$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: u5G5cMq1a5RuaWvXVds4NTYK6ACu0dkAEBhWVO3y+hE= Subject key identifier: D5:40:A1:06:76:31:6B:A2:2C:88:29:64:96:83:C8:FA:9D:87:74:79 Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 0472 Signing time: Fri 31 May 2024 02:16:21 +0000 Manifest this update: Fri 31 May 2024 02:16:21 +0000 Manifest next update: Fri 07 Jun 2024 02:16:20 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: pBglTk97FgRnNSH0/kpiLmcZQPUqBTt3mV2/QeYJUlg=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: GCOYhXOIiDh7tK27bYOwMZTbPpznjaDInwGEyTr4OB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: May 31 02:16:21 2024 GMT Not After : Jun 7 02:16:20 2024 GMT Subject: CN=665932f5-ab47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:27:f2:dd:a2:0d:0b:81:b6:c3:4b:21:71: 00:fa:3d:8c:2f:a7:eb:73:f5:78:c8:12:cc:7a:05: af:da:13:af:be:01:0e:16:ba:bc:08:ea:f8:18:e5: 5e:19:c3:1a:b6:b9:ee:81:a2:06:47:91:72:d8:94: 38:79:d8:64:cd:39:f8:eb:0a:86:a2:a9:88:0b:7c: 92:8b:6c:15:33:9a:db:32:57:56:92:32:f0:98:70: 46:0b:c2:1d:9b:d3:93:c8:2a:c7:76:0b:18:f0:11: 4d:56:64:58:67:ac:16:5a:d0:44:f3:26:92:33:05: a4:2c:97:6e:90:4d:33:4f:88:05:27:e3:e2:29:c5: d1:3a:34:12:d8:a9:c5:a9:17:12:55:b0:87:a6:8d: 21:39:49:4a:61:e9:80:23:07:28:fc:a7:ec:ee:e3: 40:bc:74:c5:3c:d0:73:d8:f6:1c:67:3f:37:d0:f7: dd:4f:86:79:f7:84:e7:92:43:ac:80:c4:84:c9:b4: 3b:e7:fe:8e:0a:30:50:f1:97:e0:8a:8a:8f:b2:b4: 6d:34:f5:d5:c7:30:21:39:12:52:f9:1b:9c:91:33: 35:51:a6:e3:28:87:a3:e8:76:a9:fe:8a:fa:50:27: 91:f1:54:b8:15:f1:88:f2:eb:28:74:d5:13:c8:a7: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:40:A1:06:76:31:6B:A2:2C:88:29:64:96:83:C8:FA:9D:87:74:79 X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f4:fb:9f:fa:20:dc:9e:d7:88:b0:f5:43:af:9a:f4:d0:55: 33:b0:50:d9:d6:a7:dd:44:ff:63:1b:fe:1b:64:d1:bb:cd:1a: 6a:c6:0a:2a:b9:23:37:bc:e7:68:e1:c5:c9:18:7d:a1:72:7e: 0a:28:68:cd:17:4c:15:77:e0:bb:16:63:ad:cd:27:ee:5b:e3: 93:fe:f6:a5:dc:73:9d:a2:ce:14:2d:b2:bb:c2:0e:88:c0:00: 29:1c:57:d2:e7:54:82:24:8a:ad:c5:c5:0f:dd:48:53:b4:a2: f0:32:cb:5c:15:69:06:89:36:a9:a7:d7:f3:26:b4:77:89:7e: 16:c9:09:0c:22:69:44:b3:e5:99:66:ee:0e:13:bd:27:09:3f: ad:02:e5:e1:0b:43:66:ce:a2:02:30:44:99:11:ce:46:15:2e: 79:87:7e:44:5a:8b:c6:e5:79:e3:f4:b4:77:b4:4c:08:dc:bf: bc:f2:47:bf:de:22:7e:ff:6b:e5:b6:49:3c:1d:e3:20:b6:70: c8:66:39:c2:6b:e6:da:ad:1d:75:d4:69:61:0c:bd:3b:28:6a: 9c:32:31:66:5a:ab:c0:07:9e:ba:99:5b:f2:c3:97:01:a3:06: 9d:64:02:6e:20:59:28:c8:e8:76:c3:ce:ed:c9:72:20:a0:33: fc:5b:f1:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjQwNTMxMDIxNjIxWhcNMjQwNjA3MDIxNjIwWjAYMRYwFAYD VQQDEw02NjU5MzJmNS1hYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Qkn8t2iDQuBtsNLIXEA+j2ML6frc/V4yBLMegWv2hOvvgEOFrq8COr4GOVe GcMatrnugaIGR5Fy2JQ4edhkzTn46wqGoqmIC3ySi2wVM5rbMldWkjLwmHBGC8Id m9OTyCrHdgsY8BFNVmRYZ6wWWtBE8yaSMwWkLJdukE0zT4gFJ+PiKcXROjQS2KnF qRcSVbCHpo0hOUlKYemAIwco/Kfs7uNAvHTFPNBz2PYcZz830PfdT4Z594TnkkOs gMSEybQ75/6OCjBQ8ZfgioqPsrRtNPXVxzAhORJS+RuckTM1UabjKIej6Hap/or6 UCeR8VS4FfGI8usodNUTyKe3JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVAoQZ2 MWuiLIgpZJaDyPqdh3R5MB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr9Puf+iDcnteIsPVDr5r00FUzsFDZ1qfdRP9jG/4bZNG7zRpqxgoq uSM3vOdo4cXJGH2hcn4KKGjNF0wVd+C7FmOtzSfuW+OT/val3HOdos4ULbK7wg6I wAApHFfS51SCJIqtxcUP3UhTtKLwMstcFWkGiTapp9fzJrR3iX4WyQkMImlEs+WZ Zu4OE70nCT+tAuXhC0NmzqICMESZEc5GFS55h35EWovG5Xnj9LR3tEwI3L+88ke/ 3iJ+/2vltkk8HeMgtnDIZjnCa+barR111GlhDL07KGqcMjFmWqvAB566mVvyw5cB owadZAJuIFkoyOh2w87tyXIgoDP8W/HI -----END CERTIFICATE-----Generated at Fri May 31 02:50:43 2024 by rpki-client on console-fra.rpki-client.org