$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json) Hash identifier: j496rEI9NuBxXs1iYTaN8yctYlcm7+CU+aIYvNFeVro= Subject key identifier: 21:A9:D2:A2:CB:7B:9A:DF:DB:16:16:1D:B0:F2:45:13:21:E9:88:82 Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft Manifest number: F7 Signing time: Sun 19 May 2024 05:44:34 +0000 Manifest this update: Sun 19 May 2024 05:44:33 +0000 Manifest next update: Sun 26 May 2024 05:44:33 +0000 Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: 6DhvlNFEugflaL+l/ckN0xE2nQlNvyJZZHkqvLcFU4I=) 2: 6A46D12CA7AF11EEB2CF3D53C4F9AE02.roa (hash: SihRKad9wgQmQK1TMejbETJNXlfuhKldpk5wYVJtc8Y=) 3: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: HgxaoN8Br3KuibZBkCY5/xfpk9D+s0PnF6iR086YM9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: May 19 05:44:33 2024 GMT Not After : May 26 05:44:33 2024 GMT Subject: CN=664991c2-fcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:2b:ae:b7:d7:99:be:6b:bf:04:01:38:b9: 74:81:8b:03:a0:31:5e:49:de:39:1f:51:d9:d1:eb: ce:da:6b:ec:10:5e:9a:e3:27:55:90:02:92:6d:17: 6f:f7:93:b0:fc:60:c9:c6:d7:58:1f:28:8c:20:1a: f6:20:b0:81:de:55:7f:6e:67:c2:6a:59:87:7c:40: 2a:26:6c:33:93:45:af:49:d7:6e:b4:fe:27:c5:40: 37:ba:c5:32:12:2c:bb:ad:78:a7:ce:d2:54:0b:18: 4c:72:a9:17:80:0b:f6:79:44:07:e8:0b:5b:d7:79: 8a:47:17:d4:0a:90:64:c5:5a:48:84:e4:bc:d7:2f: 61:4e:a9:3e:a7:a5:9d:0d:fa:e7:96:9e:56:d4:d3: 4e:25:5d:a3:c4:c7:86:e3:8b:9e:9b:3e:8b:e7:0b: e9:5b:20:1c:16:36:c0:71:0d:bc:fb:97:7f:93:c5: 0c:b7:d4:4c:72:9c:6a:f8:83:99:c5:16:c6:03:9e: 71:f7:27:d2:79:0b:d2:5a:b4:e9:13:87:3e:24:7e: 58:c2:c7:71:88:e3:25:95:fa:1b:63:a3:13:26:d0: 60:91:21:bf:b6:ab:11:d4:a8:3b:01:3c:91:a1:98: 7a:ec:3d:51:2d:5e:79:26:63:cd:51:a7:f8:c1:e3: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A9:D2:A2:CB:7B:9A:DF:DB:16:16:1D:B0:F2:45:13:21:E9:88:82 X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:99:4e:e4:10:b6:92:19:92:c5:87:49:76:50:74:8f:38:2d: 33:f6:a3:af:f7:0a:27:0a:f2:e8:62:d6:20:83:b7:9c:94:f2: 29:22:c5:20:c9:59:7b:9f:9f:48:d2:92:12:26:0c:f0:5e:3b: 4b:c7:b0:71:e4:8e:ec:33:cd:dd:ad:1b:3c:b7:7b:92:f0:64: c2:08:d0:eb:ab:9a:22:f7:bc:13:6a:1a:0e:0e:78:86:5a:f8: 88:9f:fb:6a:c8:56:ab:3a:d2:c7:f8:20:ab:c3:5d:64:cf:ba: 6e:1e:23:c4:6f:03:c4:74:f3:d7:ef:3c:8e:cc:88:c4:90:0e: fb:59:e5:20:00:b8:3c:1a:3a:03:74:41:06:1f:33:cc:e5:5e: 2c:8e:fa:1a:71:7c:be:d1:81:5e:6a:89:af:0d:fa:b4:06:73: 3d:c8:e3:ee:d7:00:af:7e:5c:fd:4b:fc:82:7d:b6:c8:02:b5: aa:47:58:d2:6c:32:4a:5d:2d:05:f1:ef:fe:42:b8:41:b7:a5: 1f:58:89:90:0c:16:bd:47:74:64:68:05:f0:9d:e5:9d:4e:7f: 82:6f:6a:07:2e:83:2e:84:7e:18:e3:02:5f:31:2a:54:dd:9f: 66:9d:f9:c4:2d:d7:2e:d5:97:eb:5a:87:78:dd:72:33:14:d1: f9:80:ca:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjQwNTE5MDU0NDMzWhcNMjQwNTI2MDU0NDMzWjAYMRYwFAYD VQQDEw02NjQ5OTFjMi1mY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zcrrrfXmb5rvwQBOLl0gYsDoDFeSd45H1HZ0evO2mvsEF6a4ydVkAKSbRdv 95Ow/GDJxtdYHyiMIBr2ILCB3lV/bmfCalmHfEAqJmwzk0WvSddutP4nxUA3usUy Eiy7rXinztJUCxhMcqkXgAv2eUQH6Atb13mKRxfUCpBkxVpIhOS81y9hTqk+p6Wd Dfrnlp5W1NNOJV2jxMeG44uemz6L5wvpWyAcFjbAcQ28+5d/k8UMt9RMcpxq+IOZ xRbGA55x9yfSeQvSWrTpE4c+JH5YwsdxiOMllfobY6MTJtBgkSG/tqsR1Kg7ATyR oZh67D1RLV55JmPNUaf4weNWkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGp0qLL e5rf2xYWHbDyRRMh6YiCMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFNC8wNUZFRjQ0QTlFMEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVu d09abXNVcHNaWFNsTnZObk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZmU7kELaSGZLFh0l2UHSPOC0z9qOv9wonCvLoYtYgg7eclPIpIsUg yVl7n59I0pISJgzwXjtLx7Bx5I7sM83drRs8t3uS8GTCCNDrq5oi97wTahoODniG WviIn/tqyFarOtLH+CCrw11kz7puHiPEbwPEdPPX7zyOzIjEkA77WeUgALg8GjoD dEEGHzPM5V4sjvoacXy+0YFeaomvDfq0BnM9yOPu1wCvflz9S/yCfbbIArWqR1jS bDJKXS0F8e/+QrhBt6UfWImQDBa9R3RkaAXwneWdTn+Cb2oHLoMuhH4Y4wJfMSpU 3Z9mnfnELdcu1ZfrWod43XIzFNH5gMrx -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org