$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft File: rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json) Hash identifier: BEPcQg94eGPozQyPbMQ9C6wqGVVv37LMwrJgfHImx+4= Subject key identifier: 01:EA:50:E7:11:C4:C3:7A:83:6C:3E:8E:6E:D5:35:49:E3:7C:3F:8F Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A Certificate issuer: /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft Manifest number: 0582 Signing time: Wed 01 May 2024 00:52:42 +0000 Manifest this update: Wed 01 May 2024 00:52:41 +0000 Manifest next update: Wed 08 May 2024 00:52:41 +0000 Files and hashes: 1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: 3xnvqkHkykBZ1jFYxDmdKZofA90G4obW53umykhwHxw=) 2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: lKsHHS8TjrQNIN7lS2Dpo9BxEEOXfDZGMEdCobSpLMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A Validity Not Before: May 1 00:52:41 2024 GMT Not After : May 8 00:52:41 2024 GMT Subject: CN=6631925a-5835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:a4:37:5e:45:2c:24:23:b1:64:7a:ce:0a: d2:ff:58:19:da:a2:55:2e:e7:31:fa:59:0f:19:3d: 95:df:ea:f3:34:3d:6a:c2:8c:7a:7f:32:30:19:5e: 58:66:30:69:52:0a:e4:1c:62:67:ac:cf:53:ba:ac: c0:c2:95:49:62:1c:db:cf:a0:4b:c7:1e:2c:f3:7c: c7:56:a4:c8:3f:2a:3d:53:78:ad:4f:65:6f:0f:0e: dc:91:55:f8:e7:90:58:68:fa:04:fa:e3:e1:1b:a2: fd:57:9d:2c:65:1d:fe:98:f6:65:2e:61:5c:f4:3a: 90:03:29:af:4b:77:aa:95:4f:7f:ed:aa:25:6d:1d: 52:18:52:ca:6e:29:3e:0f:32:f8:7f:a7:bf:4c:1e: 71:b7:bb:04:d3:9e:b6:0b:d2:79:a7:98:52:62:0b: 91:f0:1f:77:5f:35:b7:06:16:9b:8f:a3:f0:d1:40: a3:86:1f:66:f4:2c:b1:9b:85:53:50:0a:7b:ca:7a: 69:4b:87:95:18:ab:40:a8:c6:f3:24:91:9c:f6:0f: 6a:c3:38:b7:d2:bb:83:84:75:64:45:cb:26:f2:78: 3a:6e:1b:c9:75:dd:6a:40:20:96:ea:5a:17:4a:15: a2:d9:9b:64:1e:79:9e:7e:c4:88:4f:d3:e5:9b:0f: 60:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EA:50:E7:11:C4:C3:7A:83:6C:3E:8E:6E:D5:35:49:E3:7C:3F:8F X509v3 Authority Key Identifier: keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ac:fd:f3:e6:54:ed:17:76:04:65:6d:de:29:ab:92:26:ba: d2:6d:95:e8:70:b1:72:60:ba:2c:e4:06:97:23:59:8c:fe:9e: 82:d1:6a:25:d9:cc:66:3d:bc:20:dc:f8:a6:27:91:65:c3:a7: 0a:be:06:17:79:04:a8:00:5d:3b:0d:df:8a:e5:2c:2f:4b:50: 87:85:1e:66:1a:b7:91:69:ac:0c:bb:f2:b2:d1:11:db:59:28: aa:98:21:b9:ef:25:bb:91:10:38:fb:b9:2e:a0:11:a1:15:12: 5b:c0:2e:16:53:da:39:17:35:5a:54:cf:ab:7e:f9:7b:09:41: 66:43:b3:52:fb:92:bc:ac:31:4d:9f:b2:62:7b:07:8a:14:28: 4a:9b:1d:99:3d:98:7b:6c:85:18:60:6d:14:ad:b7:c3:6d:85: 40:62:bb:0f:f7:0e:a0:23:15:bf:19:c7:10:26:e9:93:24:f4: 28:c2:40:8b:42:2b:d5:c3:7c:3f:5e:dc:d7:61:5f:a9:ff:10: 71:1f:27:90:67:b9:4f:7c:5b:31:c7:f2:63:79:39:f7:b6:a0: 6f:17:43:c1:dc:af:d2:01:ae:67:91:bf:b5:26:a4:b2:c9:ba: e5:9d:59:47:54:7b:09:cf:80:e3:74:50:80:f8:0e:88:09:dc: 9a:e8:11:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1RTcxMTAvBgNVBAUTKEFDQzAxMTk0MzM4NzdGMEM3NDI4NTdCOEVBNTIwRjhE QTRFRDA5NUEwHhcNMjQwNTAxMDA1MjQxWhcNMjQwNTA4MDA1MjQxWjAYMRYwFAYD VQQDEw02NjMxOTI1YS01ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO2kN15FLCQjsWR6zgrS/1gZ2qJVLucx+lkPGT2V3+rzND1qwox6fzIwGV5Y ZjBpUgrkHGJnrM9TuqzAwpVJYhzbz6BLxx4s83zHVqTIPyo9U3itT2VvDw7ckVX4 55BYaPoE+uPhG6L9V50sZR3+mPZlLmFc9DqQAymvS3eqlU9/7aolbR1SGFLKbik+ DzL4f6e/TB5xt7sE0562C9J5p5hSYguR8B93XzW3Bhabj6Pw0UCjhh9m9Cyxm4VT UAp7ynppS4eVGKtAqMbzJJGc9g9qwzi30ruDhHVkRcsm8ng6bhvJdd1qQCCW6loX ShWi2ZtkHnmefsSIT9Plmw9gFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHqUOcR xMN6g2w+jm7VNUnjfD+PMB8GA1UdIwQYMBaAFKzAEZQzh38MdChXuOpSD42k7Qla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTVFNy9FOTU5REM3NjhD NjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3eDBLRmU0NmxJUGphVHRD Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNQVJsRE9IZnd4MEtGZTQ2bElQamFUdENWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTVFNy9FOTU5REM3NjhDNjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3 eDBLRmU0NmxJUGphVHRDVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOrP3z5lTtF3YEZW3eKauSJrrSbZXocLFyYLos5AaXI1mM/p6C0Wol 2cxmPbwg3PimJ5Flw6cKvgYXeQSoAF07Dd+K5SwvS1CHhR5mGreRaawMu/Ky0RHb WSiqmCG57yW7kRA4+7kuoBGhFRJbwC4WU9o5FzVaVM+rfvl7CUFmQ7NS+5K8rDFN n7JieweKFChKmx2ZPZh7bIUYYG0UrbfDbYVAYrsP9w6gIxW/GccQJumTJPQowkCL QivVw3w/XtzXYV+p/xBxHyeQZ7lPfFsxx/JjeTn3tqBvF0PB3K/SAa5nkb+1JqSy ybrlnVlHVHsJz4DjdFCA+A6ICdya6BHm -----END CERTIFICATE-----Generated at Wed May 1 02:08:03 2024 by rpki-client on console-fra.rpki-client.org