1d:53:ec:e8:0d:e1:d0:41:40:cf:de:c1:f0: 1d:bc:14:69:13:ad:ef:26:de:06:8e:72:a4:31:4b:4c:2c:01: c8:11:ca:a2:50:9f:bd:49:e2:bf:d0:cb:89:14:88:da:17:86: 04:3d:cd:7f:82:5d:dc:bb:c3:05:bd:8b:25:e9:3c:17:bb:97: 8f:09:f3:c8:6a:9a:84:ea:7c:f7:b2:a9:7c:f9:51:6e:d1:6d: 73:a4:38:2b:e7:9e:dd:dc:b6:60:de:28:5e:1f:8d:fa:d2:23: b4:dc:6f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1 OUE0MzgyMzMwHhcNMjQwNTE4MTg0MjQxWhcNMjQwNTI1MTg0MjQxWjAYMRYwFAYD VQQDEw02NjQ4ZjZhMS0yNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jUOiKOebK/7oMzxWfiZu1qIIPc7vk036lUpHKwu1tNrL2Wow3sq9WUtVBHv QlmvFSVFYrBKXYPZQgW8wrca4axKBXUw3PI5X3aC5pUoXF7l2rR/VQNk3otn7EvK 47OsDp5gjc0bPIb7/gR0lvvuNovSZ9yfRFoE3ZRVrJpHSgEfUbHHz6TfbN9PbbbN OCGuoaEzUnQDD3IDQ8VgPoDZZ5mtHD3NIM3H+v5ClvLDrP01nmqQPvhix1d8gOSC jFQ7ATiOXNaMKxWUW8uODtCxAysO+dC3WYOCM0zaTy1jw67ii+83miTQVxT9/Mdb x0VmL55ruGj0fBX9oDcv31Sr1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSjGRvG OlYobYgwQNOAhxn9Yo3JMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX MFdBYjZEMkxsSzFacERnak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT+l6ObTCNjRX9Jtau2AyL72YvDpHss92g8twEEWXsboAoy8dDqUoh SVf5mJUfh2qTVuPGjGGf+IBsMr5FQV5q58PpD6+qXQW1BarhIeq8/eijCYSzoD2Y oRw9n6cVMuVfQX5xBRF/5P82CNrOEKGBpXUT98yKCRaMzSUm9nrlOjKNtgL3kzsM 5E+phZWZO4DboFxRLB1T7OgN4dBBQM/ewfAdvBRpE63vJt4GjnKkMUtMLAHIEcqi UJ+9SeK/0MuJFIjaF4YEPc1/gl3cu8MFvYsl6TwXu5ePCfPIapqE6nz3sql8+VFu 0W1zpDgr557d3LZg3iheH4360iO03G+A -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org