$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: +rsEzDrFqGLSZGPVw+Nmo22xh38AYCKFfx8H5q2oGmc= Subject key identifier: AE:4D:70:60:4A:CF:A7:33:3F:D7:73:33:9F:32:23:0D:F3:DB:37:1C Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 33FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 33E4 Signing time: Sun 02 Jun 2024 14:17:18 +0000 Manifest this update: Sun 02 Jun 2024 14:17:17 +0000 Manifest next update: Sun 09 Jun 2024 14:17:17 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: bjGEQBLWoGA9D1WEnaMAipY/SImxZcjVuZq2zcq6ZpA=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: oKEra+z5HTLTSNTTjpMj+EhrYzyjYHuTj8yp31ybe8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13308 (0x33fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Jun 2 14:17:17 2024 GMT Not After : Jun 9 14:17:17 2024 GMT Subject: CN=665c7eed-f48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0b:a4:5e:29:d3:33:b0:cb:2d:13:45:51:dc: 9a:a1:e0:aa:5c:e6:57:97:62:96:53:f5:69:5b:ab: 25:ee:ae:78:b5:c3:3a:f7:27:a7:64:44:bb:22:83: 12:99:df:a3:cb:21:51:36:71:43:70:ec:cb:d7:58: 04:c3:5d:08:17:9d:20:10:af:a9:2a:ba:fd:55:5d: 6a:53:9b:13:1d:9e:0e:70:37:a8:cb:b5:20:83:95: b8:4c:57:37:b4:97:ab:1f:c7:ff:31:eb:b4:c9:98: 25:b4:c2:02:b8:b8:02:cd:80:1e:c5:4d:9c:90:d6: 67:56:92:c7:a2:dd:23:d8:50:54:66:40:62:35:db: c4:cb:2c:6c:3f:0c:95:15:6e:3a:45:45:69:d2:a1: f6:f2:ea:8b:7c:41:9a:80:53:94:8b:4f:5f:ea:db: b1:4d:4b:ed:b4:7b:f4:62:90:bd:b4:ea:92:b6:30: 70:16:1b:b3:c1:06:6c:2a:ba:ab:af:ca:d4:f3:da: 6c:0a:f5:68:1b:bf:79:9c:26:c3:4b:bd:33:e1:62: 37:c4:05:51:cb:0b:0f:5e:66:3b:23:b4:2f:c7:38: 75:5b:27:37:f7:0d:80:a0:d9:5c:d5:39:9d:01:68: ef:e8:e2:08:9b:77:c1:8e:ea:81:90:73:9b:d5:f8: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:70:60:4A:CF:A7:33:3F:D7:73:33:9F:32:23:0D:F3:DB:37:1C X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:d3:cb:c3:e4:c6:ee:aa:a0:bc:03:6c:c8:5f:44:fa:e0:b8: 26:c3:67:5c:db:8c:48:c2:5d:0f:3a:02:6d:89:cf:e7:23:79: ea:16:74:14:d7:f0:3d:3e:f7:e3:8d:3a:2a:04:7d:da:44:c3: 3e:00:09:9b:0b:d3:0e:57:94:68:26:a7:06:dd:02:49:35:2c: 18:34:97:f5:51:26:42:cf:7d:6c:fe:20:fd:47:03:5b:91:a4: 23:66:0e:13:02:85:d6:e5:48:1a:c7:52:96:cf:79:31:f9:b8: 8c:8f:3d:bd:22:dc:53:85:88:8c:b8:9e:3d:e5:b2:ac:7d:fe: 49:be:b4:fa:8d:2b:8a:fd:8f:c3:94:e9:70:a8:bd:1a:92:46: f0:3c:57:9c:b4:db:2a:b6:32:3e:48:52:51:7a:47:ca:b1:e5: 80:65:50:12:30:20:9e:39:34:e8:5f:60:87:5b:23:df:ac:7c: 1a:26:5c:11:fc:10:4d:45:a5:2f:85:d2:60:5b:b0:72:46:d5: 8b:b3:c7:6f:1a:c1:45:5b:c3:53:15:2e:97:05:ce:16:48:af: 13:30:20:93:fb:81:c2:5e:bf:e6:22:cb:f3:8c:4d:55:fb:6e: a1:59:ac:20:ee:09:29:ee:69:d8:a7:8a:de:b9:82:77:69:07: 6d:e1:6c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjQwNjAyMTQxNzE3WhcNMjQwNjA5MTQxNzE3WjAYMRYwFAYD VQQDEw02NjVjN2VlZC1mNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QukXinTM7DLLRNFUdyaoeCqXOZXl2KWU/VpW6sl7q54tcM69yenZES7IoMS md+jyyFRNnFDcOzL11gEw10IF50gEK+pKrr9VV1qU5sTHZ4OcDeoy7Ugg5W4TFc3 tJerH8f/Meu0yZgltMICuLgCzYAexU2ckNZnVpLHot0j2FBUZkBiNdvEyyxsPwyV FW46RUVp0qH28uqLfEGagFOUi09f6tuxTUvttHv0YpC9tOqStjBwFhuzwQZsKrqr r8rU89psCvVoG795nCbDS70z4WI3xAVRywsPXmY7I7Qvxzh1Wyc39w2AoNlc1Tmd AWjv6OIIm3fBjuqBkHOb1fjtQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5NcGBK z6czP9dzM58yIw3z2zccMB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC008vD5MbuqqC8A2zIX0T64Lgmw2dc24xIwl0POgJtic/nI3nqFnQU 1/A9PvfjjToqBH3aRMM+AAmbC9MOV5RoJqcG3QJJNSwYNJf1USZCz31s/iD9RwNb kaQjZg4TAoXW5Ugax1KWz3kx+biMjz29ItxThYiMuJ495bKsff5JvrT6jSuK/Y/D lOlwqL0akkbwPFectNsqtjI+SFJRekfKseWAZVASMCCeOTToX2CHWyPfrHwaJlwR /BBNRaUvhdJgW7ByRtWLs8dvGsFFW8NTFS6XBc4WSK8TMCCT+4HCXr/mIsvzjE1V +26hWawg7gkp7mnYp4reuYJ3aQdt4Wzi -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:15 2024 by rpki-client on console-fra.rpki-client.org