$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json) Hash identifier: yPuFbykDg+vL8S0bkej+/zFZ4iZ9zOo6kl5mBSw+NeQ= Subject key identifier: AC:EF:82:DE:42:A0:A8:84:8D:46:5D:CD:66:AE:D0:9D:B2:FF:A6:C8 Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Certificate serial: 129B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft Manifest number: 1277 Signing time: Sun 02 Jun 2024 17:53:35 +0000 Manifest this update: Sun 02 Jun 2024 17:53:35 +0000 Manifest next update: Sun 09 Jun 2024 17:53:35 +0000 Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: wqyoyVg9/xEiDXyRDo/8/NCBGyw9fkJEVco88g8GAtU=) 2: 354FE56C6C5111EC9FF8F481C4F9AE02.roa (hash: wX34fJEXPihTL8EEvxnv+SptLLr8V8hDmFdFazCeFYk=) 3: E26D2E4803CE11ED949DFE3EC4F9AE02.roa (hash: SbvBWH8vs9aCeyaZ2kJqY+38i0o3kBLHR299+vT9S3o=) 4: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: m18q4VmmvkXDNxYs8v33BTLWSK8saTLEcwZ0t6zFRU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4763 (0x129b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Validity Not Before: Jun 2 17:53:35 2024 GMT Not After : Jun 9 17:53:35 2024 GMT Subject: CN=665cb19f-565e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:42:8c:02:85:68:6a:45:6b:70:fc:0d:75: d7:a1:82:3c:ea:02:d9:3b:76:00:ee:ee:b3:36:e2: 61:a9:e8:3d:11:46:b5:ac:cb:cc:7a:43:bc:be:4a: 20:bf:87:a2:aa:d3:a4:ad:98:ae:14:27:d6:ea:04: 96:62:a5:5c:d9:96:29:41:4f:6e:8d:a8:88:6d:ed: 09:01:0b:cd:05:f9:36:52:c7:04:ef:7e:4e:78:88: ab:05:bb:35:07:21:86:cd:be:a3:fb:2a:c5:c5:35: 73:49:71:32:d1:6c:71:97:81:9d:7f:77:50:2b:da: 4d:cd:aa:cd:aa:f5:cc:a8:e9:10:62:b3:4b:85:5b: ef:35:38:35:48:01:88:ac:e2:bf:2e:e4:eb:83:df: d4:40:af:5a:75:e4:eb:e4:0e:d9:db:23:0d:3e:89: b5:b3:66:63:5c:ed:ef:c3:e6:7a:ea:3c:65:9c:cb: 79:d9:e9:97:78:7c:1f:fc:7e:b0:40:08:bc:f6:6b: 99:53:a9:ea:5b:73:4d:49:d6:3e:d2:86:ee:5f:8d: 77:ec:07:b0:d4:c3:07:a1:91:1c:3d:ce:af:2a:98: c7:32:00:6c:aa:11:76:0c:a2:bc:cf:40:e8:01:3f: 3e:5d:fc:bc:7e:6c:22:88:6f:87:6d:41:09:21:83: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EF:82:DE:42:A0:A8:84:8D:46:5D:CD:66:AE:D0:9D:B2:FF:A6:C8 X509v3 Authority Key Identifier: keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ab:26:05:aa:e9:47:8d:6e:f1:c0:d6:09:44:db:8e:ee:99: 9c:1e:84:62:02:f4:e8:ce:47:85:aa:73:18:79:65:b1:1a:98: b4:43:5f:d0:6d:59:52:6a:90:89:0f:c3:19:18:ba:71:27:9d: b7:a8:7a:ce:02:c7:71:d0:87:26:88:69:5d:8c:1f:55:2e:ed: a2:f7:47:fa:37:20:c7:c8:ec:14:65:90:02:5b:c0:4e:14:ed: 6d:35:7d:4d:f6:72:cb:b5:f5:a7:52:12:03:e1:d4:39:ba:8d: 92:b7:53:74:8e:33:fb:6a:7d:88:e7:87:81:34:5a:15:90:e5: 55:ef:75:64:2e:8d:72:72:1c:11:c5:15:0b:12:b4:d1:bf:c4: 69:b0:a0:5f:d5:57:06:0d:88:59:f5:7d:26:a8:29:c8:21:d4: 72:d5:8b:74:c0:f4:2a:1f:f1:6e:92:fb:dd:0d:eb:65:05:70: 4e:6a:95:11:2f:a2:e1:43:77:12:c1:e9:72:58:ef:9c:8f:cd: a4:95:5f:d9:7b:73:ab:08:0e:4d:8d:59:88:47:d5:5c:8a:9e: 05:1a:69:4b:2d:df:73:63:46:db:e7:dd:52:ba:eb:f6:37:71: 88:4b:0a:e7:be:85:0c:94:29:94:42:48:8d:52:52:48:5c:97: 98:27:5d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux OENGNkU5MzQwHhcNMjQwNjAyMTc1MzM1WhcNMjQwNjA5MTc1MzM1WjAYMRYwFAYD VQQDEw02NjVjYjE5Zi01NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxhCjAKFaGpFa3D8DXXXoYI86gLZO3YA7u6zNuJhqeg9EUa1rMvMekO8vkog v4eiqtOkrZiuFCfW6gSWYqVc2ZYpQU9ujaiIbe0JAQvNBfk2UscE735OeIirBbs1 ByGGzb6j+yrFxTVzSXEy0Wxxl4Gdf3dQK9pNzarNqvXMqOkQYrNLhVvvNTg1SAGI rOK/LuTrg9/UQK9adeTr5A7Z2yMNPom1s2ZjXO3vw+Z66jxlnMt52emXeHwf/H6w QAi89muZU6nqW3NNSdY+0obuX4137Aew1MMHoZEcPc6vKpjHMgBsqhF2DKK8z0Do AT8+Xfy8fmwiiG+HbUEJIYMJNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzvgt5C oKiEjUZdzWau0J2y/6bIMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh NnhzUml4dmVaejRZejI2VFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMqyYFqulHjW7xwNYJRNuO7pmcHoRiAvTozkeFqnMYeWWxGpi0Q1/Q bVlSapCJD8MZGLpxJ523qHrOAsdx0IcmiGldjB9VLu2i90f6NyDHyOwUZZACW8BO FO1tNX1N9nLLtfWnUhID4dQ5uo2St1N0jjP7an2I54eBNFoVkOVV73VkLo1ychwR xRULErTRv8RpsKBf1VcGDYhZ9X0mqCnIIdRy1Yt0wPQqH/FukvvdDetlBXBOapUR L6LhQ3cSwelyWO+cj82klV/Ze3OrCA5NjVmIR9Vcip4FGmlLLd9zY0bb591Suuv2 N3GISwrnvoUMlCmUQkiNUlJIXJeYJ13g -----END CERTIFICATE-----Generated at Sun Jun 2 18:40:08 2024 by rpki-client on console-fra.rpki-client.org