$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json) Hash identifier: KiEyImScXqDxgCjiK8Yog6WfOHEeO4zLiqPIghidH5w= Subject key identifier: AE:0B:A8:DA:33:C4:F9:93:BA:F6:F1:F2:BF:6F:67:CC:8D:49:FD:84 Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 19BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft Manifest number: 1979 Signing time: Thu 28 Mar 2024 16:51:13 +0000 Manifest this update: Thu 28 Mar 2024 16:51:13 +0000 Manifest next update: Thu 04 Apr 2024 16:51:13 +0000 Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: VkSt/pO1VFkAmCc6Io5/jFPGh0W5bl9mU2L8Pda1hh8=) 2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: nhktiXwJ7iHK3Wj/0sf6Qz2/HFfTQYtOEkm9kkgcpHU=) 3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 5jCFEGJ+y0/EFMvAjDtFKZiWoUrMwvqP5vPwW4FAMoI=) 4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: Tslvvd6A3vq5orEegc5BkWKMw7PNmLOCXJG/wdgxI+M=) 5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: RqTbvTVka6nvPutiX4Ns6fgYJ1u6NM4l42wz0rKhM7M=) 6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: p4TAw3awGqb1xN0F0p/GBdQga/I6VID2Xr7hbpSccuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Apr 2024 16:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6586 (0x19ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Mar 28 16:51:13 2024 GMT Not After : Apr 4 16:51:13 2024 GMT Subject: CN=6605a001-19c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:b7:e3:da:7b:82:dd:11:91:5c:f5:13:10: 62:72:43:a3:50:46:e9:8a:52:29:52:9c:28:c3:86: ec:f4:e7:4f:13:40:bc:74:54:cd:be:ed:19:92:72: dc:57:b0:43:aa:a7:84:88:ce:4f:cf:bf:14:4f:65: ac:ac:b3:21:7c:03:a4:b5:73:e5:1d:f9:f1:46:55: f0:49:6b:76:7e:52:f9:32:c2:ec:61:81:88:4b:51: fc:d7:64:a5:62:9e:0c:fc:b0:dc:f3:f5:73:4c:6b: 75:be:ef:d8:82:48:ac:a7:fa:67:56:db:1f:91:72: a3:86:fe:06:a2:fc:33:0e:1e:c6:b1:13:68:d8:56: 67:3b:52:85:ca:20:86:06:9f:a6:cd:3c:e6:00:72: 61:6e:0f:7f:8b:c0:68:8f:63:fd:d9:4b:1b:17:66: 7b:a2:93:63:c7:19:74:aa:ed:fc:a5:9d:f6:e6:53: 3e:45:5c:69:e2:72:a5:af:40:aa:b2:d7:6e:fc:05: 31:14:fc:70:0d:6e:62:cb:2e:c2:0c:57:d3:2d:0b: 9e:f0:7c:ad:f9:5c:a6:e2:7d:a5:a8:13:b0:9f:d1: f8:f0:be:1f:56:c8:d0:24:c3:49:9e:9a:53:20:14: 68:9e:01:f0:2b:d3:73:d0:79:d7:74:66:3d:1b:16: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0B:A8:DA:33:C4:F9:93:BA:F6:F1:F2:BF:6F:67:CC:8D:49:FD:84 X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:47:16:00:e3:36:fe:16:e8:36:67:dc:fd:ca:e2:5d:52:81: ee:40:00:9f:6e:81:57:26:19:b2:90:6a:66:a2:bb:15:87:67: 2f:0c:56:94:28:4e:7c:ef:6f:a8:10:c3:e1:d8:e2:53:47:c4: 69:ad:73:f8:89:11:c2:3e:6f:a0:ae:9f:76:6f:17:24:be:d2: a6:56:64:30:b2:46:60:5e:ef:de:69:2e:95:c9:89:30:6c:49: 46:10:23:4c:0d:21:cd:86:11:63:43:bd:e5:fb:96:9b:84:11: 66:fe:84:43:3f:66:29:e2:13:00:a9:84:3f:0b:d6:d5:00:3f: e7:d2:db:e8:a7:d0:f7:a6:5d:5c:24:c2:af:1e:1d:f7:b1:24: 38:da:4a:4c:da:8a:d8:cc:1c:c6:a3:0d:9a:4f:56:56:45:41: 5f:7e:d9:a6:9f:a2:23:2b:d6:0d:cf:e4:7b:2b:94:a0:9e:73: 78:69:61:52:ac:4a:cb:bb:bb:c6:f5:9f:8f:f3:65:ab:de:40: 99:23:b3:70:15:f7:a6:79:a3:f8:f0:1a:70:f9:f3:b5:fb:08: d1:64:53:f5:cc:6d:fb:7c:38:54:13:74:d7:68:f0:05:0f:69: 10:07:09:05:f5:60:a1:c0:80:88:7a:82:a6:1a:84:5b:9c:08: c6:0d:89:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjQwMzI4MTY1MTEzWhcNMjQwNDA0MTY1MTEzWjAYMRYwFAYD VQQDEw02NjA1YTAwMS0xOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZW349p7gt0RkVz1ExBickOjUEbpilIpUpwow4bs9OdPE0C8dFTNvu0ZknLc V7BDqqeEiM5Pz78UT2WsrLMhfAOktXPlHfnxRlXwSWt2flL5MsLsYYGIS1H812Sl Yp4M/LDc8/VzTGt1vu/Ygkisp/pnVtsfkXKjhv4GovwzDh7GsRNo2FZnO1KFyiCG Bp+mzTzmAHJhbg9/i8Boj2P92UsbF2Z7opNjxxl0qu38pZ325lM+RVxp4nKlr0Cq stdu/AUxFPxwDW5iyy7CDFfTLQue8Hyt+Vym4n2lqBOwn9H48L4fVsjQJMNJnppT IBRongHwK9Nz0HnXdGY9GxbcOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4LqNoz xPmTuvbx8r9vZ8yNSf2EMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1 X0RZMXpVNDFCSXI0ampudTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVRxYA4zb+Fug2Z9z9yuJdUoHuQACfboFXJhmykGpmorsVh2cvDFaU KE5872+oEMPh2OJTR8RprXP4iRHCPm+grp92bxckvtKmVmQwskZgXu/eaS6VyYkw bElGECNMDSHNhhFjQ73l+5abhBFm/oRDP2Yp4hMAqYQ/C9bVAD/n0tvop9D3pl1c JMKvHh33sSQ42kpM2orYzBzGow2aT1ZWRUFfftmmn6IjK9YNz+R7K5SgnnN4aWFS rErLu7vG9Z+P82Wr3kCZI7NwFfemeaP48Bpw+fO1+wjRZFP1zG37fDhUE3TXaPAF D2kQBwkF9WChwICIeoKmGoRbnAjGDYlQ -----END CERTIFICATE-----Generated at Thu Mar 28 19:44:20 2024 by rpki-client on console-fra.rpki-client.org