$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft File: 1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft (raw, json) Hash identifier: bKF9P0d0leKs8f2k1A25pPo7iAoi/AYkMz+kTZk0n2A= Subject key identifier: 92:2E:1F:32:F3:D3:7C:6A:D7:36:11:2F:C4:CB:8F:AB:BD:C2:8F:7D Authority key identifier: D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99 Certificate issuer: /CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft Manifest number: 86 Signing time: Sun 19 May 2024 07:07:10 +0000 Manifest this update: Sun 19 May 2024 07:07:10 +0000 Manifest next update: Sun 26 May 2024 07:07:10 +0000 Files and hashes: 1: 1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl (hash: cG4eeQyQrLKuXnNkRdAxUgsInTYRy0mYeqpUtoRnXpE=) 2: C7C28CAC4A0711EEBE153131C4F9AE02.roa (hash: h8ryCSY3VtLE8rJLGDkskzinHxO0ZE2CrFOuNn/YGBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799 Validity Not Before: May 19 07:07:10 2024 GMT Not After : May 26 07:07:10 2024 GMT Subject: CN=6649a51e-9ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:7c:45:e0:67:ab:c2:8b:0f:c4:33:f8:de: 96:c8:f3:48:13:2b:d6:7d:77:f4:17:d3:0d:20:59: e8:c2:3c:84:c7:fe:6f:ea:db:87:ec:96:49:68:1c: 09:48:fe:61:f8:0f:23:2b:1f:06:ba:5b:8d:92:a5: 56:7d:94:32:a7:b0:e0:34:91:6a:36:be:a3:bc:66: 30:a5:78:a6:ab:43:88:76:d6:04:24:d3:b5:a1:5b: e0:e3:44:96:01:3f:89:d2:f0:d3:b9:7b:5a:62:79: 7c:e6:52:7f:6b:e4:b2:58:7a:c7:d0:3c:4b:96:1c: 87:c1:38:de:51:e1:c9:ad:17:53:57:18:98:d7:8d: 2a:28:b8:bd:07:5b:f9:f4:c7:1a:6b:d9:f3:68:fa: c7:9b:ea:57:1c:35:d1:f0:29:ba:77:29:26:1d:2d: 44:a7:26:6b:49:f9:c4:1a:3e:fd:a7:4a:ce:01:79: 41:98:bb:6b:57:48:52:8f:fe:88:f4:ac:97:15:3c: b1:a2:e3:fc:40:62:52:76:48:95:ee:4c:e1:55:b0: 33:b1:7d:81:ab:d2:8d:d3:af:8e:1f:29:dc:3d:cb: 4a:ec:c0:05:fe:fd:2a:9d:64:25:3e:e1:99:5a:d3: 92:9e:11:f3:7b:67:b2:89:32:64:0c:9c:3f:6b:36: 57:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2E:1F:32:F3:D3:7C:6A:D7:36:11:2F:C4:CB:8F:AB:BD:C2:8F:7D X509v3 Authority Key Identifier: keyid:D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:4c:9b:0c:86:87:a0:80:47:1e:34:5e:b0:ba:fb:1e:7d:84: f9:db:27:80:d7:7c:54:30:6a:85:91:7f:ec:26:3b:74:1f:37: 62:b3:9c:d3:7d:49:37:94:43:ff:32:58:d2:94:ae:a7:97:25: b0:64:63:c0:ab:49:4b:aa:cc:3c:2a:83:7c:ba:69:af:9b:c2: fd:b9:ca:89:be:74:3a:b5:2c:3b:f6:3b:0a:95:1d:be:07:6d: 26:77:24:0c:d3:d3:1d:78:96:4f:44:07:ea:1d:c7:f9:89:9a: d6:20:c2:01:84:a0:6b:c3:29:e3:8b:f2:48:bc:50:5d:98:ce: 6c:50:19:08:54:50:15:e7:e0:3d:4a:65:4c:d8:b1:70:87:18: fe:47:0d:ae:3f:2e:81:5c:1b:2c:63:bc:14:52:f2:b5:a8:34: b0:d0:b1:81:bc:bb:ae:c3:0f:d5:3a:5f:97:b2:8e:61:b5:4c: 76:94:55:9b:bb:93:8b:aa:29:04:8b:79:79:df:d7:be:38:97: 6a:ec:49:30:47:10:44:be:06:e1:71:7c:7f:1f:af:87:9a:24: d2:0f:f5:e4:4f:5b:de:a0:79:6b:45:e3:f7:88:a5:e1:8e:8c: e5:f9:53:47:55:a6:ae:8e:67:c7:fd:52:4f:77:db:74:a9:78: ff:01:8b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBOUUxMTAvBgNVBAUTKEQ2NzU3RkMzMjQwOURCQzJGMjJCNjJDMzE5QjlFNDRE QjlFQTA3OTkwHhcNMjQwNTE5MDcwNzEwWhcNMjQwNTI2MDcwNzEwWjAYMRYwFAYD VQQDEw02NjQ5YTUxZS05YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMp8ReBnq8KLD8Qz+N6WyPNIEyvWfXf0F9MNIFnowjyEx/5v6tuH7JZJaBwJ SP5h+A8jKx8GuluNkqVWfZQyp7DgNJFqNr6jvGYwpXimq0OIdtYEJNO1oVvg40SW AT+J0vDTuXtaYnl85lJ/a+SyWHrH0DxLlhyHwTjeUeHJrRdTVxiY140qKLi9B1v5 9Mcaa9nzaPrHm+pXHDXR8Cm6dykmHS1EpyZrSfnEGj79p0rOAXlBmLtrV0hSj/6I 9KyXFTyxouP8QGJSdkiV7kzhVbAzsX2Bq9KN06+OHyncPctK7MAF/v0qnWQlPuGZ WtOSnhHze2eyiTJkDJw/azZX2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIuHzLz 03xq1zYRL8TLj6u9wo99MB8GA1UdIwQYMBaAFNZ1f8MkCdvC8itiwxm55E256geZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE5RS82NkUwQzYzODRB MDcxMUVFQTFCRjUwMzBDNEY5QUUwMi8xblZfd3lRSjI4THlLMkxER2Jua1RibnFC NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFuVl93eVFKMjhMeUsyTERHYm5rVGJucUI1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUE5RS82NkUwQzYzODRBMDcxMUVFQTFCRjUwMzBDNEY5QUUwMi8xblZfd3lRSjI4 THlLMkxER2Jua1RibnFCNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrTJsMhoeggEceNF6wuvsefYT52yeA13xUMGqFkX/sJjt0Hzdis5zT fUk3lEP/MljSlK6nlyWwZGPAq0lLqsw8KoN8ummvm8L9ucqJvnQ6tSw79jsKlR2+ B20mdyQM09MdeJZPRAfqHcf5iZrWIMIBhKBrwynji/JIvFBdmM5sUBkIVFAV5+A9 SmVM2LFwhxj+Rw2uPy6BXBssY7wUUvK1qDSw0LGBvLuuww/VOl+Xso5htUx2lFWb u5OLqikEi3l539e+OJdq7EkwRxBEvgbhcXx/H6+HmiTSD/XkT1veoHlrReP3iKXh jozl+VNHVaaujmfH/VJPd9t0qXj/AYs1 -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org