$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: rIUk7ubxiLg+P7eTvEkib5XraaQ2Hd/KHKSaW+YTHnw= Subject key identifier: FD:5F:9C:8F:CD:E9:0F:05:85:A1:E8:3D:79:EC:F8:C4:47:30:22:BA Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 0603 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 05F6 Signing time: Tue 07 May 2024 00:00:35 +0000 Manifest this update: Tue 07 May 2024 00:00:34 +0000 Manifest next update: Tue 14 May 2024 00:00:34 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: TTlonPqGnt5SerHARCqjZ82T9HmHlBB+pYoulRUIkmQ=) 2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: khUt0DvlY61bAlm32dmPwWDchl/1RN02B/RJjPd4MZQ=) 3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: yqGpCO8lcS6aLjqGTiN2U4Jbdfhrxn3UOKDstddgk/o=) 4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: eDBzV5c+YfE8xKLwuR4/9vbZEx4V5q6WLygz4lLx4+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: May 7 00:00:34 2024 GMT Not After : May 14 00:00:34 2024 GMT Subject: CN=66396f23-bfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:b9:d5:1f:f2:e2:33:fb:3c:15:67:ca:89: 87:1f:83:fb:08:16:56:1e:02:45:53:83:dc:78:b1: c6:bc:c7:a6:ae:db:6d:b4:6f:55:6b:06:3d:37:ae: ed:66:d0:05:76:13:29:ff:1f:c0:dd:33:72:56:3e: ad:4d:72:55:ea:16:cc:a4:b6:22:59:24:c4:a1:f8: e2:ee:50:10:69:4e:36:71:d5:19:c1:b6:da:82:bf: 1a:c8:ce:91:6e:4a:93:9b:b1:fb:0b:b5:8f:fc:27: f2:5e:3b:f2:a4:e8:3f:2d:de:0e:d0:dd:d2:62:6e: 3a:81:f1:b7:38:a2:31:f5:21:0c:c4:7c:9f:19:bf: 17:7a:4b:bc:12:13:7c:0f:70:0a:f9:59:38:31:7e: 24:58:c1:fa:4b:3b:a0:dd:fe:8d:5e:04:63:15:46: cf:46:71:f5:f4:75:1b:63:79:4e:18:f2:4f:ea:04: 85:6f:ca:bc:d8:50:92:76:8d:d4:29:15:a9:b8:a6: b8:28:d5:30:89:01:75:62:a6:70:3b:bf:6c:3f:ac: 74:75:33:e8:c4:1a:a9:35:9c:ab:0a:b7:7f:7a:b0: c8:16:7f:e6:3f:fd:5c:ef:ee:b2:bc:5f:d6:eb:63: 68:e7:bc:cf:4e:e1:b0:c6:2a:d7:4e:10:5c:9d:e7: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5F:9C:8F:CD:E9:0F:05:85:A1:E8:3D:79:EC:F8:C4:47:30:22:BA X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:dc:e9:e8:69:31:83:1e:f8:91:f4:e0:c6:86:57:f9:a7:f2: 0d:2f:ea:8e:86:19:4b:bd:76:e2:ae:34:6d:06:a7:19:90:1d: f4:f0:8b:fb:66:f8:21:ad:1c:52:2a:bc:ec:b7:1c:c8:58:88: ce:f9:ab:b0:b3:49:83:35:24:9f:ce:04:7d:59:ae:47:8c:5a: 03:dc:dd:a4:fc:a8:eb:15:8a:5a:1e:ea:2f:2a:27:fd:69:ee: 2d:a9:31:a9:2f:47:86:79:9b:17:03:4d:62:55:c9:d0:d9:46: f9:31:4e:0b:8e:6f:7c:43:be:f1:e4:49:2e:41:f0:24:6d:c6: 26:10:a0:7d:88:a6:5e:3b:cd:fa:ac:2b:d3:bb:4e:4f:71:77: 8b:5c:7c:e5:13:e6:84:06:6e:93:52:38:81:8e:4b:ab:61:aa: b0:26:d1:28:83:9d:21:0e:57:1a:be:e6:2f:cc:b3:3b:15:72: b4:8f:5e:f3:99:9b:39:2d:a0:f6:26:62:6f:3a:0f:fe:97:77: 14:ac:65:65:ad:54:6c:10:76:4c:c3:5a:c6:bf:d5:cf:a7:07: 3f:16:6e:4d:e5:de:25:75:cd:b8:a4:36:f7:c1:b4:17:67:1f: 0f:c5:22:df:19:e3:a0:49:82:ff:9b:28:5d:dc:fc:ef:0d:1f: 34:c6:e1:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjQwNTA3MDAwMDM0WhcNMjQwNTE0MDAwMDM0WjAYMRYwFAYD VQQDEw02NjM5NmYyMy1iZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Hi51R/y4jP7PBVnyomHH4P7CBZWHgJFU4PceLHGvMemrttttG9VawY9N67t ZtAFdhMp/x/A3TNyVj6tTXJV6hbMpLYiWSTEofji7lAQaU42cdUZwbbagr8ayM6R bkqTm7H7C7WP/CfyXjvypOg/Ld4O0N3SYm46gfG3OKIx9SEMxHyfGb8Xeku8EhN8 D3AK+Vk4MX4kWMH6Szug3f6NXgRjFUbPRnH19HUbY3lOGPJP6gSFb8q82FCSdo3U KRWpuKa4KNUwiQF1YqZwO79sP6x0dTPoxBqpNZyrCrd/erDIFn/mP/1c7+6yvF/W 62No57zPTuGwxirXThBcneex6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1fnI/N 6Q8FhaHoPXns+MRHMCK6MB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA53OnoaTGDHviR9ODGhlf5p/INL+qOhhlLvXbirjRtBqcZkB308Iv7 ZvghrRxSKrzstxzIWIjO+auws0mDNSSfzgR9Wa5HjFoD3N2k/KjrFYpaHuovKif9 ae4tqTGpL0eGeZsXA01iVcnQ2Ub5MU4Ljm98Q77x5EkuQfAkbcYmEKB9iKZeO836 rCvTu05PcXeLXHzlE+aEBm6TUjiBjkurYaqwJtEog50hDlcavuYvzLM7FXK0j17z mZs5LaD2JmJvOg/+l3cUrGVlrVRsEHZMw1rGv9XPpwc/Fm5N5d4ldc24pDb3wbQX Zx8PxSLfGeOgSYL/myhd3PzvDR80xuGi -----END CERTIFICATE-----Generated at Tue May 7 01:58:18 2024 by rpki-client on console-fra.rpki-client.org