$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft File: 19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json) Hash identifier: LnIg6gfKc3nLyg6pDc6M5ZfQ5l7ZFNOaXlLnuHU+JGs= Subject key identifier: FC:B0:7B:80:98:2A:E4:0C:81:79:90:77:CC:2B:6F:3B:F8:3A:9E:D3 Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF Certificate issuer: /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft Manifest number: 03E3 Signing time: Fri 03 May 2024 02:22:17 +0000 Manifest this update: Fri 03 May 2024 02:22:16 +0000 Manifest next update: Fri 10 May 2024 02:22:16 +0000 Files and hashes: 1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: Ud6BmNxjFyBsDvTjmzMil8xYSTB4zir4ufcc/vgQNVw=) 2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: DjIcsEcGW+RQJxR7flsVKV54qge0kODAwN30jcsuees=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Validity Not Before: May 3 02:22:16 2024 GMT Not After : May 10 02:22:16 2024 GMT Subject: CN=66344a59-2fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:61:f7:52:73:57:8d:d0:aa:ef:be:fb:7e: f0:98:24:d4:c7:e7:9e:b4:eb:59:fd:94:3b:43:2a: f2:4b:f8:da:d7:ed:ad:39:58:6a:0a:e0:ac:c4:6e: 33:a0:c1:cc:77:c9:12:de:52:97:b7:1e:3f:22:b9: 3f:7b:64:0d:9b:67:53:95:0b:91:2d:70:9c:ca:f6: 68:e5:5e:81:3c:59:5b:93:ed:7c:d4:2c:64:fb:a0: 82:28:41:fb:51:34:5d:a6:9a:f3:26:6c:29:9e:26: 52:fc:61:0f:ea:d5:0b:a1:09:54:48:13:84:82:ff: cd:15:f2:7e:c8:0c:d3:b8:c0:9e:0b:b6:fb:51:b7: 84:d6:2d:c7:bb:6f:4c:a3:ac:62:8d:92:42:33:7f: 56:0c:c2:fd:f2:ad:85:6c:6c:c2:06:c3:a7:21:11: 61:62:59:7f:8f:bb:b3:fa:ad:08:a8:94:69:27:e4: 04:41:fd:42:36:b3:90:2b:d7:cb:d9:12:a9:23:34: 5e:61:e7:51:e4:53:50:76:bb:fe:db:0b:ab:42:b4: 8c:a9:e9:b2:0e:77:43:73:4a:f0:2f:19:38:e5:ab: a7:98:d5:d5:de:6e:e7:89:21:cc:f8:d2:f1:a0:46: 10:25:e7:b8:a6:7c:6b:b5:78:58:6c:42:e4:8b:86: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B0:7B:80:98:2A:E4:0C:81:79:90:77:CC:2B:6F:3B:F8:3A:9E:D3 X509v3 Authority Key Identifier: keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:be:39:a2:1c:bc:70:ef:79:57:49:a7:1b:60:ee:0c:25:51: b5:fa:6f:87:70:7e:3b:31:50:cd:71:e9:cc:50:51:5b:48:49: fe:59:4b:60:30:a6:95:43:bf:7c:e2:15:ba:f1:52:03:fb:dd: 50:2c:c8:e9:3d:c5:31:1d:75:d4:94:73:29:e6:7b:1f:29:04: e8:84:e5:15:57:e3:10:5c:a1:c4:d6:46:b8:62:7f:79:39:5d: c6:12:ef:67:02:32:25:92:8c:df:53:77:b9:42:17:f0:bb:53: 6f:5e:5a:6d:ea:da:a6:6e:4a:ad:4a:23:87:13:d1:e8:fc:a3: 6b:e9:8d:d0:ec:87:3b:35:21:05:1f:4f:5b:b4:41:d2:5c:d6: 4c:fc:9e:9d:94:ed:a9:33:c8:3a:c8:8d:b3:32:97:af:01:bc: 32:10:40:76:bf:b2:72:ef:ae:3c:4e:86:97:9a:57:67:e9:78: 60:d1:b5:36:04:9b:c1:f9:de:4e:dd:cc:0a:16:e7:6f:e1:78: 5a:a8:57:fc:40:84:2c:01:a1:cd:32:34:c9:1f:c9:90:94:25: 0b:cf:ac:c9:ca:09:61:25:13:14:55:f7:93:92:fb:38:a9:c0: f4:91:46:28:5c:19:71:a0:35:6b:a4:2d:84:90:8e:55:7e:83: e1:f4:04:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwQjgxMTAvBgNVBAUTKEQ3REMwNDkwRDhFRTczRUI5NjUzRThFMjQ3NkZGQ0ZC ODk3NEFBREYwHhcNMjQwNTAzMDIyMjE2WhcNMjQwNTEwMDIyMjE2WjAYMRYwFAYD VQQDEw02NjM0NGE1OS0yZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu79h91JzV43Qqu+++37wmCTUx+eetOtZ/ZQ7QyryS/ja1+2tOVhqCuCsxG4z oMHMd8kS3lKXtx4/Irk/e2QNm2dTlQuRLXCcyvZo5V6BPFlbk+181Cxk+6CCKEH7 UTRdpprzJmwpniZS/GEP6tULoQlUSBOEgv/NFfJ+yAzTuMCeC7b7UbeE1i3Hu29M o6xijZJCM39WDML98q2FbGzCBsOnIRFhYll/j7uz+q0IqJRpJ+QEQf1CNrOQK9fL 2RKpIzReYedR5FNQdrv+2wurQrSMqemyDndDc0rwLxk45aunmNXV3m7niSHM+NLx oEYQJee4pnxrtXhYbELki4aXVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPywe4CY KuQMgXmQd8wrbzv4Op7TMB8GA1UdIwQYMBaAFNfcBJDY7nPrllPo4kdv/PuJdKrf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTBCOC8xN0RFRkYxNDJG RjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMtdVdVLWppUjJfOC00bDBx dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE5d0VrTmp1Yy11V1UtamlSMl84LTRsMHF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTBCOC8xN0RFRkYxNDJGRjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMt dVdVLWppUjJfOC00bDBxdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEvjmiHLxw73lXSacbYO4MJVG1+m+HcH47MVDNcenMUFFbSEn+WUtg MKaVQ7984hW68VID+91QLMjpPcUxHXXUlHMp5nsfKQTohOUVV+MQXKHE1ka4Yn95 OV3GEu9nAjIlkozfU3e5Qhfwu1NvXlpt6tqmbkqtSiOHE9Ho/KNr6Y3Q7Ic7NSEF H09btEHSXNZM/J6dlO2pM8g6yI2zMpevAbwyEEB2v7Jy7648ToaXmldn6Xhg0bU2 BJvB+d5O3cwKFudv4XhaqFf8QIQsAaHNMjTJH8mQlCULz6zJyglhJRMUVfeTkvs4 qcD0kUYoXBlxoDVrpC2EkI5VfoPh9ARw -----END CERTIFICATE-----Generated at Fri May 3 04:45:19 2024 by rpki-client on console-fra.rpki-client.org