$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: TRdl2CQSFg/8ZKAc8pXCpl2er8ekpIESJgOzAF2iaL4= Subject key identifier: A5:53:8C:9F:BD:F8:53:68:25:89:CA:67:47:95:17:1D:C3:D1:73:7A Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 16 Signing time: Sun 19 May 2024 08:45:08 +0000 Manifest this update: Sun 19 May 2024 08:45:08 +0000 Manifest next update: Sun 26 May 2024 08:45:08 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: jlnXA5xkkpmbGOY7lnW/Sz4eRF639cSiYQV3olTUbLI=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: g91xzTw+GcJwxdeodgfP15f3nvHYakAhKo/OU0NO1do=) 3: 46D954B6F5A811EEA84E8049C4F9AE02.roa (hash: A77avpTyGmVCRuyULkNtg/0wtlh1el5KEEO1Ks56YW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: May 19 08:45:08 2024 GMT Not After : May 26 08:45:08 2024 GMT Subject: CN=6649bc14-82bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:c5:2a:c1:50:93:05:5e:42:05:c8:d9:8e: c7:dd:5d:e2:42:5d:37:74:72:0c:8e:3c:6f:f7:92: e9:66:90:19:3e:b5:2b:84:c2:a5:3c:7c:04:94:f2: c2:ac:ff:fc:93:3b:35:9e:d9:82:a4:83:c9:8b:60: 4d:9d:30:db:fa:a6:32:3d:cf:60:df:68:5f:53:0b: 07:4f:47:ba:e9:23:8b:bb:4b:2a:ef:1d:6e:de:58: 5e:76:dd:18:71:73:16:f0:6a:ab:59:b0:02:0c:0f: 5a:2b:12:b6:af:fb:7a:3b:27:51:4b:7f:3e:a6:d1: f6:19:62:1c:9b:95:ea:1f:43:af:3d:38:52:29:20: 7e:a2:c4:49:84:ca:a0:19:d0:9b:83:9a:be:0a:69: 87:8b:51:2d:c6:38:12:e3:89:8f:a2:2b:10:17:9e: cd:58:86:09:26:b3:8e:66:84:e1:13:10:58:ff:3a: b2:96:75:ef:ff:92:b8:78:6f:85:af:fd:14:c5:d1: d1:d6:11:4f:71:55:00:1f:c4:6f:bc:4e:30:07:19: ac:77:b0:e9:37:de:c2:a6:4b:68:c2:74:de:3f:cd: 6f:c3:dc:a2:19:4e:e9:de:70:21:af:fb:17:3d:33: 8b:c2:db:fe:55:18:51:85:b0:0f:77:4a:a6:64:46: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:53:8C:9F:BD:F8:53:68:25:89:CA:67:47:95:17:1D:C3:D1:73:7A X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:75:f3:e1:d8:3a:ec:a6:64:ee:21:9a:fe:03:3b:94:0f:e6: eb:69:f3:fb:7d:af:11:6f:db:6e:12:f5:68:96:0e:2c:7f:94: d4:4e:18:df:11:eb:36:1f:db:de:7b:ee:79:64:ce:64:c9:ce: 33:4f:b4:72:7f:21:24:13:cc:5d:17:a2:3e:e2:ba:6d:73:1c: 37:f7:a9:c4:9b:62:93:b8:c8:66:16:7d:99:2d:b3:8e:50:ef: a6:26:92:e5:be:a1:fc:79:b2:65:73:28:51:d1:9f:9a:ab:d3: e1:9f:39:2d:20:7a:cb:db:03:5d:48:3a:d1:10:f2:ff:50:b2: e5:b0:ba:76:2c:a9:af:fb:28:8c:a6:01:9e:33:97:35:55:49: 58:3a:7c:e7:39:b5:a5:76:80:a1:c6:3d:62:bf:49:87:75:c7: 62:a5:59:f0:0b:9d:f8:46:fe:92:c9:c2:58:ed:e4:ee:19:d5: 6d:d2:62:18:4b:95:66:b1:ab:4c:38:b7:0e:d8:70:0e:4f:00: 61:11:29:88:0d:01:15:7d:75:61:c9:56:b8:69:ab:9b:5f:45: 08:40:29:2c:65:54:dc:ef:49:21:51:29:d4:b3:a9:6f:77:3b: d1:aa:c3:33:ef:1e:4a:e3:1f:c1:79:7d:98:be:67:db:63:3a: d3:1b:ed:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODRBQzExMC8GA1UEBRMoRkJDNTVCMkMwQkUwQUIyMzQ3NDhGQkMzNjE1NDdGNjRC RkE3NTE5NzAeFw0yNDA1MTkwODQ1MDhaFw0yNDA1MjYwODQ1MDhaMBgxFjAUBgNV BAMTDTY2NDliYzE0LTgyYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7GMUqwVCTBV5CBcjZjsfdXeJCXTd0cgyOPG/3kulmkBk+tSuEwqU8fASU8sKs //yTOzWe2YKkg8mLYE2dMNv6pjI9z2DfaF9TCwdPR7rpI4u7SyrvHW7eWF523Rhx cxbwaqtZsAIMD1orErav+3o7J1FLfz6m0fYZYhybleofQ689OFIpIH6ixEmEyqAZ 0JuDmr4KaYeLUS3GOBLjiY+iKxAXns1Yhgkms45mhOETEFj/OrKWde//krh4b4Wv /RTF0dHWEU9xVQAfxG+8TjAHGax3sOk33sKmS2jCdN4/zW/D3KIZTunecCGv+xc9 M4vC2/5VGFGFsA93SqZkRq9TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpVOMn734 U2glicpnR5UXHcPRc3owHwYDVR0jBBgwFoAU+8VbLAvgqyNHSPvDYVR/ZL+nUZcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NEFDLzZEMDI2Q0VDRjVB MTExRUU5OERCQ0QxMUM0RjlBRTAyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVa Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLThWYkxBdmdxeU5IU1B2RFlWUl9aTC1uVVpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NEFDLzZEMDI2Q0VDRjVBMTExRUU5OERCQ0QxMUM0RjlBRTAyLy04VmJMQXZncXlO SFNQdkRZVlJfWkwtblVaYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIh18+HYOuymZO4hmv4DO5QP5utp8/t9rxFv224S9WiWDix/lNROGN8R 6zYf29577nlkzmTJzjNPtHJ/ISQTzF0Xoj7ium1zHDf3qcSbYpO4yGYWfZkts45Q 76YmkuW+ofx5smVzKFHRn5qr0+GfOS0gesvbA11IOtEQ8v9QsuWwunYsqa/7KIym AZ4zlzVVSVg6fOc5taV2gKHGPWK/SYd1x2KlWfALnfhG/pLJwljt5O4Z1W3SYhhL lWaxq0w4tw7YcA5PAGERKYgNARV9dWHJVrhpq5tfRQhAKSxlVNzvSSFRKdSzqW93 O9GqwzPvHkrjH8F5fZi+Z9tjOtMb7QE= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org