$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: g8tCSg914O5l6lrOIcKGA73F38+aRwjcsoAZIxoEK1g= Subject key identifier: CD:06:6F:3B:2F:6D:7E:DB:F8:05:C9:DF:F8:48:8C:EF:9F:32:90:1E Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 0129 Signing time: Tue 07 May 2024 05:05:59 +0000 Manifest this update: Tue 07 May 2024 05:05:59 +0000 Manifest next update: Tue 14 May 2024 05:05:59 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: fPMtsDOcc8OxQDvawldVRypMB/J1RuCnPR/Jbioll3o=) 2: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: GDcwhYa5gbI2gcDqevQwJxlm3RfAbXFF4Z8H2JAMaHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: May 7 05:05:59 2024 GMT Not After : May 14 05:05:59 2024 GMT Subject: CN=6639b6b7-4b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:ac:c5:7f:83:4e:0f:23:13:11:3c:99:7b: 52:d6:ba:d5:f0:1b:56:7c:59:83:26:ec:bf:13:1c: 3a:81:98:68:82:c3:e4:a7:9f:60:6d:29:8e:25:1e: 35:76:b6:2d:7b:06:7d:cb:f4:de:84:a5:e1:84:f4: 28:93:9d:4b:37:04:6e:3e:2e:b7:c8:63:59:08:be: 27:13:b9:c7:b2:45:5e:ce:de:ae:c3:2f:4c:69:18: 83:87:eb:0a:b3:ca:08:e6:69:dd:c7:0c:73:be:83: 88:db:8a:7c:93:8c:6f:ca:63:b4:c6:c0:31:3e:dd: 48:7c:22:3c:94:f4:08:bf:d7:f3:8f:95:14:15:8c: 55:61:c7:ba:6e:e1:5e:90:a9:b8:9e:9f:c3:63:48: 38:38:42:22:8b:15:1b:ad:e6:5a:23:74:63:42:84: a7:18:88:22:dc:1e:c6:37:28:13:ef:d0:2b:15:f7: 76:26:74:7b:d2:e2:88:b0:a6:35:d4:f7:81:dc:d0: af:7b:d9:bf:7d:36:1b:33:e9:8a:31:d2:e4:7c:19: 60:aa:7a:bf:2e:09:4d:87:ee:c9:ca:4d:c0:77:9d: 47:02:c4:9e:3a:a0:fd:4f:6d:0e:e8:55:88:8b:5b: f1:46:71:42:5d:c4:e5:41:1a:15:4d:ab:01:6c:12: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:06:6F:3B:2F:6D:7E:DB:F8:05:C9:DF:F8:48:8C:EF:9F:32:90:1E X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:74:25:de:aa:a7:4d:84:d5:d3:42:37:64:3c:99:5b:e2:3e: 07:6c:59:90:ec:3c:90:8c:ec:12:dd:b9:3c:20:c4:9f:8c:90: 78:9d:78:d7:39:8f:79:cf:85:e7:40:b2:66:a0:a3:55:ba:d4: 0c:ca:6e:8a:39:6e:26:c9:8a:1a:e8:d8:53:52:ec:58:cf:cf: c1:9e:00:02:8c:e6:31:e7:06:bb:b7:70:ed:e5:e9:4f:10:f0: 2f:e3:7f:1e:87:e9:38:94:f9:88:5f:c2:d7:fb:f4:cf:b2:26: ac:e2:10:70:97:a7:b1:64:aa:6a:98:41:e5:df:af:6b:af:83: 6c:8a:dd:bb:6e:1f:7e:f0:e3:09:ca:73:4a:10:4b:e1:46:42: d7:7f:3f:98:9b:d4:15:14:26:3a:50:63:b8:0f:33:36:a8:0f: 30:e5:4a:90:82:41:b6:2f:81:ac:66:fa:62:a9:3b:98:1e:cb: fc:9b:61:b5:10:09:8e:27:1c:72:8d:fc:2a:b5:f4:bf:cf:d7: 3d:b7:35:57:74:17:23:5f:c4:2a:55:71:59:82:7e:20:dd:1e: e1:d6:71:76:23:de:c3:1a:b9:71:94:c6:73:7b:1b:c5:d0:01: 23:05:66:d9:d9:65:24:29:28:b8:98:e6:29:e9:91:ca:32:ba: f4:0c:0b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjQwNTA3MDUwNTU5WhcNMjQwNTE0MDUwNTU5WjAYMRYwFAYD VQQDEw02NjM5YjZiNy00YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iGsxX+DTg8jExE8mXtS1rrV8BtWfFmDJuy/Exw6gZhogsPkp59gbSmOJR41 drYtewZ9y/TehKXhhPQok51LNwRuPi63yGNZCL4nE7nHskVezt6uwy9MaRiDh+sK s8oI5mndxwxzvoOI24p8k4xvymO0xsAxPt1IfCI8lPQIv9fzj5UUFYxVYce6buFe kKm4np/DY0g4OEIiixUbreZaI3RjQoSnGIgi3B7GNygT79ArFfd2JnR70uKIsKY1 1PeB3NCve9m/fTYbM+mKMdLkfBlgqnq/LglNh+7Jyk3Ad51HAsSeOqD9T20O6FWI i1vxRnFCXcTlQRoVTasBbBIprwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0Gbzsv bX7b+AXJ3/hIjO+fMpAeMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPdCXeqqdNhNXTQjdkPJlb4j4HbFmQ7DyQjOwS3bk8IMSfjJB4nXjX OY95z4XnQLJmoKNVutQMym6KOW4myYoa6NhTUuxYz8/BngACjOYx5wa7t3Dt5elP EPAv438eh+k4lPmIX8LX+/TPsias4hBwl6exZKpqmEHl369rr4Nsit27bh9+8OMJ ynNKEEvhRkLXfz+Ym9QVFCY6UGO4DzM2qA8w5UqQgkG2L4GsZvpiqTuYHsv8m2G1 EAmOJxxyjfwqtfS/z9c9tzVXdBcjX8QqVXFZgn4g3R7h1nF2I97DGrlxlMZzexvF 0AEjBWbZ2WUkKSi4mOYp6ZHKMrr0DAvy -----END CERTIFICATE-----Generated at Tue May 7 05:39:53 2024 by rpki-client on console-fra.rpki-client.org