$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: kHLdDS7DLmyEwHcNdTFp34byLsAFl5AVX86wlKggyFs= Subject key identifier: C0:88:AE:95:86:46:3C:A2:B8:EF:A1:59:D6:CC:34:75:32:2D:E0:23 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 49 Signing time: Wed 15 May 2024 08:06:53 +0000 Manifest this update: Wed 15 May 2024 08:06:53 +0000 Manifest next update: Wed 22 May 2024 08:06:53 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: VCeE0jvpPNjblzmTZoszosd3jn2dHGq8x5kg6eS1avU=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: Xh+MGu12tgl7voXzFMI2DGlIzd0kNkkJcIaIlHXdZcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: May 15 08:06:53 2024 GMT Not After : May 22 08:06:53 2024 GMT Subject: CN=66446d1d-5fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:ce:0d:7a:9e:6a:69:3d:19:fc:87:3d:5f: de:8f:86:4b:92:a3:89:9d:5f:88:b2:7d:3b:a4:da: 96:0e:d9:00:b5:91:73:43:d7:e8:06:51:7a:5b:92: 32:09:40:f9:5e:a1:35:36:00:c8:5c:e1:fa:aa:e5: 92:2e:26:2b:13:1a:65:2b:e5:47:cd:00:56:47:f3: b0:ca:15:8a:fe:0e:6b:fc:7f:ec:46:7a:5f:98:43: 5d:ec:ab:1f:e6:df:55:bf:2f:79:08:03:9e:be:d3: a5:83:41:c7:2f:7a:7f:00:9e:ec:24:f8:de:ec:2a: 37:0e:5e:4b:ea:2c:47:6f:16:10:2b:eb:a8:38:17: 9b:8c:cc:72:2f:7e:9a:b5:8b:18:fe:f8:37:25:77: 8b:15:d0:0e:7a:56:3e:c7:b4:da:d8:78:fa:d6:83: 7c:eb:31:2e:da:4a:f4:3a:1a:57:f1:9e:bb:b2:af: 6a:ad:cb:56:35:80:bd:39:34:8e:42:19:03:cd:96: d6:59:02:f8:15:43:c8:15:51:2d:00:64:56:a6:48: 35:13:61:ce:41:e8:16:e4:2c:60:d3:25:2b:62:9e: ca:7a:9c:94:dc:31:a7:68:58:f2:f6:fa:fa:36:89: d2:79:87:c1:3a:8f:78:69:55:13:fb:3c:8f:28:b0: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:AE:95:86:46:3C:A2:B8:EF:A1:59:D6:CC:34:75:32:2D:E0:23 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:17:23:c8:54:27:3f:59:c5:57:5a:55:42:88:ef:85:ed:74: bc:5e:bd:a8:c7:20:4a:e4:46:a8:1b:ca:d0:38:cd:d4:e7:3c: ad:ce:3a:c7:11:28:2e:3b:63:b0:0f:41:dc:16:ec:ee:b8:a3: dd:51:53:c6:56:a4:99:91:ab:e8:46:f2:79:a6:91:75:95:e4: 75:77:fa:b6:9b:18:c3:23:8e:c4:a1:c4:7e:42:36:5e:50:19: 59:70:bf:03:5c:9a:10:e2:30:03:4d:91:07:33:58:d8:99:a5: 9e:2a:89:e9:20:cc:76:14:89:3f:a6:45:de:7d:9a:32:45:ee: 70:c8:11:28:5b:b9:1a:c6:5f:52:88:42:66:b6:d0:46:7e:a4: 16:1e:c8:f2:61:de:8e:d9:6f:e8:13:a3:b4:a2:e3:c1:39:34: 01:fb:92:82:ba:4b:a1:28:43:be:1a:e8:b9:a0:4a:1a:f6:81: d2:a1:5c:d8:d9:78:37:41:6c:fb:08:fd:ed:30:27:32:c0:4b: 42:8a:d9:f7:6c:66:6c:1b:74:0f:04:e1:e4:21:f4:b8:62:80: a8:8d:6d:40:fb:04:5f:61:df:89:6a:f7:aa:0b:f6:c7:42:51: de:4b:a2:db:82:08:29:a2:69:b0:83:2d:02:b9:5d:a6:49:02: e4:16:92:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzIxMjExMC8GA1UEBRMoRDA1QUM5MEEyMDdGNjA4N0NFMDJFREMyMzE4OEUzMkFB QTFCMUI0NDAeFw0yNDA1MTUwODA2NTNaFw0yNDA1MjIwODA2NTNaMBgxFjAUBgNV BAMTDTY2NDQ2ZDFkLTVmYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOK84Nep5qaT0Z/Ic9X96PhkuSo4mdX4iyfTuk2pYO2QC1kXND1+gGUXpbkjIJ QPleoTU2AMhc4fqq5ZIuJisTGmUr5UfNAFZH87DKFYr+Dmv8f+xGel+YQ13sqx/m 31W/L3kIA56+06WDQccven8Anuwk+N7sKjcOXkvqLEdvFhAr66g4F5uMzHIvfpq1 ixj++Dcld4sV0A56Vj7HtNrYePrWg3zrMS7aSvQ6Glfxnruyr2qty1Y1gL05NI5C GQPNltZZAvgVQ8gVUS0AZFamSDUTYc5B6BbkLGDTJStinsp6nJTcMadoWPL2+vo2 idJ5h8E6j3hpVRP7PI8osFF7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwIiulYZG PKK476FZ1sw0dTIt4CMwHwYDVR0jBBgwFoAU0FrJCiB/YIfOAu3CMYjjKqobG0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjEyLzRCMjMzRUVBQTJE MDExRUU5M0E4OEYzREM0RjlBRTAyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEZySkNpQl9ZSWZPQXUzQ01ZampLcW9iRzBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MjEyLzRCMjMzRUVBQTJEMDExRUU5M0E4OEYzREM0RjlBRTAyLzBGckpDaUJfWUlm T0F1M0NNWWpqS3FvYkcwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8XI8hUJz9ZxVdaVUKI74XtdLxevajHIErkRqgbytA4zdTnPK3OOscR KC47Y7APQdwW7O64o91RU8ZWpJmRq+hG8nmmkXWV5HV3+rabGMMjjsShxH5CNl5Q GVlwvwNcmhDiMANNkQczWNiZpZ4qiekgzHYUiT+mRd59mjJF7nDIEShbuRrGX1KI Qma20EZ+pBYeyPJh3o7Zb+gTo7Si48E5NAH7koK6S6EoQ74a6LmgShr2gdKhXNjZ eDdBbPsI/e0wJzLAS0KK2fdsZmwbdA8E4eQh9LhigKiNbUD7BF9h34lq96oL9sdC Ud5LotuCCCmiabCDLQK5XaZJAuQWksY= -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org