$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: /B+EtH6YA8giBGJjqOz/4mfzBvZKoQ47NBU0hQ6Egwg= Subject key identifier: BB:C7:26:20:29:E0:70:D2:1E:47:B8:58:A8:6A:B2:17:14:EA:FC:8A Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 0566 Signing time: Sun 19 May 2024 00:43:36 +0000 Manifest this update: Sun 19 May 2024 00:43:35 +0000 Manifest next update: Sun 26 May 2024 00:43:35 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: uNUVxbf0BGmvO9y2IVX6NrO2vheAQiT9oM+mYl3EVLE=) 2: E6F39362983B11EBBDA9EC64C4F9AE02.roa (hash: LqInJoLezOMbo0JK+aVgFnQ/kodjYsQfg5Y/54M+GGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: May 19 00:43:35 2024 GMT Not After : May 26 00:43:35 2024 GMT Subject: CN=66494b37-d7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:5d:dc:6c:03:a7:9a:6a:c3:ed:ed:c1:05: 78:bf:39:4f:84:ae:5b:df:52:66:89:f7:41:c8:ba: 0d:c8:5a:b2:9e:84:40:49:2e:5d:c2:0a:f0:91:00: 03:3c:ea:26:1e:c1:d9:26:fb:53:6f:aa:0a:cb:57: 76:96:2f:6b:34:64:ba:2f:67:10:bb:0d:43:93:cf: e9:92:16:63:f8:dd:cd:57:6d:f4:4f:6c:c6:12:57: 23:51:0f:7c:86:4b:21:63:25:8a:00:47:f6:11:48: 60:e2:ed:93:9d:81:89:0e:6e:55:cc:89:ad:ed:dc: 96:4d:99:d8:04:85:46:59:ac:a7:c3:27:4a:63:5c: 90:01:9d:0c:03:b5:20:66:d8:10:2a:1e:ec:a7:cf: 89:2e:82:b3:88:0a:4b:75:2d:b6:e0:b5:3f:7d:e1: 17:ac:0d:fc:83:cd:05:bf:b7:3b:5c:7e:c2:ea:23: ad:04:c0:ae:b7:e0:f1:5a:3c:6e:6c:53:d5:d2:92: dc:c7:f6:f3:fe:f6:04:74:c4:79:64:7a:ed:d9:cf: 4c:96:3c:6c:dc:26:2b:51:e2:3f:5f:c1:34:2c:c5: 75:60:e2:08:b6:2a:11:a0:87:2d:c5:bb:4e:24:19: 55:d2:88:d1:4d:34:4e:7b:f2:da:61:d5:68:e3:42: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:26:20:29:E0:70:D2:1E:47:B8:58:A8:6A:B2:17:14:EA:FC:8A X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:8b:5d:f1:7e:7a:47:40:65:16:dc:ca:63:ce:42:95:f6: 5c:3e:fc:57:45:98:5e:96:55:66:7c:30:48:03:eb:38:5b:9a: 5c:40:30:37:04:08:6d:00:77:92:65:47:3f:04:a6:b8:16:ae: ca:10:c6:57:e2:96:f5:74:42:b8:13:33:2c:6c:88:88:04:53: 36:ff:7b:24:14:d2:30:10:ea:c0:3f:04:7c:b3:00:36:3c:8f: 8b:ea:03:fb:b1:e9:a4:e0:de:b4:b1:45:54:ea:76:fa:fb:7e: ec:33:a0:eb:bf:7f:06:5b:a2:58:62:c3:75:02:d5:81:12:d0: d9:41:fe:14:a6:e4:ef:09:35:67:e6:01:0f:ee:54:2d:39:c8: 08:10:f5:ca:35:b0:f3:66:13:8d:ed:90:2b:c0:94:8b:fe:fc: ba:b3:4f:88:89:6c:95:50:a1:ca:34:e9:90:ad:89:95:19:1b: 0b:b0:d2:f9:24:d7:00:96:38:da:56:f9:02:1a:73:50:37:c9: 66:0b:68:4c:91:b1:89:f9:e1:8b:a9:af:72:b4:ad:7f:cd:32: d7:03:9d:31:dc:67:1c:cf:fc:78:2f:2d:82:59:9a:b5:d8:4b: f8:f2:7c:a3:50:95:48:fd:47:98:fb:c3:58:9c:62:84:7c:43: 5c:a4:c1:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjQwNTE5MDA0MzM1WhcNMjQwNTI2MDA0MzM1WjAYMRYwFAYD VQQDEw02NjQ5NGIzNy1kN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOZd3GwDp5pqw+3twQV4vzlPhK5b31JmifdByLoNyFqynoRASS5dwgrwkQAD POomHsHZJvtTb6oKy1d2li9rNGS6L2cQuw1Dk8/pkhZj+N3NV230T2zGElcjUQ98 hkshYyWKAEf2EUhg4u2TnYGJDm5VzImt7dyWTZnYBIVGWaynwydKY1yQAZ0MA7Ug ZtgQKh7sp8+JLoKziApLdS224LU/feEXrA38g80Fv7c7XH7C6iOtBMCut+DxWjxu bFPV0pLcx/bz/vYEdMR5ZHrt2c9Mljxs3CYrUeI/X8E0LMV1YOIItioRoIctxbtO JBlV0ojRTTROe/LaYdVo40KaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvHJiAp 4HDSHke4WKhqshcU6vyKMB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH8Ytd8X56R0BlFtzKY85ClfZcPvxXRZhellVmfDBIA+s4W5pcQDA3 BAhtAHeSZUc/BKa4Fq7KEMZX4pb1dEK4EzMsbIiIBFM2/3skFNIwEOrAPwR8swA2 PI+L6gP7semk4N60sUVU6nb6+37sM6Drv38GW6JYYsN1AtWBEtDZQf4UpuTvCTVn 5gEP7lQtOcgIEPXKNbDzZhON7ZArwJSL/vy6s0+IiWyVUKHKNOmQrYmVGRsLsNL5 JNcAljjaVvkCGnNQN8lmC2hMkbGJ+eGLqa9ytK1/zTLXA50x3Gccz/x4Ly2CWZq1 2Ev48nyjUJVI/UeY+8NYnGKEfENcpMEB -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org