$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: MLkVVREPquj955Dx5hfVPmQs9nN445bMGO97pNwJF5I= Subject key identifier: 66:F3:B6:87:99:DF:C4:CD:C9:D7:CC:75:7A:3C:09:0C:DD:F4:AC:74 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0B7D Signing time: Thu 02 May 2024 19:35:10 +0000 Manifest this update: Thu 02 May 2024 19:35:09 +0000 Manifest next update: Thu 09 May 2024 19:35:09 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: WdS15GB3pFOA4a/1PCDPPhWKdvL7OFfpIKxb+6gGAgA=) 2: A531869E063511EFA8F7035EC4F9AE02.roa (hash: 4SyutlgXRpYCJoB3j4MTa+eQHwfmzMJ8xgBt9Ug7nzU=) 3: E3A83166063511EF81D98D5EC4F9AE02.roa (hash: JY/9Mrotlj4kyV7+9fbvlzU4R5g8Z2UU9l54u689StU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2956 (0xb8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: May 2 19:35:09 2024 GMT Not After : May 9 19:35:09 2024 GMT Subject: CN=6633eaed-1298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:74:61:43:fa:67:d4:4e:81:75:8d:51:6f: 1a:2c:a5:93:38:a2:16:86:55:a2:1c:38:f9:29:0b: 00:2d:95:53:15:20:a7:b5:39:9b:7a:9d:9f:f9:2b: 2b:d1:be:37:b4:a2:e1:0d:89:3e:1b:6c:b2:ba:94: 2f:9b:2e:89:3b:52:2c:4d:79:01:7b:ee:ba:c4:14: d1:75:8b:46:1c:3f:46:96:da:ed:98:26:5f:4b:57: 6c:16:60:23:e8:31:78:32:b9:62:a0:a4:9b:04:b2: 51:65:d5:96:2d:44:f7:38:0d:62:2e:5e:81:f5:90: 9c:be:bc:83:64:65:31:b2:a5:03:93:82:fc:fb:80: 1a:5b:00:c1:ea:15:b2:8f:92:c9:87:c5:50:93:38: be:5d:93:cd:89:1d:6d:e5:44:24:70:0c:60:57:ca: 74:10:c8:41:e4:07:77:12:d8:4c:c5:a4:41:93:94: 05:03:f2:31:80:b3:4b:3b:c7:76:ee:6b:fe:09:f5: 9f:9f:5d:55:a9:ff:5a:ee:f7:db:dc:2b:f3:df:95: 0f:23:1b:37:83:91:af:d9:28:76:ca:2c:78:3d:f6: 5f:77:c5:39:ca:38:2b:c9:9f:6e:99:bb:2d:22:5a: 77:93:98:88:0b:a1:54:74:6b:3b:ca:c0:75:84:7d: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F3:B6:87:99:DF:C4:CD:C9:D7:CC:75:7A:3C:09:0C:DD:F4:AC:74 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d0:ee:52:89:ce:0e:52:4e:ff:fa:a3:25:36:d8:f6:2f:54: 6e:b9:e1:73:b6:fd:6f:07:1f:4f:0e:63:4b:98:2d:34:7b:cb: 7d:3b:3c:2e:04:f9:8e:27:ae:46:00:38:b7:c2:11:bc:7c:f1: e2:c2:c4:46:24:2f:75:59:2a:4a:57:c4:d1:d7:05:a4:75:92: a3:05:f7:de:18:34:9f:dd:6b:a0:2e:c0:3a:40:bb:1c:3f:b9: de:e5:9f:4a:7b:ef:2e:10:75:ca:74:f2:10:5e:88:2b:79:d3: 1f:92:f1:22:bf:4e:8d:dd:c7:70:4c:3d:2c:b0:4e:6e:6d:17: 11:47:f3:3a:55:7b:dd:b2:bc:0c:59:31:d0:e6:0d:27:8b:78: 82:b1:df:86:1e:85:d1:b2:8b:2d:9f:2a:0d:1a:21:53:3a:20: 23:da:c4:18:9a:56:b1:78:b3:29:af:6c:59:82:19:2e:cc:29: 61:26:07:05:63:82:a6:27:f4:6f:84:57:56:12:c5:cf:aa:15: c2:77:53:62:d0:d8:a4:ed:f7:a5:17:41:dd:5d:2c:c0:a1:84: 4c:ed:d6:a4:13:93:88:57:39:03:3f:ed:34:ea:74:a5:ab:ef: b3:1b:94:5a:1e:36:dc:0e:32:ee:29:aa:82:b9:2e:56:66:2f: 1a:43:0c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjQwNTAyMTkzNTA5WhcNMjQwNTA5MTkzNTA5WjAYMRYwFAYD VQQDEw02NjMzZWFlZC0xMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPR0YUP6Z9ROgXWNUW8aLKWTOKIWhlWiHDj5KQsALZVTFSCntTmbep2f+Ssr 0b43tKLhDYk+G2yyupQvmy6JO1IsTXkBe+66xBTRdYtGHD9GltrtmCZfS1dsFmAj 6DF4MrlioKSbBLJRZdWWLUT3OA1iLl6B9ZCcvryDZGUxsqUDk4L8+4AaWwDB6hWy j5LJh8VQkzi+XZPNiR1t5UQkcAxgV8p0EMhB5Ad3EthMxaRBk5QFA/IxgLNLO8d2 7mv+CfWfn11Vqf9a7vfb3Cvz35UPIxs3g5Gv2Sh2yix4PfZfd8U5yjgryZ9umbst Ilp3k5iIC6FUdGs7ysB1hH31WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbztoeZ 38TNydfMdXo8CQzd9Kx0MB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi0O5Sic4OUk7/+qMlNtj2L1RuueFztv1vBx9PDmNLmC00e8t9Ozwu BPmOJ65GADi3whG8fPHiwsRGJC91WSpKV8TR1wWkdZKjBffeGDSf3WugLsA6QLsc P7ne5Z9Ke+8uEHXKdPIQXogredMfkvEiv06N3cdwTD0ssE5ubRcRR/M6VXvdsrwM WTHQ5g0ni3iCsd+GHoXRsostnyoNGiFTOiAj2sQYmlaxeLMpr2xZghkuzClhJgcF Y4KmJ/RvhFdWEsXPqhXCd1Ni0Nik7felF0HdXSzAoYRM7dakE5OIVzkDP+006nSl q++zG5RaHjbcDjLuKaqCuS5WZi8aQwwn -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org