$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft File: Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json) Hash identifier: I8B5LGnClAvHho5JenPVLcHEmiwe0fv9wyGZRB/A2sI= Subject key identifier: CA:11:07:CD:8D:CE:0F:CB:CF:32:84:B5:7D:0B:F2:90:16:AD:CC:03 Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Certificate serial: 0CC2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft Manifest number: 0CAD Signing time: Sat 18 May 2024 14:24:23 +0000 Manifest this update: Sat 18 May 2024 14:24:22 +0000 Manifest next update: Sat 25 May 2024 14:24:22 +0000 Files and hashes: 1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: oIFibmXMp7yoLbETl53vrvp/aVHGvkE3Wy0ERtiwv/4=) 2: 947563AEA68511EDAD304B6DC4F9AE02.roa (hash: eat2obGStOClxSnOdGTpJSsdUaQnM3Rg4Ban3X1mBC8=) 3: 4D2DB5C6E4D411E99A65E973C4F9AE02.roa (hash: e1WwRfMdie0Q6qYoqq+QhmvsGA3GCdhOythVQ2+bNeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3266 (0xcc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Validity Not Before: May 18 14:24:22 2024 GMT Not After : May 25 14:24:22 2024 GMT Subject: CN=6648ba16-f961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:10:3b:e7:54:52:2e:25:1b:17:56:77:17: f3:30:98:81:7c:06:62:01:b6:30:87:0c:65:c2:33: b7:98:da:1a:74:d9:86:c1:65:41:47:95:2a:ca:b6: c6:3b:6c:ee:40:21:04:af:c8:1b:75:f0:cb:e2:a6: 4d:09:b8:92:20:97:b7:9d:89:1a:f2:1f:35:aa:75: 5c:99:be:7e:d4:42:71:d7:e3:8c:bc:a7:ca:37:f5: f6:f3:3a:ec:bb:fb:0e:b8:3a:65:2f:f7:bd:c0:1c: 66:66:5a:fc:01:19:00:8a:c6:96:c6:82:9f:71:5d: dc:5f:a2:63:99:e8:69:b8:1d:6a:2c:7e:ad:a1:4f: 46:45:6f:12:3f:c1:86:48:87:d4:9a:a4:da:04:81: 53:bd:c0:47:0c:b1:61:d6:b3:32:60:4d:38:d0:34: 5e:3a:4a:17:32:84:18:71:65:92:d4:2b:91:2c:ac: aa:fa:d9:d2:0a:61:fa:f9:c1:51:45:4b:de:f4:f2: f8:e6:b7:90:da:22:2a:be:0f:a3:f9:ec:08:f9:2a: b5:a5:50:5b:b7:23:1b:b4:be:56:23:ea:59:33:8d: 6f:f4:0c:9a:3a:73:d8:b3:7d:b9:dc:b5:47:c7:cf: ad:bb:40:f9:92:5d:5f:cc:46:3a:b2:ee:4f:ba:61: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:07:CD:8D:CE:0F:CB:CF:32:84:B5:7D:0B:F2:90:16:AD:CC:03 X509v3 Authority Key Identifier: keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0d:cb:3c:7d:ed:38:2a:38:8d:3c:fa:13:de:78:7c:19:26: 9c:bb:73:c7:da:cb:9a:7a:05:ac:a9:0b:f2:93:8e:d7:44:6b: fe:b1:7f:63:cb:95:fe:e2:8d:e0:2e:46:b7:2a:50:97:ff:8d: f0:ca:38:a3:45:b9:dc:79:3c:c8:63:af:16:91:51:67:2a:62: 4b:bc:62:85:b8:a4:c1:ba:a8:55:ee:31:9b:a1:93:b7:77:cf: f9:19:12:c4:75:5a:3d:b0:cc:cf:6a:81:2d:2a:17:24:9d:51: 3d:4c:19:37:85:52:01:00:00:d3:35:37:19:91:79:6e:42:bd: 97:8e:0e:00:8b:e2:7b:0d:dd:01:11:e1:c3:15:67:45:7c:dd: ec:fc:0a:66:5b:36:84:f6:f1:03:46:8d:4c:ab:8c:50:1c:0e: b9:49:82:ae:24:ea:a5:2e:a3:95:8f:7a:48:17:08:d6:b1:9c: 8f:27:3d:c3:e6:41:a0:88:e8:76:30:30:4f:42:f2:04:ec:c4: 1e:f8:fe:ad:ec:0e:18:19:6c:e7:08:bd:d9:03:9b:e6:2b:2a: a9:c4:e7:82:cc:76:8c:1f:d8:85:02:be:9b:18:1e:09:a9:5c: 10:22:be:0c:70:bd:13:47:bf:c5:fb:c1:84:6a:3a:f0:c1:d7: 6a:fa:e0:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1 MTk1QjNCQTkwHhcNMjQwNTE4MTQyNDIyWhcNMjQwNTI1MTQyNDIyWjAYMRYwFAYD VQQDEw02NjQ4YmExNi1mOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAli0QO+dUUi4lGxdWdxfzMJiBfAZiAbYwhwxlwjO3mNoadNmGwWVBR5UqyrbG O2zuQCEEr8gbdfDL4qZNCbiSIJe3nYka8h81qnVcmb5+1EJx1+OMvKfKN/X28zrs u/sOuDplL/e9wBxmZlr8ARkAisaWxoKfcV3cX6JjmehpuB1qLH6toU9GRW8SP8GG SIfUmqTaBIFTvcBHDLFh1rMyYE040DReOkoXMoQYcWWS1CuRLKyq+tnSCmH6+cFR RUve9PL45reQ2iIqvg+j+ewI+Sq1pVBbtyMbtL5WI+pZM41v9AyaOnPYs3253LVH x8+tu0D5kl1fzEY6su5PumGZqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoRB82N zg/LzzKEtX0L8pAWrcwDMB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy8wMUIwNjlGNkNFQkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBD NWc4a2FaR1RyaUZSbGJPNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDcs8fe04KjiNPPoT3nh8GSacu3PH2suaegWsqQvyk47XRGv+sX9j y5X+4o3gLka3KlCX/43wyjijRbnceTzIY68WkVFnKmJLvGKFuKTBuqhV7jGboZO3 d8/5GRLEdVo9sMzPaoEtKhcknVE9TBk3hVIBAADTNTcZkXluQr2Xjg4Ai+J7Dd0B EeHDFWdFfN3s/ApmWzaE9vEDRo1Mq4xQHA65SYKuJOqlLqOVj3pIFwjWsZyPJz3D 5kGgiOh2MDBPQvIE7MQe+P6t7A4YGWznCL3ZA5vmKyqpxOeCzHaMH9iFAr6bGB4J qVwQIr4McL0TR7/F+8GEajrwwddq+uDX -----END CERTIFICATE-----Generated at Sat May 18 15:26:03 2024 by rpki-client on console-fra.rpki-client.org