$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: K0kf435uU1LuC3hxE7blOcgQiwUmRX72TwOmoxvrzHo= Subject key identifier: 9E:B2:33:9F:F6:3E:19:BC:C0:43:96:E1:B0:8D:E9:77:74:12:FA:03 Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 050A Signing time: Thu 25 Apr 2024 01:06:35 +0000 Manifest this update: Thu 25 Apr 2024 01:06:35 +0000 Manifest next update: Thu 02 May 2024 01:06:35 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: RBPkoDmjo+EgNonGpBmmJOTgSfdkElM7/3DO2ThlY9s=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: OAimnt8ZZgQlJ7vQdOdcaTxcOwaW1n4H+FyHEmWqyl0=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: 7sFZvjQNTjQXVsm4KlLbxGcb+EV8i8lYv+qJuHTAdPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Apr 25 01:06:35 2024 GMT Not After : May 2 01:06:35 2024 GMT Subject: CN=6629ac9b-276a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3e:a9:ba:92:69:7a:ff:05:8e:86:e1:01:2b: 4f:d7:6d:a7:b4:38:3d:9f:e1:6c:ca:01:03:48:16: e0:5f:59:ab:91:eb:82:0b:ed:80:67:4f:d2:a7:f1: ee:b9:29:54:a5:88:c8:5e:96:7c:7f:f3:cb:cb:53: 9a:cd:41:eb:8a:30:66:54:05:c7:61:b2:c6:fe:8c: b9:53:91:c8:01:56:15:d0:40:b7:9a:de:11:fb:47: a8:5e:85:6b:5c:da:99:7c:cc:c8:55:b8:ee:0e:68: b1:0f:db:02:2a:33:ff:06:f9:4b:90:67:36:54:2d: 6b:ca:07:f5:c8:7e:c8:f4:91:e8:fd:0f:ef:b5:3d: cc:ad:48:94:0f:7f:ca:bb:3c:93:a8:20:15:c8:2a: 28:14:bf:92:3b:ec:b0:33:ee:67:55:1f:b0:70:df: 4f:b6:31:3c:5e:5f:ae:65:1a:d5:ce:07:5c:bf:c6: 24:1f:1e:8a:0b:a1:fa:aa:ed:02:ea:64:30:73:5c: 33:a6:41:00:aa:91:0d:af:91:7c:d6:87:ca:54:58: 9a:96:2c:80:1b:83:7d:11:ca:ff:a8:d9:ee:e2:53: 7c:70:07:5b:61:8c:6a:24:41:7a:04:ca:a2:86:80: ca:c5:ad:14:02:e3:a9:2b:9f:63:c5:b7:2f:82:1f: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:33:9F:F6:3E:19:BC:C0:43:96:E1:B0:8D:E9:77:74:12:FA:03 X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:01:a2:0d:42:70:9a:85:e7:bc:89:41:19:96:8e:8d:af: da:bd:7c:66:16:69:80:d4:1c:e3:64:1e:f6:88:6d:86:61:07: 2e:4d:31:c7:a7:a9:5f:ba:d8:5d:fb:8e:11:c4:82:07:06:c5: 47:c4:db:c2:8c:a4:22:9b:5c:86:2f:42:13:c6:27:e6:39:6d: 4c:01:90:ea:9b:18:f5:e9:49:78:87:d1:dd:31:5b:11:94:fb: 3d:16:f1:b0:2c:fb:e9:18:40:35:30:49:88:84:86:07:90:b3: 66:85:d0:13:72:16:cf:9a:81:7f:23:da:24:8c:73:2f:c8:6e: 21:1b:b7:6e:71:db:5d:f4:03:ca:cf:68:6f:58:9f:32:f2:bc: 7e:bb:55:a7:e4:d7:8f:83:dd:9f:1c:7f:58:05:ad:c4:50:65: 14:de:97:d9:8b:eb:39:5c:44:a8:1d:c1:58:64:4c:1d:d2:77: b2:40:9f:04:86:ef:57:a4:1d:6b:a2:65:10:69:47:56:d5:7f: f5:a7:82:50:6d:5d:be:06:68:4b:b2:ec:fd:ac:99:b2:d1:7e: a5:30:3b:af:f6:95:9c:ff:c8:2d:7d:d3:2f:6a:30:0a:29:c0: 47:ff:7b:9b:8e:ca:f5:f0:c4:be:e9:47:e0:a5:dd:42:b2:12: 9e:b7:31:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjQwNDI1MDEwNjM1WhcNMjQwNTAyMDEwNjM1WjAYMRYwFAYD VQQDEw02NjI5YWM5Yi0yNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4D6pupJpev8FjobhAStP122ntDg9n+FsygEDSBbgX1mrkeuCC+2AZ0/Sp/Hu uSlUpYjIXpZ8f/PLy1OazUHrijBmVAXHYbLG/oy5U5HIAVYV0EC3mt4R+0eoXoVr XNqZfMzIVbjuDmixD9sCKjP/BvlLkGc2VC1rygf1yH7I9JHo/Q/vtT3MrUiUD3/K uzyTqCAVyCooFL+SO+ywM+5nVR+wcN9PtjE8Xl+uZRrVzgdcv8YkHx6KC6H6qu0C 6mQwc1wzpkEAqpENr5F81ofKVFialiyAG4N9Ecr/qNnu4lN8cAdbYYxqJEF6BMqi hoDKxa0UAuOpK59jxbcvgh/SAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6yM5/2 Phm8wEOW4bCN6Xd0EvoDMB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC6gGiDUJwmoXnvIlBGZaOja/avXxmFmmA1BzjZB72iG2GYQcuTTHH p6lfuthd+44RxIIHBsVHxNvCjKQim1yGL0ITxifmOW1MAZDqmxj16Ul4h9HdMVsR lPs9FvGwLPvpGEA1MEmIhIYHkLNmhdATchbPmoF/I9okjHMvyG4hG7ducdtd9APK z2hvWJ8y8rx+u1Wn5NePg92fHH9YBa3EUGUU3pfZi+s5XESoHcFYZEwd0neyQJ8E hu9XpB1romUQaUdW1X/1p4JQbV2+BmhLsuz9rJmy0X6lMDuv9pWc/8gtfdMvajAK KcBH/3ubjsr18MS+6Ufgpd1CshKetzFr -----END CERTIFICATE-----Generated at Thu Apr 25 02:05:26 2024 by rpki-client on console-fra.rpki-client.org