$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft File: L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json) Hash identifier: 9+6rDJ8eXeeqJPtzansqKTVmEQqK98GmVwNx4KzWl6c= Subject key identifier: 83:19:3D:6D:1B:9E:0F:82:DF:82:08:86:F8:68:0D:8C:FC:1D:A2:84 Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft Manifest number: 0289 Signing time: Tue 07 May 2024 03:39:24 +0000 Manifest this update: Tue 07 May 2024 03:39:23 +0000 Manifest next update: Tue 14 May 2024 03:39:23 +0000 Files and hashes: 1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: Nz/z1FDupxiOmiwtBLq4s8HPcDQUl962OVZZUYOUsiA=) 2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: e5jtBOHOC98UGGoKqmozb8Xav7xhNA4e4v4grnTBN5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Validity Not Before: May 7 03:39:23 2024 GMT Not After : May 14 03:39:23 2024 GMT Subject: CN=6639a26b-f5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:fb:eb:d2:74:32:a6:d8:74:05:e1:fa:60: a2:e6:fe:50:15:ec:fb:74:0d:a7:b6:57:dd:3b:04: dd:02:33:a7:44:3e:66:9c:9c:d0:e1:2c:50:f4:12: f5:d8:8b:fc:d4:ec:45:d2:fa:8a:23:cb:66:2a:43: 4a:c9:0e:40:10:c9:cb:25:c1:08:6e:f5:aa:1c:6b: 6c:78:8f:4b:81:c6:ed:96:87:39:95:92:0f:92:32: 05:1c:3d:06:58:da:6a:2b:e8:e5:88:2c:7f:23:a7: 17:e6:ac:73:fb:60:7f:3d:b5:ee:ad:c6:6b:f8:34: 73:bb:b6:b1:57:6a:88:fd:3c:22:1d:96:88:57:51: 3c:0d:dd:07:fd:c8:27:6c:35:e2:69:e1:c0:e4:f3: 97:c8:c5:8d:0e:92:5a:0b:9f:e6:a3:67:0c:dd:39: c6:f6:2d:6b:cd:be:a9:84:37:06:2f:a7:c1:ca:9b: ef:5f:1d:4f:dd:f3:26:c6:35:0a:45:4c:8e:70:b0: b0:5b:85:e2:b6:1e:6c:e1:d9:c1:69:5a:d1:c7:a5: 0a:79:fc:34:3e:6d:cd:d7:cc:e0:1d:c5:bc:67:d3: be:06:33:3a:71:17:ed:85:4a:a1:d1:08:b8:bb:64: 61:c3:23:3b:f1:47:63:76:f4:2a:62:08:fa:0d:25: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:19:3D:6D:1B:9E:0F:82:DF:82:08:86:F8:68:0D:8C:FC:1D:A2:84 X509v3 Authority Key Identifier: keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:7b:c5:14:2e:18:20:76:2c:14:e8:99:87:9a:b4:dc:8a:8e: 56:88:72:ec:42:25:1e:31:fb:5d:d6:ef:26:40:1a:2f:6e:c3: af:99:e2:83:bb:4a:6d:56:27:72:2c:c2:8b:92:e6:0f:50:f1: 49:3b:78:9f:a4:aa:8e:0e:3f:02:c4:5f:a2:f2:1c:4a:38:6a: 95:b5:c1:53:31:1d:21:bb:90:ef:fd:74:b9:2c:e0:b3:8e:65: 94:4a:e0:62:69:4b:28:f9:50:d6:cf:db:52:9a:50:8b:0b:a2: 27:b8:ec:5f:ab:4e:48:d9:77:b5:b5:bc:69:4a:08:d6:e7:8d: 20:7d:26:20:04:34:2a:79:2d:c3:79:35:1b:51:64:f6:e1:c6: 49:db:71:5e:60:a1:23:10:1f:d1:db:5a:7c:ff:e3:37:b0:4d: 78:b8:95:e2:ba:85:48:7e:a3:d9:52:4f:0c:a4:83:d9:9f:22: 16:64:53:9e:f9:bf:13:7f:0f:5e:b9:a8:97:53:b3:fb:c3:75: fc:fd:8b:63:c5:74:df:06:4c:67:df:79:05:51:99:91:cc:f7: a1:d7:19:ef:c2:56:f5:c0:fa:e2:ab:57:2d:b2:ca:b1:d8:ee: f1:a9:41:ab:d6:66:fc:43:27:41:4a:96:b9:3f:58:cd:09:0a: d4:ea:f3:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQjAxMTAvBgNVBAUTKDJGRERCQjQ1RjM0RjI2MTkzM0FDMkI3RDY3QUM3M0Qz OTNBOUQxNjQwHhcNMjQwNTA3MDMzOTIzWhcNMjQwNTE0MDMzOTIzWjAYMRYwFAYD VQQDEw02NjM5YTI2Yi1mNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv3769J0MqbYdAXh+mCi5v5QFez7dA2ntlfdOwTdAjOnRD5mnJzQ4SxQ9BL1 2Iv81OxF0vqKI8tmKkNKyQ5AEMnLJcEIbvWqHGtseI9Lgcbtloc5lZIPkjIFHD0G WNpqK+jliCx/I6cX5qxz+2B/PbXurcZr+DRzu7axV2qI/TwiHZaIV1E8Dd0H/cgn bDXiaeHA5POXyMWNDpJaC5/mo2cM3TnG9i1rzb6phDcGL6fBypvvXx1P3fMmxjUK RUyOcLCwW4Xith5s4dnBaVrRx6UKefw0Pm3N18zgHcW8Z9O+BjM6cRfthUqh0Qi4 u2RhwyM78UdjdvQqYgj6DSXYawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMZPW0b ng+C34IIhvhoDYz8HaKEMB8GA1UdIwQYMBaAFC/du0XzTyYZM6wrfWesc9OTqdFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNCMC82MTg2NzMyQ0I5 MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpoa3pyQ3Q5WjZ4ejA1T3Aw V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5MjdSZk5QSmhrenJDdDlaNnh6MDVPcDBXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNCMC82MTg2NzMyQ0I5MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpo a3pyQ3Q5WjZ4ejA1T3AwV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7e8UULhggdiwU6JmHmrTcio5WiHLsQiUeMftd1u8mQBovbsOvmeKD u0ptVidyLMKLkuYPUPFJO3ifpKqODj8CxF+i8hxKOGqVtcFTMR0hu5Dv/XS5LOCz jmWUSuBiaUso+VDWz9tSmlCLC6InuOxfq05I2Xe1tbxpSgjW540gfSYgBDQqeS3D eTUbUWT24cZJ23FeYKEjEB/R21p8/+M3sE14uJXiuoVIfqPZUk8MpIPZnyIWZFOe +b8Tfw9euaiXU7P7w3X8/YtjxXTfBkxn33kFUZmRzPeh1xnvwlb1wPriq1ctssqx 2O7xqUGr1mb8QydBSpa5P1jNCQrU6vNr -----END CERTIFICATE-----Generated at Tue May 7 04:34:50 2024 by rpki-client on console-fra.rpki-client.org