$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: nky0pW6JyAuSNM+lYpBzqLPS43vS/DuZnPOFsT0CVD0= Subject key identifier: F3:9D:F4:B8:C9:83:05:BE:D2:A8:1F:0A:FA:35:7E:BC:37:7C:B2:4E Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 160D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 159B Signing time: Sat 04 May 2024 17:15:57 +0000 Manifest this update: Sat 04 May 2024 17:15:56 +0000 Manifest next update: Sat 11 May 2024 17:15:56 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: O/U3HvHIMf9Yg3kXJF0nXopSKX4x2lsQVK7rGeSqQXY=) 2: F6117244FD3011EE8E789C50C4F9AE02.roa (hash: oYjhSYgXWQrJ2BsnPj39jL9rhhE985p6eckQr1CMyeY=) 3: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: lsOmam/li1bkfNd+RqIYHcsa5LlCUkskqa4cLcEJ5uo=) 4: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: r0YSGkf4Uly1T3ccnKqscdpAXe/eUhnq2u7Y+nWyVFA=) 5: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: JKnsYkOp9VjEacI33Ba4AJhjDKF19c/H5ySudQCEfcg=) 6: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: PIer1s9fnShnuMBkKYfM0HDQ4suxju3yxP90XcCs/1k=) 7: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: 2fbDRTJBk5Ytg+eSm5CyRuKLRNTxFiA579mgfklTst4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5645 (0x160d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: May 4 17:15:56 2024 GMT Not After : May 11 17:15:56 2024 GMT Subject: CN=66366d4c-251c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:12:c7:63:c9:66:2d:fa:63:dd:cf:6c:2c:f7: c9:70:f8:35:3d:e2:f8:b8:34:9f:ea:41:e1:21:71: 8a:0c:42:b7:29:f3:8e:8d:bd:6e:ad:94:fd:7d:c5: 58:44:0c:b2:94:14:29:7b:b7:97:55:b8:a3:67:49: b2:09:94:d9:94:18:f4:83:ef:db:9d:b0:be:f2:22: c4:43:cf:0c:fc:21:ed:73:e1:d5:55:72:73:c4:05: 9c:d0:33:99:b6:68:af:5c:85:3f:f7:37:98:21:6e: aa:a8:a6:4f:8b:40:f5:58:15:7f:d1:61:0d:62:3d: 02:f9:31:fb:c7:dc:81:c5:d6:31:51:c5:49:73:63: c4:66:05:f1:58:ee:b9:83:a8:0a:02:d6:74:81:3b: 12:b8:3a:21:d6:a3:e7:b6:e0:8e:3d:b3:16:5f:3e: 23:ac:dd:89:68:b3:38:1c:d4:27:f4:6f:57:10:b1: 45:8a:b3:96:89:06:07:d9:27:d9:db:bf:7e:e2:66: f6:6d:e1:56:99:db:c3:82:f7:e9:23:c2:c2:4c:3e: 8f:f7:72:cd:a7:aa:be:41:97:43:51:cd:5b:46:bb: 6e:2f:0f:ed:82:fe:f5:04:59:fc:cb:18:1e:ce:76: 33:e3:1e:52:6d:79:7e:45:31:b7:cd:34:7b:24:2a: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:F4:B8:C9:83:05:BE:D2:A8:1F:0A:FA:35:7E:BC:37:7C:B2:4E X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:96:15:91:a6:0b:ee:12:81:a1:5f:60:72:13:68:83:62:49: 60:e3:28:c3:69:b5:8b:2c:2b:18:c0:1a:7b:b5:a4:6e:73:97: ec:6c:b0:44:b0:3e:69:46:45:82:a0:1b:f7:96:0e:73:c1:92: e6:58:b0:aa:56:30:92:b9:a8:32:c4:29:fe:00:4b:08:52:d5: c2:9c:a5:f1:c6:f0:9e:c4:ce:9c:ff:95:53:d5:ae:9b:cb:fa: 1f:46:7b:8e:b8:89:bf:e1:4e:ba:db:2f:32:3f:0e:35:fd:8c: c3:e9:88:f5:d6:cc:4d:89:37:44:91:ce:f6:e1:85:a9:5b:1f: e8:20:52:50:9c:ec:90:bc:70:3e:00:32:72:95:f3:0c:29:50: 94:50:65:db:c0:56:dc:5c:a5:e3:f9:64:d4:aa:12:34:1d:d5: 96:cb:e7:53:41:90:53:46:a4:29:2a:f3:bc:5e:09:de:5e:92: 84:b1:3c:7d:bf:2c:e6:3c:64:fd:d4:73:5a:0b:0a:7b:79:99: 09:56:3f:21:e7:64:15:d8:c4:69:a4:b2:77:5f:1a:67:de:86: 5d:33:6c:58:32:9a:73:1d:4c:84:c8:75:9b:a4:18:74:c2:4a: 5b:3e:84:b3:bf:6f:22:d3:89:39:fc:b4:41:58:6d:19:25:80: f7:2e:73:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjQwNTA0MTcxNTU2WhcNMjQwNTExMTcxNTU2WjAYMRYwFAYD VQQDEw02NjM2NmQ0Yy0yNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hLHY8lmLfpj3c9sLPfJcPg1PeL4uDSf6kHhIXGKDEK3KfOOjb1urZT9fcVY RAyylBQpe7eXVbijZ0myCZTZlBj0g+/bnbC+8iLEQ88M/CHtc+HVVXJzxAWc0DOZ tmivXIU/9zeYIW6qqKZPi0D1WBV/0WENYj0C+TH7x9yBxdYxUcVJc2PEZgXxWO65 g6gKAtZ0gTsSuDoh1qPntuCOPbMWXz4jrN2JaLM4HNQn9G9XELFFirOWiQYH2SfZ 279+4mb2beFWmdvDgvfpI8LCTD6P93LNp6q+QZdDUc1bRrtuLw/tgv71BFn8yxge znYz4x5SbXl+RTG3zTR7JCpnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOd9LjJ gwW+0qgfCvo1frw3fLJOMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6lhWRpgvuEoGhX2ByE2iDYklg4yjDabWLLCsYwBp7taRuc5fsbLBE sD5pRkWCoBv3lg5zwZLmWLCqVjCSuagyxCn+AEsIUtXCnKXxxvCexM6c/5VT1a6b y/ofRnuOuIm/4U662y8yPw41/YzD6Yj11sxNiTdEkc724YWpWx/oIFJQnOyQvHA+ ADJylfMMKVCUUGXbwFbcXKXj+WTUqhI0HdWWy+dTQZBTRqQpKvO8XgneXpKEsTx9 vyzmPGT91HNaCwp7eZkJVj8h52QV2MRppLJ3Xxpn3oZdM2xYMppzHUyEyHWbpBh0 wkpbPoSzv28i04k5/LRBWG0ZJYD3LnPY -----END CERTIFICATE-----Generated at Sat May 4 18:00:11 2024 by rpki-client on console-fra.rpki-client.org