$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: fdcokO5PS6csWoa6AlANcnTJkS2Xs0zwxt1/RQuu/Kk= Subject key identifier: 5A:7C:BB:7F:AD:1D:BF:D6:1F:46:72:B7:DB:F7:A6:A9:4B:4F:22:15 Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 05A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 059E Signing time: Fri 03 May 2024 00:28:21 +0000 Manifest this update: Fri 03 May 2024 00:28:20 +0000 Manifest next update: Fri 10 May 2024 00:28:20 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: neMFs/uCAs8tR/hAURgnTOZonx/DbaA/VSbC54TS12I=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: EjsnNsR1VMYGUtaVh/eRjO2xs0TMAOXQ41mC5L848LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: May 3 00:28:20 2024 GMT Not After : May 10 00:28:20 2024 GMT Subject: CN=66342fa5-3971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a7:02:a5:73:ff:a5:52:23:cd:75:49:48:ce: d8:27:12:83:42:44:ed:06:15:16:50:7d:0f:35:17: 38:ec:d0:41:22:f7:d7:88:98:ad:1b:07:41:12:4e: 58:52:6d:4f:14:70:59:fa:9a:0c:4a:44:58:70:6f: 4f:99:de:a2:82:f7:15:ea:27:48:95:d3:4c:46:67: 70:0f:84:37:c5:84:54:a1:09:d7:ca:c1:84:0c:15: fc:45:d6:8f:8f:aa:cb:c4:8e:a3:51:fa:57:ba:28: 3b:4e:6d:f0:f5:b0:5d:5a:03:00:81:d0:02:33:79: 42:54:f0:f8:33:52:5e:87:56:04:6f:29:bb:3d:14: 68:b5:86:c0:05:18:1a:6f:34:92:75:c1:53:a2:70: c2:71:39:3f:14:aa:50:bf:5d:bd:af:43:5e:fa:ac: 06:46:d4:aa:6c:ec:b7:bf:43:71:e6:62:66:5f:79: 94:98:aa:0d:5f:2c:60:46:b1:e0:07:c2:71:63:33: c6:e3:d6:de:be:3c:2f:69:29:b3:91:ab:8b:ca:aa: d4:23:d2:22:69:32:c4:0d:e6:a9:db:de:03:7f:3e: d5:d2:56:48:bb:52:a0:d9:e6:a1:99:d8:c8:7e:5b: 45:3e:52:a1:75:e7:52:33:57:06:45:76:75:82:3c: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7C:BB:7F:AD:1D:BF:D6:1F:46:72:B7:DB:F7:A6:A9:4B:4F:22:15 X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a0:df:df:12:b1:d1:22:b0:8d:6c:18:c8:ad:d8:f5:3e:db: 0d:1a:4f:c7:eb:6f:e9:1e:f7:4a:04:eb:ae:ca:b8:0b:12:b7: 71:7c:1d:65:70:38:c9:71:b9:b4:72:16:24:4b:32:d7:d3:b5: e4:16:e1:04:4b:dc:f5:10:1f:32:70:4a:e7:47:c3:4e:d1:8d: 51:0f:e0:ca:ef:7f:e0:5d:c4:6d:79:e4:7a:ac:49:6a:b8:f1: a9:d9:eb:75:f7:89:ad:57:fb:af:88:78:27:88:62:92:84:2f: 59:85:05:85:c1:63:52:a9:53:f0:76:bb:e7:8e:91:0d:9c:be: 16:f7:cc:63:fa:27:2a:67:2c:98:37:26:01:9a:e8:e8:3b:38: a5:8d:48:72:91:dc:36:8b:9d:86:41:b7:b5:4e:8c:b8:91:d4: 51:23:e7:82:35:16:15:be:d2:3c:9e:15:67:94:51:62:24:b3: d7:13:8a:75:8b:b1:eb:d6:5c:3c:a2:01:8f:7a:4f:d5:44:9b: 62:2e:e6:b9:29:95:2d:53:22:84:11:70:7c:20:d4:55:84:e9: d3:7a:09:7e:a5:f5:b9:90:34:44:73:38:0a:cf:e8:fd:5b:c3: 39:c9:c5:4b:5d:f0:65:7d:c9:53:65:97:62:7d:0e:87:d3:ab: d4:0b:36:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjQwNTAzMDAyODIwWhcNMjQwNTEwMDAyODIwWjAYMRYwFAYD VQQDEw02NjM0MmZhNS0zOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6acCpXP/pVIjzXVJSM7YJxKDQkTtBhUWUH0PNRc47NBBIvfXiJitGwdBEk5Y Um1PFHBZ+poMSkRYcG9Pmd6igvcV6idIldNMRmdwD4Q3xYRUoQnXysGEDBX8RdaP j6rLxI6jUfpXuig7Tm3w9bBdWgMAgdACM3lCVPD4M1Jeh1YEbym7PRRotYbABRga bzSSdcFTonDCcTk/FKpQv129r0Ne+qwGRtSqbOy3v0Nx5mJmX3mUmKoNXyxgRrHg B8JxYzPG49bevjwvaSmzkauLyqrUI9IiaTLEDeap294Dfz7V0lZIu1Kg2eahmdjI fltFPlKhdedSM1cGRXZ1gjze8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp8u3+t Hb/WH0Zyt9v3pqlLTyIVMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyoN/fErHRIrCNbBjIrdj1PtsNGk/H62/pHvdKBOuuyrgLErdxfB1l cDjJcbm0chYkSzLX07XkFuEES9z1EB8ycErnR8NO0Y1RD+DK73/gXcRteeR6rElq uPGp2et194mtV/uviHgniGKShC9ZhQWFwWNSqVPwdrvnjpENnL4W98xj+icqZyyY NyYBmujoOziljUhykdw2i52GQbe1Toy4kdRRI+eCNRYVvtI8nhVnlFFiJLPXE4p1 i7Hr1lw8ogGPek/VRJtiLua5KZUtUyKEEXB8INRVhOnTegl+pfW5kDREczgKz+j9 W8M5ycVLXfBlfclTZZdifQ6H06vUCzbi -----END CERTIFICATE-----Generated at Fri May 3 01:30:25 2024 by rpki-client on console-fra.rpki-client.org