$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: 8I4aw7Cbykoi24enQkDgd8VuHodG+jCJT+UwqpfEetQ= Subject key identifier: A5:FF:FB:ED:92:79:AA:71:45:A1:05:86:60:71:CB:D8:89:74:B9:FE Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 0419 Signing time: Sat 27 Apr 2024 02:03:29 +0000 Manifest this update: Sat 27 Apr 2024 02:03:29 +0000 Manifest next update: Sat 04 May 2024 02:03:29 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: taKSMj6U3C+Fr8DTi7wGGwUo6kZ7gEM4vIBWc4KxvnQ=) 2: 78BE822078F911EEBCAFB814C4F9AE02.roa (hash: ZUUO7Ruo7QW+0c5Gso1Zm33YZ7ZtE+TGaUKBO9CsHnc=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: ud/e01rmrnMI7HngSKHE+cQlo1wQpmdnHcl5Kf5zih8=) 4: A4B120EE1EAC11ECB7B9E330C4F9AE02.roa (hash: 5OiO3hnid4AIzh2V/5E5HSxRKiNx2nFYy8PINfQ5Bxo=) 5: 30EFF8D6CB0911EE9260454CC4F9AE02.roa (hash: UBSpkQC7C+2SrJFHCSQjRknYvUnfoKT6zqO+Fgh1ODg=) 6: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: 1CkVhESVaf/2B94HtCDrQpBzCC89MWxtXOgxIuY06j8=) 7: 308758F8CB0911EE9260454CC4F9AE02.roa (hash: 6NxxjvnfyDL1YE5iFRpWg14g3lEf8MNWdtZlhLe7oZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Apr 27 02:03:29 2024 GMT Not After : May 4 02:03:29 2024 GMT Subject: CN=662c5cf1-b80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:ca:a6:dc:69:ba:a4:82:c8:7b:23:ca:01: 03:3d:2c:61:55:a8:c2:1d:3c:2a:58:31:10:9d:13: fb:4c:f2:80:08:79:89:5a:8c:59:8a:64:45:31:dd: 6e:a6:dd:d4:ec:6d:ad:d6:e9:f8:03:58:c3:85:d9: 6b:a1:c2:c9:bb:57:bf:d8:92:44:6e:71:25:11:3e: df:c8:e9:f6:12:18:0b:e0:7f:b7:0b:d7:b1:f7:5e: 82:bb:f7:0f:5d:f9:29:f0:d5:92:50:21:14:26:98: 72:d1:8f:77:7e:0e:c2:80:c3:7b:8d:f7:14:31:ee: df:15:32:71:5a:82:c5:d9:c8:28:14:1f:a8:5b:63: 0a:80:83:6d:61:aa:9b:a5:5e:18:c1:bf:02:34:df: 8a:d8:e3:4b:65:c5:a3:0b:c0:96:87:0f:a0:f5:3d: ac:e5:ba:02:57:bd:0a:f9:bc:ba:3e:35:82:84:1d: f7:7f:81:78:12:c7:99:f3:1d:b6:23:c5:fb:fe:16: 65:a1:f9:85:27:65:20:9a:ad:0c:38:2e:85:15:14: dc:97:7c:6d:ad:c1:65:20:2f:39:69:fa:64:22:89: e0:f8:40:47:6f:ff:c4:ad:2d:fa:50:a6:ec:f4:a0: c1:cf:4b:88:1d:57:86:ee:80:1c:00:cd:b2:e5:b3: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:FB:ED:92:79:AA:71:45:A1:05:86:60:71:CB:D8:89:74:B9:FE X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f4:0a:63:15:82:c5:4d:80:20:13:36:e8:fe:55:4a:d5:3c: 98:ad:cc:ee:7e:05:57:06:b5:85:13:72:75:56:ad:88:a6:96: bf:5c:16:a9:aa:c3:8d:fc:42:78:71:5c:ed:a6:0c:e5:2a:21: 58:8b:35:f1:3f:46:26:dc:1b:68:76:37:85:71:72:08:34:4b: 95:60:6a:8d:ee:17:d2:dc:7c:95:74:72:6d:8e:4f:93:2c:fe: 19:90:ca:51:2a:a4:d4:33:c4:01:f0:25:f9:75:90:b8:f4:ce: 79:47:51:eb:1b:6c:f7:8a:34:ee:6e:cf:39:ae:5d:f1:d9:93: dd:6c:8e:34:fd:49:4d:dd:6d:a6:94:7f:80:11:5b:df:30:60: 88:a8:c4:9b:e5:dd:04:5a:45:2b:47:56:ab:13:c0:9e:79:7d: 45:de:3d:eb:dc:c1:e5:87:2f:51:3e:62:23:23:09:44:85:65: 8c:97:37:7c:41:a4:74:9d:57:78:32:02:bf:5e:80:c6:5b:5b: 4b:13:1f:d0:c9:d9:0d:f0:fd:01:ec:1c:a0:29:43:86:61:ee: af:c0:2a:84:94:78:d0:24:50:7b:ae:9c:56:4a:c4:9e:ca:7d: ca:7d:6b:c7:7e:50:1d:32:ab:d6:26:21:dd:f8:72:53:4a:37: d5:31:8b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjQwNDI3MDIwMzI5WhcNMjQwNTA0MDIwMzI5WjAYMRYwFAYD VQQDEw02NjJjNWNmMS1iODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/zKptxpuqSCyHsjygEDPSxhVajCHTwqWDEQnRP7TPKACHmJWoxZimRFMd1u pt3U7G2t1un4A1jDhdlrocLJu1e/2JJEbnElET7fyOn2EhgL4H+3C9ex916Cu/cP Xfkp8NWSUCEUJphy0Y93fg7CgMN7jfcUMe7fFTJxWoLF2cgoFB+oW2MKgINtYaqb pV4Ywb8CNN+K2ONLZcWjC8CWhw+g9T2s5boCV70K+by6PjWChB33f4F4EseZ8x22 I8X7/hZlofmFJ2Ugmq0MOC6FFRTcl3xtrcFlIC85afpkIong+EBHb//ErS36UKbs 9KDBz0uIHVeG7oAcAM2y5bNTgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX/++2S eapxRaEFhmBxy9iJdLn+MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh9ApjFYLFTYAgEzbo/lVK1TyYrczufgVXBrWFE3J1Vq2Ippa/XBap qsON/EJ4cVztpgzlKiFYizXxP0Ym3BtodjeFcXIINEuVYGqN7hfS3HyVdHJtjk+T LP4ZkMpRKqTUM8QB8CX5dZC49M55R1HrG2z3ijTubs85rl3x2ZPdbI40/UlN3W2m lH+AEVvfMGCIqMSb5d0EWkUrR1arE8CeeX1F3j3r3MHlhy9RPmIjIwlEhWWMlzd8 QaR0nVd4MgK/XoDGW1tLEx/QydkN8P0B7BygKUOGYe6vwCqElHjQJFB7rpxWSsSe yn3KfWvHflAdMqvWJiHd+HJTSjfVMYti -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:24 2024 by rpki-client on console-ams.rpki-client.org