$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft File: sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json) Hash identifier: /p2VeL23twg3G4PLpiOVO6MzjMdaXzHmlmFz6hXDvFU= Subject key identifier: 01:DB:1D:18:13:96:26:7D:03:FB:F5:4F:3D:38:2F:4A:44:51:75:9A Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 Certificate issuer: /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft Manifest number: 025C Signing time: Wed 01 May 2024 04:11:14 +0000 Manifest this update: Wed 01 May 2024 04:11:14 +0000 Manifest next update: Wed 08 May 2024 04:11:14 +0000 Files and hashes: 1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: fUXfmv1G2HDHxiITSu5PSCwyfT6oy7StxvW7zD6Ik6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Validity Not Before: May 1 04:11:14 2024 GMT Not After : May 8 04:11:14 2024 GMT Subject: CN=6631c0e2-bdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:a2:0d:24:c5:3f:88:f0:74:6a:ac:06:dd: e4:78:21:03:cc:d8:86:c1:3f:76:e7:69:36:09:3a: f4:db:19:cb:6c:17:6e:f6:d7:94:b4:15:62:6e:15: e4:78:09:be:da:13:d9:31:43:80:35:8f:9c:93:6c: 83:6c:6b:ea:b0:ef:29:29:fe:59:3e:6c:46:54:86: ea:7b:d3:f4:ee:ac:f4:9f:ae:61:f7:3c:f1:71:73: 3e:db:c2:b0:10:48:b7:30:d1:b4:d6:ea:65:16:9b: 36:ba:75:6c:bd:81:66:bf:d3:1f:71:7d:e1:67:aa: 58:52:38:59:bc:e9:6d:e7:e2:ba:01:34:4b:82:7f: 10:c0:1c:6a:54:00:fd:63:17:0e:0c:bb:5e:7d:1d: 88:04:f1:ab:b8:5a:55:20:b1:70:fc:1c:15:ef:a5: ea:69:33:4d:92:e4:77:26:c9:df:62:cd:b8:de:5b: 7b:e0:da:30:ba:25:1c:5e:ba:da:f8:95:5c:6e:d0: 99:05:b4:fc:95:e1:61:91:d7:6c:5d:86:6a:1a:ec: 83:cd:63:78:90:5c:77:ca:12:ee:62:6f:42:a8:ba: 9f:64:e8:12:83:e3:62:99:e7:08:f0:4b:6f:6e:d5: d0:15:27:ea:92:95:c0:bf:28:35:44:10:ed:7c:40: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:1D:18:13:96:26:7D:03:FB:F5:4F:3D:38:2F:4A:44:51:75:9A X509v3 Authority Key Identifier: keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3d:8d:ac:23:2d:15:9a:f1:85:37:48:f7:17:0f:79:ee:82: e1:64:7f:9b:59:48:08:12:dc:f8:85:f9:db:61:bb:f4:bc:ea: 61:8f:12:5f:a0:ce:d8:a3:a7:cc:d6:95:7a:5c:3a:ee:0c:72: fd:1b:53:e8:30:ac:fb:00:14:7c:63:e4:5d:f7:f1:f0:f0:09: 56:42:04:82:a6:cd:5e:b3:46:02:cf:57:f5:45:ad:59:2a:8e: 49:74:6d:42:66:99:0e:1c:36:c4:55:3a:80:17:49:d1:fd:92: ba:b8:71:e0:a2:7d:54:38:46:93:50:50:50:b6:90:df:9b:52: cc:b4:78:20:4c:e8:63:96:30:e2:5e:78:74:6e:0d:4f:29:cc: 32:4f:ac:c0:ed:ec:e1:c4:f7:b3:97:a9:dd:b4:4f:8b:73:5c: e4:db:91:bf:e1:0a:fb:8c:af:1a:eb:16:2a:e0:26:ea:0c:23: c4:09:8c:cb:7e:1a:4a:26:e0:41:4d:71:e0:30:18:19:d7:78: 99:03:17:da:d3:95:bd:57:2e:6b:6b:e5:75:32:e8:f3:0f:83: 2b:29:d3:b5:94:6a:34:ba:2e:59:1e:38:e9:b8:53:b3:18:42: 05:35:c2:21:a3:8b:cc:7c:0b:3f:20:fd:91:d9:c1:19:ab:85: 85:00:11:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1NkUxMTAvBgNVBAUTKEIwNEI3RkIyMEUyNUQ2RDc1ODdGMjZGRDc1NzI3NEI5 RDNFRTNFOTUwHhcNMjQwNTAxMDQxMTE0WhcNMjQwNTA4MDQxMTE0WjAYMRYwFAYD VQQDEw02NjMxYzBlMi1iZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCCiDSTFP4jwdGqsBt3keCEDzNiGwT9252k2CTr02xnLbBdu9teUtBVibhXk eAm+2hPZMUOANY+ck2yDbGvqsO8pKf5ZPmxGVIbqe9P07qz0n65h9zzxcXM+28Kw EEi3MNG01uplFps2unVsvYFmv9MfcX3hZ6pYUjhZvOlt5+K6ATRLgn8QwBxqVAD9 YxcODLtefR2IBPGruFpVILFw/BwV76XqaTNNkuR3JsnfYs243lt74NowuiUcXrra +JVcbtCZBbT8leFhkddsXYZqGuyDzWN4kFx3yhLuYm9CqLqfZOgSg+NimecI8Etv btXQFSfqkpXAvyg1RBDtfED3qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHbHRgT liZ9A/v1Tz04L0pEUXWaMB8GA1UdIwQYMBaAFLBLf7IOJdbXWH8m/XVydLnT7j6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU2RS82RkMzMjlDQ0NC NjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0ZFlmeWI5ZFhKMHVkUHVQ cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdF9zZzRsMXRkWWZ5YjlkWEowdWRQdVBwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU2RS82RkMzMjlDQ0NCNjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0 ZFlmeWI5ZFhKMHVkUHVQcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCePY2sIy0VmvGFN0j3Fw957oLhZH+bWUgIEtz4hfnbYbv0vOphjxJf oM7Yo6fM1pV6XDruDHL9G1PoMKz7ABR8Y+Rd9/Hw8AlWQgSCps1es0YCz1f1Ra1Z Ko5JdG1CZpkOHDbEVTqAF0nR/ZK6uHHgon1UOEaTUFBQtpDfm1LMtHggTOhjljDi Xnh0bg1PKcwyT6zA7ezhxPezl6ndtE+Lc1zk25G/4Qr7jK8a6xYq4CbqDCPECYzL fhpKJuBBTXHgMBgZ13iZAxfa05W9Vy5ra+V1MujzD4MrKdO1lGo0ui5ZHjjpuFOz GEIFNcIho4vMfAs/IP2R2cEZq4WFABFG -----END CERTIFICATE-----Generated at Wed May 1 05:59:07 2024 by rpki-client on console-fra.rpki-client.org