$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft File: SkTgEhvolIv3vEnLA6Y4F6W60YY.mft (raw, json) Hash identifier: 3nxrO9f/QBcq4oyBsFguZlfgSOwpi410rn0idsVsUE4= Subject key identifier: 18:64:C6:64:6D:23:C4:13:89:3E:9D:5D:84:8E:6D:AA:8D:52:46:1A Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0E4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft Manifest number: 0E46 Signing time: Thu 02 May 2024 18:29:25 +0000 Manifest this update: Thu 02 May 2024 18:29:24 +0000 Manifest next update: Thu 09 May 2024 18:29:24 +0000 Files and hashes: 1: SkTgEhvolIv3vEnLA6Y4F6W60YY.crl (hash: 9AClNgzwX01lZgvRqk/4qn/FmP6Tcuz8YhjVfkYAI6c=) 2: DBB5A81E77D611E98792C466C4F9AE02.roa (hash: rYh7DLX0QOpcJaWgIoBnQP4DTxgE7Xhb6DwQPEWKynA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3662 (0xe4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: May 2 18:29:24 2024 GMT Not After : May 9 18:29:24 2024 GMT Subject: CN=6633db85-d8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:b6:17:9d:df:b5:a7:72:20:71:f2:f1:8a: b6:72:fd:c0:f8:c0:04:d0:f7:8e:f9:27:ab:9a:f1: de:29:b8:d2:16:4c:28:a0:5a:cd:c8:36:f8:28:fd: b7:88:e7:f5:8f:e3:6b:ff:4b:19:13:97:7f:ea:e7: 65:44:69:45:39:76:7f:29:35:87:1c:81:99:a5:cf: 92:ef:5a:c3:c1:92:bc:57:01:d8:8f:ba:b1:ea:a1: b9:7b:6d:9d:d7:83:e4:86:2c:e7:ee:d1:2a:01:8e: fd:5f:06:c5:fb:03:4c:fd:28:24:59:7a:47:10:e6: e9:e9:05:3a:e6:1e:ae:e8:54:a3:b6:f3:ba:f5:c3: fe:42:6b:45:01:ae:6a:85:57:9a:78:4e:5c:8a:6e: a1:5d:3c:69:e1:0b:5c:18:83:91:a4:8a:f0:1e:00: 2a:08:15:fd:dd:9f:39:85:b0:23:39:d9:8e:16:89: 15:e4:04:a2:16:38:11:5e:fd:73:1b:cf:4e:12:b9: 3c:a3:df:c1:25:c0:3a:62:ce:4a:41:c3:ed:71:4f: 79:86:5b:c5:f6:8c:fc:4b:a5:81:47:1c:1d:77:bb: b0:4d:42:72:ab:45:6d:8a:1a:ca:63:0a:41:e4:ed: 14:76:7d:84:8b:30:c9:2b:16:8d:1b:cc:cd:db:bd: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:64:C6:64:6D:23:C4:13:89:3E:9D:5D:84:8E:6D:AA:8D:52:46:1A X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:93:c6:aa:ae:af:f2:d4:32:c9:7e:6d:56:00:44:ec:02:46: 40:63:68:53:bb:a4:b8:ff:90:5c:dd:d9:6c:b8:5a:82:86:0e: 1b:d9:d9:25:a8:29:6f:9f:19:76:71:34:d6:26:01:8d:76:47: 10:bb:41:a0:55:e7:10:b5:48:f4:1c:00:47:fc:a3:51:4d:b2: 42:8f:a5:5e:ae:da:6f:a2:82:aa:e0:3f:7a:ff:dd:9c:d2:3b: 18:95:6a:70:0e:30:08:3b:66:43:d5:38:2c:2b:7d:f3:fe:ad: 59:2e:8a:99:8a:21:77:bb:5d:98:22:69:e3:eb:3a:57:f3:d5: cc:e5:19:92:0e:46:7b:24:ca:76:6e:28:ad:3f:73:51:56:ca: a3:c4:80:5f:bc:03:36:81:77:a4:0f:77:c3:0a:f6:ed:10:4f: b2:6b:4f:9d:9b:4e:09:b1:c0:c1:09:23:0e:05:74:f1:c9:34: d3:15:f4:17:6a:eb:17:81:23:5f:75:e3:2e:d7:4b:ce:e4:04: e1:3c:1d:eb:a9:da:f8:6c:47:ca:15:bf:2d:fd:e7:9b:50:13: 0f:cf:ac:f1:30:64:01:8b:ae:ca:93:97:80:8e:74:a7:df:22: 7f:95:c3:c2:f4:ae:50:e2:2f:a3:2f:b5:1e:08:99:bb:40:9a: 9b:2c:28:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjQwNTAyMTgyOTI0WhcNMjQwNTA5MTgyOTI0WjAYMRYwFAYD VQQDEw02NjMzZGI4NS1kOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN22F53ftadyIHHy8Yq2cv3A+MAE0PeO+SermvHeKbjSFkwooFrNyDb4KP23 iOf1j+Nr/0sZE5d/6udlRGlFOXZ/KTWHHIGZpc+S71rDwZK8VwHYj7qx6qG5e22d 14Pkhizn7tEqAY79XwbF+wNM/SgkWXpHEObp6QU65h6u6FSjtvO69cP+QmtFAa5q hVeaeE5cim6hXTxp4QtcGIORpIrwHgAqCBX93Z85hbAjOdmOFokV5ASiFjgRXv1z G89OErk8o9/BJcA6Ys5KQcPtcU95hlvF9oz8S6WBRxwdd7uwTUJyq0VtihrKYwpB 5O0Udn2EizDJKxaNG8zN2727iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhkxmRt I8QTiT6dXYSObaqNUkYaMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZCOC9BQjk1QjVBODc3RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJ djN2RW5MQTZZNEY2VzYwWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHk8aqrq/y1DLJfm1WAETsAkZAY2hTu6S4/5Bc3dlsuFqChg4b2dkl qClvnxl2cTTWJgGNdkcQu0GgVecQtUj0HABH/KNRTbJCj6VertpvooKq4D96/92c 0jsYlWpwDjAIO2ZD1TgsK33z/q1ZLoqZiiF3u12YImnj6zpX89XM5RmSDkZ7JMp2 biitP3NRVsqjxIBfvAM2gXekD3fDCvbtEE+ya0+dm04JscDBCSMOBXTxyTTTFfQX ausXgSNfdeMu10vO5AThPB3rqdr4bEfKFb8t/eebUBMPz6zxMGQBi67Kk5eAjnSn 3yJ/lcPC9K5Q4i+jL7UeCJm7QJqbLCiJ -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org