$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json) Hash identifier: BBzf7hBEIBl9z7GTIsZ/1Wwto0I0Wz6c/ULGhgjU5OY= Subject key identifier: 03:64:D1:4B:62:07:F8:C8:91:23:59:C4:E0:80:C2:EA:4E:9D:43:50 Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft Manifest number: D8 Signing time: Sun 19 May 2024 06:11:55 +0000 Manifest this update: Sun 19 May 2024 06:11:54 +0000 Manifest next update: Sun 26 May 2024 06:11:54 +0000 Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: AZOYkYfbx3pP7a+BDpaoFUul4jT8Frr1KwzJaIoPc7A=) 2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: mj8BZaD2prJGm8LGJCj6rtZxHkzEu6R89n+rZKAZIEg=) 3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: bewV6KFz5UfLmXyQpYAW/eskr2prQjBvAcy6H5aMFUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Validity Not Before: May 19 06:11:54 2024 GMT Not After : May 26 06:11:54 2024 GMT Subject: CN=6649982a-a753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:1b:66:d3:2c:55:50:8f:a1:e0:47:a4:09: 45:8b:b5:b3:15:b2:0d:a4:0a:40:d1:e8:ce:0e:02: c3:dc:03:aa:1c:53:54:40:f1:04:16:bc:da:ab:56: 6d:85:be:bc:f4:e7:20:61:51:ab:f3:0b:f1:3d:16: 35:b7:12:bd:c8:44:c4:f2:dd:b9:89:ca:31:23:0f: 73:67:97:88:57:09:1b:76:8d:55:16:39:29:bd:c9: 76:6f:d6:42:81:43:71:47:d4:62:b8:1d:27:8c:0e: 83:0f:36:f6:90:58:b5:38:da:d0:2a:ba:a7:fd:cc: 78:17:ea:06:da:36:01:1d:d3:b0:e1:a7:df:f8:d2: c4:6a:ba:e4:c6:3f:a7:db:30:34:e0:70:7c:08:a3: 30:02:b3:09:80:70:13:3d:58:d0:df:f7:30:b3:ad: 37:c1:61:f3:19:da:fa:bb:20:b0:5e:46:ad:75:a2: aa:29:83:68:c2:e6:3f:2a:60:f1:03:c6:ea:3c:a2: 22:e8:9d:c4:26:73:8f:be:f1:f3:c3:0f:2c:5b:f0: 09:a5:60:b0:a0:d8:0c:9b:eb:29:12:b2:32:25:a0: ca:09:61:5c:74:b8:75:f1:22:87:9a:fc:9d:ab:a5: cb:44:c2:59:74:71:59:2e:74:42:06:c4:4c:41:7e: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:64:D1:4B:62:07:F8:C8:91:23:59:C4:E0:80:C2:EA:4E:9D:43:50 X509v3 Authority Key Identifier: keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:83:62:c9:42:9b:22:4f:e8:6f:56:83:31:0b:1a:48:d6:92: 59:a2:a6:4a:98:cf:33:ba:03:f1:f4:90:bb:91:3b:86:1e:c2: 13:de:54:6a:18:9a:35:f1:e2:b2:f1:89:0a:99:44:84:f3:58: 30:f0:6a:13:89:27:60:ff:25:69:f6:3f:b8:13:47:53:71:d3: 45:ad:25:49:70:fd:ad:c6:36:bf:5a:52:88:ba:d5:a4:e8:13: 28:83:69:ef:d5:49:4d:e4:8c:dc:64:23:df:fc:5a:4d:1a:bb: e4:ee:79:f6:72:34:6b:11:7d:b7:10:f9:62:81:06:9a:6f:d4: f4:8c:43:84:35:7a:65:7d:e1:f8:90:2f:8f:a1:d3:f0:2e:bc: a5:53:22:97:d9:3a:4e:db:b4:19:dc:44:14:e4:c8:ea:0a:3a: 7d:15:93:a8:e0:70:ac:58:90:64:4d:43:9b:be:c5:a4:ab:d0: 5c:28:ec:72:41:19:2f:c4:2e:be:ae:3c:34:1b:9a:7f:26:b2: 6a:5b:57:56:66:04:25:d8:b5:c0:e4:6a:10:3d:16:16:0f:3d: e0:52:fa:31:fd:46:83:83:3b:18:d4:cf:a3:96:af:bd:22:df: 65:c9:c6:3c:1a:08:92:25:d1:93:c7:78:99:86:11:41:f1:dd: 42:06:14:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx RkMwMUYyNTYwHhcNMjQwNTE5MDYxMTU0WhcNMjQwNTI2MDYxMTU0WjAYMRYwFAYD VQQDEw02NjQ5OTgyYS1hNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6wbZtMsVVCPoeBHpAlFi7WzFbINpApA0ejODgLD3AOqHFNUQPEEFrzaq1Zt hb689OcgYVGr8wvxPRY1txK9yETE8t25icoxIw9zZ5eIVwkbdo1VFjkpvcl2b9ZC gUNxR9RiuB0njA6DDzb2kFi1ONrQKrqn/cx4F+oG2jYBHdOw4aff+NLEarrkxj+n 2zA04HB8CKMwArMJgHATPVjQ3/cws603wWHzGdr6uyCwXkatdaKqKYNowuY/KmDx A8bqPKIi6J3EJnOPvvHzww8sW/AJpWCwoNgMm+spErIyJaDKCWFcdLh18SKHmvyd q6XLRMJZdHFZLnRCBsRMQX6GZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANk0Uti B/jIkSNZxOCAwupOnUNQMB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4 RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzRERS9BOTQxRDVFMkQ4RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZT M3N3WXFQVUVsTElmd0I4bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBg2LJQpsiT+hvVoMxCxpI1pJZoqZKmM8zugPx9JC7kTuGHsIT3lRq GJo18eKy8YkKmUSE81gw8GoTiSdg/yVp9j+4E0dTcdNFrSVJcP2txja/WlKIutWk 6BMog2nv1UlN5IzcZCPf/FpNGrvk7nn2cjRrEX23EPligQaab9T0jEOENXplfeH4 kC+PodPwLrylUyKX2TpO27QZ3EQU5MjqCjp9FZOo4HCsWJBkTUObvsWkq9BcKOxy QRkvxC6+rjw0G5p/JrJqW1dWZgQl2LXA5GoQPRYWDz3gUvox/UaDgzsY1M+jlq+9 It9lycY8GgiSJdGTx3iZhhFB8d1CBhSa -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org