$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: 2mwQcYOKPvOFqOX86VdBGHzccE9bew8RFSFdKICALzg= Subject key identifier: F0:B0:85:4B:D8:1D:BA:C4:15:5B:49:E7:65:D3:CD:77:A5:89:7D:DE Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 48 Signing time: Sun 19 May 2024 08:05:36 +0000 Manifest this update: Sun 19 May 2024 08:05:35 +0000 Manifest next update: Sun 26 May 2024 08:05:35 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: ccRECRPHgKIOs/Q2WprHrkcSQ2+e7VpDY1EU09QC2aM=) 2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: Tr07Jkq8xxw+uZG0G+8jBmz6MYSCwDd06M+QKliHJIg=) 3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: kjJmASdgXrmJAlRBxTl6SHlsuwolFlHVI2hZf8lqvLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: May 19 08:05:35 2024 GMT Not After : May 26 08:05:35 2024 GMT Subject: CN=6649b2d0-4fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:5a:08:42:9c:3f:a8:69:97:73:84:4e:e8: 18:40:18:ce:34:70:39:31:31:c1:e7:c0:85:76:04: 65:cb:ac:4d:a6:8c:af:3b:f3:0e:b5:5c:ad:15:ee: 75:ee:1f:d8:27:1c:85:30:40:95:a0:36:00:26:19: e3:14:de:a9:ed:4d:8f:81:59:3d:e1:39:a4:65:81: 76:7d:34:ca:2a:04:6c:a1:a0:0c:5d:54:f6:cb:15: ff:a7:a9:9d:5d:71:56:a9:8e:c6:db:6f:bb:33:d9: dc:6e:ee:58:f3:85:18:f9:e6:33:03:d9:17:0c:db: ac:8d:4f:b1:a0:9c:5d:d0:2b:f7:d2:44:25:7a:98: 98:d2:ac:1e:82:c1:af:0a:83:2c:7a:13:4d:22:ae: 35:5f:27:c0:21:d4:af:c4:86:36:d2:b3:47:59:27: bd:84:09:49:61:fc:64:a2:ca:93:4a:05:f3:54:7f: e3:ae:f6:aa:42:f8:cc:33:fc:df:8e:f5:d1:4b:a0: 47:32:bd:b3:57:4d:d8:aa:0c:1b:b2:74:21:c9:bd: 50:bf:cc:b1:2a:15:f6:0e:da:a4:a3:5b:7c:4a:bf: 6e:e7:76:d2:93:cc:aa:1a:7f:64:ba:6d:4a:cb:d1: ba:84:63:89:80:19:cb:6c:79:8b:14:1f:ba:7f:63: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B0:85:4B:D8:1D:BA:C4:15:5B:49:E7:65:D3:CD:77:A5:89:7D:DE X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d2:dd:ed:a5:23:a9:d5:5d:b6:4b:28:f9:c7:81:d9:48:11: 76:0b:97:a9:b7:f1:c6:c5:d5:cc:df:46:c5:9f:7e:74:43:27: 8b:9b:d5:56:16:32:b9:10:37:2c:52:92:40:22:5b:44:d8:fa: 29:e5:b9:ca:9c:89:5c:6f:0d:3c:d2:1c:56:12:9c:99:ff:20: 73:21:da:c6:30:f6:36:c4:68:3b:23:91:ef:bc:8a:19:9a:31: f4:ef:b6:c5:aa:b0:b6:b6:40:d7:be:9c:65:fa:1d:91:9c:7b: 32:f2:84:e6:20:a9:bd:4a:9f:5f:72:d5:72:96:2e:c9:97:99: 8e:b5:3f:5d:30:0b:4d:f7:73:59:bc:e9:df:34:d5:dd:67:ab: 38:78:67:e6:7c:2f:9c:b0:e7:06:6e:b4:c8:52:8d:4a:f9:b0: 61:df:23:45:ac:b5:f8:04:78:bc:b3:13:4e:fd:39:8e:26:4d: fe:d3:b6:67:1b:fe:13:32:22:b8:be:87:f4:f2:c3:e5:8f:0e: 5d:c9:a9:ef:8a:f9:ef:b5:63:fa:d7:16:a7:e5:af:10:90:84: a2:a5:0e:fb:22:b8:54:e6:10:20:9e:c1:2b:e1:14:62:1b:35: 84:a4:53:5c:29:60:dd:f9:15:2d:0e:bd:22:ac:3e:3a:8f:dc: d0:cc:38:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTFBMTExMC8GA1UEBRMoN0U3MUQ5RDE0NjEyMTdCMEY4MkMwN0IxNUM0RjAyOUYy NjcyNDk4QTAeFw0yNDA1MTkwODA1MzVaFw0yNDA1MjYwODA1MzVaMBgxFjAUBgNV BAMTDTY2NDliMmQwLTRmYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj3FoIQpw/qGmXc4RO6BhAGM40cDkxMcHnwIV2BGXLrE2mjK878w61XK0V7nXu H9gnHIUwQJWgNgAmGeMU3qntTY+BWT3hOaRlgXZ9NMoqBGyhoAxdVPbLFf+nqZ1d cVapjsbbb7sz2dxu7ljzhRj55jMD2RcM26yNT7GgnF3QK/fSRCV6mJjSrB6Cwa8K gyx6E00irjVfJ8Ah1K/EhjbSs0dZJ72ECUlh/GSiypNKBfNUf+Ou9qpC+Mwz/N+O 9dFLoEcyvbNXTdiqDBuydCHJvVC/zLEqFfYO2qSjW3xKv27ndtKTzKoaf2S6bUrL 0bqEY4mAGctseYsUH7p/Y5vJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8LCFS9gd usQVW0nnZdPNd6WJfd4wHwYDVR0jBBgwFoAUfnHZ0UYSF7D4LAexXE8CnyZySYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExMUExL0E5QjczQ0E4QjA1 RjExRUU5OUM2NTQ3N0M0RjlBRTAyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZm5IWjBVWVNGN0Q0TEFleFhFOENueVp5U1lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx MUExL0E5QjczQ0E4QjA1RjExRUU5OUM2NTQ3N0M0RjlBRTAyL2ZuSFowVVlTRjdE NExBZXhYRThDbnlaeVNZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHS3e2lI6nVXbZLKPnHgdlIEXYLl6m38cbF1czfRsWffnRDJ4ub1VYW MrkQNyxSkkAiW0TY+inlucqciVxvDTzSHFYSnJn/IHMh2sYw9jbEaDsjke+8ihma MfTvtsWqsLa2QNe+nGX6HZGcezLyhOYgqb1Kn19y1XKWLsmXmY61P10wC033c1m8 6d801d1nqzh4Z+Z8L5yw5wZutMhSjUr5sGHfI0WstfgEeLyzE079OY4mTf7Ttmcb /hMyIri+h/Tyw+WPDl3Jqe+K+e+1Y/rXFqflrxCQhKKlDvsiuFTmECCewSvhFGIb NYSkU1wpYN35FS0OvSKsPjqP3NDMODg= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org