$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft File: tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json) Hash identifier: AgU5VEme3Ul71gyOXjR1txbPCqpl3PpRu0atReOY18E= Subject key identifier: 23:3E:12:D0:B1:4D:B8:C5:B3:64:48:91:C9:DD:38:DE:5B:48:48:C4 Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C Certificate issuer: /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft Manifest number: 37 Signing time: Fri 17 May 2024 08:25:54 +0000 Manifest this update: Fri 17 May 2024 08:25:53 +0000 Manifest next update: Fri 24 May 2024 08:25:53 +0000 Files and hashes: 1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: oFkPIE1aEz44f/eRL7YbO9by2qUXWFcUUPsNA79VJBQ=) 2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: uMTQYzxF4IvJXkJz8zftJRl9BijILeVxvfHdSRvRUs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C Validity Not Before: May 17 08:25:53 2024 GMT Not After : May 24 08:25:53 2024 GMT Subject: CN=66471491-ce4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:07:57:93:fd:fe:a6:bd:b6:11:5f:2a:6d: e7:6f:5c:13:7a:9a:ca:f7:6f:9c:3d:6a:83:a7:31: 3e:bc:0e:61:cc:db:be:50:15:61:2d:e2:5e:8b:45: 1d:7c:70:73:a9:2b:cc:8d:68:bc:c9:e1:72:ea:c4: 92:9a:99:8b:ae:f7:cf:d2:38:76:97:f3:89:29:bd: 09:b7:06:c9:c0:e3:2a:2a:c9:aa:af:7e:be:1a:6a: 46:da:5d:20:ba:e9:c7:b6:56:3a:57:70:eb:ed:c1: 7e:17:bc:6e:30:2b:42:1d:8b:4d:e3:2c:77:69:12: f4:03:db:ea:1f:01:33:70:27:a7:8a:7d:ad:d5:f4: e9:d1:0b:b9:a6:e0:e8:d3:1f:61:7e:20:d8:61:50: 3c:2f:25:7e:43:84:66:cb:ef:f4:36:5c:25:48:39: bc:ec:1c:d3:e0:24:6f:33:15:79:86:61:10:80:88: fc:da:58:44:b3:35:9f:67:ca:5e:23:d4:a6:e0:1b: c3:98:c3:a1:6f:5d:cf:86:61:30:87:c8:dc:7d:c9: 60:02:34:6a:e5:e6:f4:d6:8d:f1:ad:59:91:c4:8d: 89:3f:25:1b:aa:81:70:48:22:03:ae:34:2d:a9:00: a7:c4:73:66:8d:a2:cd:de:e5:19:f4:0e:00:84:39: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:12:D0:B1:4D:B8:C5:B3:64:48:91:C9:DD:38:DE:5B:48:48:C4 X509v3 Authority Key Identifier: keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:29:b4:ce:30:33:ba:f5:52:3a:95:f1:2e:d5:22:d7:71:55: 6a:fc:b2:65:bc:5e:9a:0f:d9:f7:61:f6:9a:d1:fc:96:94:f5: f3:ea:71:e8:d6:e2:99:41:97:41:e3:41:61:a9:4a:fd:47:db: 5c:19:a2:c9:53:8c:89:ee:ee:3d:de:5a:30:85:ec:c7:c2:20: 3d:fb:07:a5:0b:ed:ee:53:5e:f0:7e:47:1f:59:b8:1a:54:45: 61:74:14:48:72:fd:88:8d:3a:1d:ee:00:6c:46:db:d7:02:61: 4b:3e:3f:d8:53:3a:93:99:a8:a2:76:19:9b:02:99:18:0b:d0: a0:67:34:f2:11:ad:ad:96:b8:c6:20:93:b0:57:92:72:f5:07: 44:22:f4:35:cc:b1:ce:f2:f0:84:26:b7:be:b5:a9:d4:39:c9: 98:6e:fd:f7:ae:b8:37:a3:fb:6a:14:17:ae:81:70:04:63:1f: f2:28:77:2d:80:4e:e5:f9:41:fd:a4:59:1d:cb:c6:2e:50:7d: 2a:75:56:56:b6:7b:83:de:58:c5:3c:c3:65:95:81:c7:73:73: 4e:91:6c:5d:3a:86:4f:15:c1:68:03:f7:00:58:6c:98:6b:e7: cf:41:af:d2:5c:8d:63:c9:bc:13:10:8a:be:ff:ec:65:a5:18: 5e:46:6e:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTc5QzExMC8GA1UEBRMoQjUyQzU0RDQ2QTY4QURFQ0MzN0Q1RjZGMjcyMjhDNkRF QTczRTg1QzAeFw0yNDA1MTcwODI1NTNaFw0yNDA1MjQwODI1NTNaMBgxFjAUBgNV BAMTDTY2NDcxNDkxLWNlNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0VgdXk/3+pr22EV8qbedvXBN6msr3b5w9aoOnMT68DmHM275QFWEt4l6LRR18 cHOpK8yNaLzJ4XLqxJKamYuu98/SOHaX84kpvQm3BsnA4yoqyaqvfr4aakbaXSC6 6ce2VjpXcOvtwX4XvG4wK0Idi03jLHdpEvQD2+ofATNwJ6eKfa3V9OnRC7mm4OjT H2F+INhhUDwvJX5DhGbL7/Q2XCVIObzsHNPgJG8zFXmGYRCAiPzaWESzNZ9nyl4j 1KbgG8OYw6FvXc+GYTCHyNx9yWACNGrl5vTWjfGtWZHEjYk/JRuqgXBIIgOuNC2p AKfEc2aNos3e5Rn0DgCEOYsxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIz4S0LFN uMWzZEiRyd043ltISMQwHwYDVR0jBBgwFoAUtSxU1GporezDfV9vJyKMbepz6Fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFNzlDLzU4QTgxMThFQzBF MDExRUU5MDAwOTIwOUM0RjlBRTAyL3RTeFUxR3BvcmV6RGZWOXZKeUtNYmVwejZG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdFN4VTFHcG9yZXpEZlY5dkp5S01iZXB6NkZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF NzlDLzU4QTgxMThFQzBFMDExRUU5MDAwOTIwOUM0RjlBRTAyL3RTeFUxR3BvcmV6 RGZWOXZKeUtNYmVwejZGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJYptM4wM7r1UjqV8S7VItdxVWr8smW8XpoP2fdh9prR/JaU9fPqcejW 4plBl0HjQWGpSv1H21wZoslTjInu7j3eWjCF7MfCID37B6UL7e5TXvB+Rx9ZuBpU RWF0FEhy/YiNOh3uAGxG29cCYUs+P9hTOpOZqKJ2GZsCmRgL0KBnNPIRra2WuMYg k7BXknL1B0Qi9DXMsc7y8IQmt761qdQ5yZhu/feuuDej+2oUF66BcARjH/Iody2A TuX5Qf2kWR3Lxi5QfSp1Vla2e4PeWMU8w2WVgcdzc06RbF06hk8VwWgD9wBYbJhr 589Br9JcjWPJvBMQir7/7GWlGF5Gbsk= -----END CERTIFICATE-----Generated at Fri May 17 10:10:51 2024 by rpki-client on console-fra.rpki-client.org