$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json) Hash identifier: cNI50mFwAukIwYRA570dQoCx4vfcBCE7lKcXMjMgfiM= Subject key identifier: 6F:05:53:75:35:C9:15:AE:43:5B:7E:6F:F7:9C:53:70:58:4E:62:E0 Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 083E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft Manifest number: 0833 Signing time: Sat 18 May 2024 21:45:35 +0000 Manifest this update: Sat 18 May 2024 21:45:34 +0000 Manifest next update: Sat 25 May 2024 21:45:34 +0000 Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: l4/S5spMIe+lKMXxoZqjjcdP1UzbQVQS2YgPxJ1NY/4=) 2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: eQTh6mzluyryLv1k1vcNqfuU7PfF9NQSG/VlGMgRn/I=) 3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: fpS/IAyugQMqJIWGwmXI8wOUbVOYobs6hKofuFnkQek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2110 (0x83e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: May 18 21:45:34 2024 GMT Not After : May 25 21:45:34 2024 GMT Subject: CN=6649217e-4a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:c6:52:81:84:2d:d9:e7:a4:96:c9:6f:3c: ce:8a:d2:1a:1c:c4:79:64:5d:09:4e:94:37:61:46: d8:74:6b:d1:50:d5:9c:61:70:05:56:e3:42:a3:9f: c8:41:3a:07:2b:3c:31:9c:41:25:8c:c8:5f:78:a4: cb:5a:a9:f6:9b:75:4b:8c:26:2c:43:f2:81:51:79: 79:a5:6c:2a:48:84:6a:ae:16:69:bc:77:26:30:4e: eb:27:18:c0:fa:cd:78:d0:31:93:d7:23:38:6d:9a: 23:0d:7e:43:50:f6:79:80:90:bb:a2:34:fa:ec:21: 02:d7:f6:f6:05:29:50:30:c5:e2:fd:ea:66:9f:fe: 56:cc:ad:48:39:d0:8c:e0:27:89:e2:cd:0c:a8:1a: 90:c9:a8:63:5d:cc:44:22:27:a4:53:3e:5c:ff:20: 76:08:bf:cc:dc:40:b8:e6:88:08:f3:40:e2:f5:58: 8b:55:d3:92:25:f6:e2:e6:d5:5f:cb:81:4e:30:5c: 82:1b:ff:52:f4:40:af:67:18:ef:bf:78:f8:fd:cb: a3:87:dc:42:f1:35:58:53:e3:8c:89:93:86:0e:93: 33:08:e4:5e:74:3e:b9:3c:73:8a:52:4f:8f:f3:7d: 86:5a:2d:13:b6:0f:5f:5b:5d:b7:56:9d:6e:d5:d0: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:53:75:35:C9:15:AE:43:5B:7E:6F:F7:9C:53:70:58:4E:62:E0 X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:19:5f:45:e3:6f:5f:20:db:bf:47:a0:59:28:12:54:7f:8e: a3:c8:95:b0:9e:2e:c4:45:6f:21:38:a4:06:84:63:b1:33:e9: 9b:d0:5d:c5:a4:1a:d2:75:4e:cd:99:d9:d7:71:60:ad:c5:97: d2:31:37:59:2c:e0:b7:2a:72:f4:53:24:66:64:c3:52:e9:cb: f8:b8:60:6c:d5:eb:1d:11:53:04:5f:10:1c:d8:d8:ca:c5:44: ab:71:4f:97:fc:4c:31:97:36:cb:48:2e:a3:90:97:d6:2c:0e: 9e:73:a5:a1:d7:e1:53:6b:81:96:ab:49:26:0f:01:f9:cc:2f: da:49:a8:70:95:ab:6a:35:e3:c1:96:e5:c8:53:03:f7:e5:98: 12:ca:21:dd:a1:1a:81:e9:c0:87:87:ad:3a:42:c8:4c:14:8e: a3:7a:67:e5:bc:cc:75:d0:d5:94:5b:ab:43:81:37:42:4d:0c: 5d:48:09:db:2b:2a:1e:2c:2c:98:87:f7:38:45:38:03:31:cf: 00:74:de:45:93:d9:8a:e2:58:6d:c5:1a:8b:6e:f1:ca:ac:62: d9:8b:1f:9d:8a:07:82:b6:2e:ad:01:e7:c9:4f:be:fc:17:bd: 35:8e:3f:50:dd:7d:cd:a7:c8:41:2c:9f:f1:1d:78:2e:1c:79: 77:41:5b:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjQwNTE4MjE0NTM0WhcNMjQwNTI1MjE0NTM0WjAYMRYwFAYD VQQDEw02NjQ5MjE3ZS00YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4inGUoGELdnnpJbJbzzOitIaHMR5ZF0JTpQ3YUbYdGvRUNWcYXAFVuNCo5/I QToHKzwxnEEljMhfeKTLWqn2m3VLjCYsQ/KBUXl5pWwqSIRqrhZpvHcmME7rJxjA +s140DGT1yM4bZojDX5DUPZ5gJC7ojT67CEC1/b2BSlQMMXi/epmn/5WzK1IOdCM 4CeJ4s0MqBqQyahjXcxEIiekUz5c/yB2CL/M3EC45ogI80Di9ViLVdOSJfbi5tVf y4FOMFyCG/9S9ECvZxjvv3j4/cujh9xC8TVYU+OMiZOGDpMzCORedD65PHOKUk+P 832GWi0Ttg9fW123Vp1u1dBsuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8FU3U1 yRWuQ1t+b/ecU3BYTmLgMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu RlNnMVJPMWx0R0dHV0M4bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GV9F429fINu/R6BZKBJUf46jyJWwni7ERW8hOKQGhGOxM+mb0F3F pBrSdU7NmdnXcWCtxZfSMTdZLOC3KnL0UyRmZMNS6cv4uGBs1esdEVMEXxAc2NjK xUSrcU+X/EwxlzbLSC6jkJfWLA6ec6Wh1+FTa4GWq0kmDwH5zC/aSahwlatqNePB luXIUwP35ZgSyiHdoRqB6cCHh606QshMFI6jemflvMx10NWUW6tDgTdCTQxdSAnb KyoeLCyYh/c4RTgDMc8AdN5Fk9mK4lhtxRqLbvHKrGLZix+digeCti6tAefJT778 F701jj9Q3X3Np8hBLJ/xHXguHHl3QVsB -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org