$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft File: aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json) Hash identifier: lFoXoy4JGd9AhEVYCYw7m5taE6CGzzvSpQhHH5Py718= Subject key identifier: 19:C0:94:FE:4E:69:A4:49:91:0F:CD:61:68:D9:4C:5B:B6:C6:DC:47 Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft Manifest number: 037A Signing time: Sun 19 May 2024 02:49:33 +0000 Manifest this update: Sun 19 May 2024 02:49:33 +0000 Manifest next update: Sun 26 May 2024 02:49:33 +0000 Files and hashes: 1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: k3itnc+4O5vRWXbN03tyR36BF8fNH8KKyVr2fg5tig0=) 2: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: ENs5h3d3/0FRfpleT1ZWwfZ58WpuD7RI9PwpHA3W3eE=) 3: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: /4JjWeyiUMQJMCybOXSSMIkBFPveZ27gZsbVEQ7V2tQ=) 4: 63E8739003C111EEB2272068C4F9AE02.roa (hash: GruXBNsoLQvj/P1gk1jgYpHV8Jab2lStx+J+qr87vdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Validity Not Before: May 19 02:49:33 2024 GMT Not After : May 26 02:49:33 2024 GMT Subject: CN=664968bd-ac6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:97:9d:2a:8f:ca:bb:0b:b2:ba:df:b3:17: d8:2c:fb:06:17:32:98:18:7c:d6:c7:83:e6:8e:34: 51:79:79:53:59:6c:d4:32:40:ac:98:65:52:61:d7: c9:14:68:7f:41:c2:d7:38:fa:1e:3f:17:62:c0:0c: f6:35:c6:e5:20:d8:64:c6:3b:17:6b:ed:2a:97:35: 8a:e6:66:76:76:36:88:9e:60:89:76:d4:62:9b:03: d2:f3:44:3e:80:0a:0e:4b:67:48:01:7c:86:59:f8: f6:ec:36:f4:58:91:38:95:c1:e8:c1:4d:c8:a0:42: 52:01:5a:9c:8d:8c:16:52:c4:7a:00:09:dd:e1:b4: 6c:87:c2:46:48:cf:23:9a:5b:d7:ce:c5:49:92:7b: 10:75:24:43:7a:22:f0:25:b3:cc:44:e9:8c:cb:a4: 68:ac:e0:de:d9:c8:c4:06:e8:0f:7e:86:1c:96:5d: 08:0b:60:e0:72:2e:f4:f1:e0:2d:a8:b8:5f:f9:79: b4:89:5d:83:bd:f9:97:bd:20:74:f9:7b:d8:74:bd: 64:56:47:aa:17:27:bf:a0:ec:77:96:d0:b5:7e:90: ce:60:15:a3:a6:72:aa:9c:11:6d:2b:c6:ce:4b:e1: ef:c7:cc:34:a5:f8:7d:2b:8f:df:cc:38:ea:21:5f: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C0:94:FE:4E:69:A4:49:91:0F:CD:61:68:D9:4C:5B:B6:C6:DC:47 X509v3 Authority Key Identifier: keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7f:a1:4c:2f:6e:79:a9:43:dd:b5:e3:e4:ba:4e:9f:5b:db: 12:2e:32:7c:41:20:70:12:dc:36:9a:18:06:5f:60:71:18:2d: 98:74:3a:9d:24:42:4a:d3:15:50:c7:05:28:da:4b:ae:44:e3: 19:98:72:db:c7:6c:af:19:42:e9:52:f5:43:70:7c:4c:fe:c3: 37:79:ab:00:d4:e7:6b:df:00:49:1a:c3:ad:fe:40:90:a0:f3: 99:2a:e8:9d:75:75:5b:fb:8b:19:ab:c6:4f:7d:e7:d9:56:13: 57:24:b9:8a:cc:73:05:29:62:0e:99:27:d0:68:12:eb:b8:3c: f8:89:8e:c8:ef:52:55:a8:b7:bf:a6:ed:ff:ed:ec:ef:12:6d: 59:1a:56:ec:73:d6:e4:04:da:ad:fa:d4:21:6c:9c:18:b4:2e: 7b:98:e3:7e:bc:16:ab:33:69:97:62:e1:3e:35:eb:72:ba:c0: fd:46:7f:f4:f7:8e:8c:6c:9d:2d:7d:0f:83:35:2b:ed:d1:e7: 69:01:cd:2f:e8:15:7f:c9:a2:b9:c7:70:65:77:ad:d6:c8:bb: 07:75:3e:5f:dc:01:13:11:7f:7c:d3:06:fb:d7:12:7a:34:ed: a1:ad:01:d0:4f:2a:7c:78:e8:67:8c:77:60:24:91:5b:79:52: 82:2e:65:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJBMUYxMTAvBgNVBAUTKDY5MzlGQzA0MERBNUMzMEI3NjZEQzc5NEY5Q0E0QzJG NDFBQ0FFRUEwHhcNMjQwNTE5MDI0OTMzWhcNMjQwNTI2MDI0OTMzWjAYMRYwFAYD VQQDEw02NjQ5NjhiZC1hYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDiXnSqPyrsLsrrfsxfYLPsGFzKYGHzWx4PmjjRReXlTWWzUMkCsmGVSYdfJ FGh/QcLXOPoePxdiwAz2NcblINhkxjsXa+0qlzWK5mZ2djaInmCJdtRimwPS80Q+ gAoOS2dIAXyGWfj27Db0WJE4lcHowU3IoEJSAVqcjYwWUsR6AAnd4bRsh8JGSM8j mlvXzsVJknsQdSRDeiLwJbPMROmMy6RorODe2cjEBugPfoYcll0IC2Dgci708eAt qLhf+Xm0iV2DvfmXvSB0+XvYdL1kVkeqFye/oOx3ltC1fpDOYBWjpnKqnBFtK8bO S+Hvx8w0pfh9K4/fzDjqIV8sqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnAlP5O aaRJkQ/NYWjZTFu2xtxHMB8GA1UdIwQYMBaAFGk5/AQNpcMLdm3HlPnKTC9BrK7q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkExRi8xRUNGRkM0QzYy MTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3dDJiY2VVLWNwTUwwR3Ny dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUbjhCQTJsd3d0MmJjZVUtY3BNTDBHc3J1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkExRi8xRUNGRkM0QzYyMTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3 dDJiY2VVLWNwTUwwR3NydW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLf6FML255qUPdtePkuk6fW9sSLjJ8QSBwEtw2mhgGX2BxGC2YdDqd JEJK0xVQxwUo2kuuROMZmHLbx2yvGULpUvVDcHxM/sM3easA1Odr3wBJGsOt/kCQ oPOZKuiddXVb+4sZq8ZPfefZVhNXJLmKzHMFKWIOmSfQaBLruDz4iY7I71JVqLe/ pu3/7ezvEm1ZGlbsc9bkBNqt+tQhbJwYtC57mON+vBarM2mXYuE+NetyusD9Rn/0 946MbJ0tfQ+DNSvt0edpAc0v6BV/yaK5x3Bld63WyLsHdT5f3AETEX980wb71xJ6 NO2hrQHQTyp8eOhnjHdgJJFbeVKCLmV4 -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org