$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft File: ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json) Hash identifier: dlmwP12xdmYhGv23NOyJquRTtnXkH3GAGmdOuxxeEEc= Subject key identifier: 16:6B:FD:01:A0:FF:57:8D:F5:2E:5D:0B:D6:EC:67:9D:C9:0F:F2:24 Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft Manifest number: 016F Signing time: Sun 05 May 2024 04:56:15 +0000 Manifest this update: Sun 05 May 2024 04:56:15 +0000 Manifest next update: Sun 12 May 2024 04:56:15 +0000 Files and hashes: 1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: 1BgZse3hoHi4GET6Yj6S5+d47IKFXtJPTRobdu5W7ps=) 2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: xmrbTGYxQ+6Hsi/Mo6+cYbticusMbIjvhK9kyxJGl5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Validity Not Before: May 5 04:56:15 2024 GMT Not After : May 12 04:56:15 2024 GMT Subject: CN=6637116f-5db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:27:79:44:10:d5:b0:7e:5b:82:72:86:03: 2a:33:eb:75:db:79:14:2c:5b:59:bc:b4:22:31:66: 04:9c:22:52:c8:10:49:3a:2f:b7:b5:df:f3:7e:1c: e8:b5:a3:37:d4:4f:8d:50:20:87:d2:12:22:9c:6e: ad:fb:bd:e2:88:7e:a5:1f:bc:53:51:7a:f3:7d:f7: 9e:9e:4f:69:4a:6e:86:e1:00:00:ac:3c:61:f9:68: 53:68:1e:77:3d:81:d6:2d:fc:a0:79:13:1b:de:77: 00:23:f7:f7:fe:7c:28:9d:61:54:12:17:1e:d2:4d: 62:87:35:14:ef:52:2a:ff:71:31:19:0b:04:39:a9: d4:bc:01:ad:05:71:d8:cb:f2:9f:1a:21:1d:11:60: 28:ec:d0:0d:ba:f7:6d:6a:f3:c6:2e:9b:c0:cb:66: 63:21:4a:57:f5:c1:5a:fd:3e:b3:5d:e7:cf:55:ef: d0:65:94:86:2f:e7:6c:3a:f4:d0:ba:12:b9:a8:c5: 5a:a8:30:f6:07:c3:db:0d:fd:4b:fb:18:69:c1:19: e3:ff:cb:92:de:fb:8f:2f:c9:5a:0a:51:5e:5e:8b: a8:ce:0b:76:83:78:f0:19:ed:52:23:fc:e0:b7:5a: c2:a7:97:a5:78:0b:23:b4:ef:bc:b6:01:d8:62:d2: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6B:FD:01:A0:FF:57:8D:F5:2E:5D:0B:D6:EC:67:9D:C9:0F:F2:24 X509v3 Authority Key Identifier: keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:cd:b6:94:85:c3:c4:00:e9:45:fa:44:d2:99:a9:e1:e3:f3: fd:f8:fa:aa:95:13:45:a1:ef:6b:9f:98:7a:ed:12:5c:64:a2: c9:c0:f3:02:65:2d:10:31:7a:2e:0f:b1:ed:f0:d8:60:5c:91: 3a:d6:c6:62:d2:f0:45:a5:6b:1f:ce:66:fa:45:20:5e:3c:24: 2e:39:96:01:8f:b9:0b:4e:15:a9:dd:b6:24:79:0c:20:f3:40: 8d:15:15:f1:6b:8a:46:5d:6b:65:9d:5e:f5:45:a1:42:48:82: 36:77:12:e2:47:46:56:2b:9e:9f:d8:47:91:69:f8:0c:fb:c4: 86:a0:d2:5f:56:0e:98:b9:b3:89:1b:2f:06:5a:9d:fc:3a:fa: 3c:fa:42:ab:1b:b3:ed:fc:99:30:72:5b:5a:b4:95:c5:ef:f8: f2:6c:cd:1b:7a:5f:3b:58:e2:42:84:be:7f:03:d6:50:f2:de: 07:56:21:9a:96:63:9f:e3:16:1e:9a:fb:41:1d:d6:11:ea:fe: 0c:e7:df:2b:78:12:18:f1:48:95:82:bc:ec:50:41:15:46:0a: 5d:7b:56:dc:81:7d:b4:48:b3:1b:52:43:95:77:97:1c:a0:99: 22:ea:72:6b:a6:6c:d3:9a:b2:f4:da:77:4e:01:6e:29:da:48: 07:2f:e8:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3 N0JFOTM3QkMwHhcNMjQwNTA1MDQ1NjE1WhcNMjQwNTEyMDQ1NjE1WjAYMRYwFAYD VQQDEw02NjM3MTE2Zi01ZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsb8neUQQ1bB+W4JyhgMqM+t123kULFtZvLQiMWYEnCJSyBBJOi+3td/zfhzo taM31E+NUCCH0hIinG6t+73iiH6lH7xTUXrzffeenk9pSm6G4QAArDxh+WhTaB53 PYHWLfygeRMb3ncAI/f3/nwonWFUEhce0k1ihzUU71Iq/3ExGQsEOanUvAGtBXHY y/KfGiEdEWAo7NANuvdtavPGLpvAy2ZjIUpX9cFa/T6zXefPVe/QZZSGL+dsOvTQ uhK5qMVaqDD2B8PbDf1L+xhpwRnj/8uS3vuPL8laClFeXouozgt2g3jwGe1SI/zg t1rCp5eleAsjtO+8tgHYYtKxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZr/QGg /1eN9S5dC9bsZ53JD/IkMB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4 MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL b3NHWmUyTnZSUVYzdnBON3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApzbaUhcPEAOlF+kTSmanh4/P9+PqqlRNFoe9rn5h67RJcZKLJwPMC ZS0QMXouD7Ht8NhgXJE61sZi0vBFpWsfzmb6RSBePCQuOZYBj7kLThWp3bYkeQwg 80CNFRXxa4pGXWtlnV71RaFCSII2dxLiR0ZWK56f2EeRafgM+8SGoNJfVg6YubOJ Gy8GWp38Ovo8+kKrG7Pt/JkwcltatJXF7/jybM0bel87WOJChL5/A9ZQ8t4HViGa lmOf4xYemvtBHdYR6v4M598reBIY8UiVgrzsUEEVRgpde1bcgX20SLMbUkOVd5cc oJki6nJrpmzTmrL02ndOAW4p2kgHL+iy -----END CERTIFICATE-----Generated at Sun May 5 06:01:20 2024 by rpki-client on console-fra.rpki-client.org