$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft File: sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json) Hash identifier: WL7f2/6imVoIvdeW/CvsKpmnYlsvp6VKe+x8TExwa68= Subject key identifier: 4E:F8:75:43:16:21:6C:E3:7D:86:16:19:69:24:36:61:51:F8:8D:1E Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 Certificate issuer: /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft Manifest number: 36 Signing time: Tue 21 May 2024 08:14:06 +0000 Manifest this update: Tue 21 May 2024 08:14:05 +0000 Manifest next update: Tue 28 May 2024 08:14:05 +0000 Files and hashes: 1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: qD/xJN8xfKNMMsTDQojO6VLNvGOubMStRoYlHUC35bA=) 2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: /MLADSDyrYh4WjhEpbY8uFkX9A/Z4Cg2n7bDkF7OVSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Validity Not Before: May 21 08:14:05 2024 GMT Not After : May 28 08:14:05 2024 GMT Subject: CN=664c57ce-5b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:3c:a0:3c:54:ad:c6:7b:32:91:4e:05:95: c9:4d:83:47:d0:0f:0b:28:bd:8f:9e:41:e8:68:43: d3:d9:e0:9a:06:09:b0:23:4b:30:e8:47:27:49:6d: e6:ce:a2:b8:27:2c:1b:1b:b9:01:b2:e2:2b:0a:32: 92:b5:5e:c3:9b:27:6f:4c:c2:e1:4c:7b:a2:13:e2: f3:7c:2e:5d:38:30:56:44:03:7d:8a:a2:30:89:ef: 67:9a:99:0e:ca:74:a9:f2:d6:eb:ff:7b:66:f5:e2: 5a:e7:a3:c3:ab:15:12:3a:f3:e8:4c:9e:e3:85:09: 4e:00:35:23:60:37:bd:d7:9b:0f:1a:de:6c:a6:88: 18:0f:0b:77:27:6d:c7:4e:5a:7e:ea:8f:71:83:14: 0c:1b:d0:a6:50:cc:93:50:c3:9c:7f:79:a0:2c:82: 43:35:30:8f:2c:11:9f:5e:70:3d:e4:ce:bd:07:9a: f9:ba:4d:1f:e9:db:15:22:46:15:7e:48:0c:d3:9f: ce:77:0f:2f:6a:4b:79:de:17:57:ed:0a:b3:bf:3e: 40:c0:39:da:1b:fb:04:de:f1:7e:b1:48:87:d4:20: 88:be:9d:40:29:96:bb:4f:6b:df:63:eb:80:cb:46: 8f:15:87:d1:cd:7b:f9:1b:94:2d:ee:a8:73:a9:34: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F8:75:43:16:21:6C:E3:7D:86:16:19:69:24:36:61:51:F8:8D:1E X509v3 Authority Key Identifier: keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:67:7a:be:af:4a:16:9e:89:1f:4b:d9:e3:8f:22:1c:e4:3f: 22:93:e6:4b:1c:c7:dd:9d:ca:dc:37:2c:36:25:54:ae:e1:00: 8d:2b:37:10:6d:15:c3:fc:57:f9:cb:82:e9:14:00:bb:88:0e: 35:bc:53:7e:f1:b1:41:1e:83:7d:85:15:93:e9:47:14:8c:9e: f5:7c:9c:53:f4:65:15:43:83:93:44:c2:6b:3b:bf:7c:da:0a: 52:5e:07:9f:eb:fd:83:4d:58:d2:4c:2a:a5:a9:50:3b:c3:5e: b0:ee:d6:45:01:a8:f6:05:d5:46:94:2a:24:33:11:48:50:be: 37:d2:61:23:15:5c:5e:99:0e:5f:a7:7f:42:12:1b:e8:78:2d: 43:20:97:27:ea:79:c0:23:94:50:93:7b:35:23:b5:d2:66:75: fc:f5:d1:c0:d4:04:a6:50:cc:ac:b4:60:d3:61:0f:00:98:a7: ba:ea:8c:02:ac:ba:c3:bb:88:f7:3c:99:9a:63:ea:e2:01:82: 0b:49:ff:71:7a:74:88:5a:34:a4:df:6c:59:bd:07:7e:8f:83: 97:86:27:50:66:c5:40:30:cc:88:6f:c6:22:2b:bf:bb:5f:ce: ce:b6:12:3c:b1:6d:a8:75:54:49:55:5c:5e:88:07:54:e2:ae: 55:0c:cf:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzIwMzExMC8GA1UEBRMoQjE1MkE3OUYxQkU5NzgzM0MyQTZGQ0Q2RjQ5RjlEQkZE ODQzQzk4MzAeFw0yNDA1MjEwODE0MDVaFw0yNDA1MjgwODE0MDVaMBgxFjAUBgNV BAMTDTY2NGM1N2NlLTViMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOgDygPFStxnsykU4FlclNg0fQDwsovY+eQehoQ9PZ4JoGCbAjSzDoRydJbebO orgnLBsbuQGy4isKMpK1XsObJ29MwuFMe6IT4vN8Ll04MFZEA32KojCJ72eamQ7K dKny1uv/e2b14lrno8OrFRI68+hMnuOFCU4ANSNgN73Xmw8a3mymiBgPC3cnbcdO Wn7qj3GDFAwb0KZQzJNQw5x/eaAsgkM1MI8sEZ9ecD3kzr0Hmvm6TR/p2xUiRhV+ SAzTn853Dy9qS3neF1ftCrO/PkDAOdob+wTe8X6xSIfUIIi+nUAplrtPa99j64DL Ro8Vh9HNe/kblC3uqHOpNCe9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTvh1QxYh bON9hhYZaSQ2YVH4jR4wHwYDVR0jBBgwFoAUsVKnnxvpeDPCpvzW9J+dv9hDyYMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDMjAzL0M1OTgxMkY4QzU4 NjExRUU5MTE2NkI4M0M0RjlBRTAyL3NWS25ueHZwZURQQ3B2elc5Si1kdjloRHlZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1ZLbm54dnBlRFBDcHZ6VzlKLWR2OWhEeVlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD MjAzL0M1OTgxMkY4QzU4NjExRUU5MTE2NkI4M0M0RjlBRTAyL3NWS25ueHZwZURQ Q3B2elc5Si1kdjloRHlZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtner6vShaeiR9L2eOPIhzkPyKT5kscx92dytw3LDYlVK7hAI0rNxBt FcP8V/nLgukUALuIDjW8U37xsUEeg32FFZPpRxSMnvV8nFP0ZRVDg5NEwms7v3za ClJeB5/r/YNNWNJMKqWpUDvDXrDu1kUBqPYF1UaUKiQzEUhQvjfSYSMVXF6ZDl+n f0ISG+h4LUMglyfqecAjlFCTezUjtdJmdfz10cDUBKZQzKy0YNNhDwCYp7rqjAKs usO7iPc8mZpj6uIBggtJ/3F6dIhaNKTfbFm9B36Pg5eGJ1BmxUAwzIhvxiIrv7tf zs62Ejyxbah1VElVXF6IB1TirlUMz5M= -----END CERTIFICATE-----Generated at Tue May 21 10:37:09 2024 by rpki-client on console-fra.rpki-client.org