$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json) Hash identifier: 1Ia3pYTGrqEuIVsztkGW2RobEf8wrCmC8D77It1fxLo= Subject key identifier: 84:FE:DA:72:7C:02:4F:3B:FC:9A:0A:D7:5E:B7:DB:E8:9E:E9:26:37 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 070C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft Manifest number: 06E9 Signing time: Sat 18 May 2024 22:58:26 +0000 Manifest this update: Sat 18 May 2024 22:58:26 +0000 Manifest next update: Sat 25 May 2024 22:58:26 +0000 Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: KhRcddzzND5wVu7ksx9crT61q30j5nSY1E4omS2Q3ow=) 2: 2B20A2E2AB3611EC9E53765EC4F9AE02.roa (hash: n1LEQK317GkKdD9RngjLkf0VgmT9xvQluwuwNEPyPL8=) 3: 50C07FEE992611EC94DB646EC4F9AE02.roa (hash: hhMHrlTw/yHZFceU4JaP729MzspVVwzWspaffhUjsfw=) 4: 26BEAB3245B511EB969B596DC4F9AE02.roa (hash: tliY3jYSQTp9oDGVfpmIPpl+OwdK9L8yQ5Ak8KCyoLM=) 5: 29FA91B6AB3611EC9E53765EC4F9AE02.roa (hash: jXCi8kJGJB2+zt8vW2OMCxiJjdL5RhOcolyXlsCVMF0=) 6: 0ACEF76441DC11ECBDB44C82C4F9AE02.roa (hash: +FMZTTkbA6s5qrylZcCyoJokyhv11EiI7S5Fj0Rirho=) 7: 50379A94992611EC94DB646EC4F9AE02.roa (hash: KtJTCXMoD52HXZ2ZZHsXQChJF4ykmoCns1c/X/wAwnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1804 (0x70c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: May 18 22:58:26 2024 GMT Not After : May 25 22:58:26 2024 GMT Subject: CN=66493292-9509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:65:16:a5:b7:5c:1d:59:e7:04:2f:5e:3b: 4e:65:b1:9f:85:0b:c9:b2:1a:b1:83:62:f0:cc:01: 10:8f:f7:2d:15:b3:03:47:ad:c5:98:82:e0:eb:54: d3:47:b6:12:c9:c5:2d:f8:60:a4:2e:5b:db:f2:b0: 05:30:eb:27:c3:b8:ea:69:18:2b:98:f0:3a:32:ce: 93:43:b1:35:1c:ea:7e:5d:54:86:c9:88:08:cc:e5: 3b:db:13:19:97:ea:e7:01:a4:98:c9:d4:5b:33:62: c1:0f:7b:ed:d1:e4:60:c4:e9:8b:17:dd:00:dc:b4: c5:b8:7b:8f:0f:a9:46:08:3f:ef:4f:47:61:66:bc: a0:cf:53:75:21:4a:b7:45:e7:45:ca:ee:8a:21:a6: 68:0b:92:45:f2:92:d9:cc:b0:18:4e:1c:8b:96:5d: b9:3e:af:62:2a:40:2d:ef:bd:b5:6c:15:91:f9:7f: 6d:75:dd:d5:86:cf:15:ce:d7:84:a7:f6:00:bf:b0: 43:6f:01:47:13:d2:64:57:34:e8:56:d5:ae:99:2e: ce:d9:d8:c1:85:d6:b2:68:a4:aa:fa:3e:0f:37:05: a9:13:ab:99:d0:9c:13:40:77:84:3e:2f:03:e6:68: 1c:0d:80:2d:a8:65:64:58:e8:5d:5d:cd:ad:dc:8e: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:DA:72:7C:02:4F:3B:FC:9A:0A:D7:5E:B7:DB:E8:9E:E9:26:37 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b4:a1:7a:62:15:c6:d3:04:43:95:ce:63:19:96:d7:d7:43: 19:03:af:cb:b9:be:de:c2:d2:bb:13:06:48:82:15:fb:d8:f9: 25:b9:67:0c:c7:e4:75:b3:3e:73:38:b3:17:65:5e:d8:6d:61: 8f:36:48:91:8a:32:dd:42:bf:32:f4:c6:6b:78:30:65:0e:55: 28:75:39:9c:21:f4:f3:7f:36:c0:27:90:1a:da:c6:f0:20:d1: fb:0f:62:54:df:49:8c:12:29:c0:1c:fb:9a:32:84:b6:77:c8: a5:31:27:03:54:87:17:7e:23:cc:9c:ec:e0:31:c6:3e:3e:0d: 43:6f:8d:11:74:0d:83:ab:11:63:4f:95:72:bf:0c:4c:36:c6: 22:49:c7:dd:f6:13:a8:c5:dd:af:4b:73:8c:ff:36:32:2f:03: 17:4e:0f:27:40:0a:78:bb:83:41:67:e3:a1:25:cc:bc:0c:44: f0:b6:ad:25:e4:90:1e:a4:77:c5:0a:cf:5c:93:3a:b4:43:b0: 8c:a8:0c:8c:3c:ec:aa:a6:6b:7d:a4:e6:d9:59:5c:cc:9c:44: 99:1f:61:be:99:e6:34:66:88:3f:2b:b2:cb:f0:8b:50:fe:93: ef:e3:b0:1b:fa:f0:8d:15:7c:76:4a:fe:c2:08:a6:2f:6a:68: 2e:72:4e:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjQwNTE4MjI1ODI2WhcNMjQwNTI1MjI1ODI2WjAYMRYwFAYD VQQDEw02NjQ5MzI5Mi05NTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrhlFqW3XB1Z5wQvXjtOZbGfhQvJshqxg2LwzAEQj/ctFbMDR63FmILg61TT R7YSycUt+GCkLlvb8rAFMOsnw7jqaRgrmPA6Ms6TQ7E1HOp+XVSGyYgIzOU72xMZ l+rnAaSYydRbM2LBD3vt0eRgxOmLF90A3LTFuHuPD6lGCD/vT0dhZrygz1N1IUq3 RedFyu6KIaZoC5JF8pLZzLAYThyLll25Pq9iKkAt7721bBWR+X9tdd3Vhs8VzteE p/YAv7BDbwFHE9JkVzToVtWumS7O2djBhdayaKSq+j4PNwWpE6uZ0JwTQHeEPi8D 5mgcDYAtqGVkWOhdXc2t3I5EeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT+2nJ8 Ak87/JoK11632+ie6SY3MB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYtKF6YhXG0wRDlc5jGZbX10MZA6/Lub7ewtK7EwZIghX72PkluWcM x+R1sz5zOLMXZV7YbWGPNkiRijLdQr8y9MZreDBlDlUodTmcIfTzfzbAJ5Aa2sbw INH7D2JU30mMEinAHPuaMoS2d8ilMScDVIcXfiPMnOzgMcY+Pg1Db40RdA2DqxFj T5VyvwxMNsYiScfd9hOoxd2vS3OM/zYyLwMXTg8nQAp4u4NBZ+OhJcy8DETwtq0l 5JAepHfFCs9ckzq0Q7CMqAyMPOyqpmt9pObZWVzMnESZH2G+meY0Zog/K7LL8ItQ /pPv47Ab+vCNFXx2Sv7CCKYvamguck5/ -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org