$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: NA7h/L3JBNi7R1BL9XvuiiK+vVAxc+3QJmtEbalJA1s= Subject key identifier: 96:2D:16:40:6D:B4:9E:57:38:D7:D6:51:F0:A3:3C:3A:C2:DB:B4:2A Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 77 Signing time: Wed 15 May 2024 07:29:08 +0000 Manifest this update: Wed 15 May 2024 07:29:07 +0000 Manifest next update: Wed 22 May 2024 07:29:07 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: x2Wh96Whs5KC5U3z5O+CnZ9tW+f7w5PDR8qfqxLmecg=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: 8a5ZRm1LVNAdcWEKWLEP5piw+TuPFpxK+Y4aTH1OyA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: May 15 07:29:07 2024 GMT Not After : May 22 07:29:07 2024 GMT Subject: CN=66446444-b41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:bd:c3:1a:fb:e5:9a:6d:ba:9c:62:7f:8e: 46:b5:c8:1c:80:d5:14:c4:1b:24:06:d3:fa:d1:12: 3c:40:f3:d4:69:2f:af:eb:5f:60:e9:8b:ed:ab:61: 46:67:b7:7e:1c:e2:68:44:65:ea:88:1c:a6:e7:db: 5b:51:8b:41:37:2c:6d:4d:79:36:88:fb:c5:00:d7: 3c:5a:2e:8a:47:69:1f:55:23:ac:41:5b:9c:2a:43: c0:3d:fa:fd:0f:12:b7:3b:cc:87:8b:79:5e:f0:fa: c1:87:61:bd:a8:44:e5:41:ce:ef:5a:6d:98:ab:5c: a9:0c:0d:80:cd:8f:d6:ac:66:39:18:17:76:bd:72: cb:c4:ce:64:c1:9d:84:33:11:72:81:e1:96:77:de: d3:31:f0:85:83:e1:f5:ff:4f:b6:e0:b4:d7:83:15: d0:f9:43:44:a3:24:ef:f2:83:10:7d:b2:53:78:5b: d7:af:5c:b8:87:bd:d6:41:66:3c:5a:3c:1d:0d:2f: 19:74:8e:c0:fb:ca:ce:4d:56:a1:c7:a8:5c:07:a3: 99:5b:5c:ff:dc:1d:7b:db:f5:f2:39:a0:4a:fc:a3: e7:ed:3e:ba:86:5e:6d:2c:db:3c:3a:55:20:87:e4: 8b:0f:35:68:de:36:45:62:aa:61:72:9b:30:f9:27: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:16:40:6D:B4:9E:57:38:D7:D6:51:F0:A3:3C:3A:C2:DB:B4:2A X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:45:d0:bf:46:00:f9:40:dd:61:74:b8:03:2e:28:a4:e0:17: 85:3a:35:8a:67:7e:f8:95:d5:ed:a6:a7:5e:9d:ea:38:c4:51: fd:8c:e0:28:f7:a2:3e:de:7f:d3:f7:3a:7b:a3:5d:37:06:ea: 52:56:26:65:80:cc:fe:67:92:ca:5f:c5:1d:7c:7d:ef:55:b7: 91:d7:ce:8f:c7:38:bb:e8:29:12:44:66:70:87:fd:79:1a:84: 48:a5:4b:45:17:8c:fd:fd:d0:94:24:dd:01:2c:79:1a:85:a3: 88:f0:40:d1:da:7a:b0:84:01:45:93:fc:79:31:a3:a0:78:f5: 0b:ac:1b:41:e1:44:c8:a9:dc:4b:a4:11:09:f9:92:62:56:ba: 49:99:fa:4b:8d:7f:75:32:7b:c7:c6:08:3a:31:e5:13:db:06: 07:1e:65:d6:a9:27:76:7b:09:23:f9:8e:29:5b:04:9e:95:12: 33:0a:cb:44:76:67:9e:a1:b6:b6:13:16:f2:a7:9c:fc:15:18: 9e:91:34:46:c3:72:cd:e4:1f:e4:a4:6c:42:3f:5d:56:23:ce: 9c:53:9d:96:dd:03:48:e8:d7:e0:46:f2:36:bf:91:43:8a:3c: 85:80:4d:07:4d:17:4c:06:96:0d:ce:af:44:9d:f8:83:94:1d: 70:d6:99:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDdDNDExMC8GA1UEBRMoNDlEQjYxRkYwM0M1NTE2Nzk1Q0Y3ODUwOUVBMzdBMDYw RjQ1NDdCRjAeFw0yNDA1MTUwNzI5MDdaFw0yNDA1MjIwNzI5MDdaMBgxFjAUBgNV BAMTDTY2NDQ2NDQ0LWI0MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrOL3DGvvlmm26nGJ/jka1yByA1RTEGyQG0/rREjxA89RpL6/rX2Dpi+2rYUZn t34c4mhEZeqIHKbn21tRi0E3LG1NeTaI+8UA1zxaLopHaR9VI6xBW5wqQ8A9+v0P Erc7zIeLeV7w+sGHYb2oROVBzu9abZirXKkMDYDNj9asZjkYF3a9csvEzmTBnYQz EXKB4ZZ33tMx8IWD4fX/T7bgtNeDFdD5Q0SjJO/ygxB9slN4W9evXLiHvdZBZjxa PB0NLxl0jsD7ys5NVqHHqFwHo5lbXP/cHXvb9fI5oEr8o+ftPrqGXm0s2zw6VSCH 5IsPNWjeNkViqmFymzD5JyLvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUli0WQG20 nlc419ZR8KM8OsLbtCowHwYDVR0jBBgwFoAUSdth/wPFUWeVz3hQnqN6Bg9FR78w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0N0M0LzU5NUJFODJDNjM1 QjExRUU4ODRDQUQ0RkM0RjlBRTAyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2R0aF93UEZVV2VWejNoUW5xTjZCZzlGUjc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 N0M0LzU5NUJFODJDNjM1QjExRUU4ODRDQUQ0RkM0RjlBRTAyL1NkdGhfd1BGVVdl VnozaFFucU42Qmc5RlI3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhF0L9GAPlA3WF0uAMuKKTgF4U6NYpnfviV1e2mp16d6jjEUf2M4Cj3 oj7ef9P3OnujXTcG6lJWJmWAzP5nkspfxR18fe9Vt5HXzo/HOLvoKRJEZnCH/Xka hEilS0UXjP390JQk3QEseRqFo4jwQNHaerCEAUWT/Hkxo6B49QusG0HhRMip3Euk EQn5kmJWukmZ+kuNf3Uye8fGCDox5RPbBgceZdapJ3Z7CSP5jilbBJ6VEjMKy0R2 Z56htrYTFvKnnPwVGJ6RNEbDcs3kH+SkbEI/XVYjzpxTnZbdA0jo1+BG8ja/kUOK PIWATQdNF0wGlg3Or0Sd+IOUHXDWmdo= -----END CERTIFICATE-----Generated at Wed May 15 09:28:10 2024 by rpki-client on console-fra.rpki-client.org