$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: I15JU8wqYJ/b7U3sTq7MkfnO942NA7zcJn+ClNuhESU= Subject key identifier: 1F:90:FE:B4:F2:7D:3F:21:14:89:F2:BB:B9:C4:2D:6E:9D:C7:E0:9B Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 0874 Signing time: Thu 02 May 2024 21:45:05 +0000 Manifest this update: Thu 02 May 2024 21:45:04 +0000 Manifest next update: Thu 09 May 2024 21:45:04 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: fy2SSEBYzP/b/CV9AphpSnKd0RZmExSzBB7ygWAeySE=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: CjqDrCi2hZTQZyfoAe0SHwRX5l3G8AvvnnXcLvjS3v8=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: aYWj7eOk6WOEVhVHd57pKAx3bYIlz8QLKy8R6BimW6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: May 2 21:45:04 2024 GMT Not After : May 9 21:45:04 2024 GMT Subject: CN=66340960-5926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ee:48:ab:21:c5:35:e5:93:d9:c7:b2:1c:9d: f1:50:b0:e1:77:fc:24:d6:db:94:ac:69:ff:50:2a: bb:86:46:8a:f6:3f:74:b7:e2:79:40:22:b4:48:2f: 20:f7:0d:a7:a8:51:c2:84:42:4e:6a:f7:1c:cb:82: c7:af:67:7c:4b:da:8d:e6:6e:ae:d1:0b:ed:bf:63: 77:b2:87:df:57:15:c5:2f:94:22:4a:e7:1a:2e:bf: 2c:47:2d:69:8b:e4:f8:fb:86:13:bb:f5:5a:c1:33: 25:3f:85:0e:65:1e:83:13:d8:c0:84:8d:c4:52:af: e5:ff:7b:51:b0:8a:55:5c:a1:f0:36:35:81:5c:5e: 22:99:b1:4b:b1:28:96:33:f7:8e:cf:40:36:c9:f1: 33:71:b6:07:a8:c3:11:a5:12:a6:45:64:ed:82:96: ee:7a:88:6c:4a:e1:f7:1e:ba:0a:d7:71:85:3f:33: ac:e3:c0:a4:d7:6f:be:63:08:4a:c5:43:3d:a4:04: 0d:2f:cb:e8:df:9f:97:26:72:6b:b1:2d:88:51:30: b0:8c:3a:17:d2:f3:e3:ab:a2:b7:60:20:b0:92:30: cd:c4:32:64:4c:36:24:d4:90:87:4b:1d:8d:8f:66: 6f:50:5c:5c:24:3b:c6:1a:8b:e5:d0:00:00:34:6a: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:90:FE:B4:F2:7D:3F:21:14:89:F2:BB:B9:C4:2D:6E:9D:C7:E0:9B X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:31:84:2b:f4:d9:52:d1:e8:cc:6e:27:dd:fd:1a:3d:14:b5: f5:12:42:a3:01:34:3f:fa:2e:d2:af:cb:ef:16:3b:d2:a0:22: 07:1e:a5:6e:aa:31:d0:39:5e:a2:89:ff:91:5d:1e:37:ac:1d: 60:99:4a:25:5f:c0:9e:ea:70:53:4c:89:01:57:a1:72:7f:f6: 5b:90:ae:6c:12:46:c1:92:d4:51:18:32:2d:ba:04:c7:84:7f: 0b:66:f2:d7:24:56:94:fa:9c:2a:e4:3a:d2:ae:f7:a0:b2:3a: 17:65:be:6c:cc:da:02:d1:63:77:82:8e:7c:d0:a4:f7:f7:79: fa:32:56:1d:13:00:a8:ad:29:ee:80:c0:e3:81:ef:43:2d:5a: ad:2d:e7:3c:b8:0d:34:2c:01:4d:aa:49:51:01:c5:c8:d3:71: 66:46:54:b1:3e:00:d1:66:5c:cc:5b:65:37:6f:0b:96:b4:70: 28:ab:f0:5b:d6:fd:f4:f3:40:14:da:b7:75:f6:45:05:23:84: 75:6a:62:b0:39:6a:7a:d1:84:c5:3d:c4:0b:07:a5:a0:3d:fb: dd:41:44:b2:1b:7b:ad:c3:74:d6:07:fd:a8:0a:70:37:7d:7c: 79:70:7c:93:5a:6d:98:ad:e0:02:07:ed:b5:e8:35:2b:c7:fb: 25:3a:e2:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjQwNTAyMjE0NTA0WhcNMjQwNTA5MjE0NTA0WjAYMRYwFAYD VQQDEw02NjM0MDk2MC01OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6e5IqyHFNeWT2ceyHJ3xULDhd/wk1tuUrGn/UCq7hkaK9j90t+J5QCK0SC8g 9w2nqFHChEJOavccy4LHr2d8S9qN5m6u0Qvtv2N3soffVxXFL5QiSucaLr8sRy1p i+T4+4YTu/VawTMlP4UOZR6DE9jAhI3EUq/l/3tRsIpVXKHwNjWBXF4imbFLsSiW M/eOz0A2yfEzcbYHqMMRpRKmRWTtgpbueohsSuH3HroK13GFPzOs48Ck12++YwhK xUM9pAQNL8vo35+XJnJrsS2IUTCwjDoX0vPjq6K3YCCwkjDNxDJkTDYk1JCHSx2N j2ZvUFxcJDvGGovl0AAANGoQGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+Q/rTy fT8hFInyu7nELW6dx+CbMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDMYQr9NlS0ejMbifd/Ro9FLX1EkKjATQ/+i7Sr8vvFjvSoCIHHqVu qjHQOV6iif+RXR43rB1gmUolX8Ce6nBTTIkBV6Fyf/ZbkK5sEkbBktRRGDItugTH hH8LZvLXJFaU+pwq5DrSrvegsjoXZb5szNoC0WN3go580KT393n6MlYdEwCorSnu gMDjge9DLVqtLec8uA00LAFNqklRAcXI03FmRlSxPgDRZlzMW2U3bwuWtHAoq/Bb 1v3080AU2rd19kUFI4R1amKwOWp60YTFPcQLB6WgPfvdQUSyG3utw3TWB/2oCnA3 fXx5cHyTWm2YreACB+216DUrx/slOuKw -----END CERTIFICATE-----Generated at Thu May 2 23:03:12 2024 by rpki-client on console-fra.rpki-client.org