$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: 35E5WE3AdAAiHJHkFeJEVyLMfWhcNbrTjxg1l9jwk4I= Subject key identifier: 57:BA:25:76:A8:22:B9:4F:12:FE:66:41:1E:DB:E8:EF:A2:D0:71:14 Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 1303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 12FC Signing time: Thu 02 May 2024 17:38:03 +0000 Manifest this update: Thu 02 May 2024 17:38:02 +0000 Manifest next update: Thu 09 May 2024 17:38:02 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: zmjDtGLA5PoXx4WWjdAva5mXGjgog5+rOVYqE3jE1aY=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: sYIfv7xuQktipLHZFxJRkRYN5DLPe25l0nv0xkrCfO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4867 (0x1303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Validity Not Before: May 2 17:38:02 2024 GMT Not After : May 9 17:38:02 2024 GMT Subject: CN=6633cf7b-8a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:ef:ea:1b:a0:9b:59:85:3a:96:81:a8:1d: ee:03:b6:a5:cc:eb:22:1f:59:2d:50:4e:18:83:13: 6c:20:47:9f:8b:02:4d:31:28:c1:8d:d4:f5:21:f1: 46:0d:5b:07:a0:79:d6:87:52:83:ff:77:86:8b:18: 06:29:21:50:fa:ba:41:89:78:cc:f0:fa:3d:79:7c: 6d:2a:ae:e8:ff:9e:eb:88:e0:e8:71:85:6a:09:80: df:13:42:b6:2a:d4:18:f2:42:ae:7d:ca:c6:ef:fa: ee:ba:a1:91:44:4e:82:36:0b:2c:cc:df:88:8f:67: be:a3:d7:7b:1d:4e:96:63:98:f0:5d:50:af:9a:22: 13:49:1b:73:c1:43:c2:40:b4:74:e5:53:03:19:ea: 53:c2:b8:64:7a:4a:d1:07:cb:6a:93:7c:de:67:9b: 40:95:d3:1f:b1:ca:32:49:67:29:a0:b1:bb:02:08: 92:ae:19:7a:80:d4:5c:26:de:fc:b4:19:6a:b1:38: 8b:f8:c7:55:d0:47:b5:4d:b2:58:75:fa:3f:92:c2: bb:6c:5e:5b:34:db:6b:b3:5d:0b:e2:f4:3e:3a:2f: 77:14:00:63:b8:ae:9a:6a:5d:f7:5b:81:3d:81:5b: 98:3a:6e:6c:12:64:7b:af:41:57:4a:bb:4c:b6:f6: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BA:25:76:A8:22:B9:4F:12:FE:66:41:1E:DB:E8:EF:A2:D0:71:14 X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:9c:8c:ae:69:60:0c:8f:88:24:79:82:ce:36:36:b3:56:4e: aa:61:65:c8:5b:7a:74:1d:dc:fa:2d:ab:96:76:3f:b0:af:7a: ce:07:af:b8:db:e2:e4:4c:1a:42:03:50:f5:24:3c:d8:9e:45: fc:b3:3f:c3:64:80:29:be:f5:23:84:7a:c1:a1:e0:34:60:60: d6:4e:d3:7c:79:80:7d:26:24:cc:72:08:f0:06:a3:74:a8:9b: 3e:fe:e2:78:a6:c3:34:f7:c6:bf:d3:da:04:af:04:06:2c:1b: 3d:68:6f:68:ce:fb:c9:b9:57:37:e8:93:18:49:dc:d2:f6:c2: b3:27:ef:1d:d0:a6:6a:b7:6e:1f:2b:3c:03:84:7a:4c:44:b7: 8d:e9:4b:93:50:29:1d:64:bb:38:c8:ed:e4:65:83:82:36:c8: eb:73:89:23:45:13:24:e2:7d:68:c4:ca:30:75:11:01:d4:66: 52:60:52:cd:28:05:29:0a:21:55:84:fb:fe:53:36:26:78:b6: e2:fa:6f:4b:7f:f3:f9:dc:16:45:1e:c7:b2:fa:0b:61:a4:30: f2:ce:95:7c:40:4b:0f:3c:34:df:0b:2a:00:6f:39:69:83:9a: 9e:09:b7:9c:10:ac:43:89:ba:51:94:24:ea:3f:5e:d7:e8:a2: 84:82:97:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjQwNTAyMTczODAyWhcNMjQwNTA5MTczODAyWjAYMRYwFAYD VQQDEw02NjMzY2Y3Yi04YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6Pv6hugm1mFOpaBqB3uA7alzOsiH1ktUE4YgxNsIEefiwJNMSjBjdT1IfFG DVsHoHnWh1KD/3eGixgGKSFQ+rpBiXjM8Po9eXxtKq7o/57riODocYVqCYDfE0K2 KtQY8kKufcrG7/ruuqGRRE6CNgsszN+Ij2e+o9d7HU6WY5jwXVCvmiITSRtzwUPC QLR05VMDGepTwrhkekrRB8tqk3zeZ5tAldMfscoySWcpoLG7AgiSrhl6gNRcJt78 tBlqsTiL+MdV0Ee1TbJYdfo/ksK7bF5bNNtrs10L4vQ+Oi93FABjuK6aal33W4E9 gVuYOm5sEmR7r0FXSrtMtvZbwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe6JXao IrlPEv5mQR7b6O+i0HEUMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDnIyuaWAMj4gkeYLONjazVk6qYWXIW3p0Hdz6LauWdj+wr3rOB6+4 2+LkTBpCA1D1JDzYnkX8sz/DZIApvvUjhHrBoeA0YGDWTtN8eYB9JiTMcgjwBqN0 qJs+/uJ4psM098a/09oErwQGLBs9aG9ozvvJuVc36JMYSdzS9sKzJ+8d0KZqt24f KzwDhHpMRLeN6UuTUCkdZLs4yO3kZYOCNsjrc4kjRRMk4n1oxMowdREB1GZSYFLN KAUpCiFVhPv+UzYmeLbi+m9Lf/P53BZFHsey+gthpDDyzpV8QEsPPDTfCyoAbzlp g5qeCbecEKxDibpRlCTqP17X6KKEgpcR -----END CERTIFICATE-----Generated at Thu May 2 20:50:26 2024 by rpki-client on console-fra.rpki-client.org