$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json) Hash identifier: dTOC0Wml3CqUiVIk7m5e6+MzlagbdzdAsgN4/agLwVk= Subject key identifier: DD:30:6F:9C:DA:F0:94:3B:38:85:CA:5B:69:C4:E2:1A:37:7F:C3:95 Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft Manifest number: 31 Signing time: Fri 17 May 2024 08:34:09 +0000 Manifest this update: Fri 17 May 2024 08:34:08 +0000 Manifest next update: Fri 24 May 2024 08:34:08 +0000 Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: QT2uUVkh+NDNCytXVGxOgw4AHoFk4vJlkdJro21OECc=) 2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: PYd5Z/psfbWsfxFhBn32PnsSRpisd6J1k8fer1PQSGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Validity Not Before: May 17 08:34:08 2024 GMT Not After : May 24 08:34:08 2024 GMT Subject: CN=66471681-98fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:78:dd:11:d2:3f:16:b1:22:e6:29:f1:a5: b6:e2:83:d4:ff:24:1b:c0:34:f2:8d:a0:d2:72:83: e7:9c:86:bc:92:8a:4a:8f:26:18:d6:cc:04:0b:e5: 80:83:5d:5d:aa:86:5d:5f:ff:0a:26:98:88:ca:02: 31:e3:2c:78:f4:de:c8:c2:ca:34:cc:2c:e2:93:4b: 89:30:10:14:cb:bd:9a:42:78:e8:2d:00:23:53:48: f8:9f:d9:dc:e2:18:81:ec:56:7e:51:89:84:8e:04: 15:8f:59:70:8d:53:b4:5a:5d:8e:26:bb:0d:ab:88: 17:07:7f:ad:1e:e8:67:1f:6a:9e:09:cc:f4:e4:27: ba:ac:25:ae:69:ab:45:a9:60:8b:25:21:ae:d2:d8: 28:6a:1c:02:74:4f:0b:75:8b:21:c8:2a:bc:1e:2d: 1f:10:83:5d:e6:b9:5b:68:fe:8b:0d:63:32:a1:f1: 7a:58:f0:c8:29:08:d1:3e:a8:ba:94:c2:e6:97:f0: ea:43:74:26:eb:93:57:46:b3:4b:c7:ea:d9:c7:08: ba:ab:b8:23:bb:b6:f2:8e:47:dc:f3:90:4a:e0:11: 37:bf:30:a4:d1:8b:ad:89:3e:f2:c4:e3:db:e7:bf: f8:1e:61:0b:b7:97:3d:c5:36:49:6d:73:9b:6c:a4: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:30:6F:9C:DA:F0:94:3B:38:85:CA:5B:69:C4:E2:1A:37:7F:C3:95 X509v3 Authority Key Identifier: keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9a:a9:24:cf:85:83:4d:ec:db:35:8f:ef:04:0f:9a:e9:2f: b6:c1:9b:bd:16:8c:56:07:a0:c3:5a:97:3d:3c:fe:96:55:cb: 23:ca:18:91:02:a2:d5:33:a6:51:cb:1a:46:92:b4:f4:1c:4e: e1:59:87:7b:e9:a6:12:89:72:9f:55:f7:90:95:66:bc:28:86: b8:7a:cb:d5:ad:f5:ab:cd:f9:e2:f4:a0:d7:80:99:e9:e0:57: 90:42:a3:19:0b:03:1d:1a:bc:51:87:b5:13:aa:ac:79:95:75: b5:31:82:7e:78:b4:c2:ed:67:5a:22:d7:6e:1a:eb:e7:f5:30: ae:76:a9:91:b6:65:c4:19:6f:b1:d9:a5:b7:ac:3d:41:08:9d: df:cd:6a:1a:ee:be:d8:85:17:b9:b7:cc:d0:9d:10:db:82:e2: dd:bb:32:7a:20:0e:c5:ea:d5:84:4d:31:18:0d:38:82:4b:ab: a1:6c:66:e1:99:10:d7:7b:cd:e5:ac:2a:ba:03:8b:f3:06:a2: da:fa:0a:2e:35:61:c6:ab:69:2f:11:c7:cd:c7:29:19:3c:05: c7:f9:d1:de:2c:1f:1a:41:e6:9d:f3:26:0e:7d:0b:e6:6f:ee: 61:95:1b:cc:fb:59:f4:84:f8:7b:db:e6:2d:e5:b6:c4:3e:b3: 2b:6a:8e:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjkwRDExMC8GA1UEBRMoNkFCQTg2RDMwNEFBRjY0RUI0QTA5N0IyOUJBNTU3Nzg2 MENDODU2RjAeFw0yNDA1MTcwODM0MDhaFw0yNDA1MjQwODM0MDhaMBgxFjAUBgNV BAMTDTY2NDcxNjgxLTk4ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy0XjdEdI/FrEi5inxpbbig9T/JBvANPKNoNJyg+echrySikqPJhjWzAQL5YCD XV2qhl1f/wommIjKAjHjLHj03sjCyjTMLOKTS4kwEBTLvZpCeOgtACNTSPif2dzi GIHsVn5RiYSOBBWPWXCNU7RaXY4muw2riBcHf60e6Gcfap4JzPTkJ7qsJa5pq0Wp YIslIa7S2ChqHAJ0Twt1iyHIKrweLR8Qg13muVto/osNYzKh8XpY8MgpCNE+qLqU wuaX8OpDdCbrk1dGs0vH6tnHCLqruCO7tvKOR9zzkErgETe/MKTRi62JPvLE49vn v/geYQu3lz3FNkltc5tspO6fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3TBvnNrw lDs4hcpbacTiGjd/w5UwHwYDVR0jBBgwFoAUarqG0wSq9k60oJeym6VXeGDMhW8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOTBEL0E2ODQ5QUM4RDAy OTExRUU5RTZDQkE0MEM0RjlBRTAyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhX OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXJxRzB3U3E5azYwb0pleW02VlhlR0RNaFc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy OTBEL0E2ODQ5QUM4RDAyOTExRUU5RTZDQkE0MEM0RjlBRTAyL2FycUcwd1NxOWs2 MG9KZXltNlZYZUdETWhXOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFuaqSTPhYNN7Ns1j+8ED5rpL7bBm70WjFYHoMNalz08/pZVyyPKGJEC otUzplHLGkaStPQcTuFZh3vpphKJcp9V95CVZrwohrh6y9Wt9avN+eL0oNeAmeng V5BCoxkLAx0avFGHtROqrHmVdbUxgn54tMLtZ1oi124a6+f1MK52qZG2ZcQZb7HZ pbesPUEInd/NahruvtiFF7m3zNCdENuC4t27MnogDsXq1YRNMRgNOIJLq6FsZuGZ ENd7zeWsKroDi/MGotr6Ci41YcaraS8Rx83HKRk8Bcf50d4sHxpB5p3zJg59C+Zv 7mGVG8z7WfSE+Hvb5i3ltsQ+sytqjl8= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org